DSP Dealer

Privacy Policy

This Privacy Policy provides you with information on the processing of personal data according to Article 13 of the EU General Data Protection Directive (GDPR).

We may revise this privacy policy from time to time to reflect technical developments or changes regarding the purposes for which we process personal data. The last revision was made in August 2025.

1. Controller

DSP Dealer UG, Adresse, E-Mail

2. Purposes and legal bases of the processing of personal data

2.1 Visiting our website

You can visit our website without registration or otherwise providing personal data.

2.1.1 Cookies and similar technologies

Our website is hosted by Shopify (cf. section 3.2 below). Shopify enables us to use cookies and similar technologies on our website.

Cookies are short text files which are stored in your computer by your browser for the duration of the browser session and erased immediately at the end.

Cookies may be session-based or permanent, with permanent cookies stored for defined periods before deletion.

2.1.2 Legal framework

The legal framework applies to browser local storage equivalently. Cookies include essential/functional cookies necessary for website functionality including customer accounts, shopping cart and checkout, plus analytics/performance cookies analyzing visitor usage.

2.1.2.1 Consent for analytics cookies and similar technologies

We are allowed to use analytics cookies only with your consent. A cookie banner displays upon website access. If cookies collect personal data with consent, the legal basis is Article 6(1)(a) GDPR.

You can withdraw your consent at any time by clicking the "Cookie Preferences" button in the footer. Alternatively, deleting cookies removes consent records, displaying the banner on return visits.

2.1.2.2 Admissibility of functional cookies and similar technologies

We may use functional cookies without your consent. The legal basis is Article 6(1)(f) GDPR for pursuing legitimate interests through user-friendly websites and optimized e-commerce services.

You may disable cookies in browser privacy preferences; however, this prevents using all website features. Browser local storage information collection works similarly.

2.1.3 Functional cookies and similar technologies that we use

Please see https://www.shopify.com/de/legal/cookies.

2.1.4 Analytics cookies that we use

We use the analytical cookies – provided you have given your consent – listed at https://www.shopify.com/de/legal/cookies and at https://support.google.com/analytics/answer/11397207.

2.1.5 Embedded players and other elements provided by third parties

Our website uses embedded players:

These players activate only with consent. Your IP address transmits to relevant service providers upon page visits embedding players.

2.1.6 Meta Pixel

If you have given your consent, we use Meta Pixel, a service provided by Meta Platforms Inc. (formerly Facebook Inc.), 1601 Willow Road, 94025 Menlo Park, California, USA.

Meta Pixel enables us to analyse the impact of our marketing activities such as posts and ads on Facebook. Meta Pixel uses cookies.

With the help of Meta Pixel we can track conversions and optimise our ads. Meta Pixel stores a cookie in your browser, which records which pages of our website you visit.

When visiting pages using Meta Pixel, your browser connects to Meta servers, informing Meta of the visit. Registered Facebook users allow Meta connecting visits to accounts. Meta will recognise the cookie on the Facebook network and use it to display personalised ads that match your interests.

The legal basis is your consent as per Article 6(1)(a) GDPR. You can withdraw your consent at any time.

Meta Platforms, Inc. holds USA location certification under the EU-U.S. Data Privacy Framework, ensuring adequate data protection per European Commission adequacy decisions.

2.1.7 Self-hosted Google Fonts

We use Google Fonts. The fonts are hosted on our own website. This means that the fonts will not be downloaded from a Google Server and your IP address will not be transmitted to Google.

2.2 Contacting us

When sending messages via the website or email, provided personal data including request content is collected.

This data processes for handling requests. The legal basis is Article 6(1)(b) (taking steps prior to entering into a contract; or, where the request is related to a contract that has already been entered into, the performance of that contract).

2.3 Contracts

When placing orders, collected personal data including order details processes for order handling and contract performance. The legal basis is Article 6(1)(b) GDPR (taking steps prior to entering into a contract; performance of the contract).

2.4 Pursuit of legitimate interests

To the extent permitted by law, we may process your personal data also for the pursuit of legitimate interests. These include the establishment, exercise or defence of legal claims, customer relations management and direct marketing.

The legal basis is Article 6(1)(f) GDPR.

Note that objection rights exist for data processing in this context (section 7 below).

3. Recipients of personal data

3.1 Third parties

We disclose personal data to third parties only if this is necessary for the performance of a contract (including payment), if we are under a legal obligation to do so or if you have given your explicit consent.

Third parties receiving personal data for contract performance include shipping providers (depending on destination) and chosen payment providers.

3.2 Service providers

We employ the following service providers which process data on our behalf according to Article 28 GDPR:

  • Shopify International Limited, 2 Haddington Road, Dublin D04 XN32, Ireland (website hosting)
  • Stripe Payments Europe, Limited (SPEL), 1 Grand Canal Street Lower, Grand Canal Dock, Dublin D02 H210, Ireland (processing payments)

We have concluded contracts on the processing of personal data (pursuant to Article 28(3) GDPR) with these service providers, which process personal data as processors, i.e. according to our instructions.

3.3 Compliance with a legal obligation

We disclose personal data to third parties only for the compliance with a legal obligation to which we are subject, for instance to the tax office or law enforcement authorities.

The legal basis is Article 6(1)(c) GDPR.

3.4 Duration of storage of your personal data

We will erase your personal data once is no longer needed after handling a request or after complete performance of a contract.

This does not apply to data protected by legal obligations (such as tax/commercial law retention documents) and data necessary for legitimate interest pursuit, particularly legal claim establishment/exercise/defense or customer relations/direct marketing.

4. Social media networks and other online platforms

4.1 Joint controllership

We have profiles on the following social media networks/online platforms:

If you visit our profile on one of these networks/platforms, we are a "joint controller" (Article 26 GDPR) with the relevant service provider regarding the processing of your personal data.

4.2 Applicability of the general information in this Privacy Policy

The information above regarding us as a controller (section 1.) and the information below regarding your rights (section 5.) also applies in the context of our profiles on social media networks and other online platforms.

4.3 Purpose, categories of personal data and legal basis for the processing

4.3.1 Processing by us

We use the networks/platforms listed above for public relations work, i.e. to market our services and products. For this purpose, we process the data which users of the social network themselves provide on one of our profiles (e.g. usernames, content of their profiles, comments).

The legal basis for the processing is Article 6(1)(f) GDPR (pursuit of legitimate interests). It is our legitimate interest to present us and our services to interested people on social networks and online platforms.

Personal data won't be disclosed to third parties. Data deletes per network/platform options when no longer necessary. Objection to processing legitimate interests is available anytime.

4.3.2 Processing by service providers

To find out which personal data is processed by the relevant service provider of a network/platform, on what legal basis this is done, how long this data will be stored by the service provider, and whether this data is processed in "third countries", consult the service provider privacy policies at the links provided above (4.1).

Service providers share statistical visit data on our profiles. Statistical data doesn't identify individual persons.

Service providers are primary contacts for exercising data subject rights, holding relevant personal data.

5. Your rights as a data subject

Where the respective legal requirements are met, you have the following rights:

  • If you have given us your consent, you may withdraw it at any time (Article 7(3) GDPR).
  • You have the right to obtain information on what personal data relating to you we have stored (Article 15 GDPR).
  • You have the right to request the rectification of inaccurate data (Article 16 GDPR).
  • You have the right to request the erasure (Article 17 GDPR) or the restriction of processing (Article 18 GDPR) of data which is no longer necessary.

Where legal obligations exist for data retention, such as business correspondence under tax/commercial law or other statutory exceptions, data won't be erased but processing will be restricted.

You have the right to data portability (Article 20 GDPR), i.e. the right to receive personal data which you have provided to us in a structured, commonly used and machine-readable format and to transmit this data to another controller without hindrance from us. This may include rights to direct transmission to another controller.

If you consider that the processing of your data infringes data protection laws, you have the right to lodge a complaint with a supervisory authority (Article 77 GDPR).

The supervisory authority with local jurisdiction for us is: Bayerisches Landesamt für Datenschutzaufsicht, Promenade 18, 91522 Ansbach, Germany (www.lda.bayern.de)

6. Right to object

You may at any time object to the processing of your data for direct marketing purposes.

You may at any time object to the processing of your data which is based on the pursuit of legitimate interests on grounds relating to your particular situation (Article 21 GDPR).