DSP Dealer

Privacy Policy

This Privacy Policy provides you with information on the processing of personal data according to Article 13 of the EU General Data Protection Directive (GDPR).

We may revise this privacy policy from time to time to reflect technical developments or changes regarding the purposes for which we process personal data. The last revision was made in August 2025.

1. Controller

DSP Dealer UG, Adresse, E-Mail

2. Purposes and legal bases of the processing of personal data

2.1 Visiting our website

You can visit our website without registration or otherwise providing personal data.

2.1.1 Cookies and similar technologies

Our website is hosted by Vercel (cf. section 3.2 below). We use cookies and similar technologies on our website as described below.

Cookies are short text files which are stored in your computer by your browser for the duration of the browser session and erased immediately at the end.

Cookies may be session-based or permanent, with permanent cookies stored for defined periods before deletion.

2.1.2 Legal framework

The legal framework applies to browser local storage equivalently. Cookies include essential/functional cookies necessary for website functionality, plus analytics/performance cookies analyzing visitor usage.

2.1.2.1 Consent for analytics cookies and similar technologies

We use no analytics cookies, so this website shows no cookie banner: the analytics described in section 2.1.4 store nothing on your device. Should we ever use analytics cookies, we will ask for your consent first; the legal basis would then be Article 6(1)(a) GDPR.

2.1.2.2 Admissibility of functional cookies and similar technologies

We may use functional cookies without your consent. The legal basis is Article 6(1)(f) GDPR for pursuing legitimate interests through a user-friendly website.

You may disable cookies in browser privacy preferences; however, this prevents using all website features. Browser local storage information collection works similarly.

2.1.3 Functional cookies and similar technologies that we use

Please see https://vercel.com/legal/privacy-policy.

2.1.4 Analytics that we use

We use two analytics services to understand how the website is used. Both are set up not to store cookies or any other identifier on your device, and neither builds a profile of you. The legal basis is our legitimate interest in understanding and improving the website, Article 6(1)(f) GDPR. We do not use Google Analytics, and we run no advertising or conversion tracking of any kind.

2.1.5 Web fonts

We use Google Fonts, which are loaded from Google's servers (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) when you visit the site. Your IP address is transmitted to Google in the process. Google's privacy policy is at https://policies.google.com/privacy.

2.2 Contacting us

When sending messages via the website or email, provided personal data including request content is collected.

This data processes for handling requests. The legal basis is Article 6(1)(b) (taking steps prior to entering into a contract; or, where the request is related to a contract that has already been entered into, the performance of that contract).

2.3 Contracts

When placing orders, collected personal data including order details processes for order handling and contract performance. The legal basis is Article 6(1)(b) GDPR (taking steps prior to entering into a contract; performance of the contract).

2.4 Pursuit of legitimate interests

To the extent permitted by law, we may process your personal data also for the pursuit of legitimate interests. These include the establishment, exercise or defence of legal claims, customer relations management and direct marketing.

The legal basis is Article 6(1)(f) GDPR.

Note that objection rights exist for data processing in this context (section 7 below).

2.5 Problem reports from the Inspect app

If Inspect closes unexpectedly, or you choose Help → Report a problem in the app, you can send us a report. It is sent only when you click Send, and the app shows you its contents first. A report contains the crash report written by your operating system (if any), the most recent entries of Inspect's log, the Inspect version, your operating system, the audio device and modules you use, and, if you enter them, a description of the problem and your email address.

Before sending, the app replaces your home folder, your user name and the name on your licence with placeholders. A Windows crash dump is binary and is sent as it is; it may contain file paths that include your user name.

The report is delivered by email to support@dsp-dealer.com and used only to find and fix the problem and, if you gave your email address, to reply to you. It is not stored on our website. We delete it once the problem has been fixed, and at the latest 12 months after we received it. The legal basis is your consent, Article 6(1)(a) GDPR, which you can withdraw at any time by writing to support@dsp-dealer.com.

Reports pass through Vercel (receiving the report) and Resend (delivering the email), see section 3.2.

3. Recipients of personal data

3.1 Third parties

We disclose personal data to third parties only if this is necessary for the performance of a contract (including payment), if we are under a legal obligation to do so or if you have given your explicit consent.

Third parties receiving personal data for contract performance include shipping providers (depending on destination) and chosen payment providers.

3.2 Service providers

We employ the following service providers which process data on our behalf according to Article 28 GDPR:

  • Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA (website hosting, website analytics and serverless functions, including receiving problem reports from the Inspect app)
  • Resend, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA (sending newsletter emails and delivering problem reports)
  • PostHog, Inc., 2261 Market Street #4008, San Francisco, CA 94114, USA (website analytics)

We have concluded contracts on the processing of personal data (pursuant to Article 28(3) GDPR) with these service providers, which process personal data as processors, i.e. according to our instructions.

3.3 Compliance with a legal obligation

We disclose personal data to third parties only for the compliance with a legal obligation to which we are subject, for instance to the tax office or law enforcement authorities.

The legal basis is Article 6(1)(c) GDPR.

3.4 Duration of storage of your personal data

We will erase your personal data once is no longer needed after handling a request or after complete performance of a contract.

This does not apply to data protected by legal obligations (such as tax/commercial law retention documents) and data necessary for legitimate interest pursuit, particularly legal claim establishment/exercise/defense or customer relations/direct marketing.

4. Social media networks and other online platforms

4.1 Joint controllership

We have profiles on the following social media networks/online platforms:

If you visit our profile on one of these networks/platforms, we are a "joint controller" (Article 26 GDPR) with the relevant service provider regarding the processing of your personal data.

4.2 Applicability of the general information in this Privacy Policy

The information above regarding us as a controller (section 1.) and the information below regarding your rights (section 5.) also applies in the context of our profiles on social media networks and other online platforms.

4.3 Purpose, categories of personal data and legal basis for the processing

4.3.1 Processing by us

We use the networks/platforms listed above for public relations work, i.e. to market our services and products. For this purpose, we process the data which users of the social network themselves provide on one of our profiles (e.g. usernames, content of their profiles, comments).

The legal basis for the processing is Article 6(1)(f) GDPR (pursuit of legitimate interests). It is our legitimate interest to present us and our services to interested people on social networks and online platforms.

Personal data won't be disclosed to third parties. Data deletes per network/platform options when no longer necessary. Objection to processing legitimate interests is available anytime.

4.3.2 Processing by service providers

To find out which personal data is processed by the relevant service provider of a network/platform, on what legal basis this is done, how long this data will be stored by the service provider, and whether this data is processed in "third countries", consult the service provider privacy policies at the links provided above (4.1).

Service providers share statistical visit data on our profiles. Statistical data doesn't identify individual persons.

Service providers are primary contacts for exercising data subject rights, holding relevant personal data.

5. Your rights as a data subject

Where the respective legal requirements are met, you have the following rights:

  • If you have given us your consent, you may withdraw it at any time (Article 7(3) GDPR).
  • You have the right to obtain information on what personal data relating to you we have stored (Article 15 GDPR).
  • You have the right to request the rectification of inaccurate data (Article 16 GDPR).
  • You have the right to request the erasure (Article 17 GDPR) or the restriction of processing (Article 18 GDPR) of data which is no longer necessary.

Where legal obligations exist for data retention, such as business correspondence under tax/commercial law or other statutory exceptions, data won't be erased but processing will be restricted.

You have the right to data portability (Article 20 GDPR), i.e. the right to receive personal data which you have provided to us in a structured, commonly used and machine-readable format and to transmit this data to another controller without hindrance from us. This may include rights to direct transmission to another controller.

If you consider that the processing of your data infringes data protection laws, you have the right to lodge a complaint with a supervisory authority (Article 77 GDPR).

The supervisory authority with local jurisdiction for us is: Bayerisches Landesamt für Datenschutzaufsicht, Promenade 18, 91522 Ansbach, Germany (www.lda.bayern.de)

6. Right to object

You may at any time object to the processing of your data for direct marketing purposes.

You may at any time object to the processing of your data which is based on the pursuit of legitimate interests on grounds relating to your particular situation (Article 21 GDPR).