Thank you for your interest in data protection at doob! We take the protection of your personal data very seriously. Our goal is not only to offer you high-quality individual products, but also to protect your personal rights. We consider data protection to form part of a customer-oriented, high quality service.
The following data protection articles provide extensive information about how we process your personal data. The main legal basis for this is the General Data Protection Regulation (GDPR).
A. BASIC INFORMATION PURSUANT TO ART. 13-14, GDPR
1. Responsible Authority for Data Processing
The authority responsible for data processing at doob group AG is:
doob group AG
Tel.: +49 (0) 211 388 5810
2. Data Protection Officer of doob group AG
The data protection officer of doob group AG is:
Tel.: +49 (0) 211 388 5810
3. Supervisory Authority
The supervisory authority responsible for doob group AG is:
State Commissioner for Data Protection and Freedom of Information of North Rhine Westphalia
P.O. Box 20 04 44
Tel.: 0211 384 240
Fax: 0211 384 2410
B. PROCESSING CONTEXTS
doob group AG processes your personal data in the following contexts:
1. Access to our Website
When you visit our website, our server stores data in server log files which your Internet browser automatically transmits to this server. This data set consists of:
• the date and time of access to the website
• the type and version of your browser
• the operating system used
• the page you last visited (“HTTP referrer”)
• the amount of data transferred and the access status (file transferred, file not found, etc.)
• your IP address and the requesting provider
The above data is processed in order to enable the use of the Internet pages you are visiting, for statistical purposes, to improve our Internet offering and system stability and to protect against cyber attacks.
b. Legal Basis
The legal basis for processing this data is Art. 6 Para. 1 letter f of the GDPR. Our legitimate interest is to offer a secure and functional website.
In such cases where the presentation of our website serves to prepare a contract, the legal basis for data processing is Art. 6 Para. 1 letter b of the GDPR.
c. Storage Period
Log files are stored for a period of 12 months and then automatically deleted.
2. Contact Form / Email Contact / Phone
Personal data that you provide to us when filling out a contact form on our website, by e mail or over the phone will of course be treated confidentially.
We only use your data to process your request.
b. Legal Basis
The legal basis for processing this data is Art. 6 Para. 1 letters f and b of the GDPR. Both your and our legitimate interests consist in the processing of your request.
c. Storage Period
We save the transmitted data for as long as is necessary to process your specific request. Once a matter has been concluded, we would delete your data by default after 12 months. If you have contacted us to assert your rights as a data subject (see below), we will store your data for three years from the time the matter has been dealt with, as proof that we have lawfully processed your request.
3. Manufacture and Delivery of the Products
The main object of doob group AG’s activity is the creation of 3D products based on its customers. To this end, we require digital photos of you, which we produce directly in our stores. We also collect your name and your contact details (address, email, phone number).
Your photos are used to create a 3D model. Your name and contact details are used to identify the products ordered and to deliver them to you.
b. Legal Basis
The processing of your photo data takes place exclusively on the basis and within the scope of your express consent in accordance with Art. 6 Para. 1 letter a of the GDPR.
Your name and contact details are also processed on the basis of your consent in accordance with Art. 6 Para. 1 letter a of the GDPR. Additionally, the processing of your name and contact details serves the proper implementation of our contractual relationship in accordance with Art. 6 Para. 1 letter b of the GDPR.
doob group AG uses its “doob)labs” division to manufacture its products. Your aforementioned data will be transmitted to and processed by doob)labs exclusively on our behalf on the basis of Art. 28 of the GDPR.
doob)labs may be located outside of the European Economic Area. In this case also, data is transmitted on the basis of standard data protection clauses in accordance with Art. 46 Para. 2 letter c of the GDPR.
doob)labs are carefully audited and committed to complying with the highest security standards.
d. Storage Period
If we do not use your contact details for advertising purposes (see below), we will save the data collected for the execution of the contract and your photo data until the statutory or possible contractual warranty and guarantee rights have expired. After this period has expired, we will keep the contractual relationship information required under commercial and tax laws, for the periods specified by law. During this period, the data will only be processed again in the event of a review by the tax authorities or customer inquiries.
You can revoke your consent to the processing of your photo data at any time with effect for the future. The revocation leads to the deletion of the collected photo data. You can exercise your revocation by simply sending us a message through any of the channels listed in Subsections A.1. and 2.
4. Data Processing for Advertising Purposes
From the moment you conclude a contract with us, we will manage you as an existing customer.
We process your email address in order to send you information about our products.
b. Legal Bases
The legal basis for processing is Article 6 Paragraph 1 letter f of the GDPR or, if consent has been given, Art. 6 Para. 1 letter a of the GDPR. The processing of existing customer data for our own advertising purposes is to be regarded as a legitimate interest within the context of the first aforementioned clause.
c. Revocation and Storage Period
You can object to data processing for the purposes outlined above at any time with effect for the future. You can exercise your revocation by simply sending us a message through any of the channels listed in Subsections A.1. and 2.
If you revoke your consent or object to certain forms of advertising, your data will be deleted from the associated email distribution lists.
If you thus object, the related contact address will be blocked out of further advertising data processing.
Cookies are text files that are stored on your computer by your browser. They contain information about your use of our website and enable recognition when you visit our website again. By adjusting your browser settings, you can generally deactivate or delete cookies that have been set. You can obtain information on this through your browser’s help function.
C. AFFECTED RIGHTS
You can exercise your rights to information, correction, deletion, restriction of processing and portability of your stored data at any time, provided that the requirements of Art. 15 et seq. of the GDPR are met. You may contact us through any of the channels listed in Subsections A.1. and 2.