privacy policy

This privacy policy is intended to inform you about how we process personal data on our website https://www.duravit.com.

1. the name and contact details of the controller and the company data protection officer

Person responsible:

DURAVIT Corporation.
Werderstraße 36
78132 Hornberg
info@duravit.de
Tel. 07833/70-0
Fax 07833/70-289

Our company data protection officer can be reached at the above address or at datenschutz@duravit.de.

2. collection of personal data, the nature and purpose of their use, legal basis and data recipients

We collect, process and use personal data only if you have given us your consent to do so or if there is another legal basis for doing so.

a) When visiting the website

When you visit our website, the browser used on your device automatically sends information to our website's server. This information is temporarily stored in a so-called log file. The following information is collected without any action on your part and stored until it is automatically deleted:

  • Name of the file retrieved
  • Date and time of access
  • transferred data volume
  • Report whether the retrieval was successful
  • Description of the type of web browser used
  • operating system used
  • the previously visited page
  • providers
  • Your IP address

We process the above data for the following purposes:

  • Ensuring a smooth connection to the website,
  • Ensuring a comfortable use of our website,
  • Evaluation of system security and stability
  • for other administrative purposes.

The legal basis for data processing is Art. 6 (1) (f) GDPR. Our legitimate interest follows from the data collection purposes listed above. Under no circumstances do we use the collected data to draw conclusions about you.

b) Hosting and provision of the website

We use Amazon Web Service from Amazon Web Services EMEA SARL (38 Avenue John F. Kennedy, L-1855 Luxembourg) to host the content and services on our website. We also use Akamai from Akamai Technologies GmbH (Parkring 20-22, 85748 Garching, Germany) for content delivery and as a cloud infrastructure. The following personal data transmitted is processed:

  • browser information
  • Date and time of visit
  • device information
  • device operating system
  • geographic location
  • IP address
  • Visited URL

Data processing is carried out in accordance with Article 6(1)(f) of the GDPR on the basis of our legitimate interest. Our legitimate interest arises from the data collection purposes listed above.

c) E-mail newsletter

If you have subscribed to our e-mail newsletter, we will process the personal data that you have provided to us in order to keep you informed of news from Duravit AG. You agree that newsletters may be sent regularly by e-mail to the e-mail address provided. With regard to the e-mail newsletter, a double opt-in procedure is used to verify that you are the owner of the e-mail address provided or that the owner of the e-mail address agrees to receive the newsletter.

To understand what is relevant to our readers, we also measure the opening and click rates of our newsletters. We process data in accordance with Art. 6 (1) point a GDPR, on the basis of your consent.

We use the Campaign Monitor newsletter service from Campaign Monitor Pty Ltd. (LEVEL 26 161 CASTLEREAGH STREET SYDNEY, NEW SOUTH WALES, 2000, Australia) to send the newsletter and for newsletter tracking. This involves a third-country transfer of data to Australia, which is transferred on the basis of the following safeguards: standard contractual clauses.

You can object to this processing at any time by clicking on the unsubscribe link in any email or by writing to the electronic mailbox datenschutz@duravit.de.

d) Contact forms

If you have any questions, we offer you the opportunity to contact us using a contact form provided on the website. To use this, you need to provide your name, email address and a message so that we can respond. Further information can be provided voluntarily.

We use the Formcentric service from Formcentric GmbH (Schaartor 1
20459 Hamburg) for the contact form and Office 365 from Microsoft Corporation (One Microsoft Way, Redmond, WA 98052-6399; USA) in order to respond to your inquiries. This involves a third-country transfer of data to the United States, which is transferred on the basis of the following safeguards: adequacy decision (EU/U.S. Data Privacy Framework) and standard contractual clauses.

Data processing for the purpose of us contacting you is carried out in accordance with Art. 6 (1) point b GDPR on the basis of your specific request.

e) Search function on the website

We use Fact Finder from Omikron Data Quality GmbH (Omikron Data Quality GmbH, Habermehlstr. 17, 75172 Pforzheim, Germany) to enable website visitors to search our website. Your IP address, search terms, and the date and time of access are processed to enable you to use the search function.

Data processing is carried out in accordance with Art. 6 (1) (f) GDPR. Our legitimate interest follows from the data collection purposes listed above.

f) Order brochures

We process your contact data (first and last name; e-mail address; postal address), user group and industry in order to send the requested brochures/flyers or similar print products to the inquirer.

The data processing is carried out in accordance with Art. 6 Para. 1 lit. b GDPR on the basis of the initiation or execution of a contract with you.

g) Product reviews

We process the following personal data for the purpose of submitting and publishing ratings and for establishing contact:

  • Identifiers: email address, IP address, internal identification number (pseudonymous ID), device fingerprint
  • Content data: ratings given
  • Contents of ratings (text, photo, video), questions, answers, nickname
  • Additional optional information: demographic information such as location, age group, gender
  • Also optional: information such as product interests, information on navigation on the website, transaction data

We use the Bazaarvoice service from Bazaarvoice, Inc. (10901 Stonelake Blvd Austin, TX 78759, USA) for this purpose. This involves a third-country transfer of data to the USA, which is transferred on the basis of the following guarantee measures: Adequacy decision (EU/U.S. Data Privacy Framework) and standard contractual clauses.

We process data in accordance with Art. 6 (1) point a GDPR, on the basis of your consent.

h) bathroom planning

When you plan your bathroom furnishings on our website, we process the following personal data: floor plans of the bathroom, connection data and IP addresses and, if applicable, registration and contact data. It is possible to use the website without an account. The provider of software solutions and cloud services, GO-2B – a brand of Compusoft Deutschland AG (Carl-Bertelsmann-Str. 103, 33332 Gütersloh) is used for this service.

The data processing is carried out in accordance with Art. 6 (1) (b) GDPR.

i) Displaying videos on our website.

We have integrated the video players Youtube from Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) and alugha from Alugha GmbH (O7, 17, 68161 Mannheim, Germany) into our website to enable the viewing of videos uploaded to our website. In doing so, we process the following personal data, among other things: device information, IP address, referrer URL, videos viewed. The data processing of both services is carried out by means of a two-click solution in accordance with Art. 6 (1) point (a) GDPR.

As part of the provision of the Alugha video player, the analysis tool Matomo is used to measure video performance, diagnose errors and provide performance reports for website operators. The data collected by Alugha during video use is made available to us as the website operator. An individual assignment of the collected information to individual users/viewers is not possible at any time.

Detailed information about the data collected by Matomo can be found here:

  • General FAQ: https://matomo.org/faq/general/faq_18254
  • Media Analytics FAQ: https://matomo.org/faq/media-analytics/faq_22387

For more information about the provider, see: Privacy Policy: https://alugha.com/privacy

j) Consent management platform

We use Usercentrics from Usercentrics GmbH (Sendlinger Str. 7, 80331 Munich, Germany) to manage and store consents. Usercentrics processes the following personal data:

  • Opt-in and opt-out data
  • Referrer URL
  • user agent
  • user settings
  • Consent ID
  • time of consent
  • consent type
  • template version
  • banner language

We process data in accordance with Article 6(1)(c) of the GDPR on the basis of legal obligations.

k) Statistics and analyses

We measure visitor traffic on our website and compile statistics about it. We process data in accordance with Art. 6 (1) point a GDPR, on the basis of your consent. In doing so, we use the following third-party services:

I) Google Analytics

We use the Google Analytics service provided by Google Ireland Limited, Gordon House Barrow Street Dublin 4, Ireland (hereinafter "Google") to collect and analyze visitor behavior on our website. To do this, data in the form of online identifiers (including cookie identifiers), Internet protocol addresses and device identifiers, identifiers assigned by the customer, and information about how our website interacts with it.

You can find more information about the provider at https://policies.google.com/privacy?hl=de.

II) Matomo from Innocraft

We use the Matomo service from InnoCraft Ltd (Matomo), InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand, to enable an analysis of this website and its visitors.

The following data is collected for this purpose: IP address, information about the browser and device you are using, files you have clicked on or downloaded, clicks on links to third-party websites, referrer URL (website from which you accessed our website), URL of our website, number of your visits, time of your first visit, date and time of the visit, time zone, location data.

This involves a transfer of data to New Zealand, which is based on the following safeguards: adequacy decision.

You can find more information about the provider at https://matomo.org/privacy-policy/.

III) Google Tag Manager

On our website, we use Google Tag Manager from Google Ireland Limited, Gordon House, Barrow Street Dublin 4, Ireland. Google Tag Manager is a solution that allows marketers to manage website tags through a single interface.

To monitor the stability, performance and installation quality of the system and to obtain data for diagnosis, Google Tag Manager collects certain aggregated data for tag triggering. This data does not include IP addresses or measurement IDs associated with a specific individual. Unlike data in standard HTTP request logs, which are all deleted within 14 days of receipt, and the diagnostic data described above, Google Tag Manager does not collect, store or share any information about visitors to our customers' properties. This also applies to the URLs of pages visited.

The tool ensures that other tags are activated, which in turn may collect data under certain circumstances. Google Tag Manager does not access this data. If disabled at the domain or cookie level, it will remain disabled for all tracking tags implemented with Google Tag Manager.

More information about the provider can be found at: https://policies.google.com/privacy?hl=de

l) advertising

We process personal data for online marketing purposes. This includes, in particular, the marketing of advertising space or the presentation of content based on the potential interests of users and the measurement of its effectiveness. We process data in accordance with Art. 6 (1) point a GDPR, on the basis of your consent. In doing so, we use the following third-party services:

I) Google Ads

We use Google Ads, an online advertising program from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter "Google"), which enables us to display ads in the Google search engine or on third-party websites when the user enters certain search terms on Google (keyword targeting). Furthermore, targeted advertisements can be displayed based on the user data available on Google (e.g. location data and interests) (target group targeting). We can evaluate this data quantitatively, for example by analyzing which search terms led to the display of our advertisements and how many ads led to corresponding clicks.

The data processing, in particular the setting of cookies, is carried out with your consent on the basis of Art. 6 (1) (a) GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out with your consent before the revocation.

Data transfer to the US is based on the EU Commission's Standard Contractual Clauses. Details can be found at https://policies.google.com/privacy/frameworks and https://privacy.google.com/businesses/controllerterms/mccs/.

II) Facebook Pixel

On this website, we use the Facebook Pixel service provided by Meta Platforms Ireland Limited (Block J, Serpentine Avenue, Dublin 4, Ireland) ("Meta") to display advertising on Facebook and other websites to you and other interested users and to measure the effectiveness of advertising.

The Facebook pixel that we have implemented on our website causes your browser to connect to Facebook, which allows user data such as IP addresses or user IDs to be matched. If you are registered with Facebook, Meta can assign the visit to your account. This allows your behavior to be tracked if, for example, you have reached our site by clicking on a Facebook ad or have been redirected to the advertiser by clicking on an ad displayed by us. The ads can thus be evaluated in terms of effectiveness for statistical or other market research purposes and further advertising can be improved. We cannot draw any conclusions about the identity of the users from this, but Meta can then adjust the placement of advertisements on and off Facebook.

To do this, Meta may use cookies, web beacons or other storage technologies and, for a maximum of 180 days, sets a cookie with the information that you have accessed our website or clicked on one of our ads, as soon as you have consented to the use of cookies requiring consent.

We are jointly responsible with Meta for the processing of personal information in event data that is related to your actions on our website and in our apps with integrated meta-business tools. We have therefore concluded a contract with Meta regarding our joint responsibility for the processing of your data in accordance with Art. 26 of the GDPR. The agreement with Meta also regulates which security measures Meta must observe. The rights of data subjects, such as information or other requests, must also be fulfilled by Meta. The terms of this agreement with Meta can be viewed here. Further processing by Meta is not subject to our joint responsibility.

For more information about how Meta processes personal information, including the options for exercising your rights with respect to Meta, please see Meta's data policy at https://www.facebook.com/about/privacy.

III) LinkedIn Insight Tag

We use the LinkedIn Insight tag from LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, for conversion tracking, to retarget website visitors and to obtain additional information about members who view the ads. This involves collecting metadata such as IP address, timestamps and page events (e.g. page views).

You can find more information about the provider at https://de.linkedin.com/legal/privacy-policy.

3. cookies

We use so-called cookies in some areas of our website. These file elements allow your computer to be identified as a technical unit during your visit to this website in order to make it easier for you to use our services, even on repeat visits. However, you usually have the option of setting your internet browser or mobile device so that you are informed when cookies are received, allowing you to allow or exclude them or delete existing cookies. Please use the help function of your internet browser to obtain information on how to change these settings. We would like to point out that individual functions of our website may not work if you have deactivated the use of cookies. Cookies do not allow a server to read private data from your computer or data stored by another server. They do not damage your computer and do not contain viruses. We base the use of cookies on Art. 6 para. 1 lit. a GDPR or Art. 6 para. 1 lit. f GDPR: the processing is carried out to improve the functioning of our website.

Information on the individual cookies can be found in the cookie banner.

Revocation of consent for cookies

You can change your consent or revoke your consent to the setting of cookies via the following link: INSERT LINK

4. Storage duration

The data stored by us will be deleted as soon as you revoke any consent or when the data is no longer required for its intended purpose and the deletion does not conflict with any legitimate interests or legal storage requirements. For specific deletion periods for cookies, we refer you to the information provided by our consent management platform. If the data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. This means that the data will be blocked and not processed for other purposes. This applies, for example, to user data that must be stored for commercial or tax law reasons. According to legal requirements, the storage is carried out for 6 years in accordance with § 257 para. 1 HGB (German Commercial Code) (e.g. commercial letters, accounting vouchers, etc.) and for 10 years in accordance with § 147 para. 1 AO (German Tax Code) (e.g. commercial and business letters, tax-relevant documents).

5. Rights of data subjects

You have the following rights as a data subject:

a. Right of access

You have the right to request confirmation from us as to whether personal data relating to you is being processed.

b. Rectification/erasure/restriction of processing

Furthermore, you have the right to request that we

  • to have inaccurate personal data concerning you rectified without undue delay (right to rectification);
  • Your personal data will be deleted immediately (right to deletion) and
  • the processing is restricted (right to restrict processing).

c. Right to data portability

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller.

d. Right of withdrawal

You have the right to revoke your consent at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.

e. Right of objection

You have the right to object if the processing of personal data concerning you is necessary for the performance of a task carried out in the public interest (Art. 6 (1) (e) GDPR) or to protect our legitimate interests (Art. 6 (1) (f) GDPR).

f. Right of appeal

If you believe that the processing of personal data concerning you infringes the GDPR, you have the right to lodge a complaint with a supervisory authority, without prejudice to any other legal remedies.

6. automated decision-making, including profiling

We do not use automated decision-making or profiling.

7. Amendment of the data protection declaration

We reserve the right to amend this data protection declaration in the event of any changes to the legal situation, the service or the data processing. However, this only applies with regard to explanations of data processing. If the consent of users is required or components of the data protection declaration contain provisions of the contractual relationship with the users, the changes will only be made with the consent of the users. Users can regularly inform themselves about any changes in this data protection declaration.

As of: March 2025

Design

Wellbeing

Excellence

Responsibility