Privacy Policy for the Website
As of: June 25, 2026
1. Controller
The controller responsible for the processing of personal data on this website is:
Dürr Technik GmbH & Co. KG
Pleidelsheimer Straße 30, D-74321 Bietigheim-Bissingen, Germany
Phone: +49 7142 9022-0
Email: office@duerr-technik.de
2. Data Protection Officer
We have appointed an external data protection officer:
D3 Datenschutz UG (limited liability) – Nico Villing
Hauptstraße 106/108, D-78549 Spaichingen, Germany
Phone: +49 (0) 7424 603 939 0
Email: datenschutz@duerr-technik.de
Please contact the above address with any questions regarding data protection or to exercise your data subject rights.
3. General Information on Data Processing
We process personal data only to the extent necessary for providing our website, responding to inquiries, carrying out contractual or pre-contractual measures, processing orders, conducting marketing activities, or complying with legal obligations.
Personal data includes all information relating to an identified or identifiable natural person, such as name, contact details, IP address, usage data, order data, payment data, or communication content.
Processing is based in particular on the following legal bases:
Article 6(1)(a) of the GDPR, where you have given your consent, for example for newsletters, analytics, marketing or external media services.
Article 6(1)(b) of the GDPR, where processing is necessary for the performance of a contract or for the implementation of pre-contractual measures, for example in the case of enquiries, registrations, orders or customer accounts.
Article 6(1)(c) of the GDPR, where we are legally obliged to process data, for example due to commercial or tax law retention obligations.
Article 6(1)(f) of the GDPR, insofar as the processing is necessary to safeguard legitimate interests and your interests, fundamental rights and freedoms do not override those interests, for example for IT security, the prevention of misuse, the handling of general enquiries or direct marketing to existing customers within the limits permitted by law.
Section 25 of the German Telecommunications Data Protection Act (TDDDG) applies in addition to the storage of information on your device or access to information on your device. Where consent is required for this, processing will only take place with your prior consent. Technically necessary storage or access takes place without consent, insofar as it is necessary for the provision of the expressly requested website function.
Retention period and storage for legal proceedings
We store personal data only for as long as is necessary for the respective processing purposes. The decisive factor is
4. Website Access and Server Log Files
When you access our website, technically necessary data is processed to ensure that the website can be displayed and operated securely. This may include, in particular, the following data: IP address, date and time of access, accessed page or file, amount of data transmitted, browser type and version, operating system, referrer URL, hostname of the accessing device, as well as status messages and error codes.
The processing is carried out for the purpose of providing the website, ensuring technical stability, maintaining IT security, analyzing errors, and preventing misuse.
The legal basis for this processing is Art. 6 (1) lit. f GDPR. Our legitimate interest lies in the secure, functional, and stable operation of the website.
Server log files are generally stored only for as long as necessary to fulfill the above-mentioned purposes. Longer storage may occur if required to investigate security incidents, misuse, or attacks.
5. Hosting by Hetzner
In the context of hosting, Hetzner processes personal data that may arise when you visit and use the website. This may include, in particular, server log data, IP addresses, technical connection data, and content processed via forms or online shop functions.
The processing is carried out for the purpose of providing the website, ensuring its secure operation, and maintaining its technical functionality. The legal basis for this processing is Art. 6 (1) lit. f GDPR.
Where Hetzner processes personal data on our behalf, a data processing agreement in accordance with Art. 28 GDPR has been concluded.
6. Cookies and Consent Management
Our website uses cookies and similar technologies. Cookies are small text files stored on your device. Comparable technologies may include, for example, local storage, session storage, pixels, tags, or scripts.
We distinguish between technically necessary services and optional services.
Technically necessary cookies and technologies are required to ensure that the website, the web shop, the shopping cart function, login, security features, or your cookie settings work properly. These are used on the basis of Section 25 (2) TDDDG and Article 6 (1) (f) GDPR, insofar as they are necessary for the operation of the website.
Optional services, in particular analytics, marketing, tracking, external media, map, chat, or social media services, are only used if you have given your prior consent. The legal basis is Article 6 (1) (a) GDPR in conjunction with Section 25 (1) TDDDG.
You can withdraw your consent at any time with effect for the future or change your selection. For this purpose, we provide an option on the website to adjust your cookie and privacy settings.
7. Technically necessary cookies and shop functions
When you visit our website and use the web shop, technically necessary cookies and similar technologies are used. These are required to ensure that the website and its core functions operate properly. This includes, in particular, functions for session management, security, shopping cart functionality, login areas, language settings, shop functionalities, and the storage of your privacy settings.
Processing is carried out, insofar as it is necessary to provide the website or shop function expressly requested by you, on the basis of Section 25 (2) TDDDG. Subsequent processing of personal data is carried out on the basis of Article 6 (1) (f) GDPR. Our legitimate interest lies in the secure, stable, and user-friendly operation of the website and the web shop.
The specific cookies and similar technologies used, including their purpose, provider, category, and storage duration, are explained in our cookie layer or in the cookie settings accessible there.
Insofar as cookies or similar technologies are not technically necessary, they are only used following your prior consent.
8. Contact form and contacting us
If you contact us via the contact form, by email, by telephone, or in any other way, we process the data you provide in order to handle your request. This may include, in particular, your name, company, email address, phone number, subject, message, communication content, and technical metadata.
Mandatory information is limited to the data we require to process your request. Any additional information is voluntary.
Depending on the nature of your request, processing is carried out on the basis of Article 6 (1) (b) GDPR if the request relates to a contract or pre-contractual measures, or on the basis of Article 6 (1) (f) GDPR if it is a general inquiry. Our legitimate interest lies in the proper handling and response to your request.
The data will be deleted as soon as your request has been fully processed, unless there are statutory retention obligations or legitimate interests that require further storage.
9. Newsletter
Our website offers the option to subscribe to a newsletter. For sending the newsletter, we process in particular your email address as well as, where applicable, additional voluntary information such as your name, company, or areas of interest.
Subscription is generally carried out using a double opt-in procedure. After registering, you will receive an email in which you can confirm your subscription. This ensures that the email address provided actually belongs to you.
For the purpose of documenting your consent, we also store the time of registration, the time of confirmation, your IP address, and, where applicable, additional verification data. This processing is carried out on the basis of Article 6 (1) (f) GDPR. Our legitimate interest lies in proving that valid consent has been obtained.
The newsletter is sent on the basis of your consent in accordance with Article 6 (1) (a) GDPR. If cookies, pixels, or similar technologies are used in connection with the newsletter, this is done only on the basis of your consent in accordance with Section 25 (1) TDDDG.
You may withdraw your consent at any time with effect for the future. Each newsletter contains an unsubscribe link for this purpose. Alternatively, you may unsubscribe at any time using the contact details provided above.
After unsubscribing from the newsletter, your data will generally be removed from the active distribution list. Data that we require as proof of consent may be stored for the duration of applicable retention and limitation periods.
10. Evalanche
We use Evalanche for sending newsletters and, where applicable, for marketing automation, lead management, campaign management, and the analysis of newsletter interactions. The provider is SC-Networks GmbH, Würmstraße 4, 82319 Starnberg, Germany.
In particular, the following data may be processed via Evalanche: email address, name and other voluntary information, subscription and confirmation data, newsletter preferences, open and click rates, technical information such as IP address, timestamp, browser and device data, as well as interest and interaction data, provided that the corresponding functions are activated.
The processing serves the purpose of sending, managing, and analyzing newsletters, as well as, where applicable, the targeted delivery of marketing content.
Where Evalanche is used solely for sending technically necessary newsletter communication, processing is carried out on the basis of Article 6 (1) (a) GDPR for the newsletter itself and Article 6 (1) (f) GDPR for technical administration and documentation. Where tracking, marketing automation, lead scoring, or similar analysis takes place, this is carried out only on the basis of your consent in accordance with Article 6 (1) (a) GDPR and Section 25 (1) TDDDG.
You may withdraw your consent at any time with effect for the future. In particular, withdrawal can be made via the unsubscribe link in the newsletter or by notifying the controller referred to above.
Where Evalanche processes personal data on our behalf, a data processing agreement pursuant to Article 28 GDPR is in place.
11. Objection to advertising emails
We hereby object to the use of contact data published within the scope of the legal notice obligation or on our website for the purpose of sending unsolicited advertising and informational materials.
We reserve the right to take legal action in the event of the unsolicited sending of advertising information, in particular spam emails.
If you are an existing customer, we may use your email address, within the scope permitted by law, to send direct advertising for our own similar goods or services. You may object to this use at any time without incurring costs other than the transmission costs according to the basic rates. You will be informed of your right to object when your email address is collected and in every advertising email.
12. Registration and customer account in the web shop
You can register on our website or in our web shop and create a customer account. In doing so, we process the data required to set up and manage the customer account. This may include, in particular: name, company, address, email address, telephone number (where required or voluntarily provided), login data, order history, customer number, billing and delivery addresses, and communication data.
Processing is carried out for setting up and managing the customer account, processing orders, contract execution, customer communication, and the provision of service functions.
The legal basis is Article 6 (1) (b) GDPR. Where individual details are not mandatory, they are collected as voluntary information. In particular, it should be reviewed whether the telephone number is actually required as a mandatory field for registration or ordering; if not, it should be designed as a voluntary field.
You can generally request the deletion of your customer account at any time, provided that no statutory retention obligations or legitimate interests prevent this.
13. Orders in the web shop
When you place an order via our web shop, we process personal data to carry out and process the order. This includes, in particular: name, billing and delivery address, email address, telephone number (if required), order data, payment data, delivery data, communication data, customer number, as well as contract and invoice data.
Processing is carried out for contract execution, delivery, invoicing, payment processing, customer communication, handling of complaints, and fulfillment of legal obligations.
The legal basis is Article 6 (1) (b) GDPR. For commercial and tax retention obligations, the legal basis is Article 6 (1) (c) GDPR.
The storage duration is based on statutory retention periods and the principles set out in the section “Storage duration and retention for legal enforcement.”
14. Payment service providers
Within the web shop, we offer various payment options. Depending on the selected payment method, payment data is transmitted to the respective payment service provider. This may include in particular: name, billing and delivery address, email address, order amount, payment reference, IP address, transaction data, and other data required for payment processing.
Processing is carried out for payment processing and contract fulfillment on the basis of Article 6 (1) (b) GDPR. Where legal obligations exist, processing is carried out on the basis of Article 6 (1) (c) GDPR. Where payment service providers pursue their own purposes, they are independently responsible for such processing.
PayPal
If you choose PayPal as your payment method, the data required for payment processing will be transmitted to PayPal. The provider is PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg.
PayPal processes the transmitted data for payment processing, fraud prevention, risk assessment, and compliance with its own legal obligations. Further information can be found in PayPal’s privacy policy.
15. DooFinder
We use DooFinder on our website and in our web shop to provide an optimized product search. The provider is Doofinder S.L., Calle Cronos 63, 28037 Madrid, Spain.
DooFinder is integrated into our website via a script or plugin and uses server-side functions to perform search queries. In this context, search terms, displayed search results, and technical usage data may be processed.
To improve the user experience, DooFinder stores certain information locally in the browser (e.g., in Local Storage). In particular, a random session ID may be used to assign interactions within the search function for a limited period (generally up to 24 hours). This storage serves exclusively the functionality and stability of the search feature, as well as maintaining search states and user settings.
Processing is carried out, insofar as it is technically necessary to provide the search function, on the basis of Article 6 (1) (f) GDPR. Our legitimate interest lies in providing a user-friendly, efficient, and technically stable product search.
To the extent that DooFinder uses cookies or similar technologies for analysis or optimization purposes beyond this, such use is based exclusively on your consent in accordance with Article 6 (1) (a) GDPR and Section 25 (1) TDDDG.
16. Google Tag Manager
We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Tag Manager is used to manage website tags. It enables other services, in particular analytics or marketing services, to be technically integrated and controlled. According to our understanding, Google Tag Manager itself does not create independent user profiles. However, in the course of technical integration, personal data, in particular IP addresses and technical connection data, may be transmitted to Google.
Google Tag Manager is used only insofar as this is necessary for managing services based on consent, or where corresponding consent has been obtained for the services controlled via the Tag Manager. The legal basis is Article 6 (1) (a) GDPR in conjunction with Section 25 (1) TDDDG, insofar as optional services are triggered via the Tag Manager.
17. Google Ads and Google Conversion Tracking
We use Google Ads and Google Conversion Tracking. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
These services are used to display, measure, and optimize advertisements. If you access our website via a Google ad or interact with our content, cookies, pixels, or similar technologies may be used to determine whether certain actions have been completed on our website, such as contact requests, registrations, purchases, or other conversions.
In this context, in particular the following data may be processed: IP address, device information, browser data, referrer URL, ad interactions, cookie IDs, conversion data, and usage data.
Processing is carried out solely on the basis of your consent in accordance with Article 6 (1) (a) GDPR in conjunction with Section 25 (1) TDDDG. You may withdraw your consent at any time with effect for the future.
18. Google AdSense
We use Google AdSense. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google AdSense is used to integrate and display advertisements on our website. Cookies, pixels, or similar technologies may be used to deliver ads, measure their performance, prevent misuse, and, where applicable, display interest-based advertising.
In this context, in particular the following data may be processed: IP address, device and browser information, cookie IDs, usage data, location information, ad interactions, and technical identifiers.
Google AdSense is used only on the basis of your consent in accordance with Article 6 (1) (a) GDPR in conjunction with Section 25 (1) TDDDG. You can withdraw your consent at any time with effect for the future via the cookie/privacy settings.
19. Google Maps
Our website may integrate maps from Google Maps. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Maps is used to display maps, locations, and directions. When loading the map, personal data may be transmitted to Google. This may include, in particular, IP address, location data, device and browser information, usage data, and technical identifiers.
Google Maps is only loaded with your consent or upon your active authorization. The legal basis is Article 6 (1) (a) GDPR in conjunction with Section 25 (1) TDDDG. You may withdraw your consent at any time with effect for the future.
20. YouTube
Our website may include videos from YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
When loading or playing a YouTube video, personal data may be transmitted to Google. This may include, in particular, IP address, device and browser information, referrer URL, usage data, video views, interactions, and technical identifiers. If you are logged into your Google or YouTube account, Google may associate this usage with your account.
YouTube videos are only loaded after your consent or upon your active authorization. The legal basis is Article 6 (1) (a) GDPR in conjunction with Section 25 (1) TDDDG. You may withdraw your consent at any time with effect for the future.
21. Elfsight LinkedIn Feed
Our website may include a LinkedIn feed via Elfsight. The provider is Elfsight. The exact provider designation, contractual role, and technical implementation are subject to final verification.
The Elfsight LinkedIn Feed is used to display content from our LinkedIn presence on the website. When loading the feed, personal data may be transmitted to Elfsight and, where applicable, to LinkedIn. This may include, in particular, IP address, device and browser information, referrer URL, usage data, technical identifiers, and interaction data.
The LinkedIn feed is only loaded after your consent or upon your active authorization. The legal basis is Article 6 (1) (a) GDPR in conjunction with Section 25 (1) TDDDG. You may withdraw your consent at any time with effect for the future.
22. onlyfy application manager / XING in the website context
Our website may include job postings or application functionalities via the onlyfy application manager or services provided by XING/New Work.
To the extent that technical content of the careers section is loaded via the general website, personal data may be processed, in particular IP address, device and browser information, referrer URL, usage data, and technical identifiers.
Processing is carried out for the technical provision and display of the application section as well as for redirecting users into the application process. The legal basis is Article 6 (1) (f) GDPR. Our legitimate interest lies in providing a user-friendly and technically functional presentation of our job postings and application features.
Where cookies or similar technologies are used for integrating the application section, their use is governed by the legal requirements of the TDDDG. Technically necessary access may be based on Section 25 (2) TDDDG; non-essential cookies or similar technologies are used only with your consent in accordance with Section 25 (1) TDDDG.
Details on the processing of personal data in the application process can be found in the separate privacy notice for applicants.
23. Social media presence
We maintain online presences on social networks and platforms, in particular LinkedIn, XING, and YouTube. Through these presences, we provide information about our company, products, services, news, and career opportunities. Users can also interact with us via these platforms.
When you visit our social media profiles, we process personal data to the extent that you interact with our profile, send us messages, comment on posts, share content, or otherwise contact us. This may include, in particular, profile name, publicly available profile data, message content, comments, interactions, timestamps of interactions, and communication data.
Processing by us is carried out for public relations, communication, handling inquiries, and presenting our company. The legal basis is Article 6 (1) (f) GDPR. Our legitimate interest lies in modern corporate communication and public relations. Where you have provided consent, Article 6 (1) (a) GDPR constitutes the legal basis.
In addition, the respective platform providers process personal data under their own responsibility. This may include the creation of user profiles, provision of statistical analyses, or processing for their own purposes. We have only limited influence on the type and scope of this processing.
We operate a company page on LinkedIn. The provider is LinkedIn Ireland Unlimited Company, Ireland.
When you visit our LinkedIn page, LinkedIn may process personal data and provide us with statistical evaluations of page usage. For certain page statistics, there may be joint controllership between LinkedIn and us.
Further information on data processing by LinkedIn can be found in LinkedIn’s privacy policy.
We operate a company page on XING. The provider is New Work SE, Germany.
When you visit our XING page, XING may process personal data. If you interact with us via XING or use application functions, additional data may be processed.
Further information on data processing by XING can be found in the privacy policy of XING or New Work SE.
YouTube
We operate a YouTube channel. The provider is Google Ireland Limited, Ireland.
When you visit our YouTube channel, Google may process personal data, in particular usage data, device information, interaction data, and, where applicable, account data if you are logged in.
Further information on data processing by YouTube/Google can be found in Google’s privacy policy.
24. Recipients of personal data
Within our company, only those departments that require access to personal data in order to fulfill the respective purposes are granted such access.
Personal data may also be transferred to external recipients, in particular: hosting and IT service providers, web shop and e-commerce service providers, payment service providers, shipping and logistics service providers, newsletter and marketing service providers, analytics and advertising service providers (where consent has been given), communication and support service providers, application management service providers, tax advisors, auditors, legal advisors, and public authorities where required by law.
Where service providers process personal data on our behalf, we conclude data processing agreements in accordance with Article 28 GDPR. Where joint controllership exists, agreements are concluded in accordance with Article 26 GDPR.
25. Transfers to third countries
Some of the services we use may transfer personal data to countries outside the European Union or the European Economic Area, or allow access to such data from these countries. This may be particularly relevant in the case of international service providers.
Such transfers are carried out only if the requirements of Articles 44 et seq. GDPR are met. In particular, this may be based on an adequacy decision of the European Commission, the EU-U.S. Data Privacy Framework (for appropriately certified companies), standard contractual clauses of the European Commission, or additional safeguards.
27. Your rights
Under the GDPR, you have various rights regarding the processing of your personal data.
Right of access
You have the right to request information as to whether we process personal data concerning you. If this is the case, you may request access to this data and additional information, in particular regarding the purposes of processing, categories of personal data, recipients, storage periods, the origin of the data, and your other rights.
Right to rectification
You have the right to request the correction of inaccurate personal data. You also have the right to request the completion of incomplete personal data.
Right to erasure
You have the right to request the deletion of your personal data where the legal requirements are met. This applies in particular if the data is no longer necessary for the purposes for which it was collected, if you have withdrawn your consent and no other legal basis exists, if you have validly objected, or if the data has been processed unlawfully.
The right to erasure does not apply where processing is necessary to comply with a legal obligation, to exercise the right of freedom of expression and information, for reasons of public interest, or for the establishment, exercise, or defense of legal claims.
Right to restriction of processing
You have the right to request the restriction of processing where the legal requirements are met. This may be the case in particular if you contest the accuracy of the data, the processing is unlawful and you request restriction instead of deletion, we no longer require the data but you need it to establish, exercise, or defend legal claims, or you have objected and it has not yet been determined whether our legitimate grounds prevail.
Right to data portability
You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, where processing is based on consent or a contract and is carried out by automated means. Where technically feasible, you may also request that the data be transmitted directly to another controller.
Right to withdraw consent
If processing is based on your consent, you may withdraw this consent at any time with effect for the future. The lawfulness of processing carried out before the withdrawal remains unaffected.
Right to object
You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data based on Article 6 (1) (e) or (f) GDPR.
We will then cease processing the data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.
Where personal data is processed for direct marketing purposes, you have the right to object at any time to such processing. This also applies to profiling insofar as it is related to direct marketing. Following your objection, your data will no longer be used for direct marketing.
Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates data protection law. In particular, you may contact the supervisory authority of your place of residence, your workplace, or the place of the alleged infringement.
28. Automated decision-making, including profiling
To the best of our knowledge, no solely automated decision-making within the meaning of Article 22 GDPR takes place.
Where analytics, marketing, or tracking services are used, usage profiles or target groups may be created. This is carried out only on the basis of your consent and serves purposes such as analysis, optimization, or advertising. No legal or similarly significant effects are associated with this.
29. Security
We implement technical and organizational measures to protect personal data against loss, misuse, unauthorized access, alteration, or disclosure. These measures are adapted in line with the state of the art and existing risks.
30. Changes to this privacy policy
We reserve the right to amend this privacy policy if our website, the services used, technical processes, or legal requirements change. The version published on the website shall apply.
