PRIVACY POLICY

1. Information on the collection of personal data and contact details of the controller

1.1. We are pleased that you are visiting our website and thank you for your interest. In the following, we will inform you about how we handle your personal data when you use our website. Personal data is any data with which you can be personally identified.

1.2. The controller on this website within the meaning of the General Data Protection Regulation (GDPR) is the

Durst Group AG

Julius-Durst-Strasse 4

39042 Bressanone, Italy

info@durst-group.com

+39 0472 810111

1.3. The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

1.4. This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the controller). You can recognise an encrypted connection by the string "https://" and the lock symbol in your browser line.

1.5. Some of our (sub)processors, some controllers or other recipients of personal data are located or process data in the United States. There is no adequacy decision of the European Commission for the United States. Therefore, the security of your data cannot be guaranteed in the United States. A transfer will only take place if the provisions of Chapter V of the GDPR are complied with, in particular if you give your consent.

2. Data collection when visiting our website

2.1. During the mere informational use of our website, i.e. if you do not register or otherwise transmit information to us, we only collect data that your browser transmits to our server (so-called "server log files"). When you call up our website, we collect the following data, which is technically necessary for us to display the website to you:

2.1.1. Our visited website

2.1.2. Date and time at the time of access

2.1.3. Amount of data sent in bytes

2.1.4. Source/reference from which you reached the page

2.1.5. Browser used

2.1.6. Operating system used

2.1.7. IP address used (if applicable: in anonymised form)

2.2. The processing is carried out in accordance with Art. 6(1) point (f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used in any other way. However, we reserve the right to check the server log files retrospectively if there are concrete indications of illegal use.

3. Contact

3.1. Personal data is collected when contacting us (e.g. via contact form or e-mail). Which data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of answering your request or for contacting you and the associated technical administration. The legal basis for processing this data is our legitimate interest in responding to your request in accordance with Art. 6(1) point (f) GDPR. If your contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6(1) point (b) GDPR. Your data will be deleted after your request has been processed. This is the case when the circumstances indicate that the matter in question has been conclusively clarified and provided that there are no statutory duties to preserve it.

4. Data processing when opening a customer account and for contract processing

4.1. Pursuant to Art. 6(1) point (b) GDPR, personal data will continue to be collected and processed if you provide it to us for the performance of a contract or when opening a customer account. Which data is collected can be seen from the respective input forms. Deletion of your customer account is possible at any time and can be done by sending a message to the above address of the controller. We store and use the data provided by you for the purpose of processing the contract. After complete processing of the contract or deletion of your customer account, your data will be blocked in consideration of tax and commercial law retention periods and deleted after expiry of these periods, unless you have expressly consented to further use of your data or a legally permitted further use of data has been reserved on our part.

5. Registration for our e-mail newsletter

5.1. If you register for our e-mail newsletter, we will regularly send you information about our offers. Only your e-mail address is required for sending the newsletter. The provision of further data is voluntary and is used to address you personally. We use the so-called double opt-in procedure for sending the newsletter. This means that we will only send you an e-mail newsletter once you have expressly confirmed that you consent to receiving newsletters. We will then send you a confirmation e-mail asking you to confirm that you wish to receive the newsletter in future by clicking on an appropriate link.

5.2. By activating the confirmation link, you give us your consent for the use of your personal data in accordance with Art. 6(1) point (a) GDPR. When you register for the newsletter, we store your IP address entered by your internet service provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your e-mail address at a later date. The data collected by us when you register for the newsletter is used exclusively for the purpose of addressing you in an advertising manner by way of the newsletter. You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending a corresponding message to the controller named at the beginning. After unsubscribing, your e-mail address will be deleted from our newsletter distribution list immediately, unless you have expressly consented to further use of your data or we reserve the right to use your data in a way that goes beyond this and is permitted by law and about which we inform you in this declaration.

6. Use of payment service providers (payment services)

6.1. Mollie

6.1.1. If you choose a payment method from the payment service provider Mollie, the payment will be processed via the payment service provider Mollie B.V., Keizersgracht 313, 1016 EE Amsterdam, Netherlands, to whom we will pass on the information you provided during the ordering process together with information about your order (name, address, IBAN, BIC, invoice amount, currency and transaction number) in accordance with Art. 6 (1) point (b) GDPR. Your data will only be passed on for the purpose of processing payment with the payment service provider Mollie and only insofar as it is necessary for this purpose.

6.2. Paypal

6.2.1. When paying via PayPal, credit card via PayPal, direct debit via PayPal or — if offered — "purchase on account" or "payment by instalments" via PayPal, we pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") as part of the payment processing. The transfer takes place in accordance with Art. 6(1) point (b) GDPR and only insofar as this is necessary for the payment processing.

6.2.2. PayPal reserves the right to carry out a creditworthiness check for the payment methods credit card via PayPal, direct debit via PayPal or — if offered — "purchase on account" or "payment by instalments" via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6(1) point (f) GDPR on the basis of PayPal's legitimate interest in determining your solvency. PayPal uses the result of the creditworthiness check in terms of the statistical probability of non-payment for the purpose of deciding on the provision of the respective payment method. The creditworthiness information may contain probability values (so-called score values). Insofar as score values are included in the result of the creditworthiness report, they have their basis in a scientifically recognised mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data. For further information on data protection law, including information on the credit agencies used, please see PayPal's data protection declaration: https://www.paypal.com/webapps/mpp/ua/privacy-full

6.2.3. You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for the contractual processing of payments.

7. Use of YouTube videos

7.1. This website uses the YouTube embedding function to display and play videos from the provider "YouTube", which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

7.2. The privacy-enhanced mode is used here, which, according to the provider, only triggers the storage of user information when the video/s is/are played. If the playback of embedded YouTube videos is started, the provider "YouTube" uses cookies to collect information about user behaviour. According to information from "YouTube", these cookies are used, among other things, to collect video statistics, to improve user-friendliness and to prevent abusive behaviour.

7.3. If you are logged in to Google, your data will be directly assigned to your account when you click on a video. If you do not wish to have your profile associated with YouTube, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them. Such an evaluation is carried out in particular in accordance with Art. 6(1) point (f) GDPR on the basis of Google's legitimate interests in displaying personalised advertising, market research and/or designing its website to meet the needs ofor on the basis of your consent in accordance with Art. 6(1) point (a) GDPR.You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right. The use of YouTube may also result in the transmission of personal data to the servers of Google LLC. in the United States.

7.4. Independently of a playback of the embedded videos, a connection to the Google network is established each time this website is called up, which may trigger further data processing operations without our influence.

7.5. Further information on data protection at "YouTube" can be found in the provider's data protection declaration at: https://policies.google.com/privacy?hl=en-GB

7.6. Insofar as legally required, we have obtained your consent for the processing of your data as described above in accordance with Art. 6(1) point (a) GDPR. You can revoke your consent at any time with effect for the future. To exercise your revocation, deactivate this service in the "Cookie Consent Tool" provided on the website.

8. Use of Google Ads Conversion Tracking

8.1. This website uses the online advertising programme "Google Ads" and, within the framework of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use Google Ads to draw attention to our attractive offers on external websites with the help of advertising media (so-called Google AdWords). We can determine how successful the individual advertising measures are in relation to the data of the advertising campaigns. In this way, we pursue the aim of showing you advertising that is of interest to you, making our website more interesting for you and achieving a fair calculation of the advertising costs incurred.

8.2. The conversion tracking cookie is set when a user clicks on an ad placed by Google. Cookies are small text files that are stored on your terminal device. These cookies usually lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognise that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies can therefore not be tracked via the websites of Google Ads customers. The information obtained using the conversion cookie is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. Clients learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. If you do not wish to participate in the tracking, you can block this kind of use by removing the Google conversion tracking cookie via your internet browser under the keyword "User settings". You will then not be included in the conversion tracking statistics. We use Google Ads on the basis of our legitimate interest in targeted advertising pursuant to Art. 6 (1) point (f) GDPR. The use of Google Ads may also result in the transmission of personal data to the servers of Google LLC. in the United States.

8.3. You can obtain more information about Google's privacy policy at the following Internet address: https://policies.google.com/privacy?hl=en-GB

8.4. You can permanently object to the setting of cookies by Google Ads conversion tracking by downloading and installing the Google browser plug-in available at the following link: https://support.google.com/My-Ad-Center-Help/answer/12155656?sjid=5828732683037380440-EU

8.5. Please note that certain functions of this website may not be available or may be restricted if you have deactivated the use of cookies.

8.6. Insofar as legally required, we have obtained your consent for the processing of your data as described above in accordance with Art. 6(1) point (a) GDPR. You can revoke your consent at any time with effect for the future. To exercise your revocation, deactivate this service in the "Cookie Consent Tool" provided on the website or alternatively follow the option described above to make an objection.

9. Google (Universal) Analytics with Google Signals

9.1. This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google (Universal) Analytics uses "cookies", which are text files placed on your terminal device, to help the website analyse how users use the site. The information generated by the cookie about your use of the website (including your shortened IP address) will be transmitted to and stored by Google on servers in the United States.

9.2. This website uses Google (Universal) Analytics exclusively with the extension "_anonymizeIp()", which ensures anonymisation of the IP address by shortening it and excludes direct personal reference. The extension means that your IP address is shortened beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google LLC. server in the United States and shortened there.

9.3. Google will use this information on our behalf for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage. In this context, the IP address transmitted by your browser as part of Google (Universal) Analytics will not be merged with other Google data.

9.4. Google Analytics also enables the creation of statistics with statements about the age, gender and interests of site visitors on the basis of an evaluation of interest-based advertising and with the inclusion of third-party information via a special function, the so-called "Demographics and Interests". This allows the definition and differentiation of user groups of the website for the purpose of targeting marketing measures. However, data records collected via "Demographics and Interests" cannot be assigned to a specific person.

9.5. All of the processing described above, in particular the setting of Google Analytics cookies for the reading of information on the terminal device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6(1) point (a) GDPR. Without this consent, Google Analytics will not be used during your visit to the website.

9.6. You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "Cookie Consent Tool" provided on the website. We have concluded an order processing agreement with Google for the use of Google Analytics, which obliges Google to protect the data of our site visitors and not to pass it on to third parties. For the transfer of data from the EU to the United States, Google refers to the so-called Standard Contractual Clauses of the European Commission, which are intended to ensure compliance with the European level of data protection in the US.

9.7. Further information on Google (Universal) Analytics can be found here: https://policies.google.com/privacy?hl=en-GB

9.8. This website also uses the Google Signals service as an extension of Google Analytics. With Google Signals, we can have Google create cross-device reports (so-called "Cross-Device Tracking"). If you have activated "personalized ads” in your Google account settings and have linked your internet-enabled devices to your Google account, Google can analyse user behaviour across devices and create database models based on this, provided you have given your consent to the use of Google Analytics in accordance with Art. 6 (1) point (a) GDPR (see above). The logins and device types of all page visitors who were logged into a Google account and performed a conversion are taken into account. The data shows, among other things, on which device you first clicked on an ad and on which device the associated conversion took place. We do not receive any personal data from Google in this regard, but only statistics compiled on the basis of Google Signals. You have the option of deactivating the "personalized ads” function in the settings of your Google account and thus switching off the cross-device analysis. To do this, follow the instructions on this page:
https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=en

9.9. You can read more about Google Signals here: https://support.google.com/analytics/answer/7532985?hl=en#zippy=%2Cin-this-article

10. Google Ads Remarketing

10.1. Our website uses the functions of Google Ads Remarketing, with which we advertise for this website in Google search results, as well as on third-party websites. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). For this purpose, Google sets a cookie in the browser of your terminal device, which automatically enables interest-based advertising by means of a pseudonymous cookie ID and on the basis of the pages you visit. The processing is based on our legitimate interest in the optimal marketing of our website in accordance with Art. 6(1) point (f) GDPR or on the basis of your consent in accordance with Art. 6(1) point (a) GDPR.

10.2. Additional data processing will only take place if you have consented to Google linking your internet and app browsing history to your Google Account and using information from your Google Account to personalise the ads you view on the web. In this case, if you are logged into Google while visiting our website, Google will use your data together with Google Analytics data to create and define target group lists for cross-device remarketing. For this purpose, your personal data will be temporarily linked by Google with Google Analytics data in order to form target groups. The use of Google Ads Remarketing may also involve the transmission of personal data to the servers of Google LLC. in the United States.

10.3. You can permanently object to the setting of cookies by Google Ads Remarketing by downloading and installing the Google browser plug-in available at the following link: https://adssettings.google.com/anonymous?hl=en&ref=mac-hub

10.4. Further information and the data protection provisions regarding advertising and Google can be viewed here: https://policies.google.com/technologies/ads?hl=en-GB

10.5. Insofar as legally required, we have obtained your consent for the processing of your data as described above in accordance with Art. 6(1) point (a) GDPR. You can revoke your consent at any time with effect for the future. To exercise your revocation, deactivate this service in the "Cookie Consent Tool" provided on the website or alternatively follow the option described above to make an objection.

11. Rights of the data subject

11.1.Right to information

11.1.1. You have the right to request confirmation as to whether personal data are being processed; if this is the case, you have a right of access to these personal data. The following information is collected:

· the purposes of processing;

· the categories of personal data;

· the recipients or categories of recipients;

· if possible, the planned period for which the personal data will be stored or, if this is not possible, the criteria used to determine that period;

· the existence of a right to rectification or erasure of the personal data concerned or to restriction of processing by the controller or a right to object to such processing;

· the existence of a right to lodge a complaint with a supervisory authority;

· all available information on the origin of the data;

· the existence of automated decision-making, including profiling.

11.2.Right of rectification

11.2.1. You have the right to request the controller to correct inaccurate personal data and to complete incomplete personal data.

11.3.Right to erasure

11.3.1. You have the right to obtain from the controller the erasure of personal data without undue delay if one of the following grounds applies:

· the personal data are no longer necessary in relation to the purposes for which they were collected;

· you withdraw consent on which the processing was based and there is no other legal ground for the processing;

· you object to the processing (Art 21(1) GDPR) and there are no legitimate grounds for the processing or you object to the processing pursuant to Art 21(2) GDPR;

· the personal data have been unlawfully processed;

· the personal data have to be erased for compliance with a legal obligation;

· the personal data have been collected in relation to the offer of information society services referred to in Art 8(1).

11.3.2. The right to erasure shall not apply to the extent that processing is necessary:

· for exercising the right of freedom of expression and information;

· for compliance with a legal obligation;

· for the performance of a task carried out in the public interest;

· for reasons of public interest in the area of public health;

· for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes

· for the assertion, exercise or defence of legal claims.

11.4.Right to restriction of processing

11.4.1. You have the right to obtain from the controller restriction of processing where one of the following applies:

· the accuracy of the personal data is contested for a period enabling the controller to verify the accuracy of the personal data;

· the processing is unlawful and you oppose the erasure of personal data and instead request the restriction of their use;

· the controller no longer needs the personal data, but you need it for the assertion, exercise or defence of legal claims;

· you have objected to the processing pursuant to Art 21(1) pending the verification whether the legitimate grounds of the controller prevail.

11.4.2. Where processing has been restricted, such personal data may — apart from being stored — only be processed with your consent or for the assertion, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of substantial public interest.

11.5.Right to data portability

11.5.1. You have the right to receive the personal data you have provided to a controller in a structured, commonly used and machine-readable format and you have the right to transmit this data to another controller without hindrance from the controller to which the personal data has been provided, where the processing is based on consent or on a contract and the processing is carried out by automated means.

11.5.2. In exercising the right to data portability, you have the right to have the personal data transmitted directly from one controller to another, where this is technically feasible.

11.6.Right to object

11.6.1. You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data which is based on point (e) or (f) of Article 6(1) GDPR, including profiling based on these provisions. The controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of you or for the assertion, exercise or defence of legal claims.

11.6.2. Where personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of personal data for such marketing; this also applies to profiling to the extent that it is related to such direct marketing.

11.7.Right to withdraw consent

11.7.1. You have the right to withdraw consent based on Art 6(1) point (a) or Art 9(2) point (a) at any time without affecting the lawfulness of the processing until revocation.

11.8.Right to lodge a complaint

11.8.1. You have the right to lodge a complaint with your local data protection authority if you believe that the processing violates applicable data protection law. For example, the following data protection authorities are competent in the following countries:

12. Duration of the storage of personal data

12.1. The duration of the storage of personal data is determined on the basis of the respective legal basis, the purpose of processing and — if relevant — additionally on the basis of the respective statutory retention period (e.g. retention periods under commercial and tax law).

12.2. When processing personal data based on explicit consent pursuant to Art. 6(1) point (a) GDPR, this data is stored until the data subject revokes his/her consent.

12.3. If there are statutory retention periods for data that is processed within the scope of legal or quasi-legal obligations based on Art. 6(1) point (b) GDPR, this data will be routinely deleted after expiry of the retention periods, insofar as it is no longer required for the fulfilment of the contract or the initiation of the contract and/or there is no justified interest on our part in the continued storage. Important storage periods can be found below:

12.4. When processing personal data on the basis of Art. 6(1) point (f) GDPR, this data is stored until the data subject exercises his or her right to object pursuant to Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.

12.5. When processing personal data for the purpose of direct marketing on the basis of Art. 6(1) point (f) GDPR, this data is stored until the data subject exercises his or her right to object pursuant to Art. 21(2) GDPR.

12.6. Unless otherwise indicated in the other information in this statement on specific processing situations, stored personal data are otherwise deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.

13. Other recipients of personal data

13.1. Other recipients also assist us in complying with statutory or legal obligations, in initiating and fulfilling contracts, in providing services that require your consent or in carrying out processing that is in our legitimate interest, such as marketing measures in particular. We transfer or partially disclose the data in particular to the following recipients (processors or controllers):

14. Cookies

14.1. In order to make visiting our website more attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your terminal device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your terminal device and enable your browser to be recognised the next time you visit (so-called persistent cookies). If cookies are set, they collect and process certain user information such as browser and location data as well as IP address values to an individual extent. Persistent cookies are automatically deleted after a specified period of time, which may differ depending on the cookie. The duration of the respective cookie storage can be found in the overview of the cookie settings of your web browser. For further details on the cookies used, please refer to our separate cookie policy.

14.2. In some cases, the cookies serve to simplify the ordering process by storing settings (e.g. remembering the contents of a virtual shopping basket for a later visit to the website). If personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 (1) point (b) GDPR either for the performance of the contract, in accordance with Art. 6(1) point (a) GDPR in the case of consent given or in accordance with Art. 6(1) point (f) GDPR to protect our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the page visit.

14.3. Please note that you can set your browser in such a way that you are informed about the setting of cookies and can decide individually whether to accept them or can exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. Please note that if you do not accept cookies, the functionality of our website may be limited.

You can view the list of cookies used and their explanations here.

Privacy policy: Version from May 22nd, 2023