d&b solutions data privacy protection policy

The protection and security of personal data is an important concern of d&b. Therefore, d&b conducts its activities in accordance with the applicable laws for the protection of personal data and data security. This privacy policy informs you what information d&b collects, how d&b uses and safeguards it, and to whom d&b may share it.

With this information on data protection we would therefore like to inform you when we store which data and for what purpose we use it - naturally in compliance with the applicable data protection regulations.

Should you have any further questions regarding the handling of your personal data, please do not hesitate to contact our data protection officer, whose contact details you will find below.

The constant technological development, changes in our services or the legal situation as well as other reasons may require adjustments to our data protection information. We therefore reserve the right to change this data protection declaration at any time and ask you to inform yourself regularly about the current status.

Basic information

Unless otherwise stated in the following sections, no personal data is collected, processed or used when using our websites.

When you access our webpages, our web servers automatically collect general information. This includes the type of web browser, the operating system used, the domain name of the Internet service provider, the IP address of the computer used, the website from which you visit us, the pages you visit on our site and the date and duration of your visit.

This data cannot be used by us to identify the individual user. We only evaluate the information statistically and use it exclusively to improve the attractiveness, contents and functionalities of our websites.

Definition of personal data

The term personal data is defined in the German Federal Data Protection Act. According to this, these are individual details about personal or factual circumstances of a specific or identifiable natural person. This includes, for example, your real name, your address, your telephone number or your date of birth.

In the basic EU data protection regulation (DSGVO), personal data are defined as follows: 

All information relating to an identified or identifiable natural person (hereinafter "data subject"); an identifiable natural person is one who can be identified directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Legal basis for the collection of personal data

Insofar as we obtain your consent for the processing of personal data, Art. 6 para. 1 lit. a GDPR serves as the legal basis for the processing of your personal data.

When processing your personal data to fulfil a contract between you and d&b solutions, Art. 6 Para. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.

Insofar as the processing of personal data is required to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis.

If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for processing.

Data erasure and storage time

The personal data of the person concerned will be deleted or blocked as soon as the purpose of storage ceases to apply. Furthermore, data may be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the person responsible is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.

Collection and processing of personal data

Personal data is only collected if you provide it voluntarily, for example to carry out an order, a survey, a competition or a registration for personalised services. There you will be informed about the intended purpose of processing and, if necessary, asked for your consent to storage.

The personal data collected within the framework of our websites will only be used without your consent for order processing or processing your enquiries and, if necessary, passed on to the responsible company. Only with your consent will your data be used in a centrally managed customer and prospective customer database managed under the responsibility of d&b solutions, and your data will be merged at d&b solutions. The use of this data is restricted to purposes of advertising and market and opinion research. You can revoke your consent at any time with effect for the future.

Your data is encrypted before transmission and processing in order to protect it from access by unauthorised persons. Please note that unencrypted e-mails are not transmitted with access protection.

Your data will not be sold, rented or made available to third parties in any other way than described here. Personal data will only be transferred to state institutions and authorities within the framework of mandatory national legislation. Our employees, agencies and dealers are bound by us to the strictest confidentiality.

Registration for SustainSymphony

To register for the SustainSymphony service, it is necessary to create a user account. When the user account is created, the following personal data is collected and processed:

- e-mail address

- authentication data (password)

- business information

The data is collected and processed on our behalf by

akaryon GmbH

Laurenzgasse 12, A-1050 Vienna, Austria

The purpose is creation of an user account for the SustainSymphony service. The legal basis for this is Art. 6 (1b) GDPR. If the user gives consent, the email address will be used for advertising. The legal basis in this case is Art. 6 (1a) GDPR. Processing in third countries does not take place.

Additional data processing takes place during the use of the System Symphony service. This is governed by the SustainSymphony service privacy policy, which must be accepted upon registration.

Data transmission to other d&b companies

We will not transfer your data to third parties outside the d&b Group, unless we are legally obliged to do so, or the transfer of data is necessary for the performance of the contractual relationship, or you have given your express prior consent to the transfer of your data. External service providers and partner companies only receive your data if this is necessary to process their request. In these cases, however, the scope of the transmitted data is limited to the required minimum. As far as our service providers come into contact with your personal data, we ensure that they comply with the regulations of the data protection laws in the same way. Please also note the respective data protection information of the providers. The respective service provider is responsible for the contents of external services, whereby we check the services within the scope of reasonability for compliance with legal requirements.

Data transmission to external service providers (processors)

Your data will be passed on to service partners if they work on our behalf and support d&b solutions in the provision of their services.

Processing of your personal data by contracted service providers takes place within the scope of order processing in accordance with Art. 28 GDPR.

The aforementioned service providers only have access to such personal information as is necessary for the performance of their respective activities. These service providers are prohibited from disclosing your personal information or using it for other purposes, in particular for their own advertising purposes.

Where external service providers come into contact with your personal data, we have taken legal, technical and organisational measures and carried out regular checks to ensure that they also comply with the applicable data protection regulations.

Your personal data will not be passed on commercially to other companies.

Website optimization

When collecting personal data using website optimisation tools, we refer to our legitimate interest pursuant to Article 6 para. 1 lit. f GDPR in conjunction with Recital no. 47, according to which direct mail generally constitutes a legitimate interest. Your interests, fundamental rights and freedoms do not outweigh our interest in advertising, as we provide you with comprehensive information about data collection within the framework of our privacy policy and you have the option of opting out (via link or browser settings) at any time. In addition, we only use pseudonymous tracking.

SustainSymphony Registration

Cookie consent

We use the cookie consent technology of Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany ("Usercentrics") to obtain your consent to the storage of cookies and to document this consent. Usercentrics uses a cookie for this purpose in order to be able to assign the consent(s) given to you as well as their revocation.

The following data is transmitted to Usercentrics for this purpose:

• Consent and revocation of consent,
• Consent ID,
• consent number,
• time stamp,
• language,
• Customer settings,
• template version,
• IP address and
• geographical location.

Consents that you have given via the Consent Management Platform can be revoked at any time by moving the slider back in the "Advanced Settings" of the platform, which you can access here. This does not affect the lawfulness of the processing carried out up to the point of withdrawal.

Usercentrics is used to obtain and manage the legally required consents for the use of cookies. The legal basis for this is Art. 6 para. 1 lit. c GDPR and § 25 para. 1 TDDDG.

Further information can be found on the Usercentrics website: https://usercentrics.com/.

Data security

d&b solutions uses technical and organizational security measures to protect your data managed by us against accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security measures are continuously improved in line with technological developments.
 

Rights of the data subjects

If your personal data are processed, you are affected within the meaning of the GDPR and you have the following rights against the controller:
 

• Right to information according to article 15 GDPR
  You can ask us to confirm whether personal data concerning you will be processed by us. Once we have processed your data, you have further rights to information as set out in Article 15 of the GDPR.
   
• Right to correction
  If the information we have collected from you is incorrect or incomplete, you may immediately request us to correct it in accordance with Article 16 of the GDPR.
   
• Right to limitation of processing
  Under the conditions of Article 18 of the GDPR, you may also request that the processing of personal data concerning you be restricted. After the restriction, your data may only be processed with your consent or for the purpose of asserting, exercising or defending rights, or for the protection of the rights of another natural or legal person, or on grounds of an important public interest of the Union or a Member State. We will inform you before the restriction is lifted.
   
• Right to erasure
  If one of the reasons in Article 17 para. 1 GDPR applies, you can request us to delete your personal data immediately, unless there is an exception to the deletion obligation in accordance with Article 17 para. 3 GDPR.
   
• Right to information
  If you have exercised your right to correct, delete or restrict processing against us, we are obliged under Article 19 GDPR to inform all recipients of your personal data of this, unless the notification is impossible or involves disproportionate effort. They also have the right to be informed of the recipients. The person responsible shall have the right to be informed of such recipients.
   
• Right to data portability
  In addition, according to Article 20 GDPR, you have the right to receive personal data concerning you from us in machine-readable format and to transmit the data to another person responsible without obstruction, provided that the requirements of Article 20 para. 1 lit. a GDPR are met, or to obtain that your personal data are transmitted directly by us to another person responsible, provided that this is technically feasible and no freedoms and rights of other persons are impaired thereby. This right shall not apply to the processing of personal data necessary for the performance of a task in the public interest or for the exercise of official authority.
   
• Right of objection
  You have the right to object at any time to d&b solutions GmbH & Co. KG processing your personal data in accordance with Art. 6 para. 1 lit. f GDPR. As soon as you have filed an objection, we will no longer process your personal data, unless there are legitimate reasons for the processing outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
   
• Right to revoke the data protection declaration of consent
  You have the right to revoke your data protection declaration of consent with declaration to d&b solutions GmbH & Co. KG at any time. The revocation of consent shall not affect the legality of the processing carried out on the basis of the consent until revocation.
   
• Right of appeal to the supervisory authority
  They shall at all times, without prejudice to any other administrative or judicial remedy, have the right of appeal to a supervisory authority, in particular in the Member State of your place of residence, of work or of the place of suspected infringement, if you consider that the processing of personal data concerning them is contrary to this Regulation.

Changes to this Privacy Policy

This privacy policy is constantly being adapted in the course of the further development of the Internet or our offer. Changes will be announced on this page in due time. In order to keep up to date with the current status of our data usage regulations, this page should be accessed regularly.

Data protection officer

c/o d&b solutions GmbH & Co. KG
Eugen-Adolff-Straße 134

71522 Backnang
E-Mail: datenschutz@dbaudio.com

Contact details of the Controller

d&b solutions GmbH & Co. KG
Eugen-Adolff-Straße 134
71522 Backnang
Tel: +49-7191-9669-0
Fax: +49-7191-95 00 00
E-mail: info@dbaudio.com

Represented by its sole General Partner

d&b solutions Management GmbH
Eugen-Adolff-Straße 134
71522 Backnang
Tel: +49-7191-9669-0
Fax: +49-7191-95 00 00
E-mail: info@dbaudio.com

Which is represented by its Managing Directors:

Harman, Amnon (CEO)
Nilsson, Jens
Aldinger, Michael

As of April 2024