GENERAL INFORMATION
The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you. For detailed information on the subject of data protection, please refer to our privacy policy.
DATA PROTECTION
We take the protection of your personal data very seriously and treat your personal data confidentially and in accordance with the statutory data protection regulations as well as this privacy policy.
When you use this website, various personal data is collected. Personal data is data that can be used to personally identify you. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.
NOTE ON THE RESPONSIBLE BODY
The body responsible for data processing on this website is:
DirectOut GmbH
Jan Ehrlich
Hainichener Str. 66a
09648 Mittweida
+49-3727-5650-00
info@directout.eu
The responsible body is the natural or legal person who, alone or jointly with others, decides on the purposes and means of the processing of personal data (e.g. names, e-mail addresses, or similar).
DATA PROTECTION OFFICER
The data protection officer for our company is:
Lars Nöcker
MGID Mitteldeutsche Gesellschaft für
Informationssicherheit und Datenschutz mbH
Simildenstraße 20
04277 Leipzig
gdpr@directout.eu
+49-341-962735-50
STORAGE PERIOD
Unless a more specific storage period is stated within this privacy policy, your personal data will remain with us until the purpose for the data processing no longer applies. If you assert a legitimate request for deletion or revoke a consent to data processing, your data will be deleted, unless we have other legally permissible grounds for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, deletion will take place once these grounds cease to apply.
NOTE ON THE TRANSFER OF DATA TO THE USA AND OTHER THIRD COUNTRIES
Among other things, we use tools from companies based in the USA or other third countries that are not regarded as safe under data protection law. When these tools are active, your personal data may be transferred to and processed in these third countries. We point out that a level of data protection comparable to that of the EU cannot necessarily be guaranteed in these countries. For example, US companies are obliged to disclose personal data to security authorities without you, as the data subject, being able to take legal action against this. It cannot therefore be ruled out that US authorities (e.g. intelligence services) process, evaluate and permanently store your data located on US servers for surveillance purposes. We have no influence over these processing activities.
SSL AND TLS ENCRYPTION
For security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the browser's address line changes from „http://“ to „https://“ and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
We point out that data transmission over the internet (e.g. when communicating by e-mail) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.
YOUR RIGHTS
REVOCATION OF YOUR CONSENT TO DATA PROCESSING
Many data processing operations are only possible with your express consent. You may revoke a consent you have already given at any time. The lawfulness of the data processing carried out up to the point of revocation remains unaffected by the revocation.
RIGHT TO OBJECT TO DATA COLLECTION IN SPECIAL CASES AS WELL AS TO DIRECT MARKETING (ART. 21 GDPR)
IF THE DATA PROCESSING IS CARRIED OUT ON THE BASIS OF ART. 6 PARA. 1 LIT. E OR F GDPR, YOU HAVE THE RIGHT AT ANY TIME, FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA CONCERNED, UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21 (1) GDPR).
IF YOUR PERSONAL DATA IS PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING; THIS ALSO APPLIES TO PROFILING, TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR THE PURPOSE OF DIRECT MARKETING (OBJECTION PURSUANT TO ART. 21 (2) GDPR).
RIGHT TO LODGE A COMPLAINT WITH THE COMPETENT SUPERVISORY AUTHORITY
In the event of breaches of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work, or place of the alleged infringement. The right to lodge a complaint exists without prejudice to any other administrative or judicial remedy.
RIGHT TO DATA PORTABILITY
You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a commonly used, machine-readable format. Where you request the direct transfer of the data to another controller, this will only be done to the extent that it is technically feasible.
INFORMATION, DELETION AND RECTIFICATION
Within the scope of the applicable statutory provisions, you have the right, at any time, to free-of-charge information about your stored personal data, its origin and recipients, and the purpose of the data processing, and, where applicable, a right to rectification or deletion of this data. You may contact us at any time regarding this and any further questions on the subject of personal data.
RIGHT TO RESTRICTION OF PROCESSING
You have the right to request the restriction of the processing of your personal data. You may contact us at any time for this purpose. The right to restriction of processing exists in the following cases:
If you dispute the accuracy of your personal data stored by us, we generally need time to verify this. For the duration of this review, you have the right to request the restriction of the processing of your personal data.
If the processing of your personal data was/is unlawful, you may request the restriction of the data processing instead of deletion.
If we no longer need your personal data, but you need it to assert, exercise or defend legal claims, you have the right to request the restriction of the processing of your personal data instead of deletion.
If you have lodged an objection pursuant to Art. 21 (1) GDPR, a balancing of your interests and ours must be carried out. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.
If you have restricted the processing of your personal data, such data may – apart from being stored – only be processed with your consent or for the establishment, exercise or defence of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or of a Member State.
DATA COLLECTION ON THIS WEBSITE
SOCIAL MEDIA PRESENCES
We maintain a publicly accessible company page (fan page) on the Facebook, Instagram and LinkedIn platforms in order to communicate with users and inform them about our services.
The party responsible for operating this Facebook and Instagram page within the meaning of the GDPR is:
Meta Platforms Ireland Limited
4 Grand Canal Square,
Grand Canal Harbour,
Dublin 2, Ireland
The party responsible for operating LinkedIn within the meaning of the GDPR is:
LinkedIn Ireland Unlimited Company,
Wilton Plaza, Wilton Pl,
Dublin, 2, Ireland
a) Joint Controllership
Data processing on Facebook, Instagram and LinkedIn is carried out on the basis of joint controllership pursuant to Art. 26 GDPR. The agreement on joint controllership with Meta and LinkedIn can be found here: https://www.facebook.com/legal/terms/page_controller_addendum
https://www.linkedin.com/legal/l/page-joint-controller-addendum
Meta and LinkedIn may also process your personal data in third countries, in particular in the USA. For the transfer of personal data to the United States, both rely on the European Commission's adequacy decision of 10 July 2023, issued under the EU-U.S. Data Privacy Framework (DPF).
b) Purposes and Legal Basis of Processing
We operate the social media presences in order to engage with interested parties and customers and to inform them about our services and offers (Art. 6 para. 1 lit. f GDPR – legitimate interest).
Depending on your interaction (e.g. liking, commenting, sending messages), personal data may be processed. Processing by us is carried out exclusively for the purpose of communicating with you and, where applicable, handling enquiries.
c) Data Processing
- Your IP address
- Browser information
- Device information
- Your behaviour on the page (e.g. likes, comments, shared content)
This data is used by Meta and LinkedIn, among other things, to create page statistics (Page Insights). We do not have full control over the specific data processing carried out by Meta and LinkedIn.
Further information on data processing by Facebook, Instagram and LinkedIn can be found here: https://www.facebook.com/privacy/policy
www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy
COOKIES
Our website uses so-called “cookies”. Cookies are small text files and do not cause any damage to your device. They are stored on your device either temporarily for the duration of a session (session cookies) or permanently (persistent cookies). Session cookies are automatically deleted once your visit ends. Persistent cookies remain stored on your device until you delete them yourself or they are automatically deleted by your web browser.
In some cases, cookies from third-party companies may also be stored on your device when you visit our site (third-party cookies). These enable us or you to make use of certain services provided by the third-party company (e.g. cookies for processing payment services).
Cookies serve various functions. Numerous cookies are technically necessary, as certain website functions would not work without them (e.g. the shopping basket function or the display of videos). Other cookies are used to evaluate user behaviour or to display advertising.
Cookies that are required to carry out the electronic communication process, to provide certain functions you have requested (e.g. for the shopping basket function), or to optimise the website (necessary cookies) are stored on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the storage of necessary cookies for the technically error-free and optimised provision of its services. The storage of technically unnecessary cookies takes place exclusively on the basis of consent (Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG); this consent may be revoked at any time.
You can set your browser so that you are informed when cookies are set and allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when the browser is closed. If cookies are deactivated, the functionality of this website may be limited.
To the extent that cookies from third-party companies or for analysis purposes are used, we will inform you separately about this within this privacy policy and, where applicable, request your consent.
CONSENT MANAGEMENT
We offer you the option of deciding in detail for yourself in which cases you wish to consent to tracking via cookies and other technologies – for the purpose of displaying content relevant to you and offers tailored to you.
The processing of your data for the purposes named here is based in part on legitimate interest; in some cases, however, we also require your consent. For this purpose, we use the Consent Management Platform (CMP) of iubenda s.r.l, Via San Raffaele, 1 – 20121 Milan (Italy) as a processor.
The CMP enables you to give us data-protection-compliant, self-determined consent to the processing of your data and to revoke it at any time. You may also object to data processing that is based on our legitimate interest. Further information on data protection and iubenda's CMP can be found here:
https://www.iubenda.com/privacy-policy/252372
CONSENT SERVER LOG FILES
The provider of these pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
- Browser type and browser version
- Operating system used
- Referrer URL
- Host name of the accessing computer
- Time of the server request, IP address
This data is not merged with other data sources.
The collection of this data is carried out on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of its website – the server log files must be recorded for this purpose.
CONTACT FORM
If you send us enquiries via the contact form, the details you provide in the enquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. We do not pass on this data without your consent.
The processing of this data is carried out on the basis of Art. 6 para. 1 lit. b GDPR, provided that your enquiry is related to the performance of a contract or is necessary for carrying out pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of enquiries addressed to us (Art. 6 para. 1 lit. f GDPR).
The data you enter in the contact form will remain with us until you request us to delete it, or until the purpose for storing the data no longer applies (e.g. after your enquiry has been fully processed). Mandatory statutory provisions – in particular retention periods – remain unaffected.
INQUIRY BY E-MAIL, TELEPHONE OR FAX
If you contact us by e-mail, telephone or fax, your enquiry, including all resulting personal data (name, enquiry), will be stored and processed by us for the purpose of handling your request. We do not pass on this data without your consent.
The processing of this data is carried out on the basis of Art. 6 para. 1 lit. b GDPR, provided that your enquiry is related to the performance of a contract or is necessary for carrying out pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of enquiries addressed to us (Art. 6 para. 1 lit. f GDPR)
The data you send to us via such enquiries will remain with us until you request us to delete it, or until the purpose for storing the data no longer applies (e.g. after your enquiry has been fully processed). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.
NEWSLETTER
If you subscribe to our newsletter, we collect your personal data, in particular your name and e-mail address, in order to be able to send you regular information, offers and news by e-mail.
The processing of your data is carried out exclusively on the basis of your voluntary consent pursuant to Art. 6 para. 1 lit. a GDPR. You may revoke your consent at any time, for example via the unsubscribe link in the newsletter or by notifying us.
Your data is used exclusively for the purpose of sending the newsletter and is not passed on to third parties, unless we are legally obliged to do so.
Your data is stored for as long as you subscribe to the newsletter. After unsubscribing or revoking your consent, your data will be deleted, provided there are no statutory retention obligations.
THIRD-PARTY TOOLS
GOOGLE TAG MANAGER
We use Google Tag Manager.
The European contact is:
Google Ireland Limited
Gordon House, Barrow Street
Dublin 4
Ireland
Tel: +353 1 543 1000
Fax: +353 1 686 5660
E-mail: support-deutschland@google.com
Google Tag Manager is a tool that helps us integrate tracking or statistics tools and other technologies on our website. Google Tag Manager itself does not create user profiles, does not store cookies, and does not carry out any independent analyses. It merely serves to manage and deliver the tools integrated through it. However, Google Tag Manager does collect your IP address, which may also be transmitted to Google's parent company in the United States.
The USA is a country with an adequate level of data protection under the adequacy decision of 2023. Google has submitted to the Data Privacy Framework.
The use of Google Tag Manager is carried out on the basis of Art. 6 para. 1 lit. a GDPR.
GOOGLE ANALYTICS
We use the tracking tool Google Analytics on our website. This is used to examine user behaviour on our website. The purpose is to improve the structure and design of our website offering.
The European contact is:
Google Ireland Limited
Gordon House, Barrow Street
Dublin 4
Ireland
Tel: +353 1 543 1000
Fax: +353 1 686 5660
E-mail: support-deutschland@google.com
By means of cookies stored on your device, Google processes the information generated, in particular your IP address, browser information, the previously visited website, and the date and time of the server request. This data is then transmitted to and stored on a server in the USA.
The USA is a country with an adequate level of data protection under the Commission's adequacy decision of 2023 (EU-US Data Privacy Framework).
With Google Analytics 4, IP anonymisation is activated by default. Due to IP anonymisation, your IP address is shortened by Google within Member States of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. According to Google, the IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google.
The legal basis for the processing is your consent pursuant to Art. 6 para. 1 lit. a GDPR, which we obtain in advance via the consent banner. Consent is voluntary and you may revoke it at any time by sending us an e-mail or by calling up the consent banner again.
No disclosure to third parties takes place.
Further information on data protection at Google Analytics can be found at:
https://policies.google.com/privacy?hl=de
Order Processing
We have concluded an order-processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
GOOGLE ADS
We use Google Ads on our site. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Ads is an advertising programme from Google that allows us to place more individually tailored advertising for the users of our website. In doing so, a cookie is set on the website that stores the IP address and the interactions of visitors. This data is then transmitted to servers in the USA. Google is certified under the EU-U.S. Data Privacy Framework, which means that pursuant to Art. 45 GDPR an adequacy decision of the European Commission exists. Further information on this can be found at https://www.dataprivacyframework.gov/.
The legal basis for the processing is your consent pursuant to Art. 6 para. 1 lit. a GDPR, § 25 TDDDG, which we obtain in advance via the consent banner. Consent is voluntary and you may revoke it at any time by sending us an e-mail or by calling up the consent banner again.
The data is retained by us for 14 months and then subsequently deleted again.
No disclosure to third parties takes place.
Further information on data protection at Google Ads can be found at:
https://policies.google.com/privacy?hl=de
FONT AWESOME
We use Font Awesome on this website for the uniform display of fonts and icons. The provider is Fonticons, Inc., 6 Symbol Area, Casselberry, FL 32707, USA.
When a page is accessed, your browser loads the required web fonts into its browser cache in order to display text and icons correctly. For this purpose, the browser you use must establish a connection to the servers of Fonticons, Inc.
The USA is a country with an adequate level of data protection under the Commission's adequacy decision of 2023 (EU-US Data Privacy Framework). Fonticons, Inc. is DPF certified.
The legal basis is your consent pursuant to Art. 6 para. 1 lit. a GDPR, which we obtain in advance via the consent banner.
More on data protection at Font Awesome at: https://fontawesome.com/privacy
YOUTUBE
For embedding videos, we use the provider YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA, represented by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Normally, your IP address is already sent to YouTube and cookies are installed on your computer as soon as a page with embedded videos is accessed. However, we use a two-click solution, through which Google only learns your IP address and your visit to our website once you have clicked the button. If you activate the plugin while simultaneously logged into YouTube, Google can associate your usage with your user account. The data collected by Google may be transmitted by Google to countries outside the EU, in particular the USA. We have no knowledge of, and no influence over, any subsequent collection and use of your data by Google. Further information can be found in Google's privacy policy at https://www.google.de/intl/de/policies/privacy/.
MICROSOFT ADVERTISING
For advertising purposes in Bing, Yahoo and MSN search results as well as on third-party websites, the so-called Microsoft Advertising Remarketing Cookie is set when you visit our website; through the collection and processing of data (IP address, time of visit, device and browser information, and information about your use of our website), and by means of a pseudonymous cookie ID, and based on the pages you have visited, this enables interest-based advertising.
For website analysis and event tracking, we measure your subsequent usage behaviour via Microsoft Advertising Universal Event Tracking (UET) if you arrived at our website via a Microsoft Advertising advertisement, from which usage profiles are created using pseudonyms. For this purpose, cookies may be used and data (IP address, time of visit, device and browser information, as well as information about your use of our website based on events specified by us, such as visiting a website or subscribing to the newsletter) may be collected, from which usage profiles are created using pseudonyms. Insofar as your internet-enabled devices are linked to your Microsoft account and you have not deactivated the “interest-based advertising” setting in your Microsoft account, Microsoft can create reports on usage behaviour (in particular cross-device user numbers), even if you switch devices, so-called “cross-device tracking”. We do not carry out any processing of personal data in this regard; we merely receive statistics created on the basis of Microsoft UET.
Here too, the legal basis is your consent pursuant to Art. 6 para. 1 lit. a GDPR.
META PIXEL
We also use the Meta Pixel, a service provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.
The Meta Pixel enables us to measure the effectiveness of our advertising campaigns and to track whether users interact with our advertisements before carrying out certain actions on our website (e.g. visiting certain pages or completing defined conversions). The information collected in this way helps us to analyse and improve our marketing measures.
For this purpose, Meta may process information including your IP address, browser and device information, pages visited, the referrer URL, interactions with our website, as well as information stored using cookies and similar technologies (including the _fbp cookie).
We currently use Automatic Advanced Matching, a Meta feature through which certain information provided by the browser or submitted via forms on our website (where applicable) may be automatically processed in order to improve the accuracy of conversion measurement. Where applicable, this information is transmitted using Meta's hashing procedures before further processing.
The use of this service is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. Your consent may be revoked at any time.
Data may also be transmitted to Meta's servers in third countries, including the United States. Such data transfers are carried out in accordance with the applicable data protection requirements.
Further information on how Meta processes personal data can be found in Meta's privacy policy:
https://www.facebook.com/privacy/policy/
VIMEO
This website uses plugins from the video portal Vimeo. The provider is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.
When you visit one of our pages equipped with a Vimeo video, a connection to Vimeo's servers is established. In doing so, the Vimeo server is informed which of our pages you have visited. In addition, Vimeo obtains your IP address. This applies even if you are not logged into Vimeo or do not have a Vimeo account. The information collected by Vimeo is transmitted to Vimeo's server in the USA.
If you are logged into your Vimeo account, you enable Vimeo to associate your browsing behaviour directly with your personal profile. You can prevent this by logging out of your Vimeo account.
To recognise website visitors, Vimeo uses cookies or comparable recognition technologies (e.g. device fingerprinting).
Processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG, insofar as the consent covers the storage of cookies or access to information on the user's device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent may be revoked at any time.
The transfer of data to the USA is based on the adequacy decision of 2023, as Vimeo is certified under the Data Privacy Framework.
Details can be found here:
vimeo.com/privacy.
Further information on the handling of user data can be found in Vimeo's privacy policy at:
vimeo.com/privacy.
GOOGLE WEB FONTS
This website uses so-called web fonts provided by Google for the uniform display of fonts. When a page is accessed, your browser loads the required web fonts into its browser cache in order to display text and fonts correctly.
For this purpose, the browser you use must establish a connection to Google's servers. As a result, Google becomes aware that this website has been accessed via your IP address. The use of Google Web Fonts is carried out on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the uniform presentation of the typeface on its website. Where corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG, insofar as the consent covers the storage of cookies or access to information on the user's device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent may be revoked at any time.
If your browser does not support web fonts, a standard font will be used by your computer.
Further information on Google Web Fonts can be found at
developers.google.com/fonts/faq
and in Google's privacy policy:
policies.google.com/privacy.
GOOGLE RECAPTCHA
We use „Google reCAPTCHA“ (hereinafter „reCAPTCHA“) on this website. The provider is Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Ireland.
The purpose of reCAPTCHA is to check whether data entry on this website (e.g. in a contact form) is carried out by a human or by an automated program. For this purpose, reCAPTCHA analyses the behaviour of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. For the purposes of the analysis, reCAPTCHA evaluates various pieces of information (e.g. IP address, the length of time the website visitor spends on the website, or mouse movements made by the user). The data collected during the analysis is forwarded to Google.
The reCAPTCHA analyses run entirely in the background. Website visitors are not informed that an analysis is taking place.
Processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG, insofar as the consent covers the storage of cookies or access to information on the user's device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent may be revoked at any time.
Further information on Google reCAPTCHA can be found in Google's privacy policy and Google's terms of use at the following links:
policies.google.com/privacy
and
policies.google.com/terms.
UPDATE
We regularly review this privacy policy and adapt it as necessary to reflect changes in our processes, legal requirements or technical developments. Please therefore check regularly for the current version of our privacy policy.
As of September 2026
