Who is responsible?
Data processing on this website is carried out by the website operator. The relevant contact details can be found in the section on the controller and in the legal notice.
The following information provides an overview of how personal data is processed when you visit our website and of the rights available to you.
Data protection at a glance · 04_2024_REV1Personal data is any data by which you can be personally identified.
Data processing on this website is carried out by the website operator. The relevant contact details can be found in the section on the controller and in the legal notice.
Data is collected when you provide it to us, for example by using a contact form. Other data is collected automatically by technical systems when you visit the website.
Some data is collected to ensure the website is provided without errors. Other data may be used to analyse user behaviour.
You have, among other things, the right to information, rectification, restriction or erasure of your data and the right to lodge a complaint with the competent supervisory authority.
Managing Directors:
Simon Scheve
Sascha Götzelmann
The operators of this website take the protection of your personal data very seriously. We treat your personal data as confidential and in accordance with the applicable data protection legislation and this privacy policy.
When you use this website, various items of personal data are collected. Personal data is data by which you can be personally identified. This privacy policy explains which data we collect, how we use it and for what purpose.
Please note that transmitting data over the internet, for example when communicating by email, may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.
Many data processing operations are only possible with your express consent. You may withdraw consent already granted at any time. An informal notification by email is sufficient.
The lawfulness of the processing carried out before the withdrawal remains unaffected.
In the event of a breach of data protection law, the data subject has the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority is the data protection authority of the federal state in which our company is based.
An overview of the German data protection authorities is available from the Federal Commissioner for Data Protection .
You have the right to receive data which we process automatically on the basis of your consent or in fulfilment of a contract, in a commonly used, machine-readable format, either for yourself or for a third party.
Where you request direct transmission to another controller, this will only be carried out where technically feasible.
For security reasons and to protect the transmission of confidential content, such as orders or enquiries, this website uses SSL or TLS encryption.
You can recognise an encrypted connection by the change from “http://” to “https://” in the browser address bar and by the lock icon.
When SSL or TLS encryption is enabled, data that you transmit to us cannot be read by third parties.
If, after entering into a paid contract, you are required to provide payment details, such as a bank account number, those details are required for payment processing.
Payment transactions using standard payment methods are carried out exclusively via encrypted SSL or TLS connections.
Within the framework of the applicable legal provisions, you have the right at any time to receive information free of charge concerning your stored personal data, its origin and recipients, and the purpose of the data processing, as well as, where applicable, the right to rectification, restriction or erasure.
You may contact us at any time using the address stated in the legal notice for this purpose or for any other questions concerning personal data.
We hereby object to the use of contact details published in the context of the legal notice obligation for sending unsolicited advertising and information materials.
The website operators expressly reserve the right to take legal action in the event of unsolicited promotional information, such as spam emails.
Our website uses cookies. Cookies do not cause any damage to your device and do not contain viruses. They help make our website more user-friendly, effective and secure.
Most of the cookies we use are session cookies. They are deleted automatically after your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognise your browser on your next visit.
You can configure your browser to notify you when cookies are set, to allow cookies only in individual cases, to reject cookies in certain cases or generally, and to delete cookies automatically when closing the browser.
Disabling cookies may limit the functionality of this website.
Technically necessary cookies are stored on the basis of Art. 6(1)(f) GDPR. Where other cookies are stored for the analysis of browsing behaviour, they are addressed separately in this privacy policy.
The website provider automatically collects and stores information in server log files, which your browser automatically transmits to us.
These data are not merged with other data sources.
The legal basis for processing is Art. 6(1)(f) GDPR.
If you send us enquiries using the contact form, the information provided in the form, including the contact details you enter, will be stored by us for the purpose of processing the enquiry and any follow-up questions.
We do not disclose this data without your consent.
Processing is based on your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw this consent at any time.
The data entered by you remains with us until you request its deletion, withdraw your consent or the purpose for storing the data no longer applies. Statutory retention periods remain unaffected.
You may register on our website to use additional functions. We use the data entered for this purpose only to provide the relevant offer or service.
The mandatory information requested during registration must be provided in full. Otherwise, registration will be rejected.
We use the email address provided during registration to notify you of important changes, for example changes to the scope of the service or technically necessary changes.
Processing is based on your consent pursuant to Art. 6(1)(a) GDPR.
The data collected during registration is stored for as long as you remain registered and is subsequently deleted. Statutory retention periods remain unaffected.
We collect, process and use personal data only insofar as this is necessary to establish, structure or modify the contractual relationship.
This is based on Art. 6(1)(b) GDPR for the performance of a contract or pre-contractual measures.
We process usage data only to the extent necessary to enable the user to use the service or for billing purposes.
Customer data collected will be deleted after completion of the order or termination of the business relationship. Statutory retention periods remain unaffected.
We transmit personal data to third parties only where this is necessary for contract performance, for example to companies responsible for delivery or to the financial institution responsible for payment processing.
No further transmission takes place unless you have expressly consented to it.
The legal basis is Art. 6(1)(b) GDPR.
We transmit personal data to third parties only where this is necessary for contract performance, for example to the financial institution responsible for payment processing.
Your data will not be disclosed for advertising purposes without your express consent.
The legal basis is Art. 6(1)(b) GDPR.
Our website integrates plugins from the Facebook social network. The provider is Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA.
When you visit our website, the plugin creates a direct connection between your browser and the Facebook server. Facebook thereby receives the information that you visited our website using your IP address.
If you click the Facebook button while logged into your Facebook account, Facebook may associate your visit to our website with your user account.
As the website operator, we have no knowledge of the content of the transmitted data or how Facebook uses it.
Further information: Facebook Privacy Policy
Our website uses functions of the Instagram social network. The provider is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
Whenever a page containing Instagram functions is accessed, a connection to Instagram servers is established. Instagram is informed that you visited our website using your IP address.
If you click the Instagram button while logged into your account, Instagram may associate your visit to our website with your user account.
Further information: Instagram Privacy Policy
Our website uses functions of the LinkedIn network. The provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA.
Whenever a page containing LinkedIn functions is accessed, a connection to LinkedIn servers is established. LinkedIn is informed that you visited our website using your IP address.
If you click the LinkedIn button while logged into your account, LinkedIn may associate your visit to our website with your user account.
Further information: LinkedIn Privacy Policy
When you visit our website, your browsing behaviour may be analysed statistically. The analytics and marketing services used are described below.
You can prevent cookies from being stored by selecting the appropriate settings in your browser. In this case, you may not be able to use all functions of this website in full.
You can prevent the collection of data generated by cookies and relating to your use of the website, as well as its processing by Google, by installing the relevant Google browser plugin .
We use the consent management solution provided by Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany, to obtain and document your consent to cookies and other technologies in compliance with data protection law.
Among other things, the following data is processed when you visit the website:
Usercentrics uses a cookie to store the status of your consent. The data is stored until you delete the cookie or ask us to delete it.
Processing is carried out to fulfil a legal obligation pursuant to Art. 6(1)(c) GDPR.
We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Tag Manager is used for the technical management and deployment of scripts, for example Google Analytics and marketing tools. Tag Manager itself does not perform analyses, store cookies or create its own user profiles.
Technical data such as your IP address is processed for delivery and may be transmitted to Google servers in the USA.
The service is used on the basis of Art. 6(1)(f) GDPR. Services requiring consent are activated only after you have consented.
We use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics 4 enables us to analyse the use of our website, prepare reports on visitor activity and evaluate this information to optimise our content.
The information collected is first processed via our server-side tagging server, which we operate on Google Cloud Run in the EU West 3 region in Frankfurt.
On this server, data, in particular the IP address, is anonymised or pseudonymised before it is transmitted to Google servers for further processing.
The retention period for Analytics data is 14 months.
We also use Google Signals. This function enables cross-device reports where you have enabled personalised advertising in your Google account.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. Google Analytics 4 is not used without your consent.
Further information: Google Privacy Policy
In addition to Google Analytics 4, we use our server-side tagging container on Google Cloud Run in the EU West 3 region in Frankfurt for other marketing and analytics tools.
These services are generally used only with your express consent pursuant to Art. 6(1)(a) GDPR.
We use Google Ads conversion tracking, a service provided by Google Ireland Limited. If you reach our website via a Google advertisement, a cookie is stored for a limited period of no more than 90 days.
The cookie is used to measure advertising effectiveness. We receive aggregated values, for example the number of users who clicked an advertisement and subsequently completed a conversion.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 25 TTDSG.
Consent Mode v2 has been mandatory since March 2024. Our cookie banner obtains consent for “ad_user_data” and “ad_personalization”.
As part of Google Ads, we use conversion-based customer match. Following your express consent, data collected during conversions, such as an email address or telephone number, may be transmitted to Google in encrypted form using SHA-256.
Google compares this data with existing Google accounts in order to display personalised advertising. According to Google, the hash values are deleted after the comparison.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR.
We use the Enhanced Conversions and Enhanced Conversions for Leads functions.
Where a conversion occurs, data entered by you, such as your name, email address or postal address, may be transmitted to Google in encrypted form to improve cross-user conversion attribution.
For lead forms, the email address entered is hashed and transmitted to Google. The retention period is up to 63 days.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR.
We use Google Ads Customer Match provided by Google Ireland Limited to address existing customers and interested parties with targeted advertising across Google services.
Where you have consented, we transmit personal data such as your email address or telephone number to Google in hashed form using SHA-256.
Personal data may be transferred to Google LLC in the USA. Google uses appropriate safeguards for this purpose, in particular the European Commission's Standard Contractual Clauses.
You may withdraw your consent at any time via the cookie settings.
We use the Meta Pixel for the Facebook and Instagram social networks. The provider is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
Meta Pixel enables us to define visitors to our website as target groups for advertising and to measure the effectiveness of advertising activities.
The following data may be processed:
Meta may link this data to your Facebook or Instagram account.
In addition to the client-side Meta Pixel, we use the Meta Conversion API. Event data is transmitted to Meta server-side via our server-side tagging container in Frankfurt.
Pixel and Conversion API are used exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 25 TTDSG.
Further information: Meta Privacy Policy
Our websites use Google Analytics Remarketing functions in conjunction with cross-device functions of Google AdWords and Google DoubleClick.
This makes it possible to display interest-based, personalised advertising based on your previous usage and browsing behaviour, including across different devices.
Where you have provided the relevant consent, Google may link your web and app browsing history to your Google account.
You can disable personalised advertising in your Google account.
This website uses the Brevo Conversations plugin, formerly Sendinblue. Brevo is a live chat client that enables direct communication with our employees.
The plugin records data such as browser information, website content visited and conversations during the website visit and during exchanges between the visitor and our employees in anonymised form.
Session cookies are used and deleted after the visit. The data is generally stored and processed in encrypted form on servers within the European Union.
Processing is carried out on the basis of Art. 6(1)(a) and (f) GDPR.
Further information: Brevo Privacy Policy
We use Microsoft Clarity provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA, to generate statistics on the use of our website.
Microsoft Clarity uses cookies and pixels. Data collected may include IP address, mouse movements, clicks, time, frequency, location, user behaviour, interaction data and scrolling activity.
To attribute statistics to campaigns, Clarity may be linked with Google Analytics 4, provided you have also consented to the use of Google Analytics 4.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR.
Further information: Microsoft Privacy Statement and Microsoft Clarity Terms .
If you wish to subscribe to the newsletter offered on the website, we require your email address and information that allows us to verify that you are the owner of the email address provided and that you agree to receive the newsletter.
No further data is collected, or only on a voluntary basis.
Processing is carried out exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR.
You may withdraw your consent at any time, for example using the unsubscribe link in the newsletter.
Data provided for newsletter subscription is stored until you unsubscribe and is deleted after cancellation. Data stored for other purposes remains unaffected.
This website uses SendinBlue for newsletter distribution. SendinBlue is a service used to organise and analyse newsletter distribution.
The data entered by you for newsletter subscription is stored on SendinBlue servers in our account.
Newsletters sent using SendinBlue enable behavioural analysis. This may include analysing how many recipients opened the newsletter and how often individual links were clicked.
Links in the email are tracking links that enable clicks and viewing behaviour to be measured.
If you do not want analysis by SendinBlue, you must unsubscribe from the newsletter. A corresponding link is included in each newsletter.
Further information: SendinBlue Privacy Policy
Our website uses plugins from the Google-operated YouTube platform. The operator is YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA.
When you visit a page containing a YouTube plugin, a connection to YouTube servers is established. YouTube is informed which of our pages you visited.
If you are logged into your YouTube account, YouTube may associate your browsing behaviour with your personal profile. You can prevent this by logging out of your YouTube account.
YouTube is used in the interest of presenting our online content attractively on the basis of Art. 6(1)(f) GDPR.
This website uses web fonts provided by Google to ensure the consistent display of fonts.
When a page is accessed, your browser loads the required web fonts into the browser cache. This requires your browser to connect to Google servers. Google thereby becomes aware that our website was accessed via your IP address.
The service is used in the interest of a consistent and attractive presentation of our online content on the basis of Art. 6(1)(f) GDPR.
This website uses the Google Maps map service via an API. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
To use Google Maps functions, it is necessary to store your IP address. This information is generally transmitted to and stored on a Google server in the USA.
The service is used in the interest of presenting our online content attractively and making the locations specified by us easier to find, on the basis of Art. 6(1)(f) GDPR.
We offer payment via PayPal on our website. The provider is PayPal Europe S.à.r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg.
If you select PayPal as your payment method, the payment data entered by you is transmitted to PayPal.
Transmission is based on Art. 6(1)(a) GDPR and Art. 6(1)(b) GDPR.
We offer payment by Sofort bank transfer on our website. The provider is Sofort GmbH, Theresienhöhe 12, 80339 Munich, Germany.
Using this procedure, we receive payment confirmation in real time and can begin fulfilling our obligations without delay.
If you select this payment method, you transmit your PIN and TAN to Sofort GmbH. It may use these details to log into your online banking account, check the account balance and execute the transfer.
In addition, account transactions, credit limits, other accounts and their balances may be checked.
In addition to the PIN and TAN, payment details and personal data such as name, address, telephone number, email address and IP address are transmitted.
Transmission is based on Art. 6(1)(a) GDPR and Art. 6(1)(b) GDPR.
Further information: Sofort privacy information and Klarna Sofort .
We cooperate with Crefo Factoring Nordwest GmbH, Neuenstraße 76–80, 28195 Bremen, Germany, as part of a factoring arrangement and assign B2B receivables to the factor.
When our company is commissioned to provide goods or services, we carry out a credit assessment where we have a legitimate interest.
The following data may be collected for this purpose:
A legitimate interest may arise in particular from a credit decision, the initiation of a business relationship, a credit assessment, a receivable, enforcement information or an insurance mandate or contract.
Further information: Crefo Factoring Nordwest privacy information
At directdeal.me, data protection is a top priority. As an IT company, we understand the sensitivity and responsibility involved in handling personal data. We therefore implement security measures and use encryption technologies to protect the confidentiality of your data.
For us, data protection is not only a legal obligation, but also an important basis for the trust of our customers. Our data protection policies and practices are reviewed and updated regularly.
We also attach great importance to transparent communication and inform our customers openly about our data protection measures.
Our team will be pleased to assist you with general questions about directdeal.me and how your data is handled.