Data protection
With this data protection declaration we inform you about the scope of processing of your personal data (hereinafter “data”).
1. Responsible for data processing
Responsible for data processing in accordance with the provisions of the General Data Protection Regulation (GDPR) is:
Dextro Energy GmbH & Co. KG
Hafenstrasse 77
47809 Krefeld
Web: https://www.dextro-energy.com
Email: info@dextro-energy.com
2. Contact details of our data protection officer
Michael Gruber
Email: datenschutz@dextro-energy.com
3. General information on data processing
We process data as part of our business and website operations.
This also includes disclosure through transmission to third parties and, if necessary, to so-called third countries outside the European Union (“EU”) and the European Economic Area (“EEA”). If we transmit data outside the EU or the EEA, we have marked this accordingly below.
4. Data processing
The individual data affected, processing purposes, legal basis, recipients and, if applicable, transfers to third countries are listed in the following list:
a) Online shop operations and website
aa. generally
To operate our online shop and our websites, we use the online platform “Shopify” from Shopify International Ltd., Victoria Buildings, 2nd Floor, 1-2 Haddington Road Dublin 4, D04 XN32, Ireland (“Shopify”), which is located in We process the personal data listed below on our behalf for the purposes stated in Section 4. a).
When using Shopify's services, Shopify may transfer data to the USA and Canada.
There is an adequacy decision from the EU Commission for transfers to Canada, available at: https://eur-lex.europa.eu/legal-content/DE/TXT/PDF/?uri=CELEX:32002D0002&from=DE .
There is no adequacy decision from the EU Commission for data transfers to the USA. Shopify provides an appropriate level of data protection.
Further information can be found at: https://www.shopify.de/legal/datenschutz
bb. Log file when visiting the website
We log your website visit. We process:
- Name(s) of our accessed website(s),
- Date and time of retrieval,
- the amount of data transferred,
- the browser type and version,
- the operating system you use,
- the referrer URL (the previously visited website),
- your IP address,
- the requesting provider.
The legal basis for data processing is, in accordance with Article 6 Paragraph 1 f) GDPR, our overriding legitimate interest in the ongoing provision and security of our website.
The log file will be deleted after seven days, unless it is needed to prove or clarify specific legal violations that became known within the retention period.
cc. Hosting
To provide our online presence, we use the services of our web hosting provider in accordance with Section 4 a) aa. who process the aforementioned data and all data to be processed in connection with the operation of this website (log file when visiting the website) on our behalf.
The legal basis for data processing is our overriding legitimate interest in providing our website in accordance with Article 6 Paragraph 1 f) GDPR.
dd. contact
If you contact us, we will process the following data from you for the purpose of processing and handling your request: name, contact details - if provided by you - and your message.
The legal basis for data processing is our obligation to fulfill the contract and/or to fulfill our pre-contractual obligations in accordance with Art. 6 Para. 1 b) GDPR and/or our overriding legitimate interest in processing your request in accordance with Art. 6 Para. 1 f) GDPR.
ee. Contract execution
We process your order data to process the contractual relationship between you and us.
We will transmit your address details to the company responsible for the delivery. If necessary to process the contract, we will also send your email address or telephone number to the company responsible for the delivery in order to coordinate a delivery date (notification).
We transmit your transaction data (name, date of order, payment method, shipping and/or receipt date, amount and payee, if applicable bank details or credit card details) to the payment service provider responsible for processing the payment.
According to Art. 6 Para. 1 b) GDPR, the legal basis for data processing is the fulfillment of our contractual obligations and, in individual cases, the fulfillment of our legal obligations in accordance with Art. 6 Para. 1 c) GDPR.
b) Accounting
To operate our online shop, especially for accounting purposes, we use the “Matrixify (Excelify)” service from SIA iTissible. Kaivas 35B, Riga, LV-1021, Latvia (“Matrixify”), which processes personal data on our behalf as part of contract processing.
When using Matrixify's services, it may happen that Matrixify transfers data to third countries. For this purpose, Matrixify uses the AWS service from Amazon Web Services, Inc., 410 Terry Avenue North, Seattle. Matrixify ensures an appropriate level of data protection through standard contractual clauses. These are available at: https://d1.awsstatic.com/legal/aws-gdpr/AWS_GDPR_DPA.pdf
Further information can be found at: https://matrixify.app/privacy-notice/
According to Art. 6 Para. 1 b) GDPR, the legal basis for data processing is the fulfillment of our contractual obligations and, in individual cases, the fulfillment of our legal obligations in accordance with Art. 6 Para. 1 c) GDPR.
c) Invoicing
For automated invoicing as part of the operation of our online shop, we also use the “Order Printer Pro” service from FORSBERG+two ApS, Havesvinget 15, 2950, Vedbaek (“Order Printer Pro”), which processes personal data in connection with on our behalf processed during contract processing.
When using Order Printer Pro's services, Order Printer Pro may transfer data to the USA. FORSBERG+two is committed to maintaining an appropriate level of data protection. The Data Processing Addendum can be accessed here: https://cdn.shopify.com/s/files/1/2579/7072/files/forsbergtwo-data-processing-addendum-2018-04-25.pdf?6310183096528503124
Further information can be found here: https://www.forsbergplustwo.com/pages/privacy-policy
According to Art. 6 Para. 1 b) GDPR, the legal basis for data processing is the fulfillment of our contractual obligations and, in individual cases, the fulfillment of our legal obligations in accordance with Art. 6 Para. 1 c) GDPR.
d) newsletters
In order to provide you with regular information about our company and offers, we offer to send an email newsletter. When you register for the newsletter, we process the data you enter when registering (email address and other voluntary information). To prevent misuse, we will send you an email after you register asking you to confirm your registration (double opt-in procedure). In order to be able to prove that the registration process is legally compliant, your registration will be recorded. The time of registration and confirmation as well as your IP address are affected.
The legal basis for sending the newsletter is your consent in accordance with Art. 6 Para. 1 a) GDPR. The data processing in connection with sending the confirmation email for your registration and the associated data logging is carried out in accordance with Art. 6 Para. 1 f) GDPR due to our legitimate interest in providing proof of your proper registration.
If you give us your consent, we will also evaluate in the newsletters whether you have opened the newsletter and the scrolling and clicking behavior in the newsletter. This is done in order to optimally tailor our newsletter to your interests and to improve the content of our newsletter.
The legal basis for the analysis of the newsletter is your consent in accordance with Art. 6 Para. 1 a) GDPR.
Our email newsletters are sent via the technical service provider Omnisend (Soundest Ltd., Unit a3, Gateway Tower, 32 Western Gateway, London E16 1YL, United Kingdom), to whom we pass on the data you provided when registering for the newsletter.
We have concluded an order processing agreement with Omnisend, by which we oblige Omnisend to protect our customers' data and not to pass it on to third parties.
You can view Omnisend’s privacy policy here:
https://www.omnisend.com/privacy "
e) Direct email advertising for existing customers
In order to offer you similar goods and services in connection with the goods and services you purchased, we will send you direct marketing to the email address you used in connection with the purchase. The legal basis for sending this direct advertising is Section 7 Paragraph 3 UWG in conjunction with Art. 95 GDPR. To send the newsletter, we use service providers to whom we transmit the data mentioned. They process the data on our behalf in accordance with our instructions.
f) Use of cookies
We use so-called cookies on our website. Cookies are small text files that are stored on your respective device (PC, smartphone, tablet, etc.) and saved by your browser.
You can find information about the specific cookies we use, their providers and purposes in our cookie settings or consent banner . There you give your consent to the respective services, you can revoke it or adjust your settings later.
g) Voucher offers from Sovendus GmbH
In order to select a voucher offer that is currently of interest to you, we pseudonymize and encrypt the hash value of your email address and your IP address to Sovendus GmbH, Hermann-Veit-Str. 6, 76135 Karlsruhe (Sovendus) (Art. 6 Para. 1 f GDPR). The pseudonymized hash value of the email address is used to take into account any possible objection to Sovendus advertising (Art. 21 Para. 3, Art. 6 Para. 1 c GDPR). The IP address is used by Sovendus exclusively for data security purposes and is usually anonymized after seven days (Art. 6 Para. 1 f GDPR).
We also transmit pseudonymized order number, order value with currency, session ID, coupon code and time stamp to Sovendus for billing purposes (Art. 6 Para. 1 f GDPR). If you are interested in a voucher offer from Sovendus, to your email
If there is no objection to advertising at the address and you click on the voucher banner that is only displayed in this case, we will send your salutation, name, postal code, country and your email address to Sovendus in encrypted form to prepare the voucher (Art. 6 Para. 1 b , f GDPR).
For further information on how Sovendus processes your data, please see the online data protection information at www.sovendus.de/datenschutz.
h) Typeform
We have integrated Typeform on this website. The provider is TYPEFORM SL, Carrer Bac de Roda, 163, 08018 Barcelona, Spain (hereinafter Typeform). Typeform allows us to create online forms and embed them on our website. The data you enter into our Typeform forms will be stored on Typeform's servers until you request us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory legal provisions – in particular retention periods – remain unaffected.
The use of Typeform is based on Article 6 Paragraph 1 Letter f GDPR. The website operator has a legitimate interest in functioning online forms. If there is an appropriate one
If consent has been requested, processing is carried out exclusively on the basis of Art. 6 Para. 1 lit. Device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.
Order processing
We have concluded an order processing contract (AVV) for the use of the above-mentioned service. This is a contract required by data protection law
ensures that the personal data of our website visitors is only processed according to ours
Instructions and processed in compliance with the GDPR.”
i) Reviews.io
We use “Review.io”, a product of REVIEWS.io 2020 GMBH, Stralauer Allee 6, 10245 Berlin, Germany.
Review.io is a marketing tool. We use this to collect and manage customer reviews. We use it to collect reviews from our customers in the form of text, video or photos and to display these reviews on our website, on Google and on our social network platforms.
All information we collect is subject to this privacy policy and is processed on the basis of our legitimate interests (exclusively to optimize our marketing efforts and improve the quality of our website) in accordance with Art. 6, Paragraph 1, Letter. f of the GDPR.
For this purpose, we have concluded a data processing agreement with Review.io, in which Review.io undertakes to process user data in strict compliance with our instructions and the data protection standards of the European Union.
For more information about the type of data Review.io collects, please see Review.io's Terms of Use and Privacy Policy: https://www.reviews.io/front/data-protection
j) GDPR Legal Cookie by beeclever
Our website uses GDPR Legal Cookie by beeclever to obtain your consent to store certain cookies on your device or to use certain technologies and to document these in accordance with data protection regulations. The provider of this technology is beeclever GmbH, Friedrich-Mohr-Straße 1, 56070 Koblenz (hereinafter “beeclever”).
When you enter our website, a connection is established to the provider beeclever's servers. In this way, the provider beeclever receives personal data, such as the browser used, the IP address and a time stamp. A cookie is then stored in your browser in order to be able to assign you the consent given or its revocation. Details can be found at:
https://apps.shopify.com/gdpr-legal-cookie .
The GDPR Legal Cookie by beeclever is used to obtain the legally required consent for the use of cookies. The legal basis for this is Article 6 Paragraph 1 Letter c GDPR.
k) Analysis / Marketing
aa) Google services
We use various services from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”) on our website. It is possible that data will also be transferred to Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043 in the USA.
Google ensures an appropriate level of data protection via the EU standard contractual clauses. You can access a copy of the contractual clauses here: https://policies.google.com/privacy/frameworks?hl=de&gl=de
Google Analytics
We use the Google Analytics tracking tool from Google on our website. We use Google Analytics to evaluate your use of the website, to compile reports on the activities within this website and to provide other services related to website use and thus improve user-friendliness.
When using Google Analytics, website visitor interactions are primarily recorded and systematically evaluated using cookies.
Details about the cookies used can be found in our cookie information
We use Google Analytics with the “anonymizeIp()” extension. This shortens IP addresses within EU or EEA member states. If a transmission to Google's servers in the USA takes place, the full IP address will only be transmitted and shortened there in exceptional cases. A direct personal reference is therefore generally excluded. In particular, an assignment to the website visitor's accessed computer or device is no longer possible.
Through the use of Google Analytics, the following data is processed:
- 3 bytes of the IP address of the system accessed by the website visitor (anonymized IP address),
- the website accessed,
- the website from which the user accessed the page on our website (referrer),
- the sub-pages that are accessed from the website,
- the time spent on the website,
- the frequency of accessing the website.
According to its own information, Google will under no circumstances associate your IP address with other Google data.
oogle remarketing/retargeting
We use so-called tracking cookies from Google on our website. When you visit our site, permanent cookies store information about which products you have viewed on our website and which advertisements and third-party pages users use to reach our website. When you subsequently visit a partner website, we can display personalized advertising for you based on the articles you viewed on our site.
GOOGLE ADS
We use Google Ads, an online advertising program from Google, on our website. This involves so-called conversion tracking. If you click on an ad placed by Google, a cookie will be set. This cookie expires after 30 days and is not used to personally identify users. If the user visits certain pages on this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page.
The data collected using the conversion cookie is used to create statistics for Ads customers who opt for conversion tracking.
Legal basis and revocation
The legal basis for data processing within the framework of the aforementioned Google services is your prior consent in accordance with Art. 6 Para. 1 a) GDPR. You can withdraw your consent at any time with future effect by adjusting your preferences in our cookie settings .
bb) Facebook Custom Audiences (pixels/cookies)
On our website we use a so-called tracking pixel from Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, a subsidiary of Facebook Inc. 1601, Willow Road Menlo Park, CA 94025, USA. We use Facebook Pixel to track the success of our own Facebook advertising campaigns and to optimize the display of Facebook advertising campaigns to interested target groups.
After you click on a Facebook ad or visit our website, a cookie is stored on your device using the pixel on our website. The cookie processes data about whether you came to our website via a Facebook ad and makes it possible to analyze the user's behavior until the purchase is completed. This allows us to track the success rate of our Facebook advertising campaigns. In addition, the pixel processes data about the fact that you have visited our website and enables the advertising shown on Facebook to be adapted to your interests.
When you visit our website, a direct connection to the Facebook servers is established via the Facebook pixel integrated on our website. The information generated by the cookie about your use of this website (including your IP address) is transmitted to Facebook in the USA.
There is no adequacy decision from the EU Commission for data transfers to the USA. Facebook ensures an appropriate level of data protection via the EU standard contractual clauses. You can access a copy of the contractual clauses here: https://www.facebook.com/legal/EU_data_transfer_addendum
The data collected is anonymous to us and does not allow us to draw any conclusions about the user. If you are registered with Facebook, Facebook can assign the information collected to your account. Even if you do not have a Facebook account or are not logged in when you visit our website, it is possible for Facebook to process and store your IP address and other identification data.
The legal basis for data processing is your consent in accordance with Art. 6 Para. 1 a) GDPR.
You can revoke your consent to data processing by Facebook Pixel for our web domain at any time with future effect by adjusting your preferences in our cookie settings . You can also prevent the setting of cookies by adjusting the corresponding settings in your Facebook account at https://www.facebook.com/settings?tab=ads .
cc) Facebook Conversion API
We use the tracking tool Facebook Conversion API from Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, a subsidiary of Facebook Inc. 1601, Willow Road Menlo Park, CA 94025, USA.
This is a data interface through which we transmit data about your behavior on our website to Facebook for evaluation. This allows us to show you advertisements that match your user behavior on our website.
In connection with the Conversion API we use the following data:
- E-mail address
- Telephone number
- Gender
- birth date
- First and Last Name
- City, state and country
- Postal code
- User IDs
- IP address
- Client User Agent (the browser you use and your operating system)
- Click IDs
- Browser ID
- Product IDs
- Advertising ID
- Facebook login ID
We transmit the data to Facebook. The data is also transmitted to Facebook in the USA.
There is no adequacy decision from the EU Commission for data transfers to the USA. Facebook ensures an appropriate level of data protection via the EU standard contractual clauses. You can access a copy of the contractual clauses here: https://www.facebook.com/legal/EU_data_transfer_addendum
The legal basis for data processing is your consent in accordance with Art. 6 Para. 1 a) GDPR.
You can revoke your consent to data processing by Facebook Pixel for our web domain at any time with future effect by adjusting your preferences in our cookie settings .
h) Contact for applications
If you contact us to send us your application as an employee, for example by email or via a contact form, the data you provide (e.g. name, email address, desired location, etc.) will be yours The message and the submitted application documents are processed exclusively for the purpose of processing and processing your application request. The legal basis for data processing is primarily Section 26 BDSG. Accordingly, the processing of data that is necessary in connection with the decision to establish an employment relationship is permitted. If the data is necessary for legal prosecution after completion of the application process, data processing can take place to protect our legitimate interests in accordance with Art. 6 Para. 1 f) GDPR, namely to assert and/or defend claims.
i) External content
We use dynamic content (“content”) from third parties to optimize the presentation and offering of our website. When you visit the website, a request is automatically made to the server of the respective content provider via an interface, during which certain log data (e.g. the user's IP address) is transmitted. The dynamic content is then transmitted to our website and displayed there.
We use external content in connection with the following functionalities:
aa) Integration of YouTube videos
We have videos on our website from the YouTube portal of YouTube LLC, 901 Cherry Ave. San Bruno, CA 94066, USA (“YouTube”) included. Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”) is responsible for data processing on YouTube. However, when the videos are played, log data is transmitted to YouTube's servers in the USA.
The legal basis for data processing is our overriding legitimate interest in the optimal marketing of our online offering in accordance with Art. 6 Para. 1 f) GDPR.
Google ensures an appropriate level of data protection via the EU standard contractual clauses. You can access a copy of the contractual clauses here: https://policies.google.com/privacy/frameworks?hl=de&gl=de
Further information can be found at: https://policies.google.com/privacy?hl=de&gl=de
bb) Google Fonts
In order to make visiting our website attractive, we use external fonts from Google Fonts. When you visit the site, these are loaded from servers of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google does not store any cookies in your browser. However, according to our information, the IP address of the user's device is transmitted to Google and stored. This processing is carried out due to our overriding legitimate interest in optimal marketing of our offer in accordance with Art. 6 Para. 1 f) GDPR.
It cannot be ruled out that data will be transferred to Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.
Google ensures an appropriate level of data protection via the EU standard contractual clauses. You can access a copy of the contractual clauses here: https://policies.google.com/privacy/frameworks?hl=de&gl=de
j) Participation in competitions
If you take part in a competition organized by us, we will process the data you provide: first name, last name, e-mail address and - if provided by you - address, company, telephone number for the purpose of participating or contacting us the case of profit notification. If you have been declared a winner, we will ask for your last name, first name and address for the purpose of transmitting your prize, unless this has already been done as part of your registration. In any case, we will inform you of your win in advance by email.
To transmit the prize, we will send your surname, first name and address to the company commissioned to deliver the prize.
Data processing is carried out to fulfill our obligations in the context of conducting the competition in accordance with Art. 6 Para. 1 b) GDPR.
5. Duration of data storage
We only store personal data for as long as it is necessary for the purposes for which it is processed or if you have withdrawn your consent. To the extent that legal retention obligations must be observed, the storage period for certain data can be up to 10 years, regardless of the processing purposes.
6. Your data subject rights
a) Information
If you wish, you can receive information about all the personal data that we have stored about you free of charge at any time.
b) Correction, deletion, restriction of processing (blocking), objection
If you no longer agree to the storage of your personal data or if it has become incorrect, we will, upon appropriate instructions, delete or block your data or make the necessary corrections (to the extent this is possible under applicable law). The same applies if we are only supposed to process data to a limited extent in the future. You have the right to object in particular in cases where your data is required to carry out a task that is in the public interest or in our legitimate interest, as well as profiling based on this. You also have such a right to object in the case of data processing for the purpose of direct advertising.
c) Right of withdrawal of consent with effect for the future
You can revoke your consent at any time with effect for the future. Your revocation will not affect the lawfulness of processing up to the time of revocation.
d) Data portability
If data processing takes place on the basis of a contract, pre-contractual negotiations, consent or using automated procedures, you have the right to data portability. Upon request, we will provide you with your data in a common, structured and machine-readable format so that you can transmit the data to another person responsible if you wish.
e) Right of appeal
You also have the option of complaining to a supervisory authority about your data subject rights.
f) Restrictions
Data for which we are not able to identify the data subject, for example if it has been anonymized for analysis purposes, is not covered by the above rights. Access, deletion, blocking, correction or transfer to another company may be possible with respect to this data if you provide us with additional information that allows us to identify you.
7. Exercising your data subject rights
If you have any questions about the processing of your personal data, information, correction, blocking, objection or deletion of data or if you wish to transfer the data to another company, please contact datenschutz@dextro-energy.com .