Our data protection policy

English translation for information only. Only the German version is binding.

Data protection information

– www.dwd-shop.de –

During your use of this website, certain personal data concerning you will be processed and stored by us (as the data controller) for the duration necessary for the performance of the agreed purposes and compliance with legal obligations. Please read on to find out what personal data we collect, how we process the data and what your rights are in this context.
According to Article 4(1) of the General Data Protection Regulation (GDRP), ‘personal data’ are defined as any information relating to an identified or identifiable natural person.

1.    Name and contact details of the data controller

This data protection information shall apply to the processing of data collected on the website www.dwd-shop.de by the following data controller:

Deutscher Wetterdienst
Frankfurter Straße 135

63067 Offenbach
Germany

E-mail:    dwd-shop@dwd.de
Tel.:    +49 (0)69 / 8062-3200

Our Data Protection Officer can be contacted at the above address (attn: Datenschutzbeauftragter) or by e-mail to datenschutz@dwd.de.

Please feel free to contact our Data Protection Officer if you have any question relating to the data protection legislation or your rights as a data subject.

2.    Processing of personal data and purposes of processing

2.1 Visits to the website

You can access the website www.dwd-shop.de without having to disclose your identity. The browser you are using on your end device will automatically send only certain pieces of information to the server of our website (for example date and time of access, name and URL of the file requested).

This also includes the IP address of the end device you are using. Once you have finished using the website, it will be rendered anonymous and stored in a so-called log file.

Processing of your IP address is necessary for technical and administrative purposes to ensure service connection and connection stability, guarantee the security and good functioning of our website and, if need be, prosecute any illegal attacks on it.

The legal basis for processing your IP address is Article 6(1)(f) GDPR. Our legitimate interest to do this is based on our aforementioned interest in the security of our website and the necessity to ensure its trouble-free operation.

The processing of your IP address and other information from the log file does not enable us to draw any direct conclusions regarding your identity.

Please note that we also use cookies on our web pages. For more detailed information about this, please refer to section 4 of this data protection information.

2.2 Setting up a user account

To buy from our shop you must have a user account with us. For setting up a user account for you we request the following mandatory data from you:

  • Forename, last name
  • Address
  • A valid e-mail address.

These data are collected in order to

  • know who we are entering a contract with;
  • check the plausibility of the data provided;
  • offer you maximum comfort as well as a quick and easy and individual shopping experience as you go through the ordering process.

In addition, you have to set a password of your own choice. In combination with your e-mail address, it allows you to access your user account. Via your user account, you can view and change the personal data we have stored about you at any time. These data are used for your identification and for invoicing.

It is also possible to provide additional data (such as name of company, VAT No., federal state, fax and telephone number). Providing this information is voluntary and not necessary for setting up a user account. But it makes identifying and contacting you much easier and helps us to provide you with a more detailed invoice. We will only contact you by phone if there is a problem with your order. If a VAT No. is indicated, it will be checked automatically and thus assigned to a customer group.

We will only process your personal data for the purposes of a user account if you have freely given your consent for this (Article 6(1)(a) GDPR).

When your user account is deleted, your personal data will be removed from any further use unless retention and documentation obligations pursuant to the German Commercial, Penal and Fiscal Codes (HGB, StGB and AO) prescribe longer storage periods or, in accordance with Article 6(1)(a) GDPR, you have given your consent to us to hold your data longer than that.

2.3 Orders from the online shop

If you wish to order online any of the products we offer on the website, you will not only have to provide all the mandatory data requested in number 2 c) but also all payment details required for the payment method chosen by you.

These data are collected in order to

  • identify you as our contract partner;
  • check the plausibility of the data provided;
  • process the payment for your order;
  • deal with any warranty claims that may arise or claims we may have against you.

You can also choose to indicate different invoice or shipping addresses.

Processing of these data takes place at your request and is necessary for the mentioned purposes of contract performance or taking of pre-contractual measures (Article 6(1)(b) GDPR).

The personal data which we have collected about you for processing the order are kept until the end of the standard warranty period; they will then be deleted unless, in accordance with Article 6(1)(c) GDPR, our retention and documentation obligations pursuant to the German Commercial, Penal and Fiscal Codes (HGB, StGB and AO) prescribe longer storage periods or, in accordance with Article 6(1)(a) GDPR, you have given your consent to us to hold your data longer than that.

2.4 Use of "Withdraw of contract" function

If you submit your withdrawal using the ‘Withdraw from contract’ function available on our website, we will process the data entered by you in the form (in particular your name, details regarding the contract and your contact details, e.g. your e-mail address). This processing is necessary for us to be able to confirm receipt of your withdrawal and to verify and process your withdrawal request.

Mandatory data are processed for the purpose of compliance with a legal obligation (Article 6(1)(a) GDPR, Section 356 a German Civil Code (BGB)); the processing of data that you provide on a voluntary basis takes place for the purposes of our legitimate interests (Article 6(1)(f) GDPR) to be able to assign the withdrawal request correctly and without delay. The personal data which we have collected about you for processing the withdrawal request are kept until the end of the standard warranty period. They will then be deleted unless our retention and documentation obligations pursuant to the German Commercial, Penal and Fiscal Codes (HGB, StGB and AO) prescribe longer storage periods (Article 6(1)(c) GDPR) or you have given your consent to us to hold your data longer than that (Article 6(1)(a) GDPR).

2.5 Use of personal data for marketing purposes (for example customer surveys)

According to past decisions of the Federal Court of Justice (Bundesgerichtshof, BGH), customer satisfaction surveys in electronic form are regarded as (direct) marketing.

The DWD shall be allowed to send you information for marketing purposes (including invitations to customer surveys) electronically even without your explicit consent. You will only be contacted about topics that are related to the product(s)/service(s) you have acquired from us.

When we contact you, you will always be given the opportunity to object to future communications (Article 21(2) GDPR). You will not incur any costs other than the transmission costs according to the basic tariffs. If you do object, the e-mail address you have indicated to us will be placed on a block list in order to guarantee that your objection to communications for marketing is respected.

The legal basis for data processing here is Article 6(1)(f) GDPR. The DWD has a legitimate interest in knowing and better understanding the requirements of its customers with regard to the services and distribution systems offered. Therefore, the customer groups should be involved in the service development processes. For this purpose, surveys are required.

This also helps the DWD to fulfil its statutory mandate regarding the provision of meteorological and climatological services.

Information on your right to object to data processing for marketing purposes (Article 21(2) GDPR)

You can object to the use of your personal data for the purpose of marketing or advertising at any time and without incurring any costs or negative effects in the future. To do so click here.

If you object, your personal data will be blocked from data processing for marketing or advertising purposes. Please note that, in exceptional cases, you may temporarily continue to receive e-mails even after you have sent your objection. The reason for this is technical, resulting from the time required for the selection; it does not mean that we haven’t implemented your objection.

3.    Disclosure of personal data to third parties

We will only disclose your personal data to third parties if

  • you have given us your explicit consent to it (Article 6(1)(a) GDPR);
  • this is necessary for the performance of a contract between you and the DWD (Article 6(1)(b) GDPR), which may include the communication of data to courier companies for the delivery of products ordered by you, or the transfer of payment details to payment providers or banking institutions in order to carry out a payment;
  • there exists a legal obligation to disclose your data (Article 6(1)(c) GDPR).

Third parties are permitted to use the data only for the specified purposes.

4.    Cookies

We use cookies on our website. Cookies are small files that are automatically generated by your browser and are stored on your end device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not cause damage to your end device and do not contain viruses, Trojan horses or other malicious software.

A cookie stores information that arises from the end device used in each specific case. However, this does not mean that, through this, we can directly obtain knowledge of your identity.

We use cookies to make your use of our website more comfortable. For this reason, we use so-called session cookies; these allow us to keep track of the individual pages you have viewed, to recognize whether you are logged in your user account and to remember the contents of your shopping basket during your visit to our website. These session cookies are deleted automatically when you leave our website.

A full list of all cookies produced by the shop software can be found here: 

https://www.dwd-shop.de/index.php/privacy-policy-cookie-restriction-mode 

The personal data that are processed by cookies are necessary for the purposes of the legitimate interests pursued by us or third parties (Article 6(1)(f) GDPR).

Most browsers accept cookies automatically, but you can alter the settings of your browser to reject storage of cookies on your computer or to always be notified before a new cookie is issued. If you disable cookies completely, however, you may lose some functionality of our website.

5.    OpenStreetMap

Our website has maps from OpenStreetMap embedded in it. OpenStreetMap is a project for collecting free spatial data in a database and holding them available for free re-use.

To enable the map to be displayed, your IP address and the URL of the requesting web page are transferred to OpenStreetMap. The embedding of this function is based on Article 6(1)(f) GDPR. It takes place in order to improve our website in terms of user-friendliness and make its content more interesting. This is a legitimate interest of ours in the meaning of the aforementioned rule.

More information about data protection in connection with OpenStreetMap can be found here: https://wiki.osmfoundation.org/wiki/Privacy_Policy

6.    Data subject's rights

The GDPR provides data subjects with a whole range of rights as listed below.

If necessary, you can claim the respect of these rights by writing to the address(es) indicated in section 1. If you have any questions or complaints to make, you may also write to our Data Protection Officer; the contact details can be found in section 1.

6.1 Right to withdraw consent

You have the right to withdraw a consent you have given to us at any time (Article 7(3) GDPR). As a result, we are then no longer permitted to continue processing your personal data in the way for which you had originally given us your consent.

6.2 Right of access

You have the right to request information about what personal data we are processing about you (Article 15 GDPR). In particular, you can request information about the purposes for which your personal data are processed and which categories of personal data are processed; about the categories of recipients to whom your personal data have been or will be disclosed; about the period for which the personal data will be stored; about the existence of a right to request rectification or erasure of your personal data and to request a restriction of the processing or completely object to the processing of your personal data; about the right to lodge a complaint; and about the source of the data where these have not been collected by us.

6.3 Right to rectification

You have the right to obtain rectification of inaccurate personal data and have incomplete personal data completed without undue delay (Article 16 GDPR).

6.4 Right to erasure

You have the right to obtain erasure of the personal data we have stored about you unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims (Article 17 GDPR).

6.5 Right to restriction of processing

You have the right to obtain restriction of the processing of your personal data (Article 18 GDPR) where the accuracy of your personal data is contested by you; where the processing of the data is unlawful and you oppose their erasure; and where we no longer need the data, but you require them for the establishment, exercise or defence of legal claims or you have objected to the processing of personal data in accordance with Article 21 GDPR.

6.6 Right to data portability

You have the right to receive the personal data you have provided to us about you in a structured, commonly used and machine-readable format or request their transmission to another controller (Article 20 GDPR).

6.7 Right to lodge a complaint

In accordance with Article 77 GDPR, you have the right to lodge a complaint with the Federal Commissioner for Data Protection and Freedom of Information, who is the supervisory authority for data processing practised at the federal authorities.

6.8 Right to object (Article 21 GDPR)

6.8.1 Right to object to the processing of your personal data on grounds relating to a particular situation (Article 21(1) GDPR)

In accordance with Article 21 GDPR, data subjects have the right to object, on grounds of a particular situation, to any continued processing of their personal data in cases where the processing is justified by the performance of public tasks or by public and private interests. Exceptions from these rights apply as laid down in Section 36 of the Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG).

If you object to such processing, we will no longer process personal data concerning you unless we can provide proof of compelling legitimate grounds for such processing which override interests, rights and freedoms of you, or the processing is necessary for the establishment, exercise or defence of legal claims.

If you wish to exercise your right to object, it will be sufficient to inform us by e-mail to datenschutz@dwd.de

6.8.2 Right to object to the use of personal data for marketing purposes (Article 21(2) GDPR)

If your objection relates to any processing of data for direct marketing purposes, you can object here. We will immediately stop processing your data for marketing purposes. In this case, it is not necessary to provide any explanation of a particular situation.

7.    Data security

All data provided by you personally are transmitted in encrypted form using the commonly used Transport Layer Security (TLS) protocol. TLS is a well-proven standard protocol for secure data exchange, also, for example, for online banking purposes. You can see whether your connection is TLS-secured from the letter ‘s’ attached to http in your browser’s address bar (i.e. https://...) or from the lock symbol in the bottom part of your browser.

Otherwise, we use appropriate technical and organisational measures to protect your data against accidental or intentional manipulation, loss (in whole or in part), destruction or access by unauthorised persons. Our security measures are continuously reviewed and revised in line with the latest technological developments.

8.    Status and amendment of this data protection information

This is the currently valid version of our data protection information, last updated in May 2026.
In the course of future enhancements to our website and the content offered through it or in connection with changes in legal or governmental regulations, however, it may become necessary to implement amendments to this data protection regulation. You will always find the latest version of our data protection information on our website at
https://www.dwd-shop.de/index.php/default/datenschutz/
from where you can download or print it.