Our data protection policy

English translation for information only. Only the German version is binding.

Data protection information

– www.dwd-shop.de –

During your use of this website, certain personal data concerning you will be processed and stored by us (as the data controller) for the duration necessary for the performance of the agreed purposes and compliance with legal obligations. Please read on to find out what personal data we collect, how we process the data and what your rights are in this context.
According to Article 4(1) of the General Data Protection Regulation (GDRP), ‘personal data’ are defined as any information relating to an identified or identifiable natural person.

1.    Name and contact details of the data controller

This data protection information shall apply to the processing of data collected on the website www.dwd-shop.de by the following data controller:

Deutscher Wetterdienst

Frankfurter Straße 135

63067 Offenbach
Germany

E-mail:    dwd-shop@dwd.de
Tel.:    +49 (0)69 / 8062-3200

Our Data Protection Officer can be contacted at the above address (attn: Datenschutzbeauftragter) or by e-mail to datenschutz@dwd.de.

Please feel free to contact our Data Protection Officer if you have any question relating to the data protection legislation or your rights as a data subject.

2.    Processing of personal data and purposes of processing

a)    Web hosting

The website is operated by the web hosting company ‘Staatsbetrieb Sächsische Informatik Dienste (www.sid.sachsen.de, abbreviated as SID in the following), who are acting on our behalf through the Federal Information Technology Centre (ITZB). SID keeps and manages the website on their own servers (web hosting).
In order to offer this website we need the service of a web hosting provider. Our use of SID’s services is based on our legitimate economic interest in presenting our services on this website in accordance with Article 6(1)(f) GDPR.
In connection with the hosting of the website, SID – on our behalf – processes personal data collected during the use of the website and the shop.
We have concluded a data processing contract with SID. Through this contract, SID guarantees that the data are processed in compliance with the GDPR and that the rights of the data subject are protected.

b)    During the visit of the website

You can access the website www.dwd-shop.de without having to disclose your identity. The browser you are using on your end device will only send certain pieces of information automatically to the server of our website (such as date and time of access, name and URL of the file requested).
This includes the IP address of the end device you are using for the request. Once you have finished using the website, it will be rendered anonymous and stored in a so-called log file.
Processing of your IP address is necessary for technical and administrative purposes to ensure service connection and connection stability, guarantee the security and good functioning of our website and, if need be, prosecute any illegal attacks on it.
The legal basis for processing your IP address is Article 6(1)(f) GDPR. Our legitimate interest to do this is based on our aforementioned interest in the security of our website and the necessity to ensure its trouble-free operation.
The processing of your IP address and other information from the log file does not enable us to draw any direct conclusions regarding your identity.
Please note that we also use cookies on our web pages. For more detailed information about this please refer to number 4 of this data protection information.

c)    When setting up a user account

To buy from our shop you must have a user account with us. For setting up a user account for you we request the following mandatory data from you:

• title, forename, name
• address and
• a valid e-mail address.

These data are collected in order to:

• know who we are entering a contract with
• check the plausibility of the data provided
• offer you maximum comfort as well as a quick and easy and individual shopping experience as you go through the ordering process.

In addition, you have to set a password of your own choice. In combination with your e-mail address, it allows you to access your user account. Via your user account, you can view and change the personal data we have stored about you at any time. These data are used for your identification and for invoicing.
It is also possible to provide additional data (such as name of company, VAT No., state, fax and telephone number). Providing this information is voluntary and not necessary for setting up a user account. But it makes identifying and contacting you much easier and helps us to provide you with a more detailed invoice. We will only contact you by phone if there is a problem with your order. If a VAT No. is indicated, it will be checked automatically and thus assigned to a customer group.
We will only process your personal data for the purposes of a user account if you have freely given your consent for this (Article 6(1)(a) GDPR).
When your user account is deleted, your personal data will be removed from any further use unless retention and documentation obligations pursuant to the German Commercial, Penal and Fiscal Codes (HGB, StGB and AO) prescribe longer storage periods or, in accordance with Article 6(1)(a) GDPR, you have given your consent to us to hold your data longer than that.

d)    When ordering from the online shop

If you wish to order online any of the products we offer on the website, you will not only have to provide all the mandatory data requested in number 2 c) but also all payment details required for the payment method chosen by you.
These data are collected in order to:

• identify you as our contract partner
• check the plausibility of the data provided
• process the payment for your order
• deal with any warranty claims that may arise or claims we may have against you.

You can also choose to indicate a different invoice or shipping address.
Processing of these data takes place at your request and is necessary for the mentioned purposes  of contract performance or taking of pre-contractual measures (Article 6(1)(b) GDPR).
The personal data which we have collected about you for processing the order are kept until the end of the standard warranty period; they will then be deleted unless, in accordance with Article 6(1)(c) GDPR, our retention and documentation obligations pursuant to the German Commercial, Penal and Fiscal Codes (HGB, StGB and AO) prescribe longer storage periods or, in accordance with Article 6(1)(a) GDPR, you have given your consent to us to hold your data longer than that.

3.    Disclosure of personal data to third parties

We disclose your personal data to third parties where it is permitted by law and necessary for the performance of a contract concluded with you (Article 6(1)(b) GDPR) or for the purposes of the legitimate interests pursued by us or third parties (Article 6(1)(f) GDPR). This may particularly include the communication of data needed for the delivery of products ordered by you to courier companies or the transfer of payment details to payment providers or banking institutions in order to carry out a payment. Third parties  are permitted to use the data only for the specified purposes.
Apart from these cases, personal data may only be disclosed if

• you have given us your explicit consent to it (Article 6(1)(a) GDPR), and
• there exists a legal obligation to disclose your data (Article 6(1)(c)).

Personal data are not transferred to a third country or international organisation.

4.    Cookies

We use cookies on our web pages. Cookies are small files that are automatically generated by your browser and are stored on your end device (laptop, tablet, smartphone, etc.) when you view our website. Cookies do not cause damage to your device and do not contain viruses, Trojan horses or other malicious software.
A cookie stores information that arises from the end device used in each specific case. However, this does not mean that, through this, we can immediately obtain knowledge of your identity.
We use cookies to make your use of our website more comfortable. For this reason, we use so-called session cookies; these allow us to keep track of the individual pages you have viewed, to recognize whether you are logged in your user account and to remember the contents of your shopping basket during your visit to our website. These session cookies are deleted automatically when you leave the website.
A full list of all cookies produced by the shop software can be found here:
https://www.dwd-shop.de/index.php/privacy-policy-cookie-restriction-mode

The personal data that are processed by cookies are necessary for the purposes of the legitimate interests pursued by us or third parties (Article 6(1)(f) GDPR).
Most browsers accept cookies automatically, but you can alter the settings of your browser to reject storage of cookies on your computer or to be always notified before a new cookie is issued. You should be aware, however, that if you disable cookies, you may lose some functionality of our website.

5.    OpenStreetMap

Our website has maps from OpenStreetMap embedded in it. OpenStreetMap is a project for collecting free spatial data in a database and holding them available for free re-use.
To enable the map to be displayed your IP address and the URL of the requesting web page are transferred to OpenStreetMap. The embedding of this function is based on Article 6(1)(f) GDPR. It takes place in order to improve our website in terms of user-friendliness and make its content more interesting. This is a legitimate interest of ours in the meaning of the aforementioned rule.
More information about data protection in connection with OpenStreetMap can be found here: https://wiki.osmfoundation.org/wiki/Privacy_Policy

6.    Your rights as data subject

You have the right:

• to withdraw a consent you have given to us at any time (Article 7(3) GDPR). As a consequence, we are no longer permitted to continue processing your personal data in the way for which you had originally given us your consent.
• to request information about what personal data we are processing about you (Article 15 GDPR). In particular, you can request information about the purposes for which your personal data are processed and which categories of personal data are processed; about the categories of recipients to whom your personal data have been or will be disclosed; about the period for which the personal data will be stored; about the existence of a right to request rectification or erasure of your personal data as well as to request a restriction of the processing or to completely object the processing of your personal data; about the right to lodge a complaint; and about the source of the data where these have not been collected by us.
• to obtain rectification of inaccurate personal data and have incomplete personal data completed without undue delay (Article 16, GDPR);
• to obtain erasure of the personal data we have stored about you unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims (Article 17 GDPR);
• to obtain restriction of the processing of your personal data (Article 18 GDPR) where the accuracy of your personal data is contested by you; where the processing of the data is unlawful, and you oppose their erasure;  and where we no longer need the data, but you require them for the establishment, exercise or defence of legal claims or you have objected to the processing of personal data (Article 21, GDPR);
• to receive the personal data which you have provided to us about you in a structured, commonly used and machine-readable format or request their transmission to another controller (Article 20 GDPR);
• to lodge a complaint with a supervisory authority (Article 77 GDPR). In general, you may contact the supervisory authority responsible for your  habitual residence, place of work or the Deutscher Wetterdienst’s place of business.

Information on your right to object (Article 21, GDPR)

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you on the basis of points (e) (processing necessary for performance of a task carried out in the public interest) and (f) (processing based on a balance of interests) of Article 6(1) GDPR.
If you object to such processing, we will no longer process personal data concerning you unless we can provide proof of compelling legitimate grounds for such processing which override interests, rights and freedoms of you or the processing is necessary for the establishment, exercise or defence of legal claims.
If you object to processing of data for direct marketing purposes, we will immediately stop processing personal data concerning you for such purposes. In this case, it is not necessary to provide any explanation of a particular situation.
If you wish to exercise your right to object, it will be sufficient to inform us by e-mail to datenschutz@dwd.de. 

7.    Data security

All data provided by you personally are transmitted in encrypted form using the commonly used Transport Layer Security (TLS) protocol. TLS is a well-proven standard protocol for secure data exchange, also, for example, for online banking purposes. You can see whether your connection is TLS-secured from the letter “s” attached to http in your browser’s address bar (i.e. https://...) or from the lock symbol in the bottom part of your browser.
Otherwise, we use appropriate technical and organisational measures to protect your data against accidental or intentional manipulation, loss (in whole or in part), destruction or access by unauthorized persons. Our security measures are continuously reviewed and revised in line with the latest technological developments.

8.    Status and amendment of this data protection information

This is the currently valid version of our data protection information, last updated in May 2018.
In the course of future enhancements to our website and the content offered through it or in connection with changes in legal or governmental regulations, however, it may become necessary to implement amendments to this data protection regulation. You will always find the latest version of our data protection information on our website at
https://www.dwd-shop.de/index.php/default/datenschutz/
from where you can download or print it.