Legal
Privacy policy
This English translation is provided for convenience only. Only the German version is legally binding.
Unless otherwise stated below, the provision of your personal data is neither required by law or contract nor necessary for the conclusion of a contract. You are not obliged to provide the data. Not providing it has no consequences. This applies only insofar as no other information is given for the processing operations described below.
“Personal data” means any information relating to an identified or identifiable natural person.
Controller
Pascal Mattel
Rosemeyerstr. 14
44139 Dortmund
Germany
Email: kontakt@decotec-germany.de
1) Hosting and server log files
This website is hosted by united-domains, Gautinger Straße 10, 82319 Starnberg, Germany. You can visit our website without providing any personal information. Each time you access our website, your internet browser transmits usage data to our host, which is stored in log data (so-called server log files). This stored data includes in particular:
- pages accessed
- date and time of access
- IP address
- browser type
- operating system
- referrer URL
- amount of data transferred
- requesting provider
Processing is based on Art. 6 (1) (f) GDPR on the basis of our overriding legitimate interest in ensuring the trouble-free and secure operation of our website.
2) SSL/TLS encryption
For security reasons, this website uses SSL or TLS encryption. You can recognise an encrypted connection by “https://” in the address bar of your browser.
3) Contacting us
3.1 Contact by email or phone
If you contact us for business purposes by email or phone, we collect your personal data (e.g. name, email address, phone number, content of your message) only to the extent you provide it. The data is processed in order to handle and answer your enquiry.
If you contact us in connection with pre-contractual measures (e.g. advice on a purchase, preparation of a quotation) or in relation to a contract already concluded between you and us, the data is processed on the basis of Art. 6 (1) (b) GDPR. If you contact us for other reasons, the data is processed on the basis of Art. 6 (1) (f) GDPR on the basis of our overriding legitimate interest in handling and answering your enquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you based on Art. 6 (1) (f) GDPR.
Your data will be deleted once your enquiry has been fully processed, subject to statutory retention periods, unless you have consented to further processing and use.
3.2 Contact form
If you use our contact form or the “Become a partner” form, the details you provide (name, email address and – where provided – company, position, phone number, your message and, for sample requests, the requested samples and your delivery address) are transmitted to our server in encrypted form and forwarded from there by email to the responsible mailbox. Required fields are marked. For sending emails and for our mailboxes we use Microsoft 365, provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. To prevent misuse, your IP address is kept on our server only in encrypted (hashed) form for a maximum of 10 minutes and then deleted.
Purpose, legal basis and storage period are as described under 3.1. The short-term storage of the IP hash is based on Art. 6(1)(f) GDPR (legitimate interest in protecting the form against spam and misuse).
Data transfer to the USA: A transfer to Microsoft Corporation in the USA cannot be ruled out. Microsoft Corporation is certified under the EU-US Data Privacy Framework.
3.3 Contact via WhatsApp Business
Our website contains a WhatsApp button. This is a simple link: no data is transmitted to WhatsApp when you visit our website. WhatsApp is only opened when you click the button.
If you contact us for business purposes via WhatsApp, we use WhatsApp Business, a service of WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. The data is processed in order to handle and answer your enquiry. For this purpose, we process in particular:
- phone number
- name (if provided)
- chat content
The legal basis is Art. 6 (1) (b) GDPR (where contract-related/pre-contractual) and otherwise Art. 6 (1) (f) GDPR (legitimate interest in quick and uncomplicated communication).
Data transfer to the USA: Data may be transferred to the USA. This takes place on the basis of the adequacy decision for the EU-US Data Privacy Framework.
We use your personal data only to process your enquiry. Your data will then be deleted, subject to statutory retention periods, unless you have consented to further processing and use.
4) Newsletter
You can subscribe to our newsletter on our website. We use CleverReach (CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede, Germany) for registration and sending. When you submit the sign-up form, the data you provide (email address, optionally salutation, first name, last name and company) as well as technical data such as your IP address and the time of registration are transmitted directly to and stored by CleverReach. A CleverReach page opens in a new window in the process.
After you sign up, you will receive an email in which you must confirm your registration (double opt-in); only then will you be added to the mailing list. CleverReach also evaluates whether a newsletter was opened and which links were clicked in order to improve delivery.
The legal basis is Art. 6 (1) (a) GDPR (consent).
Withdrawal: You can withdraw your consent at any time with effect for the future, e.g. via the unsubscribe link in every newsletter or by email to kontakt@decotec-germany.de. After you unsubscribe, your email address will be removed from the mailing list.
5) Google Maps
On our home page, you can display a map from Google Maps. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
The map is only loaded when you click “Load map”. Before that, only a preview image from our own server is displayed and no data is transmitted to Google. After your click, in particular your IP address, browser information and the page accessed are transmitted to Google; Google may set cookies in the process.
The legal basis is your consent given by clicking, in accordance with Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG (German Telecommunications Digital Services Data Protection Act). The consent applies only to the respective page view.
Data transfer to the USA: Data may be transferred to the USA. Google LLC is certified under the EU-US Data Privacy Framework. Further information: https://policies.google.com/privacy
6) Room planner (Roomvo)
On our website you can open a room planner that lets you view our floors virtually in your own room. The provider is Leap Tools Inc. (Roomvo), Toronto, Ontario, Canada.
The room planner is only loaded after you click “Load room planner” in the notice window. Before that, no data is transmitted to Roomvo. After your consent, in particular your IP address, browser and device information, the page accessed and your use of the room planner (e.g. selected products) are transmitted to Roomvo. If you upload or take a photo of your room, it is also transmitted to and processed by Roomvo. Roomvo may use cookies and similar technologies in the process.
The legal basis is your consent in accordance with Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG. Your consent applies to the current browser session (for this purpose, your browser stores a note in session storage); you can withdraw it at any time with effect for the future by closing your browser or deleting the website data in your browser.
Data transfer to Canada: The European Commission has issued an adequacy decision for Canada. Further information can be found in Roomvo’s privacy policy at get.roomvo.com.
7) Cookies and local storage
This website itself does not set any cookies and does not use any analytics, tracking or marketing services. Cookies may only be set by Roomvo once you have opened the room planner (see section 6).
So that the newsletter sign-up window appears only once per visit, your browser stores a note for the duration of the session (“session storage”). It is deleted automatically when you close the browser; no data is transmitted to us or to third parties. This storage is strictly necessary for the service you requested (Section 25 (2) No. 2 TDDDG); the legal basis for the associated processing is Art. 6 (1) (f) GDPR (legitimate interest in a user-friendly presentation).
You can find more information on our Cookies page.
8) Fonts
The fonts used on this website are stored locally on our server. When you visit the website, no connection is made to servers of Google, Adobe or other font providers.
9) Links to social networks
On our website you will find links to our profiles on Facebook, Instagram, LinkedIn, YouTube and TikTok. These are simple links, not embedded plugins: no data is transmitted to these networks when you visit our website. Only when you click a link are you taken to the respective provider’s page, to which its privacy policy applies.
10) Orders and contract processing
9.1 Collection and processing
For orders, we process in particular the following data:
- name
- address
- order information
Providing this data is necessary to conclude the contract. If it is not provided, no contract can be concluded. Legal basis: Art. 6 (1) (b) GDPR.
9.2 Disclosure to third parties
Your data is passed on where necessary, e.g. to:
- shipping service providers
- logistics service providers
- payment service providers
- JTL Software GmbH (merchandise management/order processing)
The scope of the data transferred is limited to the minimum.
9.3 Shipping information
We only pass on your email address to shipping service providers with your express consent, in order to inform you about the shipping status. Legal basis: Art. 6 (1) (a) GDPR.
11) Storage period
Unless a more specific storage period is stated in this privacy policy, personal data will be deleted as soon as the purpose of processing no longer applies and there are no statutory retention obligations to the contrary.
12) Rights of the data subject
Where the legal requirements are met, you have the following rights:
- right of access (Art. 15 GDPR)
- right to rectification (Art. 16 GDPR)
- right to erasure (Art. 17 GDPR)
- right to restriction of processing (Art. 18 GDPR)
- right to data portability (Art. 20 GDPR)
- right to withdraw consent given with effect for the future (Art. 7 (3) GDPR)
Right to lodge a complaint with a supervisory authority
In accordance with Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data is not lawful. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW).
Right to object
If processing is based on Art. 6 (1) (f) GDPR, you have the right to object to this processing at any time with effect for the future, on grounds relating to your particular situation (Art. 21 GDPR). Once you have objected, processing will stop unless there are compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
13) Status of this privacy policy
Last updated: October 2026