Privacy Policy

1. Controller

2. Hosting and connection data

When you access this website, technically necessary connection data is processed (in particular IP address, time of access, page requested, browser type and operating system) in order to provide the website securely and reliably and to prevent misuse, for example of the contact form. The website is hosted on servers in Germany.

The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in secure and functional operation).

3. Contacting us

If you contact us via the enquiry form or by email, we process the details you provide (e.g. email address, company, message and your selections in the form) solely to handle your enquiry and for the related communication.

The legal basis is Art. 6 (1) (b) GDPR where your enquiry is aimed at entering into or performing a contract; otherwise Art. 6 (1) (f) GDPR (legitimate interest in responding to enquiries).

Data is only passed on where this is necessary to operate the website or to handle your enquiry, or where we are legally required to do so.

4. Service providers

To operate the website and deliver enquiries we use hosting and email service providers acting as processors under Art. 28 GDPR on the basis of corresponding agreements. Where data is transferred to a country outside the EU/EEA in this context, this takes place only on the basis of the safeguards provided for by law (Art. 44 et seq. GDPR, in particular the EU Commission's standard contractual clauses).

5. Cookies and tracking

We do not use any analytics, marketing or tracking services and set no cookies. Fonts and all other resources are served from our own server. If you switch the colour scheme (light/dark), that setting is stored only locally in your browser and is not transmitted to us.

6. Retention

We keep enquiry data for as long as necessary to handle your enquiry and the subsequent communication. If a business relationship follows, statutory retention periods additionally apply. Connection data is kept only as long as required for secure operation and is then deleted.

7. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20), as well as the right to object to processing based on Art. 6 (1) (f) GDPR (Art. 21). An informal email to info@dufirst.de is sufficient.

You may also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.