Privacy policy

1. Controller

The controller responsible for processing personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Daylo Casuals UG (haftungsbeschränkt)
Otto-Hahn-Straße 50
63303 Dreieich
Deutschland
Email: info@daylocasuals.com
Phone: +49 1521 5402242

3. Hosting and server log files

This website is hosted by: Namecheap, Inc., 4600 East Washington Street, Suite 305, Phoenix, AZ 85034, USA. Each time a page is requested, the server automatically processes data transmitted by your browser: IP address, date and time of access, requested address, referrer URL, browser type and operating system.

This processing is necessary to deliver the website and keep it secure and stable. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the secure and error-free operation of the website. Log files are deleted after 14 days unless they are needed to investigate a security incident.

We have concluded a data processing agreement with the host under Art. 28 GDPR. The hoster's servers are located in the USA (Phoenix, Arizona). We base the transfer on the standard contractual clauses in the data processing agreement (Art. 46(2)(c) GDPR).

4. Cookies and consent

We set cookies that are technically necessary to run this website, and statistics cookies only if you expressly allow them. We do not use third-party advertising or tracking cookies.

The legal basis for necessary cookies is § 25(2) no. 2 TDDDG in conjunction with Art. 6(1)(f) GDPR. Statistics cookies are set only with your consent under § 25(1) TDDDG and Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future using the Cookie settings link in the footer of every page. A list of all cookies and their duration is on the Cookie settings page.

5. Web analytics with Matomo

If you have consented, we use the open source software Matomo, running on our own server. The data is not passed on to third parties. Your IP address is shortened before it is stored. This tells us which pages are visited and how often, so we can improve the site.

The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Analytics data is deleted after 13 months. Web analytics is currently not active; we do not set statistics cookies.

6. Enquiry forms, stock quote basket and sample requests

When you send us a request through a form or the stock quote basket, we process the data you enter, depending on the form: name, company, email address, phone number, country, your message, the requested items and quantities, and uploaded files such as tech packs or logos. We also store the selected language and the time of the request.

We use this data to handle your request, prepare a quote and contact you. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) and, where you enquire on behalf of a company, Art. 6(1)(f) GDPR; our legitimate interest is handling business enquiries.

If no contract is concluded, we delete the request after 12 months. If a contract is concluded, the statutory retention periods under German commercial and tax law (§ 257 HGB, § 147 AO) of up to ten years apply.

7. Spam protection

To protect our forms against automated submissions we use ALTCHA, a small calculation your browser solves in the background. ALTCHA is served from our own server, sets no cookies and transfers no data to third parties. We also check how much time passes between loading and submitting a form. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is protection against abuse.

8. Email delivery

Notifications about incoming requests and our replies are sent via our hoster's email service (Namecheap, Inc., Phoenix, USA, see section 3). We have concluded a data processing agreement with the provider under Art. 28 GDPR.

9. Fonts and external content

Fonts and scripts are loaded from our own server. Visiting this website does not create a connection to servers of Google or other third parties.

10. Recipients

Within our company, only the people who need your data to handle your request have access to it. External service providers, for example for hosting and email, process data only on our behalf and according to our instructions. We do not sell your data.

11. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR). You can withdraw any consent at any time with effect for the future (Art. 7(3) GDPR). To do so, write to info@daylocasuals.com.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:
Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, Gustav-Stresemann-Ring 1, 65189 Wiesbaden

12. Right to object under Art. 21 GDPR

Where we process data on the basis of Art. 6(1)(f) GDPR, you may object to this processing at any time on grounds relating to your particular situation. We will then stop processing the data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims.

13. Required fields and automated decisions

Providing information in our forms is voluntary. Without the fields marked as required, however, we cannot process your request. We do not make decisions based solely on automated processing within the meaning of Art. 22 GDPR.