Data protection is important to us!
We are delighted that you are visiting our website. The protection and security of your personal information when using our website is very important to us. We would therefore like to take this opportunity to inform you about which of your personal data we collect when you visit our website and for what purposes it is used.
This privacy policy applies to the website of DOLI Elektronik GmbH, which can be accessed at the domain www.doli.de and the various subdomains (‘our website’).
Information on data protection
This privacy policy informs you about how we handle your personal data and your rights under the European General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG). DOLI Elektronik GmbH (hereinafter referred to as ‘we’ or ‘us’) is responsible for data processing.
I. General information
1. Contact
If you have any questions or suggestions regarding this information, or if you wish to contact us to assert your rights, please address your enquiry to
DOLI Elektronik GmbH
Rudolf-Diesel-Str. 3
72525 Münsingen, Germany
Telephone: +49 (0) 7381 767 320 0
Email: info@doli.de
2. Legal basis
The data protection term ‘personal data’ refers to all information relating to an identified or identifiable person. We process personal data in compliance with the relevant data protection regulations, in particular the GDPR and the BDSG. We only process data on the basis of legal permission.
We only process personal data with your consent (Section 25 (1) TDDDG or Art. 6 (1) (a) GDPR), to fulfil a contract to which you are a party, or at your request to carry out pre-contractual measures (Art. 6 (1) (b) GDPR), to fulfil a legal obligation (Art. 6 (1) (c) GDPR) or if the processing is necessary to safeguard our legitimate interests or the legitimate interests of a third party, unless your interests or fundamental rights and freedoms requiring the protection of personal data prevail (Art. 6 (1) (f) GDPR).
3. Duration of storage
Unless otherwise specified in the following information, we only store data for as long as is necessary to achieve the purpose of processing or to fulfil our contractual or legal obligations. Such legal storage obligations may arise in particular from commercial or tax law regulations.
From the end of the calendar year in which the data was collected, we will store such personal data contained in our accounting data for ten years and store personal data contained in commercial letters and contracts for six years.
In addition, we will retain data relating to consents subject to proof and to complaints and claims for the duration of the statutory limitation periods. We will delete data stored for advertising purposes if you object to processing for this purpose.
4. Categories of recipients of the data
As a matter of principle, we do not pass on your personal data to third parties unless you have consented to the transfer of data or we are entitled or obliged to transfer data due to legal provisions or official or court orders. This may include, in particular, the provision of information for the purposes of criminal prosecution, averting danger or enforcing intellectual property rights.
We use processors to process your data. The processing operations carried out by such processors include, for example, hosting, maintenance and support of IT systems, customer and order management, order processing, accounting and billing, marketing measures, and file and data carrier destruction. A processor is a natural or legal person, authority, institution or other body that processes personal data on behalf of the controller. Processors do not use the data for their own purposes, but carry out data processing exclusively for the controller and are contractually obliged to ensure appropriate technical and organisational measures for data protection. In addition, we may transfer your personal data to entities such as postal and delivery services, our bank, tax advisors/auditors or the tax authorities. Further recipients may be identified in the following information.
5. Data transfer to third countries
Visiting our website may involve the transfer of certain personal data to third countries, i.e. countries where the GDPR does not apply. Such transfers are permitted if the European Commission has determined that an adequate level of data protection is provided in such a third country. If no such adequacy decision has been made by the European Commission, personal data will only be transferred to a third country if appropriate safeguards are in place in accordance with Article 46 of the GDPR or if one of the conditions set out in Article 49 of the GDPR is met.
Unless otherwise stated below, we use the EU standard data protection clauses as appropriate safeguards for the transfer of personal data to third countries. You have the option of obtaining a copy of these EU standard data protection clauses or viewing them. To do so, please contact us at the address provided under Contact.
If we obtain your consent to transfer personal data to third countries, the transfer will be carried out on the legal basis of Article 49(1)(a) GDPR.
6. Processing when exercising your rights
If you exercise your rights under Articles 15 to 22 GDPR, we will process the personal data transmitted for the purpose of implementing these rights by us and in order to be able to provide evidence thereof. We will only process data stored for the purpose of providing information and preparing it for this purpose, as well as for data protection control purposes, and will otherwise restrict processing in accordance with Article 18 GDPR.
This processing is based on the legal basis of Art. 6(1)(c) GDPR in conjunction with Art. 15 to 22 GDPR and § 34(2) BDSG.
7. Your rights
As a data subject, you have the right to assert your rights against us. In particular, you have the following rights:
- In accordance with Art. 15 GDPR and § 34 BDSG, you have the right to request information about whether and, if so, to what extent we process personal data relating to you.
- You have the right to request that we correct your data in accordance with Art. 16 GDPR.
- You have the right to request that we delete your personal data in accordance with Art. 17 GDPR and Section 35 BDSG.
- You have the right to have the processing of your personal data restricted in accordance with Art. 18 GDPR.
- You have the right, in accordance with Art. 20 GDPR, to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format and to transmit this data to another controller.
- If you have given us separate consent to data processing, you can revoke this consent at any time in accordance with Art. 7 (3) GDPR. Such revocation does not affect the lawfulness of the processing that took place on the basis of the consent until revocation.
- If you believe that the processing of your personal data violates the provisions of the GDPR, you have the right to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR.
8. Right to object
In accordance with Art. 21(1) GDPR, you have the right to object to processing based on the legal basis of Art. 6(1)(e) or (f) GDPR for reasons arising from your particular situation. If we process personal data about you for direct marketing purposes, you may object to this processing in accordance with Art. 21(2) and (3) GDPR.
9. Data Protection Officer
You can reach our data protection officer at the following contact details:
Sunny Systems GmbH
Attn. Oliver Kunert
Data Protection Advisor
Company headquarters: Blumenweg 1, 82229 Seefeld
Branch office: Garmischer Str. 35, 81373 Munich
oliver.kunert(at)sunny-systems.com
www.sunny-systems.com
Tel: +49-89-552678-45
Fax: +49-89-552678-11
Managing Director: Andreas Kordwig
Munich Local Court HRB 122293
VAT ID No.: DE 192 109 532
II. Data processing
Data processing on our website
When you use the website, we collect information that you provide yourself. In addition, during your visit to the website, we automatically collect certain information about your use of the website. Under data protection law, the IP address is also considered personal data. An IP address is assigned to every device connected to the internet by the internet provider so that it can send and receive data.
Processing of server log files
When using our website for purely informational purposes, general information that your browser transmits to our server is initially stored automatically (i.e. not via registration). This includes, by default: browser type/version, operating system used, page accessed, previously visited page (referrer URL), IP address, date and time of the server request, and HTTP status code.
The processing is carried out to protect our legitimate interests and is based on the legal basis of Art. 6 (1) (f) GDPR. This processing serves the technical administration and security of the website. The stored data is deleted after seven days, unless there are concrete indications of a justified suspicion of illegal use and further examination and processing of the information is necessary for this reason. We are not able to identify you as a data subject on the basis of the stored information. Articles 15 to 22 GDPR therefore do not apply in accordance with Article 11(2) GDPR, unless you provide additional information enabling your identification in order to exercise your rights set out in these articles.
Cookies
We use cookies and similar technologies (‘cookies’) on our website. Cookies are small text files that are stored by your browser when you visit a website. This identifies the browser used and allows it to be recognised by web servers. You have full control over the use of cookies through your browser. You can delete cookies at any time in your browser's security settings. You can object to the use of cookies in your browser settings either generally or in specific cases.
Further information on this is available from the Federal Office for Information Security:
www.bsi-fuer-buerger.de/BSIFB/DE/Empfehlungen/EinrichtungSoftware/EinrichtungBrowser/Sicherheitsmassnahmen/Cookies/cookies_node.html
The use of cookies is technically necessary for the operation of our website and is therefore permitted without the user's consent. We may also use cookies to offer special functions and content, as well as for analysis and marketing purposes. These may also include third-party cookies. We only use such cookies that are not technically necessary with your consent in accordance with Section 25 (1) TDDDG or Art. 6 (1) (a) GDPR.
Consent management tool
The consent management tool enables users of our website to give their consent to certain cookies and data processing procedures, to revoke consent that has been given, or to object to data processing. In addition, the consent management tool helps us to provide evidence of your declarations. For this purpose, log data relating to your declarations is processed.
The processing of this data is necessary in order to be able to prove that consent has been given. The legal basis is Art. 6 (1) (c) GDPR in conjunction with Art. 7 (1) GDPR.
Contact details and enquiries
Our website offers several opportunities to contact us directly. Our website contains contact forms that you can use to send us messages. Your data is transferred in encrypted form (indicated by ‘https’ in the address bar of your browser). All data fields marked as mandatory are required to process your request. If you do not provide this information, we will not be able to process your request. The provision of further data is voluntary. Alternatively, you can also send us a message via the contact email address.
We process the data for the purpose of responding to your enquiry. If your enquiry relates to the conclusion or execution of a contract with us, Art. 6(1)(b) GDPR is the legal basis for data processing. Otherwise, we process the data on the basis of our legitimate interest in contacting enquirers. The legal basis for data processing is then Art. 6(1)(f) GDPR.
Customer portal
The customer portal is an online platform integrated into our website that allows existing DOLI customers to access special content and services.
The legal basis for the processing of personal data via the customer portal is Art. 6(1)(b) GDPR if the registered person is a Doli customer themselves, in which case it serves the purpose of contract performance. In all other cases, the legal basis is Art. 6(1)(f) GDPR and is used to protect our legitimate interest in enabling our customers' employees to use our customer portal.
Registration and enrolment
Existing DOLI customers and their employees can create a digital account for the DOLI customer portal via our websites. A personalised email address must be provided for this registration and to verify customer status. Registration is not possible without providing such an email address. We will then send an email to the address provided, containing a link for confirmation.
You can log in to the customer portal using the email address provided and a password of your choice.
Live-Chat
You can contact our customer support via a live chat service on our customer portal.
We use the Rocket.Chat service provided by Rocket.Chat Technologies Corp. (USA) for this purpose. The processing of your IP address is technically necessary for the integration of the service so that the content can be sent to your browser. In addition, the content of the chat and, if applicable, certain other information about the chat history (e.g. duration of the chat and response and reaction times) are processed by the provider via the service. This data processing is carried out by Rocket.Chat Technologies Corp. as a processor. Please also note the information in the section ‘Data transfer to third countries’.
Newsletter
Registration and deregistration:
We offer the option of subscribing to our newsletter on our website. Once you have subscribed, we will regularly inform you about the latest news regarding our offers. A valid email address is required to subscribe to the newsletter.
To verify your email address, you will first receive a registration email that you must confirm via a link (double opt-in). When you subscribe to the newsletter on our website, we process personal data such as your email address and name on the basis of the consent you have given. The processing is based on the legal basis of Art. 6 (1) (a) GDPR. You can revoke your consent at any time with future effect, for example via the ‘Unsubscribe’ link in the newsletter or by contacting us via the above-mentioned channels. The legality of the data processing operations already carried out remains unaffected by the revocation.
When you subscribe to the newsletter, we store your registration data and the date of registration. The processing of this data is necessary in order to be able to prove that consent has been given. The legal basis arises from our legal obligation to document your consent (Art. 6 (1) (c) in conjunction with Art. 7 (1) GDPR).
YouTube
We use the YouTube service provided by Google Ireland Limited (Ireland/EU) on our website to embed videos.
For such integration, processing of your IP address is technically necessary so that the content can be sent to your browser. Your IP address is therefore transmitted to Google, and Google may set its own cookies. We use YouTube in ‘extended data protection mode’ so that YouTube does not set any cookies to analyse usage behaviour.
YouTube is only used with your consent in accordance with Section 25 (1) TDDDG or Article 6 (1) (a) GDPR.
Users can find further information on data protection at Google in Google's privacy policy at www.google.com/policies/privacy.
We use the LinkedIn Insight Tag, a marketing product from LinkedIn Ireland Unlimited Company (LinkedIn Ireland/EU), on our website. Information about LinkedIn Ireland's contact details and the contact details of LinkedIn Ireland's data protection officer can be found in LinkedIn's data policy at www.linkedin.com/legal/privacy-policy.
The LinkedIn Insight Tag is a JavaScript code snippet that is triggered by LinkedIn when you visit our website and stores a cookie on your device. Such storage of information by the LinkedIn Insight Tag or access to information already stored on your device, as well as further processing of personal data in connection with the LinkedIn Insight Tag, only takes place with your consent. The legal basis for the collection and transfer of personal data by us to LinkedIn Ireland is therefore Art. 6 (1) (a) GDPR.
Using the LinkedIn Insight tag, we can perform various functions, which we describe in detail below.
LinkedIn conversion tracking is an analytics feature supported by the LinkedIn Insight tag. The LinkedIn Insight tag enables the collection of data about visits to our website, including URL, referrer URL, IP address, device and browser characteristics (user agent) and timestamp. IP addresses are truncated or (if used to reach members across devices) hashed. LinkedIn does not provide us with any personal data, but only provides reports (in which you are not identified) on the website audience and ad performance. This allows us to measure the effectiveness of LinkedIn ads for statistical and market research purposes.
The direct identifiers of members are removed by LinkedIn within seven days in order to pseudonymise the data. LinkedIn then deletes this remaining pseudonymised data within 180 days.
This processing is carried out for the purpose of obtaining information about our website target group and a report on the effectiveness of LinkedIn campaigns.
We also use the Matched Audiences service to target our advertising campaigns to specific audiences. LinkedIn Matched Audiences and related data integrations allow us to target advertising to specific audiences based on data we provide to LinkedIn (e.g., company lists, hashed contact information, device identifiers, or event data such as websites visited).
This processing is carried out for the purpose of marketing our offers through the targeted display of advertising.
We have entered into an agreement with LinkedIn regarding joint responsibility for processing, which specifies the distribution of data protection obligations between us and LinkedIn. You can view this agreement here: legal.linkedin.com/pages-joint-controller-addendum.
Please note that, in accordance with LinkedIn's privacy policy, personal data may also be processed by LinkedIn in the United States or other third countries. LinkedIn only transfers personal data to countries for which the European Commission has issued an adequacy decision in accordance with Article 45 of the GDPR or on the basis of appropriate safeguards in accordance with Article 46 of the GDPR.
III. Data processing on our social media pages
We are represented on several social media platforms with a company page. In this way, we would like to offer further opportunities to provide information about our company and to exchange ideas.
When you visit or interact with a profile on a social media platform, personal data about you may be processed. The information associated with a social media profile also regularly constitutes personal data. This includes messages and statements made using the profile. In addition, when you visit a social media profile, certain information about it is often automatically collected, which may also constitute personal data.
1. Visit to a social media site
a. Instagram
When you visit our Instagram page, where we present our company or individual products from our range, certain information about you is processed. Meta Platforms Ireland Limited (Ireland/EU – ‘Meta’) is solely responsible for this processing of personal data. Further information about Meta's processing of personal data can be found at www.facebook.com/privacy/explanation. Meta offers the option to object to certain data processing; information on this and opt-out options can be found at www.facebook.com/settings.
Meta provides us with anonymised statistics and insights for our Instagram page, which help us gain insights into the types of actions people take on our page (known as ‘page insights’). These page insights are generated on the basis of certain information about people who have visited our page. This processing of personal data is carried out by Meta and us as joint controllers. The processing serves our legitimate interest in evaluating the types of actions taken on our page and improving our page based on these insights. The legal basis for this processing is Art. 6(1)(f) GDPR. We cannot assign the information obtained via Page Insights to individual user profiles that interact with our Instagram page. We have entered into an agreement with Meta on processing as joint controllers, which specifies the distribution of data protection obligations between us and Meta. Details on the processing of personal data for the creation of Page Insights and the agreement concluded between us and Meta can be found at
www.facebook.com/legal/terms/information_about_page_insights_data. With regard to this data processing, you also have the option of asserting your rights as a data subject (see ‘Your rights’) against Meta. Further information on this can be found in Meta's privacy policy at www.facebook.com/privacy/explanation.
Please note that, in accordance with Meta's privacy policy, user data may also be processed in the United States or other third countries. Meta only transfers user data to countries for which the European Commission has issued an adequacy decision pursuant to Art. 45 GDPR or on the basis of appropriate safeguards pursuant to Art. 46 GDPR.
b. LinkedIn
LinkedIn Ireland Unlimited Company (Ireland/EU – ‘LinkedIn’) is solely responsible for the processing of personal data when you visit our LinkedIn page. Further information about the processing of personal data by LinkedIn can be found at www.linkedin.com/legal/privacy-policy.
When you visit our LinkedIn company page, follow this page or engage with the page, LinkedIn processes personal data to provide us with statistics and insights in anonymised form. This gives us insights into the types of actions people take on our page (so-called page insights). To this end, LinkedIn processes in particular data that you have already provided to LinkedIn via the information in your profile, such as data on your job title, country, industry, length of service, company size and employment status. In addition, LinkedIn will process information about how you interact with our LinkedIn company page, e.g. whether you are a follower of our LinkedIn company page. LinkedIn does not provide us with any personal data about you through Page Insights. We only have access to the aggregated Page Insights.
It is also not possible for us to draw conclusions about individual members based on the information provided by Page Insights. This processing of personal data within the scope of Page Insights is carried out by LinkedIn and us as joint controllers. The processing serves our legitimate interest in evaluating the types of actions taken on our LinkedIn company page and improving our company page based on these findings. The legal basis for this processing is Art. 6(1)(f) GDPR. We have entered into an agreement with LinkedIn on processing as joint controllers, which specifies the distribution of data protection obligations between us and LinkedIn. The agreement is available at: legal.linkedin.com/pages-joint-controller-addendum. The following applies thereafter:
- LinkedIn and we have agreed that LinkedIn is responsible for enabling you to exercise your rights under the GDPR. You can contact LinkedIn online via the following link (www.linkedin.com/help/linkedin/ask/PPQ) or reach LinkedIn using the contact details in the privacy policy. You can contact the Data Protection Officer at LinkedIn Ireland via the following link: www.linkedin.com/help/linkedin/ask/TSO-DPO. You can also contact us using the contact details provided to exercise your rights in relation to the processing of personal data in the context of Page Insights. In such cases, we will forward your request to LinkedIn.
- LinkedIn and we have agreed that the Irish Data Protection Commission is the lead supervisory authority that oversees the processing for Page Insights. You always have the right to lodge a complaint with the Irish Data Protection Commission (see www.dataprotection.ie) or any other supervisory authority.
Please note that, in accordance with LinkedIn's privacy policy, personal data may also be processed by LinkedIn in the United States or other third countries. LinkedIn only transfers personal data to countries for which the European Commission has issued an adequacy decision in accordance with Article 45 of the GDPR or on the basis of appropriate safeguards in accordance with Article 46 of the GDPR.
2. Comments and direct messages
We also process information that you have provided to us via our company page on the respective social media platform. Such information may include the username used, contact details or a message to us. We carry out this processing as the sole controller.
We process this data on the basis of our legitimate interest in contacting enquirers. The legal basis for data processing is Art. 6(1)(f) GDPR. Further data processing may take place if you have given your consent (Art. 6(1)(a) GDPR) or if this is necessary to fulfil a legal obligation (Art. 6(1)(c) GDPR).
IV. Further data processing
1. Customer and prospect data
When you contact our company as a customer or prospective customer, we process your data to the extent necessary to establish or implement the contractual relationship. This regularly includes the processing of the personal master data, contract data and payment data provided to us, as well as the contact and communication data of our contact persons at commercial customers and business partners.
The legal basis for this processing is Art. 6 (1) (b) GDPR. We also process customer and prospective customer data for evaluation and marketing purposes. This processing is carried out on the legal basis of Art. 6 (1) (f) GDPR and serves our interest in further developing our offering and providing you with targeted information about our offerings. Further data processing may take place if you have given your consent (Art. 6(1)(a) GDPR) or if this is necessary to fulfil a legal obligation (Art. 6(1)(c) GDPR).
2. Use of the email address for marketing purposes
We may use the email address you provided during registration or when placing an order to inform you about similar products and services we offer. The legal basis for this is Art. 6 (1) (f) GDPR in conjunction with § 7 (3) UWG (German Unfair Competition Act). You can object to this at any time without incurring any costs other than the transmission costs according to the basic rates.
To do so, you can unsubscribe by clicking on the unsubscribe link contained in every mailing or by sending an email to info@doli.de.
3. Customer satisfaction surveys
If you contact us via our hotline in response to a customer enquiry, if a service technician has visited your premises, or if you participate in one of our events, we may subsequently send you an email asking you to provide feedback on your satisfaction and to share any suggestions for improvement or further comments with us.
The link to our customer satisfaction survey, which is sent by email following an enquiry via our hotline, includes the individual case number of the enquiry. This enables us to assign the results of the satisfaction survey to the individual customer enquiry. In some surveys, you also have the option of entering your contact details yourself. This gives us the opportunity to contact you again and respond to your rating and further comments.
We use the SurveyMonkey service provided by SurveyMonkey Europe UC (Ireland/EU), a provider commissioned by us, to conduct customer satisfaction surveys.
The use of your email address and the further processing of your data is based on Art. 6(1)(f) GDPR and is based on our legitimate interest in reviewing and improving the quality of our services. You may object to this use of your email address at any time.
4. Applications
When you apply to our company, we process your application data exclusively for purposes related to your interest in current or future employment with us and the processing of your application.
Your application will only be processed and reviewed by the relevant contact persons at our company. All employees entrusted with data processing are obliged to maintain the confidentiality of your data. If we are unable to offer you employment, we will retain the data you have provided for up to six months after any rejection for the purpose of answering questions relating to your application and rejection. This does not apply if legal provisions prevent deletion, if further storage is necessary for the purpose of providing evidence, or if you have expressly consented to longer storage. The legal basis for data processing is Section 26 (1) sentence 1 BDSG. If we store your applicant data for longer than six months and you have expressly consented to this, we would like to point out that this consent can be freely revoked at any time in accordance with Art. 7 (3) GDPR. Such revocation does not affect the lawfulness of the processing that took place on the basis of the consent until revocation.
Last updated on
19 September 2025, 12:00 p.m.