Privacy Policy

(02/2026)

Below, we provide information about the collection of personal data when using this website. Personal
data is any data that can be related to you personally, e.g. name, address, email addresses, user
behaviour.

1. Data controller and contact person

Responsible party within the meaning of the GDPR

DILO Armaturen und Anlagen GmbH
Frundsbergstr. 36
87727 Babenhausen

Tel.: +49 8333 302 0
Fax: +49 8333 302 52
E-Mail: info@dilo.eu

 

represented by the managing directors Christian Scheller, Dr Klaus Jostschulte

 

Data protection officer

 

If you have any questions about data protection, please contact our data
protection officer:

• by Email: datenschutz@dilo.eu
• by post: to the above address with the addition "Data Protection"

 

2. Your rights when using the website

Pursuant to

• Art. 15 GDPR, you have the right to obtain information about your data stored by us that is
  collected during your visit to the website;
• Art. 16 GDPR, you have the right to request the correction of inaccurate or incomplete personal
  data stored by us;
• Art. 17 GDPR, you have the right to request the erasure deletion of your personal data stored
  by us, unless processing is necessary for the fulfilment of a legal obligation or for the assertion,
  exercise or defence of legal claims;
• Art. 7(3) GDPR, you have the right to withdraw your consent to processing at any time. As a
  result, we will no longer be permitted to continue processing data based on this consent in the
  future. The lawfulness of the processing carried out on the basis of the consent until revoked by
  the data subject remains unaffected.
• Art. 20 GDPR, you have the right to receive your personal data that you have provided to us in a
  structured, commonly used and machine-readable format or to request its transmission to
  another controller;
• Art. 77 GDPR, you have the right to lodge submit a complaint with the competent data
  protection supervisory authority if you believe that the processing of personal data collected
  during your visit to our website has violated your right to informational self-determination. The
  Bavarian State Office for Data Protection Supervision (BayLDA) is responsible for DILO Armaturen
  und Anlagen GmbH.
• If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1)
  (f) GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, provided that there are reasons for this arising from your particular situation or the objection is directed against direct marketing. In the latter caseyou have a general right to object, which we will implement without you having to specify a particular situation.

3. Data security

We maintain up-to-date technical measures to ensure data security, in particular to protect your
personal data from risks during data transmission and from access by third parties. These measures
are adapted in line with the current state of the art.

4. Processing of personal data

4.1 Collection of personal data when visiting our
website

General use of the website

When using the website for informational purposes only, i.e. if you do not register or otherwise provide
us with information, we only collect the personal data that your browser transmits to our server. If you
wish to view our website, we collect the following data, which is technically necessary for us to display
our website to you and to ensure stability and security (legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR)

• IP address
• Date and time of the request
• Time zone difference to Greenwich Mean Time (GMT)
• Content of the request (specific page)
• Access status/HTTP status code
• Amount of data transferred in each case
• Website from which the request originates
• Browser
• Operating system and its interface
• Language and version of the browser software.

Use of Cookies

In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive and assigned to the browser you are using, and through which certain information flows to the entity that sets the cookie (in this case, us). Cookies cannot execute programmes or transfer viruses to your computer. They serve to make the Internet offering more user-friendly and effective overall.
You can configure your browser settings according to your preferences. However, we would like to point out that you may not be able to use all the functions of this website if you do so.

There are different types of cookies. Session cookies are temporary cookies that are stored in the user's internet browser until the browser window is closed and the session cookies are deleted. Permanent or persistent cookies are used for repeat visits and are stored in the user's browser for a predefined period of time. First-party cookies are set by the website that the user visits. Only this website may read information from the cookies. Third-party cookies are set by organisations that are not operators of the website the user is visiting. These cookies are used, for example, by marketing companies.

 

The cookies used on this website are:

 

• PHPSESSID: First-party session cookie for the purpose of identifying the user's current session

on our website. The storage period corresponds to the current session.

4.2 Additional functions and services offered by our website

In addition to the purely informational use of our website, we offer various services that you can use if you are interested. To do so, you will usually need to provide additional personal data, which we will use to provide the respective service.

Contacting us by email/contact form

For enquiries of any kind, we offer you the option of contacting us via the email address provided on
the website or via the contact form. In this case, the personal data of the sender, i.e. the user,
transmitted with the enquiry will be stored.

The legal basis for the processing of this data transmitted in the context of an enquiry is Art. 6 para. 1 lit. f) GDPR (legitimate interests of us as the controller).

If the enquiry is aimed at concluding a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR (performance of a contract).

The processing of this personal data serves exclusively to process the contact request.

The above data will be deleted as soon as it is no longer required for the purpose for which it was
collected. In the case of personal data transmitted by e-mail or via the contact form, this is the case when the respective conversation with the user has ended and there are no legal retention periods. The conversation is also ended if it can be inferred from the circumstances that the matter in question has been conclusively clarified.

The user has the option to object to data processing. The objection must be sent to the contact details listed under No. 1. In this case, all personal data stored in connection with the contact will be deleted.

 

5. Use of Google Analytics

If you have given your consent, this website uses Google Analytics, a web analytics
service provided by Google LLC. The responsible service provider in the EU is Google
Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

Scope of processing

Google Analytics uses cookies that enable an analysis of your use of our websites. The
information collected by the cookies about your use of this website is usually transferred to a Google server in the USA and stored there.

We use the 'anonymizeIP' function (known as IP masking): Due to the activation of IP anonymisation on this website, your IP address will be truncated by Google within member states of the European Union or in other State parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

During your visit to the website, the following data, among other things, is collected:

• The pages you visit, your "click path"
• Achievement of "website goals" (conversions, e.g. newsletter registrations, downloads, purchases)
• Your user behaviour (e.g. clicks, length of stay, bounce rates)
• Your approximate location (region)
• Your IP address (in abbreviated form)
• Technical information about your browser and the devices you use (e.g. language
  settings, screen resolution)
• Your internet service provider
• The referrer URL (via which website/advertisement you came to this website)

Purposes of processing
On behalf of the operator of this website, Google will use this information to evaluate
your (pseudonymous) use of the website and to compile reports on website activity. The
reports provided by Google Analytics are used to analyse the performance of our website
and the success of our marketing campaigns.

Recipient
The recipient of the data is Google Ireland Limited, Gordon House, Barrow Street, Dublin
4, Ireland.

Transfer to third countries
A transfer of data to the USA cannot be ruled out.

Storage period
The data sent by us and linked to cookies is automatically deleted after 14 months. Data that has reached its retention period is automatically deleted once a month.

You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by

 

• not giving your consent to the setting of the cookie or
• Download and install the browser add-on to deactivate Google Analytics here.

You can also prevent cookies from being stored by adjusting your browser software settings accordingly. However, if you configure your browser to reject all cookies, this may restrict the functionality of this and other websites.

Legal basis and right of revocation

The legal basis for this data processing is your consent, Art. 6 (1) (a) GDPR. You can revoke
your consent at any time with future effect by accessing the cookie settings and changing
your selection there.
For more information on the terms of use of Google Analytics and data protection at Google,
please visit https://www.google.com/analytics/terms/de.html und unter
https://policies.google.com/?hl=de.

 

6. Use of matomo (formerly Piwik)

If you have given your consent, this website uses the Matomo web analytics service
provided by InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand. Matomo is used to
evaluate user access to the website. Among other things, data is collected about which
website a data subject came to the website from (known as the referrer), which subpages
were accessed, how often and for how long a subpage was viewed. We use Matomo to
analyse the use of our website and to improve it on a regular basis. The statistics obtained
enable us to improve our offering and make it more interesting for you as a user.
Cookies are stored on your computer for this evaluation. The service provider stores the
information collected in this way exclusively on its server in Germany. This website uses
Matomo with the "AnonymizeIP" extension. This means that IP addresses are truncated
before being processed further and thus a direct personal reference can thus be ruled out. The IP address transmitted by your browser via Matomo will not be
merged with other data collected by us.

 

These processing operations are carried out exclusively with your express consent in
accordance with Art. 6 (1) (a) GDPR.

You can revoke your consent at any time with effect for the future by accessing the cookie
settings and changing your selection there.
Further information and the applicable data protection regulations:
https://matomo.org/privacy-policy/

 

7. Google Tag Manager

We use Google Tag Manager, a service provided by Google Ireland Limited, Google
Building Gordon House, Barrow St, Dublin 4, Ireland (hereinafter referred to as
"Google"), on our website. Google Tag Manager enables us, as marketers, to manage
website tags via an interface. The Google Tag Manager tool, which implements the tags,
is a cookie-free domain and does not collect any personal data itself. Google Tag
Manager triggers other tags, which may collect data. Google Tag Manager does not
access this data. If deactivation has been carried out at domain or cookie level, this
remains in place for all tracking tags implemented with Google Tag Manager.
Third-party information: Google Ireland Limited, Google Building Gordon House, Barrow
St, Dublin 4, Ireland
Further information on data protection can be found on the following Google websites:
Privacy policy: https://policies.google.com/privacy?hl=de&gl=de

• FAQ Google Tag Manager: https://www.google.com/intl/de/tagmanager/faq.html
• Terms of Service Google Tag
  Manager: https://www.google.com/intl/de/tagmanager/use-policy.html

 

8. friendly captcha

We use FriendlyCaptcha bot protection (friendly Captchy GmbH, am Anger 3-5, 82237
Wörthsee).
You can find out more about the data that is processed in the privacy policy at:
https://friendlycaptcha.com/de/legal/privacy-end-users/?tid=331770029257

 

9. Mautic Hub

We use Mautic (Acquia Inc., 53 State Street, 10th Floor, Boston, MA 02109, USA).
This means that your data is also processed in the USA, among other places. Mautic and
Acquia are active participants in the EU-US Data Privacy Framework. For more
information, please visit: 
https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en

Further information and the applicable data protection regulations:
https://mautic.org/privacy-policy/?tid=130029367

 

10. Social Media

We have our own pages on social networks so that we can communicate with you and keep
you informed about news.

We are not the original provider of these pages, but merely use them within the scope of the
options offered to us by the respective providers.

We therefore point out as a precaution that your data may also be processed outside the
European Union or the European Economic Area. This may involve data protection risks for
you, as it may be more difficult to exercise your rights, e.g. to information, deletion,
objection, etc., and processing on social networks is often carried out directly for
advertising purposes or to analyse user behaviour by the providers, without us being able
to influence this. If user profiles are created by the provider, cookies are often used or
your user behaviour is assigned to your own member profile on social networks.

The processing of personal data described above is carried out in accordance with Art. 6
(1) (f) GDPR on the basis of our legitimate interest and the legitimate interest of the
respective provider in communicating with you in a modern way and informing you
about our services. If you have to give your consent to data processing as a user to the
respective providers, the legal basis is Art. 6 (1) lit. a GDPR in conjunction with Art. 7
GDPR.

As we do not have access to the providers' databases, we would like to point out that it is
best to exercise your rights (e.g. to information, correction, deletion, etc.) directly with the
respective provider. Further information on the processing of your data in social networks
and the possibility of exercising your right of objection or
right of revocation (known as opt-out) is listed below for each social network provider
we use:

 

10.1 Data protection information for the Facebook page

DILO uses the technical platform and services of Meta Platforms Ireland Ltd., 4 Grand
Canal Square, Dublin 2, Ireland.

Please note that you use our Facebook page and its functions at your own risk. This
applies in particular to the use of interactive functions (e.g. commenting, sharing, rating).
Furthermore, there is no urgent need to create a Facebook account, as there are
sufficient alternative ways to contact DILO and obtain information about us. DILO has no
influence on the type and scope of data processed by Facebook.

When you visit our Facebook page, Facebook collects your IP address and other
information stored on your computer in the form of cookies. This information is used to
provide us, as the operator of the Facebook pages, with statistical information about the
use of the Facebook page. Further information on this is available from Facebook at the
following link: http://dede.facebook.com/help/pages/insights.

The data collected about you in this context is processed by Facebook Ltd. and may be
transferred to countries outside the European Union. Facebook describes in general terms
what information it receives and how it is used in its data use guidelines. There you will
also find information about how to contact Facebook and how to set up advertising
options.

The data policy is available at the following link: http://dede.
facebook.com/about/privacy

The complete Facebook data policy can be found here: https://dede.
facebook.com/full_data_use_policy

Facebook does not conclusively and clearly state how it uses data from visits to Facebook
pages for its own purposes, to what extent activities on the Facebook page are assigned to
individual users, how long Facebook stores this data, and whether data from visits to the
Facebook page is passed on to third parties.

When you access a Facebook page, the IP address assigned to your device is transmitted to
Facebook. According to Facebook, this IP address is anonymised (in the case of
"German" IP addresses) and deleted after 90 days. Facebook also stores
information about its users' end devices (e.g. as part of the "login notification" function); this may enable Facebook to assign IP addresses to individual users.

If you are currently logged in to Facebook as a user, a cookie with your Facebook ID is
stored on your device. This enables Facebook to track that you have visited this page and
how you have used it. This also applies to all other Facebook pages. Facebook buttons
embedded in websites enable Facebook to record your visits to these websites and assign
them to your Facebook profile. This data can be used to tailor content or advertising to you.

If you wish to avoid this, you should log out of Facebook or deactivate the "stay logged in" function, delete the cookies on your device, and close and restart your browser. This will delete Facebook information that can be used to identify you directly. This allows you to use our Facebook page without revealing your Facebook ID. When you access interactive features on the page (like, comment, share, message, etc.), a Facebook login screen will appear. Once you have logged in, you will be recognised again by Facebook as a specific user.

Information on how to manage or delete information about you can be found on the
following Facebook support pages: https://dede.facebook.com/about/privacy#

 

DILO does not collect or process any other data from your use of the company's Facebook
page.

The current version of this privacy policy can be found under
"Data Policy" on our Instagram page.

 

10.2 Data protection information for Instagram

Instagram, as the platform operator, and DILO, as the operator of a channel on the
platform, are jointly responsible for the data processing carried out via the respective
channel. Instagram and DILO are therefore also jointly responsible for the protection of
your personal data (Art. 26 GDPR).

DILO uses the technical platform and services of Meta Platforms Ireland Ltd., 4 Grand
Canal Square, Dublin 2, Ireland.

Please note that you use our Facebook page and its functions at your own risk. This
applies in particular to the use of interactive functions (e.g. commenting, sharing).
Furthermore, there is no urgent need to create an Instagram account, as there are
sufficient alternative ways to contact DILO and obtain information about it. DILO has no
influence on the type and scope of data processed by Instagram.

When you visit our Instagram page, your personal data is processed by Meta Platforms Ireland Ltd.

Instagram processes the data you voluntarily enter and evaluates any content you share or view.

Information about what data is processed by Instagram and for what purposes it is used can
be found in Instagram's privacy policy:
https://privacycenter.instagram.com/policy

If you are currently logged in to Instagram as a user, a cookie with your Instagram ID is
stored on your device. This enables Instagram to track that you have visited this page and
how you have used it. This also applies to all other Instagram pages. Instagram buttons
embedded in websites enable Instagram to track your visits to these websites and assign
them to your Facebook profile. This data can be used to tailor content or advertising to
you.

If you wish to avoid this, you should log out of Instagram or deactivate the "stay logged in"
function, delete the cookies on your device and close and restart your browser. This will
delete Instagram information that can be used to identify you directly. This allows you to
use our Instagram page without revealing your Instagram ID. When you access interactive
features on the page (liking, commenting, sharing, messaging, etc.), an Instagram login
screen will appear. Once you have logged in, you will be recognisable to Instagram as a
specific user again.

Information on how to manage or delete information about you can be found on the
following Instagram support pages: https://privacycenter.instagram.com/policy

DILO does not collect or process any other data from your use of the company's Instagram
page.

 

10.3 YouTube-Kanal

DILO uses a YouTube channel owned by Google Ireland Limited, Gordon House, 4 Barrow
St., Dublin, D04 E5W5 Ireland.

Please note that you use the YouTube channel and its functions at your own risk.

When you visit our YouTube channel or YouTube videos linked to our website, Google
Ireland Limited, which owns YouTube, places cookies on the device you are using. This
provides Google with information about the type of device you are using and your IP
address, among other things. If you have a Google account, are logged in and have stored
additional information there, such as your email address, telephone number, contacts in
your address book and a public profile, or if you have a YouTube channel yourself, Google
will also link this account information to your visit when you visit our YouTube channel.
Google uses this information for purposes such as personalising advertisements and crossdevice
personalisation channel, Google will also link this account data to your visit when you visit our YouTube
channel. Google uses this information for purposes such as personalising advertisements
and cross-device personalisation. You have the option to disable personalised advertising
in your Google account.

Please note that cookies are placed when you visit our YouTube channel regardless of
whether you have a Google account or not.

We may process data that you provide on YouTube (username, comments published
under your name) when we respond to comments you have posted on our videos.
For more information, please refer to Google's privacy policy at:
https://policies.google.com/privacy?hl=de&gl=de.

 

10.4 LinkedIn

We maintain a profile on LinkedIn in order to communicate with registered users and
provide information about news. When you use and access our profile, LinkedIn's
privacy policy and terms of use apply.
The processing of your personal data when you visit our profiles on LinkedIn is based on
our legitimate interests in presenting a diverse image of our company to the outside world,
using an effective means of providing information and communicating with you. The legal
basis for this is Art. 6(1)(f) GDPR.

We have no influence on the processing of personal data by the respective social media
provider. As a rule, when you visit our LinkedIn profile, cookies are stored in your browser,
in which your usage behaviour and interests are stored for market research and
advertising purposes. For detailed information about data processing when using our
profile and your rights, please refer to LinkedIn's privacy policy:​​​​​​​
https://www.linkedin.com/legal/privacy-policy

 

11. Conducting online seminars via Teams

We use the "Microsoft Teams" application from Microsoft Inc. to conduct our online
seminars.

You can participate via this provider's desktop app or, alternatively, via a mobile app. You
will receive the link to download the app in your registration confirmation. Participation is
also possible via an internet browser. All common internet browsers offer the basic
technical functions necessary for successful participation.

Please note: If you visit the Microsoft website, this provider is responsible for data
processing. It may be necessary to visit this website in order to download the desktop
app. The use of Microsoft Teams also depends on the type of Office 365 service you use.
Further information on data protection at Microsoft is available at
https://news.microsoft.com/de-de/datenschutz-und-sicherheit-in-microsoft-teams-nutzer/

 

If your data is processed by Microsoft when you register for our online seminar, this is
done in accordance with Art. 28 GDPR as a processor. The data is processed within the
legally permissible framework in Germany, the EU and the USA. Specifically for data
processing in the USA, an adequate level of protection has been established through the
agreement of the EU standard contractual clauses.

Purpose of data processing
Personal data is processed for the purpose of:

 

• Conducting online training courses (video/audio conferences)
• Communication between trainers and participants (chat, questions, contributions)
• Provision of training content (files, links, presentations)
• Organisational management (invitations, participant management)
• Follow-up and documentation (e.g. participant lists), if applicable

Legal basis
Processing is based on:

 

• Art. 6(1)(b) GDPR (performance of a contract/implementation of the training)
• Art. 6(1)(f) GDPR (legitimate interest in efficient communication and implementation)
• if recordings are made: Art. 6 (1) (a) GDPR (consent)

What data is processed
When using Microsoft Teams, the following personal data in particular may be processed:

 

Participant data:

 

• Surname, first name
• Email
• Organisation/company (ifapplicable)

Meeting data:

• Date and time of participation
• IP address (system-related)
• Device information (system-related)
• Meeting metadata (e.g. duration, participant status)

 

Communication content:

• Chat messages
• Audio and video data (when microphone/camera is actively used)
• Shared content (screen, files, whiteboard)

Optional:

 

• Profile picture (if stored in Teams account)

Recipients of the data
Personal data processed in connection with participation in online seminars or webinars
is not passed on to third parties unless it is intended for this purpose.

The provider of "Microsoft Teams" necessarily obtains knowledge of this data to the
extent provided for in our data processing agreement.

Contract processing
Microsoft Teams is used as a cloud-based service. A contract for order processing in
accordance with Art. 28 GDPR has been concluded with Microsoft.

Scope of data processing:
The scope of data processing depends primarily on what data you disclose before or during
participation.

Immediately during participation in the online seminar, your first name and surname as
provided during registration will be displayed automatically. This is visible and
recognisable to all other participants.

Note on the scope of data processing during recording: Online seminars and webinars
may be recorded so that they can be made available to you afterwards. If recording
takes place, this will be displayed clearly and transparently throughout the online
seminar. The speaker is also required to announce this. Questions asked by
participants during the online seminar may also be processed for recording and postprocessing
purposes.

Note on the scope of data processing with regard to chat: The chat from an online
seminar remains stored in this event. With the help of the access link, it would
theoretically be possible for a third party to access it. However, we block access to an
expired online seminar after a reasonable period of time. Permanent deletion of the
chat is not currently supported by Microsoft Teams. We do not process chat files from
an expired and blocked online seminar.
Automated decision-making in accordance with Art. 22 GDPR also does not take place.

 

Storage period
The data will only be stored for as long as is necessary to conduct the training.

• Meeting metadata and organisational data: generally until completion of the training course and billing/documentation
• Chat histories and shared files: depending on internal deletion policies
• Recordings (if available): only for the specified period, then deletion

 

12. eFront

We use the eFront learning platform from Epignosis LLC / Epignosis S.A. (depending on
the contractual partner) to conduct and manage our online training courses. This
platform is used to provide training content, document learning progress and, if
necessary, conduct tests.

Purpose of processing
Personal data is processed for the purpose of:

 

• Providing e-learning content and training materials
• Organising and conducting training measures
• Managing user accounts and access
• Documenting learning progress and participation
• Conducting tests/exams (if applicable)
• Communication between participants and trainers (e.g. messages, forums)

Legal basis
Processing is based on:

• Art. 6(1)(b) GDPR (implementation of the training relationship/contract)
• Art. 6(1)(f) GDPR (legitimate interest in efficient training organisation)
• if certificates or mandatory evidence are required: also Art. 6(1)(b) GDPR
• if voluntary information is provided: Art. 6(1)(a) GDPR (consent)

 

Categories of data processed

When using eFront, the following data in particular may be processed:

 

Master data / profile data

• Surname, first name
• Email
• User
• Company/department, if applicable
• Language settings, if applicable

Usage and learning data

• Login details and usage times
• Courses taken / training assignment
• Learning progress, test results, assessments
• Completion status/certificates
• Interactions within the platform (e.g. comments, forum posts)​​​​​​​

​​​​​​​​​​​​​​Technical Data

• IP address
• Device and browser information
• Log files (system-related)

 

Recipients of the data

Recipients of the data may include:

• Internal departments (e.g. training management, human resources, administrators)
• Trainers/lecturers, provided they need access to courses and progress reports
• The provider of the Epignosis platform as a technical service provider

 

13. Obligation to provide data

There is no legal obligation to provide data. However, you cannot use some features of our
website without providing personal data.

 

14. Changes to the privacy policy

Due to the further development of our website and the offers made on it, or due to
changes in legal or regulatory requirements, it may be necessary to amend this privacy
policy.