1. Name and address of the data controller
This website is operated by the company C. Bechstein Digital GmbH as the data controller pursuant to Art. 4 No. 7 GDPR. Our postal address:
C. Bechstein Digital GmbH
Kant Street 17
2. Contact details for inquiries about data protection
If you have any questions regarding data protection on this website and our services, please contact us at any time at the postal address:
C. Bechstein Digital GmbH
or by e-mail to firstname.lastname@example.org
3. Your rights
a) You have the following rights vis-à-vis us regarding the personal data concerning you:
- Right to information (Art. 15 GDPR),
- Right to rectification (Art. 16 GDPR) or deletion (Art. 17 GDPR),
- Right to restriction of processing (Art. 18 GDPR),
- Right to object to processing (Art. 21 GDPR),
- right to data portability (Art. 20 GDPR).
b) You also have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data by us. In the following link you will find the official and current listing of data protection supervisory authorities in Germany:
c) You may object to the processing of personal data for marketing purposes at any time without giving reasons.
d) In addition, every data subject has a general right to object (cf. Art. 21 (1) GDPR). In the event of your objection, we will examine your request and, if you provide us with such, your reasons against the processing. As a rule, we will stop processing your data if you so wish, as we have no interest in processing data from you against your wishes. Nevertheless, there may be individual cases in which we have to continue processing your data for a certain period of time even after your objection, but this is mainly the case when processing is based on the conclusion of a contract or legal obligations. In any case, we will inform you about the decision after your objection.
e) If the data processing is based on consent, your consent can be revoked at any time with effect for the future. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
4. Processing of personal data when visiting our website.
During the informational use of the website, i.e. if you do not register or otherwise transmit information to us, our server only processes the personal data that your browser may transmit to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security:
- IP address
- Date and time of the request
- Time zone difference to Greenwich Mean Time (GMT)
- Content of the request (specific page)
- Access status/HTTP status code
- Amount of data transferred in each case
- Website from which the request comes
- The type of browser you are using and a browser version number
- Depending on the browser software used, information on the screen resolution used or the size of the browser window, if applicable.
- Language setting of the browser
- Operating system and version (e.g. Windows 10, macOS, iPad OS or Android).
The legal basis for the processing of your personal data when visiting our website in general is Art. 6 para. 1 sentence 1 letter f GDPR. The storage period of this technically necessary data is generally one month.
5. Processing of personal data in the event of further interaction with us.
If you use the contact form to make inquiries about the purchase of our products, place an order or complain about purchased products, we process their data to manage your order and process the contract.
Legal basis: Art. 6 para. 1 sentence 1 letter b (in case of an order or contact in the context of a contract) and f (in case of all further contacts) DSGVO.
The storage period of contract-related data is: 10 years.
Data from product inquiries are stored for the reasonable period of appropriate processing. After that, at the latest after 3 years, the data will be deleted by us.
6. Processing of your personal data when using the doozzoo service
When you register for our doozzoo service, we process the data from you that is required for the provision of the services and, if applicable, billing. Failure to provide the necessary personal data would mean that the contract could not be concluded.
For the use of doozzoo’s audio and video functions, access to webcam and microphone must be allowed. The establishment and operation of the connection takes place, as is usual on the Internet, by means of the IP address. The video and audio stream is end-to-end encrypted and is not stored by us.
When using our cloud media library, you can upload and delete files on your own responsibility. In this case, the documents you upload will be stored securely on our cloud servers until you manually delete or cancel the service.
We offer different account or access types in which the processing of data differs as follows:
a) Free trial access (“Test-drive”):
The “test drive” is used without providing information such as name or e-mail address by calling up a URL. When conducting the sessions, for which access to microphone and camera is required, a video and audio stream is transmitted in encrypted form between the participants.
The legal basis is the balancing of interests according to Art. 6 para. 1 sentence 1 letter f GDPR. The storage period is initially volatile, so data is only transmitted for the duration of the streaming.
The usage-related data (i.e. the technical data required for the use of the service, see No. 4) are stored for 30 days
b) Individual teachers (users of the Pro-Coach account):
If you register online via the website for a paid account, we process the data required for the conclusion of the contract. This includes your e-mail address and the password you have chosen, but which cannot be read by us, your name, address, as well as your payment data, which you provide via our payment service provider.
When conducting sessions that require access to a microphone and camera, a video and audio stream is transmitted in encrypted form between participants.
For users of a private individual access (Pro-Coach account), the use of the “archiving function” can be additionally booked. With this function, video recordings can be proactively triggered by the instructor for the participants in the session to see. These recordings are created on the connection server and made available in the instructor’s media library. (This function is only available to institutions and their users upon explicit request and after subscription).
The legal basis is the balancing of interests according to Art. 6 (1) sentence 1 letter b GDPR. The storage period is initially volatile, so data is only transferred for the duration of the streaming.
Usage-related data is stored for 30 days. We keep your payment data for 10 years due to commercial and tax obligations.
c) Learners of online registered teachers with Pro Coach account:
Learners are invited by a teacher with a Pro Coach account and/or register independently. Only an email address and password are required to register in a learner account. Entering an additional clear name and/or pseudonym (nickname) is voluntary. When conducting the sessions, for which access to microphone and camera is required, a video and audio stream is transmitted in encrypted form between the participants.
The legal basis for processing access and usage data is the balance of interests pursuant to Art. 6 (1) sentence 1 letter f GDPR, in order to enable us to provide the service you requested and booked to the teacher assigned to you. The usage-related data will be stored for 30 days.
d) Teachers and learners of institutions:
Teachers and learners of an institution receive their access from the institution. Only the e-mail address of the user is required. The entry of an additional clear name and/or pseudonym is voluntary. The institution is responsible for processing the data. In this respect, we are a service provider bound by instructions and have concluded an order processing agreement with the institution. When conducting the sessions, for which access to microphone and camera is required, a video and audio stream is transmitted in encrypted form between the participants.
The legal basis is the balancing of interests according to Art. 6 (1) sentence 1 letter f GDPR, in order to enable us to provide the service you requested and booked to the teacher assigned to you. The usage-related data will be stored for 30 days.
e) Learners / users in a workshop room:
You can join a workshop room as a guest. It is not necessary to enter a pseudonym (nickname) or clear name, e-mail address, etc.. Previously registered users join the workshop room with the name / pseudonym (nickname) that is already stored in their own profile. When conducting the sessions, for which access to microphone and camera is required, a video and audio stream is transmitted in encrypted form between the participants.
The legal basis is the balancing of interests according to Art. 6 para. 1 sentence 1 letter f GDPR, in order to enable us to provide the service you requested and booked to the teacher assigned to you. The usage-related data will be stored for 30 days.
7. Data processing based on legal obligations
In some cases, we use external service providers for the processing of data. These have been carefully selected and commissioned by us. They are bound by our instructions and are regularly monitored. For the storage of data, we only use servers located in the EU or the EEA (European Economic Area).
The legal basis is Art. 6 para. 1 sentence 1 lit. c GDPR in conjunction with the relevant statutory provisions in each case. The storage period of the data is described in the respective data processing operations.
When calling up individual pages, temporary cookies are used for the technical provision of our service. These so-called session cookies do not contain any personal data and expire at the end of the session.
Other storage or other techniques that make it possible to track the access behavior of individual users are not used.
10. Social logins (OAuth)
This function is not available for institutions and their users. For institutions and their users, registration is performed and managed centrally by the institution’s administration via the users’ email address.
Only individual customers who register themselves with doozzoo can use this function to register using the social login function of Google, Facebook or Twitter (so-called OAuth, Open Authorization).
We have not integrated any plug-in of the providers, but only provide a link to their offers. Only when you click on the respective chart, the connection to the providers opens. The providers independently collect your name, e-mail address, language setting and profile picture. We process your name and (e-mail) address, as well as account data, if applicable, to the extent necessary to create your doozzoo user account.
The legal basis for the data processing by us is the performance of the contract according to Art. 6 para. 1 sentence 1 letter b GDPR.