Data protection is of great importance to us. As the controller, the dixxer GmbH (dixxer) has implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed through this website. Nevertheless, Internet-based data transmissions can always be vulnerable to security risks, so that absolute protection cannot be guaranteed. Therefore, each data subject is free to transmit personal data to us also by using alternative means, e.g. by telephone.
The data protection declaration of the dixxer is based on the terms used by the European Data Protection Supervisor when adopting the General Data Protection Regulation (GDPR).
Name and address of the responsible
The responsible party within the meaning of the General Data Protection Regulation, other data protection laws applicable in the Member States of the European Union and other provisions with a data protection character is the:
represented by the managing director: Nurhan Tuna
Contact details of the data protection officer
The postal address of the data protection officer is:
Alternatively, the user can send an e-mail to the company at:
1. General information on data processing
1.1 Purpose of processing
dixxer makes it quick and easy to create opinion or survey cards, which the latter can share privately or publicly via his social media – channels or by email. The user is provided with the results on dixxer.com. Prerequisite for the creation of poll cards and participation in shared polls is the registration of the respective user on dixxer.com.
When creating a poll, the user can determine whether it should be a private or a public poll. The results of relevant, public surveys can be evaluated by dixxer in anonymized form and the results can be made available to interested parties.
1.2 Scope of the processing of personal data
We process personal data of the users of these pages in principle only to the extent necessary for the provision of a functional website and our content and services. The use of our website is generally possible without providing personal data.
The creation of surveys and participation in such requires the user to register on dixxer.com. When registering and creating a user account, only the specification of an email address and a user name (pseudonym) is required. Further voluntary information of the user is optional.
As far as personal data (e.g. name, address, email addresses and telephone numbers) are collected, in particular in the case of your contact or a contract or with us, this is done, as far as possible, on a voluntary basis.
1.3 Legal basis for the processing of personal data
In so far as we obtain the consent of the data subject for processing operations involving personal data, Article 6 (1) (a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis for the processing based on this consent.
When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Article 6 (1) (b) of the GDPR serves as the legal basis. This justification further applies to processing operations that are necessary for the performance of pre-contractual measures.
Inasmuch as personal data must be collected and/or processed due to legal requirements or in the public interest, Art. 6 para. 1 lit. c or lit. e DSGVO serves as the legal basis.
If the processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subjects do not override the legitimate interest, Art. 6 (1) lit. f DSGVO serves as the legal basis for the processing.
1.4 Disclosure of data
A disclosure of personal data from us to third parties takes place exclusively to the service partners involved in the context of contract processing. The legal basis for this is Art. 6 para. 1 p. 1 lit. b DSGVO. In cases where your personal data is transferred to third parties, however, the scope of the transferred data is limited to the minimum necessary.
There is no transfer of personal data to third parties for purposes other than those mentioned above. Insofar as surveys created on dixxer.com are evaluated by dixxer and the results are made available to interested third parties, the personal reference is eliminated beforehand by making the data anonymous.
In addition, we only pass on personal data to third parties if:
You have given your express consent to do so in accordance with Art. 6 para. 1 p. 1 lit. a DSGVO, the transfer is necessary in accordance with Art. 6 para. 1 p. 1 lit. f DSGVO is necessary for the assertion, exercise or defense of legal claims, in the event that a legal obligation exists for the transfer pursuant to Art. 6 para. 1 p. 1 lit. c DSGVO, as well as this is legally permissible and required for the processing of contractual relationships with you.
1.5 Transfer to third countries
On the pages of dixxer.com are functions of Google LLC. (Google), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, are integrated.
It is not excluded that Google also transmits personal data of European Internet users to the USA and thus to a third country and processes it there. In order to provide suitable guarantees for compliance with the conditions of data transfer laid down in Chapter V of the GDPR and also the other provisions of the GDPR, the standard data protection clauses issued by the EU Commission corresponding to Art. 46 (2) lit. c of the GDPR (https://privacy.google.com/businesses/processorterms/mccs/) apply between and us.
For more information about what data is collected by Google, what it is used for and what rights you have, please see https://www.google.com/intl/de/policies/privacy/
1.6 Storage period and deletion
The personal data of data subjects will be deleted as soon as the original purpose of processing ceases to apply and there is no other legal basis for further storage. Storage may take place beyond this if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the controller is subject. Blocking or deletion of the data takes place when a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data. In the case of statutory retention obligations, we restrict the processing of the corresponding data.
2. provision of the website
2.1 SSL- /TSL- encryption
These pages use SSL or TSL encryption for security reasons. If encryption is activated, the data you transmit to us cannot be read by third parties.
2.2 Log file data collection
The website of dixxer collects a series of general data and information each time a data subject or automated system calls up the website. This general data and information is stored in the log files of the server. Recorded can
- the browser types and versions,
- the operating system used by the accessing system,
- the website from which an accessing system to our website (so-called referrer),
- the sub-websites, which are accessed via an accessing system on our website,
- the date and time of access to the website,
- an Internet protocol address (IP address),
- the Internet service provider of the accessing system.
The collection of this data serves our legitimate interest in averting danger in the event of attacks on our information technology systems. When using these general data and information, the dixxer does not draw any conclusions about the data subject. Rather, this information is needed in order to
- deliver the contents of our website correctly,
- optimize the contents of our website,
- ensure the long-term functionality of our information technology systems and the technology of our website, as well as
- to provide law enforcement authorities with the information necessary for prosecution in the event of a cyber attack.
This anonymously collected data and information is evaluated by the dixxer on a statistical basis, and moreover with the aim of increasing the data protection and data security of our enterprise, and ultimately ensuring an optimal level of protection for the personal data we process. The anonymous data of the server log files are stored separately from any personal data submitted by a data subject.
2.3 Facebook Connect
You have the option to log in to dixxer.com using Facebook Connect. An additional registration is then not required. To register, you will be redirected to the Facebook page, where you log in with your usage data. This links your Facebook profile and our service. Through the link, we automatically receive from Facebook Ireland ltd. (Facebook) the data of your Facebook profile released for disclosure.
Of this data, we use only your email address and your profile picture. This information is mandatory for the contractual use of dixxer.com to be able to identify you. As long as you are logged in via Facebook Connect, Facebook receives data about your use of dixxer.com. The legality of this data exchange is based on your contractual agreements concluded with Facebook.
For more information about Facebook Connect and your privacy settings on Facebook, please refer to Facebook’s data policy at https://www.facebook.com/privacy/explanation/.
2.4 Contact form
If you provide us with personal data via the contact form provided on these pages, we will automatically store it. We process such personal data transmitted on a voluntary basis exclusively for the purpose of processing your inquiry or contacting you. This personal data is not passed on to third parties. The data will be deleted after the purpose for which they were transmitted by you has been achieved, unless there is a need for further storage of the data – in particular for the conclusion or fulfillment of a contract.
3 Further processing under our responsibility
3.1 Analysis and tracking tools
The tracking measures listed below and used by us are carried out after the user has given his consent. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. a DSGVO. With the tracking measures used, we want to ensure a needs-based design and continuous optimization of our website. On the other hand, we use the tracking measures to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer for you.
The respective data processing purposes and data categories can be found in the corresponding tracking tools.
3.1. 1 Google Analytics
For the purpose of demand-oriented design and continuous optimization of our pages, we use Google Analytics, a web analytics service provided by Google LLC (Google), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
In this context, pseudonymized usage profiles are created and cookies are used. The information generated with the help of the cookies about your use of this website corresponds to the data mentioned under 2.2. This is transferred to a Google server in the USA and stored there. The information is used by Google to evaluate the use of the website, to compile reports on website activity and to provide other services associated with the use of the website and the Internet for the purposes of market research and demand-oriented design of these Internet pages. Under no circumstances will your IP address be merged with other data from Google. The IP address at the beginning of processing anonymized, so that an assignment is not possible (IP masking).
You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de).
Alternatively to the browser add-on, especially for browsers on mobile devices, you can also prevent the collection by Google Analytics by clicking on this OptOut link. An opt-out cookie will be set that prevents the future collection of your data when visiting our website. The OptOut cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again. Further information on data protection in connection with Google Analytics can be found at the following link in the Google Analytics Help: https://support.google.com/analytics/answer/6004245?hl=de
The cooperation with Google LLC takes place in terms of data protection on the basis of a concluded contract on joint responsibility pursuant to Art. 26 DSGVO, available at https://privacy.google.com/businesses/gdprcontrollerterms/.
For more information on what data is collected by Google, what this data is used for and what rights you have, please visit https://www.google.com/intl/de/policies/privacy/.
We have integrated components of DoubleClick on our websites. The operating company of DoubleClick is Google Ireland Limited, Gordon House, Barrow Street, Dublin, D04 E5W5, Ireland.
DoubleClick transmits data to the DoubleClick server every time our pages are called up and also with clicks or other activities. In order to be able to assign these to your terminal device, DoubleClick sets a cookie. DoubleClick uses a unique cookie ID to display personalized ads in a browser. By using a special cookie script, DoubleClick can further record the frequency of page views or generally the traffic on a website. Thus, it can be traced how often, how long and which parts of the website are used by the same user.
You can prevent the setting of cookies by the appropriate settings of the Internet browser used and thus permanently object to the setting of cookies. In addition, cookies already set by Google can be deleted at any time via an Internet browser or other software programs. Further information and the applicable data protection provisions of DoubleClick by Google can be found at https://www.google.com/intl/de/policies/. Depending on the browser you use, you can also disable personalized advertising from Google by installing a plugin. This plugin can be found at https://www.google.com/settings/ads/plugin.
The use of DoubleClick is basically in our legitimate interest in direct advertising and the analysis of user behavior on our pages. In this respect, the processing is basically justified by Art. 6 para. 1 lit. f DSGVO. However, since DoubleClick is used for cross-website tracking by Google, which may also use the data for its own purposes, and cookies are used for this purpose, we obtain your consent beforehand. In the case of granting your consent, the processing by means of DoubleClick is then justified to this extent by Art. 6 para. 1 lit a DSGVO.
For more information about what data is collected by Google, what this data is used for and what rights you have, please see https://www.google.com/intl/de/policies/privacy/
We use YouTube plugins to embed videos. The operator is the company YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA, which is a subsidiary of Google.
If you visit the pages of dixxer.com, but are not logged into your dixxer account, you will only be shown static thumbnails of the embedded YouTube videos on our pages, based on which first of all no data is transmitted to YouTube.
After you have logged in with your access data at dixxer.com, the Youtube – videos embedded in a map can be played. YouTube then establishes a connection to the Google DoubleClick network. Furthermore, YouTube can save various cookies on your end device after starting a video. With the help of these cookies, YouTube collects information about the use of its services. This information is used, among other things, to collect video statistics, improve the user experience and prevent fraud attempts.
The integration of YouTube – videos at dixxer.com is carried out by the users as integral components of the survey and opinion cards. The display of these videos is thus a prerequisite for the provision of our contractually agreed service. The integration of Youtube or the resulting data collection and processing by Youtube requires your consent. We obtain this in the context of your confirmation of our GTCs. The subsequent processing of personal data is thereafter justified according to Art. 6 para. 1 lit. a. or lit. b DSGVO.
For more information on what data is collected by Google, what this data is used for and what rights you have, please see https://www.google.com/intl/de/policies/privacy/.
A distinction is made between first-party cookies, which are sent and read exclusively by the domain of the service provider, and third-party cookies, which are sent and read by domains of other service providers. With regard to the storage period, a distinction is made between session cookies, which are automatically deleted when the browser is closed, and permanent cookies, which are deleted after a certain period of time. These cookies serve the website, among other things, to remember settings made by the user (e.g. menu settings or favorites).
4.2 Types of cookies used
4.1.1 Technically necessary cookies
The legal basis for the processing of personal data using technically necessary cookies is Art. 6 para. 1 lit. f DSGVO. The use of these cookies may also take place without your consent.
4.1.2 Analysis – Cookies
4.1.3 Marketing – Cookies
4.2 Cookies used
In detail, the following cookies are used on our websites at www.dixxer.com.
|dixxer.com||_gat_gtag_UA_*_||1 hour||Marketing/Tracking||dixxer.com||_gid||1 day||Analysis (anonymous); counting and tracking page views|
|dixxer.com||_ga||2 years||Analysis (anonymous); Counting and tracking page views|
|dixxer.com||G_ENABLED_IDPS||permanently||technically necessary for secure login to the site with a Google account.|
|dixxer.com||_cfduid||30 days||technically necessary; Identification of trusted traffic||Third party cookies||Domain||Name||Storage time||Function||doubleclick.net||IDE||1 year||Marketing/Tracking; Cross-domain tracking and recognition to serve personalized ads|
|google.com||NID||6 months||Marketing/Tracking Enabling ad delivery or retargeting, storing user preferences||youtube.com||YSC||Session||Analysis; collection of user information and preferences via embedded YouTube video|
|youtube.com||VISITOR_INFO1_LIVE||6 months||Analysis; collection of user information and settings about embedded YouTube video|
5. Rights of data subjects
If we process personal data of you, you are a data subject within the meaning of the GDPR and you are entitled to the following rights against the controller. You can assert these rights against us as the controller within the meaning of the DSGVO, for example, by sending an e-mail to [email protected].
5.1 Right of access
You may request confirmation from the controller as to whether personal data relating to you is being processed by the controller. If this is the case, you have the right to free information about your stored personal data, its origin and recipient and the purpose of data processing.
5.2 Right to rectification
You have a right to rectification and/or completion vis-à-vis the controller, insofar as the processed personal data concerning you are inaccurate or incomplete.
5.3 Right to erasure
You may request the controller to erase the personal data concerning you without undue delay, and the controller is obliged to erase such data without undue delay, if one of the following reasons applies:
a) the personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
b) You withdraw your consent on which the processing was based pursuant to Art. 6 (1) lit. a DSGVO and there is no other legal basis for the processing.
c) You object to the processing and there are no overriding legitimate grounds for the processing.
d) The personal data concerning you have been processed unlawfully.
e) The erasure of the personal data concerning you is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject.
f) The personal data concerning you has been collected in relation to information society services offered pursuant to Article 8(1) of the GDPR.
5.4 Right to restriction of processing
Under the following conditions, you may request the restriction of the processing of personal data concerning you:
- if you contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data;
- the processing is unlawful and you object to the erasure of the personal data and request instead the restriction of the use of the personal data;
- the controller no longer needs the personal data for the purposes of processing, but you need it for the assertion, exercise or defense of legal claims; or
- if you have objected to the processing and it is not yet clear whether the legitimate grounds of the controller override your interests.
5.5 Right to data portability
You have the right to receive the personal data concerning you that you have provided to the controller in a structured, commonly used and machine-readable format. In addition, you have the right to transfer this data to another controller without hindrance by the controller to whom the personal data was provided.
5.6 Right to object
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is carried out on the basis of Article 6(1)(e) or (f) DSGVO; this also applies to profiling based on these provisions.
The controller will no longer process the personal data concerning you after you have exercised your right to object, unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims.
If you object to the processing of your personal data for the purposes of direct marketing, the personal data concerning you will no longer be processed for these purposes.
5.7 Right to revoke the declaration of consent under data protection law
You have the right to revoke declarations of consent given by you to us for the processing of your personal data at any time. Please send your revocation by e-mail to [email protected].
The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
5.8 Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.
The address of the supervisory authority responsible for the controller is:
State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia