Welcome to DuMont Business Information GmbH. Here you can find out more about the processing of your personal data.
Data protection is a matter of trust and your trust is very important to us. We respect your privacy and personal rights. The protection and legally compliant collection, processing and use of personal data are therefore very important to us.
Scope of application, name and address of the controller
The controller within the meaning of the General Data Protection Regulation (hereinafter GDPR) and other national data protection laws of the member states as well as other data protection regulations is the
Amsterdamer Street 192
50735 Cologne GmbH
Phone: 0221 224-2059
Contact details of the data protection officer
You can request information about the personal data we have stored about you at any time. You have the right to have incorrect personal data corrected. You can also withdraw your consent to the collection and storage of your personal data by the controller at any time. In these cases, please send an e-mail to
Data Protection Officer Norman Höhling
Amsterdamer Street 192
You can find more information about us in our imprint.
Scope of the processing of personal data
We require your personal data for a wide variety of purposes. We process your data for the initiation and realization of our business relationship. Information that we process about you:
- First name
- Postal address
- Telephone number
- E-mail address
Other customer master data
- Company master data (commercial register details, company name, company address, VAT ID)
Legal basis for the processing of personal data
Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a GDPR serves as the legal basis.
When processing personal data that is necessary for the fulfillment of a contract to which the data subject is a party, Article 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.
Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Article 6 para. 1 sentence 1 lit. c GDPR serves as the legal basis.
In the event that vital interests of the data subject or another natural person require the processing of personal data, Article 6 (1) sentence 1 lit. d GDPR serves as the legal basis.
Insofar as we obtain personal data for our databases from publicly accessible sources, Article 6(1)(f) GDPR serves as the legal basis. Publicly accessible sources include public directories and official announcements (e.g. in the commercial register), other generally accessible sources (e.g. press publications or notices on the Internet) as well as contractual and cooperation partners, which also include address dealers.
Data erasure and storage period
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Data may also be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.
Your rights as a data subject
If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis us:
Right to information
You can request confirmation as to whether personal data concerning you is being processed by us.
If such processing is taking place, you can request the following information:
- the purposes for which the personal data is processed
- the categories of personal data being processed
- the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed
- the envisaged period for which the personal data concerning you will be stored, or, if specific information on this is not possible, the criteria used to determine that period
- the existence of a right to rectification or erasure of personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing
- the existence of a right to lodge a complaint with a supervisory authority
- all available information about the origin of the data if the personal data is not collected from the data subject
- the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
You have the right to request information whether the personal data concerning you is transferred to a third country or to an international organization. In this context, you may request to be informed of the appropriate safeguards pursuant to Article 46 GDPR in connection with the transfer.
Right to rectification
You have a right to rectification and/or completion if the processed personal data concerning you is incorrect or incomplete. We will make the correction without delay.
Right to restriction of processing
You may request the restriction of the processing of personal data concerning you under the following conditions:
- if you contest the accuracy of the personal data concerning you for a period enabling us to verify the accuracy of the personal data;
- the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead
- we no longer need the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims; or
- if you have objected to processing pursuant to Article 21 (1) GDPR pending the verification whether our legitimate grounds override your grounds.
- If the processing of personal data concerning you has been restricted, this data - apart from its storage - may only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
Right to erasure
Obligation to erase
You can demand that the personal data concerning you be deleted immediately if one of the following reasons applies:
- The personal data concerning you are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
- You withdraw your consent on which the processing was based pursuant to Article 6 (1) sentence 1 lit. a or Article 9 (2) lit. a GDPR and there is no other legal basis for the processing.
- You object to the processing pursuant to Article 21 (1) GDPR and there are no overriding legitimate grounds for the processing or you object to the processing pursuant to Article 21 (2) GDPR.
- The personal data concerning you has been processed unlawfully.
- The deletion of your personal data is necessary to fulfil a legal obligation under Union law or the law of the Member States to which the controller is subject.
- The personal data concerning you have been collected in relation to the offer of information society services referred to in Article 8(1) GDPR.
The right to erasure does not exist if the processing
- is necessary for exercising the right of freedom of expression and information
- is necessary for compliance with a legal obligation to which we are subject under Union or Member State law or for the performance of a task carried out in the public interest or in the exercise of official authority vested in us
- is necessary for reasons of public interest in the area of public health in accordance with Article 9(2)(h) and (i) and Article 9(3) GDPR
- is necessary for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Article 89(1) GDPR in so far as the right referred to in point (a) is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
- is necessary for the establishment, exercise or defence of legal claims.
Right to data portability
You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller to whom the personal data has been provided, provided that
- the processing is based on consent pursuant to Article 6 (1) sentence 1 lit. a GDPR or Article 9 (2) lit. a GDPR or on a contract pursuant to Article 6 (1) sentence 1 lit. b GDPR and
- the processing is carried out by automated means.
In exercising this right, you also have the right to obtain that the personal data concerning you be transferred directly from one controller to another controller, insofar as this is technically feasible. The freedoms and rights of other persons must not be affected by this.
The right to data portability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
Right to object
You have the right to object to the processing of personal data concerning you which is based on Article 6 (1) sentence 1 lit. e or f GDPR. In this case, we will no longer process the personal data concerning you unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
You have the option of exercising your right to object in connection with the use of information society services - notwithstanding Directive 2002/58/EC - by means of automated procedures that use technical specifications.
Right to revoke the declaration of consent under data protection law
You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
We would like to point out that you can also partially revoke any consent given at any time with effect for the future.
The best way to do this is to send an e-mail to:
Data Protection Officer Norman Höhling
Amsterdamer Street 192
Automated decision in individual cases
You have the right not to be subject to a decision based solely on automated processing which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision
- is necessary for the conclusion or fulfilment of a contract between you and the controller
- is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or
- with your express consent.
However, these decisions must not be based on special categories of personal data referred to in Article 9(1) GDPR, unless Article 9(2)(a) or (b) GDPR applies and suitable measures to safeguard your rights and freedoms and legitimate interests are in place.
With regard to the cases referred to in (1) and (3), the data controller shall implement suitable measures to safeguard your rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express your point of view and to contest the decision.
Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.
The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Art. 78 GDPR.
Your personal data, insofar as this is necessary for the establishment, content or amendment of the contractual relationship (inventory data), is used exclusively for the fulfilment of the contract.
For example, your name and address must be passed on to the billing service provider for the billing of chargeable services. Without your express consent or without a legal basis, your personal data will not be passed on to third parties not involved in the fulfilment of the contract.
By order of the competent authorities, we may provide information about inventory data in individual cases if this is necessary for the purposes of criminal prosecution, to avert danger by the police authorities of the federal states, to fulfil the statutory duties of the federal and state constitutional protection authorities, the Federal Intelligence Service or the Military Counter-Intelligence Service or to enforce intellectual property rights.
We examine such enquiries - should they arise - carefully within the framework of the means available to us and only pass on your data if the legal obligation appears to be compelling for us.
The legal basis for data processing is then the fulfilment of legal obligations of the controller Art. 6 para. 1 c) GDPR, as well as relevant special laws, the application of which we reserve the right to apply.
Some of our services require the use of personal data. These include
- Registration with user profile
- Participation in competitions
The legal basis for data processing is a contract or contract initiation with the data subject Art. 6 para. 1 b) GDPR. Consent is also required after registration. The legal basis for data processing is then the consent of the data subject in accordance with Art. 6 para. 1 a) GDPR.
Provision of the website
General information on data processing on our website
Each time you use our website, we collect the access data that your Internet browser automatically transmits to enable you to visit the website. The access data includes in particular:
- Browser type and version
- Operating system used
- Website from which you visit us (referrer URL)
- Website that you visit
- Date and time of your access
- Your internet protocol data (IP address)
- Amount of data transferred
- Access status (files transferred, file not found, etc.)
This anonymous data (with the exception of the IP address) is stored separately from any personal data you may have provided and therefore does not allow any conclusions to be drawn about a specific person. It can be evaluated for statistical purposes in order to optimise our website and our offers. After evaluation, this data is deleted by us and our service providers.
The data processing of this access data is necessary to enable you to visit the website and to ensure the long-term functionality and security of our systems. The legal basis is Art. 6 para. 1 sentence 1 lit. b GDPR. We expressly reserve the right to have recourse to statutory authorisation and legal bases
Anonymised user profiles
Unless otherwise stated here, it is not necessary for you to provide personal data in order to use our website. Every time a user accesses the above-mentioned websites and every time a file is retrieved, data about this process is stored in a log file. We use this data to technically enable you to visit our website. We also use this data for statistical purposes in order to improve the design and layout of our website. There is no personal utilisation of this data.
In detail, the following data record is stored for each retrieval:
- Name of the retrieved file
- Date and time of access
- Amount of data transferred
- Message as to whether the retrieval was successful
- Description of the type of web browser used
- Requesting domain
- Country of origin of the domain
How to contact us
You have various options for contacting us. These include the contact form, in which we process data exclusively for the purpose of communicating with you in the context of contract initiation and fulfilment, in order to answer your questions about our products in advance and to clarify any questions that arise during use. The legal basis is Art. 6 para. 1 lit. b GDPR.
In addition, you can voluntarily provide us with further data as part of the contact enquiry. The data will be stored by us and used for the purpose of responding to your contact enquiry. Some services of our portal are offered in cooperation with partner companies. In order to be able to offer these partner services, it may be necessary for us to share your personal data with these partner companies. In this case too, however, the data will be used exclusively for the purpose of responding to your contact enquiry, including by our partner. The voluntary provision of this data constitutes consent to the use of the data as described above. Your consent to the collection and use of data is logged by us.
The data collected by us when you use the contact form will be automatically deleted after your enquiry has been fully processed, unless we still need your enquiry to fulfil contractual or legal obligations (see section "Storage period").
Use of personal data
If you contact us by e-mail, fax or telephone, we may request some personal data from you in this context. We will ask for the data that we need to process your contact enquiry in a meaningful way, but at least your surname and first name, email address and telephone number; the legal basis is the legitimate interest in processing in accordance with Art. 6 para. 1 f GDPR.
In addition, you can voluntarily provide us with further data as part of the contact enquiry. The data will be stored by us and used for the purpose of responding to your contact enquiry. Some services on our portal are offered in co-operation with partner companies. In order to be able to offer these partner services, it may be necessary for us to share your personal data with these partner companies. In this case too, however, the data will be used exclusively for the purpose of responding to your contact enquiry, including by our partner. The use of the data in the above sense. Your consent to the collection and use of data is recorded by us. The legal basis for data processing is the consent of the data subject in accordance with Art. 6 para. 1 a GDPR.
It is possible to contact us via the e-mail address provided on our website. In this case, the user's personal data transmitted with the e-mail will be stored. The data is used exclusively for processing the conversation.
If contact is made by email, this also constitutes the necessary legitimate interest in processing the data.
The legal basis for the processing of the data is Art. 6 para. 1 lit. a GDPR if the user has given consent.
The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 para. 1 lit. f GDPR. If the e-mail contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.
In this case, all personal data stored in the course of making contact will be deleted.
Application by e-mail and application form
An application form is available on our website, which can be used for electronic applications.
We use the recruiting page of the personnel and applicant management software Talention to provide the application form. If an applicant makes use of this option, the data entered the input mask is transmitted to Talention and stored.
If an applicant makes use of this option, the data entered the input mask will be transmitted to us and stored. These data are
- First name
- email address
- Curriculum vitae
- Cover letter
Alternatively, you can also send us your application by e-mail. In this case, we will record your e-mail address and the data you provide in the e-mail.
After sending your application, you will receive an e-mail from us confirming receipt of your application documents.
Your data will not be passed on to third parties. The data will be used exclusively for processing your application.
The processing of personal data from the application form is solely for the purpose of processing your application. If you contact us by email, this also constitutes the necessary legitimate interest in processing the data.
The other personal data processed during the sending process is used to prevent misuse of the application form and to ensure the security of our information technology systems.
We use so-called "cookies" on our website. These are small text files that are sent from our web server to your computer to store certain information (e.g. identification features).
If you use our website using your user profile, cookies are used to identify your browser for the duration of your visit, including when you access various pages.
It is also possible to view our website without saving cookies. You can deactivate the storage of cookies in the settings of your browser or set it so that it informs you about the intended storage by a website. In this case, you decide whether to accept the cookie. For technical reasons, however, it is necessary to allow all temporary cookies in order to use the full functionality of our website. Even if cookies are deactivated, our website sends the described unit ID to your browser in order to measure the scope of use of free content.
The legal basis is the legitimate interest pursuant to Art. 6 para. 1 f GDPR.
Further information and setting options, including the right of revocation specifically for cookies, can be found under "Cookie usage" and "Cookie settings", where you can set which cookies are to be used. Go to the website below, where you will also find the legal notice.
If you wish to withdraw your consent to our cookies, you can adjust your browser settings at any time: To do this, go to "Cookies Settings".
Further information on blocking cookies can be found on the help pages of your Internet browser. For example, for
Windows Internet Explorer™: windows.microsoft.com/en-DE/windows-vista/Block-or-allow-cookies
You can activate or deactivate personalized advertising from Google here.
In addition, you can object here to the measurement for the measurement procedure ("SZMnG") of INFOnline GmbH to determine statistical parameters on the use of our offers. The aim of this usage measurement, which is carried out with legitimate interest in accordance with Art. 6 para. 1 lit. f) GDPR, is to statistically determine the number of visits to our website, the number of website visitors and their surfing behavior - on the basis of a uniform standard procedure - and thus to obtain market-wide comparable values. Further information on data protection in this measurement procedure can be found on the website of INFOnline GmbH, which operates the measurement procedure, the data protection website of AGOF and the data protection website of IVW.
The legal basis is the legitimate interest pursuant to Art. 6 para. 1 f GDPR.
In some cases, a new cookie (opt-out cookie) is stored in your web browser after such an objection. This instructs third parties not to collect any data from your browser and prevents advertising from being sent to you.
Use of Adobe Analytics
We use Adobe Analytics, a web analytics service provided by Adobe Systems Software Ireland Limited, Dublin, Ireland (hereinafter referred to as "Adobe Analytics"). We have obligated Adobe Analytics to handle your data in compliance with data protection regulations via a contract data processing agreement.
Adobe Analytics uses "cookies", which are stored on your end device and enable us to analyze your use of our website. The cookie set by Adobe has a duration of 24 months. The information generated and collected by the cookie about your use of the website is generally transferred to an Adobe Analytics server in the USA, where it is analyzed and stored.
We have activated IP anonymization for this online offer, so that your IP address is immediately shortened by Adobe, regularly within the member states of the European Union and in the other contracting states of the Agreement on the European Economic Area. The complete transmission of the IP address to the Adobe Analytics server in the USA and a shortening of the IP address there only takes place in exceptional cases. An adequate level of data protection is also ensured in the USA, as we have concluded the current standard contractual clauses published by the EU Commission with Adobe.
If the information generated by the cookie about the use of the online offer is transmitted to an Adobe server, the settings ensure that the IP address is anonymized before geolocalization and replaced by a generic IP address before storage.
The IP address transmitted by your browser as part of Adobe Analytics is not merged with other Adobe data.
Adobe will use this information to evaluate the use of the online offer by users in order to compile reports on activities. This takes place both at the level of the upstream cookie banner and afterwards during your visit to our online services. This also includes the use of an A/B testing tool in order to continuously improve our offering.
We only activate Adobe Analytics with your consent. The legal basis is § 25 para. 1 TTDSG i.V.m. Art. 6 para. 1 a GDPR. Analyzing the use of our online services helps us to continuously improve them.
Alternatively, you can also store your opt-out here: www.adobe.com/de/privacy/opt-out.html.
An objection or revocation does not affect the permissibility of data processing in the past.
Adobe Systems Software Ireland Limited, Dublin, Ireland provides further information at https://www.adobe.com/de/privacy/policy.html, https://www.adobe.com/privacy/eu-dpa.html and https://www.adobe.com/de/privacy.html.
External links or hyperlinks to websites of other providers
Our website contains external links or hyperlinks to websites of other providers. They are to be distinguished from our own content. This external content does not originate from us, nor do we have any influence over the content of third-party websites.
When you select an external link or hyperlink, you will be redirected from our website to the website of the third-party provider. In this case, we cannot guarantee the confidential handling of your data or compliance with data protection regulations by these external providers. The responsibility in this regard lies solely with the respective website provider.
Should we become aware of the illegal content of external links or hyperlinks available on our website, we will remove the links concerned immediately. Please contact the data protection officer using the contact details above if you have any questions.
We make every effort to take all technical and organizational measures to store your personal data in such a way that it is not accessible to third parties. We cannot guarantee complete data security when communicating by e-mail, so we recommend that you send confidential information by post.
Definition / Glossary
"Anonymization" is the modification of personal data in such a way that the individual details about personal or factual circumstances can no longer be assigned to a specific or identifiable natural person, or only with a disproportionate amount of time, cost and manpower.
"Special categories of personal data" are data concerning racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health or sex life.
"Third party" means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorized to process the data.
"Consent of the data subject" means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
"Recipient" is any person or entity that contains data. Third party is any person or body other than the controller. Third parties are not the data subject or persons and bodies that collect, process or use personal data on behalf of the data subject in Germany, in another member state of the European Union or in another state party to the Agreement on the European Economic Area.
"Collection" is the procurement of data about the data subject.
"Erasure" is the deletion of stored personal data.
"Personal data" means any information relating to an identified or identifiable natural person ("data subject"); an identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number or to other specific factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that person.
"Pseudonymitication" is the replacement of the name and other identifying features with an identifier for the purpose of excluding or significantly complicating the identification of the data subject.
"Enterprise" means any natural or legal person engaged in an economic activity, irrespective of its legal form, including partnerships or associations regularly engaged in an economic activity.
"Group of companies" means a group consisting of a controlling company and the companies dependent on it.
"Processing" means storing, modifying, transmitting, blocking and deleting personal data. In detail, regardless of the procedures used:
- Storage the collection, recording or storage of personal data on a data carrier for the purpose of its further processing or use
- Modification the alteration of the content of stored personal data,
- transferring the disclosure of stored personal data or personal data obtained through data processing to a third party in such a way that
- the data is passed on to the third party or
- the third party inspects or retrieves data held ready for inspection or retrieval,
- blocking the marking of stored personal data in order to restrict their further processing or use.
"Controller" is any person or body that collects, processes or uses personal data for itself or has this done by others on its behalf.