Privacy Policy

1. Controller

The controller responsible for processing your personal data on this website is:

DINO Dampferzeuger GmbH
Leerkämpe 6d
28259 Bremen, Germany
Phone: +49 (0) 421 58 00 44
Email: info@dino-dampf.com

"Personal data" means any information relating to you as a natural person. This notice applies to this website. If you follow a link to another site, the privacy policy of the respective provider applies there.

2. Visiting our website

You can use our website without providing any information about yourself. With every visit, your browser transmits technically necessary data that our hosting provider stores in a log file:

• IP address of the requesting computer
• Date and time of access
• Name and URL of the file retrieved
• Website from which the access originates (referrer URL)
• Browser used and, where applicable, the operating system of your computer

Purposes. We process this data to technically deliver the website and ensure its stability, to detect and contain faults, and to defend against and investigate attacks and misuse.

Legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in exactly these three purposes: trouble-free operation, troubleshooting, and the security of our systems.

Retention period. The logs are rotated and deleted on a regular schedule, as soon as they are no longer required for the purposes named. Individual entries are kept longer only where a specific security incident makes it necessary; the entries concerned are then deleted once the incident has been conclusively resolved.

We do not combine these logs with other data and do not create personal usage profiles from them.

3. Contact form

You can use our contact form to send us a message. Name, email address and your message are required; company and phone number are voluntary. We process this data to handle your enquiry and in case of follow-up questions.

Legal basis is your consent under Art. 6(1)(a) GDPR, which you give before sending via the checkbox in the form.

Withdrawal. You can withdraw this consent at any time with effect for the future — an email to info@dino-dampf.com is enough, no reason is required. We then delete your enquiry, unless we are required to keep it on file to comply with statutory retention obligations. Please note: after a withdrawal we can no longer process your enquiry. The lawfulness of the processing carried out up to the withdrawal remains unaffected (Art. 7(3), third sentence, GDPR).

Provision of your data. You are not obliged to use the form — you can just as well call us, write us an email, or reach us by post. Without the details marked as required, however, we cannot process your enquiry via the form; beyond that, you suffer no disadvantage.

Retention period. We store your enquiry for as long as we need it to handle it and for follow-up questions, and delete it afterwards. If your enquiry leads to a contract, the retention periods under tax and commercial law apply (generally six or ten years); the data is then blocked for other purposes.

Transmission route and email fallback. Your details are transmitted to our form service and delivered to us from there by email (see Section 7); no storage in a database takes place. If this transmission fails, the page offers you a second route: it opens a ready-made message draft in your own email programme, containing your details (name, company, email address and message). This draft is created on your device. Whether it is sent is your decision — only once you send it do the data reach us via your email provider. We are not responsible for the processing carried out by your own email provider.

Protection against automated submissions. To prevent our forms from being misused for mass and spam messages, we use three measures: an additional field invisible to you that is only filled in by automated programs, a check of the time between opening and sending the form, and a limit on the number of submissions per sender. For this limit, your IP address is not stored, but converted into a non-reversible check value (salted hash) that is held only in working memory and expires after a short time. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is preventing misuse and keeping our forms functional.

4. Enquiry list and enquiry form

On our website you can put together devices in an enquiry list and send it to us as a combined enquiry. Name, company and email address are required; position, phone number, industry and a message are voluntary. Also transmitted are the items you selected together with quantity and configuration (for example series, variant, equipment, output, design, purchase or rental, the options you chose, your notes, and the page from which you added the item).

In addition, the form transmits technical accompanying information about your enquiry: your browser's identifier (user agent), the page you visited beforehand (referrer), and the address of the page from which you submitted. They serve to classify your enquiry and to trace any transmission problems, and appear in the email delivered to us.

Legal basis is your consent under Art. 6(1)(a) GDPR, which you give before sending via the checkbox in the form. For withdrawal, provision of the data, the retention period and protection against automated submissions, the same applies as for the contact form (Section 3).

Before you send it, the data stays with you. The enquiry list and the comparison list are kept in your browser's local storage (localStorage) — see Section 6. Simply viewing our website does not transmit these details to us.

Email fallback. As with the contact form, if transmission fails the page opens a ready-made message draft in your own email programme. It contains your contact details and the complete enquiry list including configuration. Here too, it is your decision whether to send it.

5. Job applications

You can apply to us via our application form. First name, surname, email address and the desired field of work are required. Details such as phone number, work experience, desired working hours and your message are voluntary. You may also voluntarily attach application documents — up to three files of a maximum of 2.5 MB in total, in the formats PDF, DOC, DOCX, JPG and PNG.

Purpose is exclusively to carry out the application process. Legal basis is Art. 6(1)(b) GDPR — the processing is necessary for the decision to establish an employment relationship.

Special categories of personal data. Application documents may contain particularly protected details — for example on severe disability, health, religious affiliation or trade union membership. Please only submit such details insofar as they are genuinely necessary for your application. Where we process them, we rely on Art. 9(2)(b) GDPR in conjunction with Section 26(3) BDSG (German Federal Data Protection Act).

Transmission route. Your application is delivered to us by email (see Section 7). The attached files are processed only temporarily in working memory during this; your application documents are not permanently stored on the web server or in a database. Unlike Sections 3 and 4, there is no email fallback for the application form.

Retention period. If no employment results, we delete your application data six months after the rejection notice is received. This period follows from the need to be able to defend against possible claims under the German General Equal Treatment Act (Allgemeines Gleichbehandlungsgesetz). If you would like us to keep your application longer for future positions, let us know — we then store it on the basis of your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time. If you are hired, we transfer the necessary data to your personnel file.

Provision of your data. You are not obliged to apply via the form — you can also send us your documents by email or post. Without the required details, however, we cannot process your application.

6. Cookies, local storage and consent

As long as you have not consented, we store no cookies on your device for analytics or advertising, and none of the services listed below is loaded. Without your consent we use only the following storage in your browser's local storage (localStorage).

Technically required local storage. It concerns two functions that you have to use actively before any data arises at all:

• Comparison list (storage key dino:vergleich:v1): the units you selected for comparison, stored for 30 days.
• Enquiry list (storage key dino:anfrageliste:v1): the combined enquiry you put together, stored for 90 days.

This data initially stays in your browser; simply viewing our website does not transmit it to us. Only when you deliberately send the enquiry are the details it contains transmitted to us together with your contact details and processed as described in Section 4. The storage serves solely the function you requested and is technically necessary for it (Section 25(2) no. 2 TDDDG, German Telecommunications Digital Services Data Protection Act). You can delete the stored data at any time via your browser settings.

In addition we remember your decision about the services listed below (storage key dino:consent:v4). Otherwise we would have to ask you again on every page. What is stored is only your selection per area, the time of the decision and the version of the list of services it relates to. After 365 days we ask again, and also whenever the list of services changes. This storage too serves solely to implement your decision and is necessary for that purpose (Section 25(2) no. 2 TDDDG); it is not transmitted to third parties.

Services we load only after your consent

If you consent in the banner, we load Google Tag Manager (container GTM-N29J9Z2C). It collects no measurement data itself; it is the tool through which the following services are embedded. Without your consent it is not loaded, and no cookies of these services are set either.

Google Analytics 4 (measurement ID G-YYCFH1E5NT) analyses how our website is used. This processes your IP address as well as details about your browser and device. According to Google, it also uses the IP address to recognise your device. The cookies _ga and _ga_YYCFH1E5NT are set.

Not only page views are measured, but also the following events, so that we can see which content and functions are being used:

• Downloading a data sheet — with the file name of the downloaded PDF and the page from which it was accessed
• Clicking an email address on our website
• Changes to your enquiry list and your comparison list (adding and removing items)
• Submitting a form, opening the email draft described above, submitting an application, and any form errors that occur

The advertising identifiers are additionally attached to these form and application events, where available (gclid as well as utm_source and utm_campaign) — so that we can see which advertisement led to an enquiry. The contents of your message, your enquiry list or your application are not transmitted to Google in this process.

Google Ads (conversion ID AW-553883086) measures whether a visit goes back to one of our advertisements, and is used for remarketing. Among other things, the cookie _gcl_au is set. We also use Enhanced Conversions: if you successfully submit a contact or enquiry form, the email address you entered is stored for up to 60 seconds in the cookie cb_enhanced on your device and transmitted to Google, so that Google can attribute the completion to an earlier interaction with an advertisement. The address is held unencrypted in that cookie. This does not happen for applications submitted through our application form: there, neither is this cookie set nor is any address transmitted to Google.

Google Ads also includes what is known as the Conversion Linker. In addition to _gcl_au it sets the cookies _gcl_aw and _gcl_gs, each with a lifetime of 90 days (as stated by the provider), as well as the entry _gcl_ls in your browser's local storage. We have no retention period for that entry; it remains until you delete it or withdraw your consent.

If you reach our website through an advertisement, we read the identifiers from the address you called up (gclid, gbraid, wbraid, msclkid and the utm_* parameters). They are stored on your device only if you have consented — together with the page you first opened and the time, in your browser's local storage (storage key dino:werbekontext:v1). If you later submit a form, these details are transmitted to us together with your enquiry so that we can see which advertisement the enquiry came from. The entry has no fixed retention period; it is deleted as soon as you withdraw your consent.

Retention, measured on our website: _ga and _ga_YYCFH1E5NT around 13 months (399 days), _gcl_au 89 days. The cookie cb_enhanced expires after 60 seconds.

These services are provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may also be transferred to and processed on Google servers in the USA; the recipient is then Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google's privacy policy is available at policies.google.com/privacy.

Basis for this transfer to a third country. Google LLC is listed with the status "Active" on the official EU-U.S. Data Privacy Framework list, and likewise for the UK Extension and the Swiss-U.S. Data Privacy Framework (original certification 22 September 2016, next certification due on 13 September 2026; consulted by us there on 15 August 2026). For recipients certified under that framework, an adequacy decision of the European Commission pursuant to Art. 45 GDPR is in place. The list itself does not name Google Ads or Google Analytics; the scope is stated there as "Google LLC and its wholly-owned U.S. subsidiaries". That Google relies on this framework for its advertising services is a statement made by Google itself.

In addition, we base the transfer to the USA on your explicit consent (Art. 49(1)(a) GDPR). We therefore point out the possible risks: the USA does not offer a level of protection equivalent in every respect to that of the GDPR. US authorities may access data under the conditions applicable there, and the legal remedies against this do not in every respect correspond to those within the scope of the GDPR. If you do not want this, do not consent — our website remains fully usable either way.

Leadinfo B.V., Rivium Quadrant 141, 2909 LC Capelle aan den IJssel, Netherlands, uses your IP address to recognise whether the access comes from a company network, and matches publicly available company data to it. We use this to see which companies are interested in our products. The cookies _li_id.* and _li_ses.* are set.

The provider states the following retention periods in detail: the cookie _li_id.* applies only to the current session, the cookie _li_ses.* for two years. In addition there are the entries _li_id.*.expires, _li_ses.*.expires and snowplowOutQueue_*_post2 in your browser's local storage; they remain until you delete them or withdraw your consent. These figures come from the provider's documentation — we have not measured them on our own website.

Leadinfo states that it processes the data exclusively in Ireland (Amazon Web Services EMEA SARL, Luxembourg) and that the data does not leave the European legal framework. At the same time, the same provider's privacy policy reserves the right to pass data on outside the European Economic Area without naming recipients. We reproduce both here as the provider states them; you will find it at leadinfo.com/en/legal/privacy/.

Your choice: analytics and marketing

In the consent dialog these services are assigned to two areas: Analytics (Google Analytics 4) and Marketing (Google Ads, Leadinfo). Google Tag Manager belongs to both areas, because it is the tool through which the other services are embedded.

At present, both areas can only be allowed together. The reason is the technology behind them: the services are embedded through a shared Google Tag Manager in which not every individual tag is yet tied to its own consent signal. A separate choice would therefore be a promise we could not technically keep. As soon as that is changed, both areas can be selected individually.

Legal basis and withdrawal

Storing these cookies on your device and accessing them is based exclusively on your consent (Section 25(1) TDDDG, German Telecommunications Digital Services Data Protection Act); the subsequent processing of your data is based on Art. 6(1)(a) GDPR. If you do not consent, none of this is loaded. Our website remains fully usable in that case.

You can withdraw your consent at any time with effect for the future. To do so, click Cookie settings in the footer of any page and make your selection again. You can additionally delete cookies that have already been set via your browser settings. The lawfulness of the processing carried out up to the withdrawal remains unaffected by it (Art. 7(3), third sentence, GDPR).

If you withdraw consent you have already given, this takes effect immediately: we delete the cookies set by the services named above and the corresponding entries in local storage, and reload the page — scripts that have already been loaded cannot otherwise be stopped. The withdrawal has no effect on data the providers named above have already received by then; please contact the respective provider in that regard.

7. Hosting and form processing

Our website is operated by a hosting provider in Germany; the servers are located in German data centres. The provider processes the log data named in Section 2 on our behalf.

The transmission of your form submissions (Sections 3 to 5) is handled by a form service we operate ourselves, running on the same servers. It accepts your input, checks it and delivers it to us by email; no storage in a database takes place. For sending emails we use an email service provider.

Purpose is the technical provision of our website and the delivery of your enquiries. Legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the secure and reliable operation of our online offering. We have data processing agreements under Art. 28 GDPR in place with the service providers we use. They process your data exclusively on our instructions and not for their own purposes.

8. Customer portal

In the header of our website we link to our customer portal, operated under its own address (kundenportal.dino-dampf.com). Only when you follow this link do you leave this website. Data processing on the customer portal is governed by the privacy notices provided there; merely displaying the link does not transmit any data to the portal.

9. Recipients of your data

We only pass your data on where this is necessary for the purposes named or where you have consented. Recipients are:

• our hosting provider and the form service we operate, as well as our email service provider — each acting as a processor (Section 7)
• the providers of analytics and advertising services named in Section 6, only after your consent
• authorities and courts, where we are legally obliged to provide information
• upon conclusion of a contract, additionally tax advisors and auditors within the scope of statutory obligations

We do not pass your data on to third parties for advertising purposes. Beyond the consent described in Section 6, we do not transfer your data to countries outside the European Union.

10. Your rights

You have the following rights against us regarding the personal data concerning you:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to withdraw consent given (Art. 7(3) GDPR)

To exercise any of these rights, an email to info@dino-dampf.com or a message to the address named in Section 1 is enough. This information is provided free of charge.

You also have the right to lodge a complaint about our processing of your personal data with a data protection supervisory authority (Art. 77 GDPR). The competent authority is the one for your place of residence, or the authority responsible for us:

Die Landesbeauftragte für Datenschutz und Informationsfreiheit der Freien Hansestadt Bremen
(the data protection commissioner for the State of Bremen)
Arndtstraße 1
27570 Bremerhaven, Germany

12. No automated decision-making

No automated decision-making in individual cases, including profiling within the meaning of Art. 22 GDPR, takes place. We do not check your creditworthiness, nor do we evaluate enquiries or applications in an automated way.

13. Security of transmission

This website is delivered exclusively encrypted (HTTPS/TLS). You can recognise this by the padlock symbol in your browser's address bar. This also protects the details you send us through our forms against interception during transmission.

14. Currency and amendment of this privacy policy

This privacy policy is dated 17 August 2026. Further development of our website, or changes in statutory or regulatory requirements, may make it necessary to amend it. The version currently in force is available on this page.