doozzoo logo

Privacy Policy

With this privacy policy we inform you about the processing of your personal data when using our website.

 
1. Name and address of the data controller

This website is operated by the company C. Bechstein Digital GmbH as the data controller pursuant to Art. 4 No. 7 GDPR. Our postal address:

C. Bechstein Digital GmbH
Kant Street 17
10623 Berlin

 
2. Contact details for inquiries about data protection

If you have any questions regarding data protection on this website and our services, please contact us at any time at the postal address:

C. Bechstein Digital GmbH
Kantstrasse 17
10623 Berlin

or by e-mail to datenschutz@bechstein-digital.com

 
3. Your rights

a) You have the following rights vis-à-vis us regarding the personal data concerning you:

  • Right to information (Art. 15 GDPR),

  • Right to rectification (Art. 16 GDPR) or deletion (Art. 17 GDPR),

  • Right to restriction of processing (Art. 18 GDPR),

  • Right to object to processing (Art. 21 GDPR),

  • right to data portability (Art. 20 GDPR).

b) You also have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data by us. In the following link you will find the official and current listing of data protection supervisory authorities in Germany:

BfDI – Landesdatenschutzbehörden

c) You may object to the processing of personal data for marketing purposes at any time without giving reasons.

d) In addition, every data subject has a general right to object (cf. Art. 21 (1) GDPR). In the event of your objection, we will examine your request and, if you provide us with such, your reasons against the processing. As a rule, we will stop processing your data if you so wish, as we have no interest in processing data from you against your wishes. Nevertheless, there may be individual cases in which we have to continue processing your data for a certain period of time even after your objection, but this is mainly the case when processing is based on the conclusion of a contract or legal obligations. In any case, we will inform you about the decision after your objection.

e) If the data processing is based on consent, your consent can be revoked at any time with effect for the future. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

 
4. Web analysis

In order to classify which pages of our website are more or less frequented, we use web analysis software on our server. The analysis runs exclusively on our server, which means that even your IP address is not forwarded to third parties. The program stores page views and assigns them to previously anonymized visitors. We use this software with privacy-friendly settings and thus have no possibility of sifting or storing personal data. We also do not store any data about your possible interactions on our website. A combination of this data with other data sources with which identification would possibly be possible (for example, if you submit a written request to us and leave your name) is not made by us. Therefore, profiling in the sense of the DSGVO does not take place with the above information on our part. Furthermore, the web analysis software used respects the Do Not Track setting of your browser if you have activated it.

 
5. Processing of personal data when visiting our website.

During the informational use of the website, i.e. if you do not register or otherwise transmit information to us, our server only processes the personal data that your browser may transmit to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security:

  • IP address

  • Date and time of the request

  • Time zone difference to Greenwich Mean Time (GMT)

  • Content of the request (specific page)

  • Access status/HTTP status code

  • Amount of data transferred in each case

  • Website from which the request comes

  • The type of browser you are using and a browser version number

  • Depending on the browser software used, information on the screen resolution used or the size of the browser window, if applicable.

  • Language setting of the browser

  • Operating system and version (e.g. Windows 10, macOS, iPad OS or Android).

The legal basis for the processing of your personal data when visiting our website in general is Art. 6 para. 1 sentence 1 letter f GDPR. The storage period of this technically necessary data is generally one month.

 
6. Processing of personal data in the event of further interaction with us.

If you use the contact form to make inquiries about the purchase of our products, place an order or complain about purchased products, we process their data to manage your order and process the contract.

Legal basis: Art. 6 para. 1 sentence 1 letter b (in case of an order or contact in the context of a contract) and f (in case of all further contacts) DSGVO.

The storage period of contract-related data is: 10 years.
Data from product inquiries are stored for the reasonable period of appropriate processing. After that, at the latest after 3 years, the data will be deleted by us.

 
7. Processing of your personal data when using the doozzoo service

>When you register for our doozzoo service, we process the data from you that is required for the provision of the services and, if applicable, billing. Failure to provide the necessary personal data would mean that the contract could not be concluded.

For the use of doozzoo’s audio and video functions, access to webcam and microphone must be allowed. The establishment and operation of the connection takes place, as is usual on the Internet, by means of the IP address. The video and audio stream is end-to-end encrypted and is not stored by us.

When using our cloud media library, you can upload and delete files on your own responsibility. In this case, the documents you upload will be stored securely on our cloud servers until you manually delete or cancel the service.

We offer different account or access types in which the processing of data differs as follows:

 

a) Free trial access (“Test-drive”):

The “test drive” is used without providing information such as name or e-mail address by calling up a URL. When conducting the sessions, for which access to microphone and camera is required, a video and audio stream is transmitted in encrypted form between the participants.
The legal basis is the balancing of interests according to Art. 6 para. 1 sentence 1 letter f GDPR. The storage period is initially volatile, so data is only transmitted for the duration of the streaming.

The usage-related data (i.e. the technical data required for the use of the service, see No. 4) are stored for 30 days

 

b) Individual teachers (users of the Pro-Coach account):

If you register online via the website for a paid account, we process the data required for the conclusion of the contract. This includes your e-mail address and the password you have chosen, but which cannot be read by us, your name, address, as well as your payment data, which you provide via our payment service provider.

When conducting sessions that require access to a microphone and camera, a video and audio stream is transmitted in encrypted form between participants.

For users of a private individual access (Pro-Coach account), the use of the “archiving function” can be additionally booked. With this function, video recordings can be proactively triggered by the instructor for the participants in the session to see. These recordings are created on the connection server and made available in the instructor’s media library. (This function is only available to institutions and their users upon explicit request and after subscription).

The legal basis is the balancing of interests according to Art. 6 (1) sentence 1 letter b GDPR. The storage period is initially volatile, so data is only transferred for the duration of the streaming.

Usage-related data is stored for 30 days. We keep your payment data for 10 years due to commercial and tax obligations.

 

c) Learners of online registered teachers with Pro Coach account:

Learners are invited by a teacher with a Pro Coach account and/or register independently. Only an email address and password are required to register in a learner account. Entering an additional clear name and/or pseudonym (nickname) is voluntary. When conducting the sessions, for which access to microphone and camera is required, a video and audio stream is transmitted in encrypted form between the participants.

The legal basis for processing access and usage data is the balance of interests pursuant to Art. 6 (1) sentence 1 letter f GDPR, in order to enable us to provide the service you requested and booked to the teacher assigned to you. The usage-related data will be stored for 30 days.

 

d) Teachers and learners of institutions:

Teachers and learners of an institution receive their access from the institution. Only the e-mail address of the user is required. The entry of an additional clear name and/or pseudonym is voluntary. The institution is responsible for processing the data. In this respect, we are a service provider bound by instructions and have concluded an order processing agreement with the institution. When conducting the sessions, for which access to microphone and camera is required, a video and audio stream is transmitted in encrypted form between the participants.

The legal basis is the balancing of interests according to Art. 6 (1) sentence 1 letter f GDPR, in order to enable us to provide the service you requested and booked to the teacher assigned to you. The usage-related data will be stored for 30 days.

 

e) Learners / users in a workshop room:

You can join a workshop room as a guest. It is not necessary to enter a pseudonym (nickname) or clear name, e-mail address, etc.. Previously registered users join the workshop room with the name / pseudonym (nickname) that is already stored in their own profile. When conducting the sessions, for which access to microphone and camera is required, a video and audio stream is transmitted in encrypted form between the participants.

The legal basis is the balancing of interests according to Art. 6 para. 1 sentence 1 letter f GDPR, in order to enable us to provide the service you requested and booked to the teacher assigned to you. The usage-related data will be stored for 30 days.


8. Use of external service providers and additional services

In some cases, we use external service providers for the processing of data. These have been carefully selected and commissioned by us. They are bound by our instructions and are regularly monitored. For the storage of data, we only use servers located in the EU or the EEA (European Economic Area).


9. Data processing based on legal obligations

In some cases, the provision of personal data is required by law. In these cases, we process your data only to the extent required by law.

The legal basis is Art. 6 para. 1 sentence 1 lit. c GDPR in conjunction with the relevant statutory provisions in each case. The storage period of the data is described in the respective data processing operations.

 
10. Cookies

When calling up individual pages, temporary cookies are used for the technical provision of our service. These so-called session cookies do not contain any personal data and expire at the end of the session.

Other storage or other techniques that make it possible to track the access behavior of individual users are not used.


11. Social logins (OAuth)

This function is not available for institutions and their users. For institutions and their users, registration is performed and managed centrally by the institution’s administration via the users’ email address.

Only individual customers who register themselves with doozzoo can use this function to register using the social login function of Google, Facebook or Twitter (so-called OAuth, Open Authorization).

We have not integrated any plug-in of the providers, but only provide a link to their offers. Only when you click on the respective chart, the connection to the providers opens. The providers independently collect your name, e-mail address, language setting and profile picture. We process your name and (e-mail) address, as well as account data, if applicable, to the extent necessary to create your doozzoo user account.

The legal basis for the data processing by us is the performance of the contract according to Art. 6 para. 1 sentence 1 letter b GDPR.

Status 2021/07