Data Privacy
In accordance with Articles 13, 14, and 21 of the General Data Protection Regulation (GDPR), we hereby inform you about the processing of your personal data in connection with the use of the DMG MORI Onlineshop for Merchandising (lifestyle.dmgmori.com) and your related data protection rights.
This online store is operated by STAR Cooperation GmbH. STAR Cooperation GmbH is authorized by DMG MORI Global Marketing GmbH to sell DMG MORI products.
1. Contact Details of the Joint Controllers
The joint controllers according to Article 26 GDPR are:
STAR Cooperation GmbH, Sofía Neher (Managing Director),
Jörg Gerstlauer (Managing Director),
Otto-Lilienthal-Straße 5,
71034 Böblingen
Phone: +49 7031 6288 300
Email: service@lifestyle.dmgmori.com
DMG MORI Global Marketing GmbH, Irene Bader (Managing Director),
Antoniusstr. 14,
73249 Wernau
Phone: +49 7153 / 934-0
Email: info@dmgmori.com
2. Contact Details of the Data Protection Officer
Data Protection Officer of STAR Cooperation GmbH,
Otto-Lilienthal-Straße 5,
71034 Böblingen
Email: datenschutz@star-cooperation.com
DMG MORI corporate data protection
DMG MORI Europe Operations GmbH
DECKEL MAHO Straße 1,
87459 Pfronten
Email: responsibility@dmgmori.com
3. Data Processing | Registration as a Customer and Employee
|
Description of Data Processing
|
Personal data is only collected if you provide it to us when opening a customer account. Your registration data will be stored in DMG MORI's CRM system or, in the case of existing customers, compared with existing data in order to note your use there and to take you into account for justified data processing and contacting, for example for current information on our products and services. |
| What categories of data are processed? |
Contact data, address data, employee data |
| For what purpose is this data processed? |
Opening of a customer account, determination of tax components |
| What is the legal basis for processing? | Art. 6 (1) b GDPR Contract initiation, Art. 6 (1) c GDPR Legal obligation |
| How long is the data storage period? | The data storage period is based on legal retention obligations and is generally 10 years. |
| Who are the recipients of the data? | STAR Cooperation GmbH and affiliated companies, and their subcontractors and service providers, DMG MORI Global Marketing GmbH and affiliated companies, external service providers or other contractors. |
| Is the data transferred to a third country? |
In the context of contract execution, subcontractors outside the European Union may also be used. |
4. Data Processing | Use of the Contact Form
| Description of Data Processing | We offer you the option to contact us via email and/or a contact form on our website. When using it, we collect personal data only to the extent you provide. In this case, the information provided by the user is stored for the purpose of processing their inquiry. |
| What categories of data are processed? | Contact data, address data |
| For what purpose is this data processed? | Processing of inquiries |
| What is the legal basis for processing? | Art. 6 (1) b GDPR Contract initiation |
| How long is the data storage period? | The data storage period is based on legal retention obligations and is generally 10 years. |
| Who are the recipients of the data? |
STAR Cooperation GmbH and affiliated companies, and their subcontractors and service providers, DMG MORI Global Marketing GmbH and affiliated companies |
| Is the data transferred to a third country? | no |
5. Data Processing | Credit Check and Collection
| Description of the Data Processing |
In principle, we offer various payment options. In the case of selecting an insecure payment method (e.g. purchase on account), we protect ourselves from potential payment defaults. For this purpose, we may request a credit report from a credit rating agency before granting this payment method. For this, we transmit the personal data required for the credit check and use the information received regarding the statistical probability of payment default for a reasoned decision regarding the establishment, execution, or termination of the contractual relationship.
If invoices remain unpaid despite repeated reminders, we reserve the right to pass on the data required for collection to third-party companies for the purpose of debt collection. |
| Which categories of data are processed? | Contact details, address data, account and bank details |
| For what purpose are these processed? | Protection against payment defaults, ensuring payment receipt |
| What is the legal basis for the processing? | Art. 6 (1) f GDPR, legitimate interest |
| How long is the data retention period? | The data retention period is based on statutory retention obligations and is usually 10 years. |
| Who are the recipients of the data? | STAR Cooperation GmbH and affiliated companies, their subprocessors and subcontractors, credit rating agencies, debt collection companies, DMG MORI Global Marketing GmbHand affiliated companies, external service providers, or other contractors. |
| Is the data transferred to a third country? | No |
6. Data Processing | Order processing
| Description of the Data Processing | Personal data is collected if you provide it to us when you place an order, contact us or open a customer account. Personal data that is linked to a DMG MORI employee account is transmitted to DMG MORI as part of the monetary benefit in the relevant period under review. |
| Which categories of data are processed? | Account and account data, telephone, address data, country, company name, academic degree, email address, Mr./Mrs./Non-binary, surname & name, staff number |
| For what purpose are these processed? | Contract execution, order processing, shipping execution, invoicing, payment processing, processing of inquiries, monetary benefit: staff number, shopping cart/value, time period |
| What is the legal basis for the processing? | Art. 6 para. 1 lit. b) GDPR Contract initiation and contract performance, Art. 6 para. 1 lit. c) GDPR Legal obligation |
| How long is the data retention period? | The data retention period is based on statutory retention obligations and is usually 10 years. |
| Who are the recipients of the data? | STAR Cooperation GmbH and affiliated companies and their sub-processors and sub-service providers, transport companies and their sub-processors, PayPal Inc., DMG MORI Global Marketing GmbH and affiliated companies, external service providers or other contractors. |
| Is the data transferred to a third country? | Processors outside the European Union may also be used in the performance of the contract. |
7. Data Processing | Voucher tracking report
| Description of the Data Processing | As part of voucher usage, tracking reporting is implemented, which includes an evaluation of the vouchers regarding provisions and redemptions, as well as tracking the validity of vouchers. The voucher tracking report serves the purpose of creating appropriate provisions and monitoring the validity of vouchers. |
| Which categories of data are processed? | Evaluation of vouchers regarding provisions and redemptions, validity (related to the voucher code) |
| For what purpose are these processed? | Unique allocation of voucher values, evaluation of voucher redemptions, determination of tax components |
| What is the legal basis for the processing? | Art. 6 (1) b) GDPR |
| How long is the data retention period? | The data retention period is based on statutory retention obligations and is usually 10 years. |
| Who are the recipients of the data? | STAR Cooperation GmbH and affiliated companies, their subprocessors and subcontractors, DMG MORI Global Marketing GmbH and affiliated companies, external service providers, or other contractors. |
| Is the data transferred to a third country? | No |
8. Data Processing | Newsletter Registration
| Description of data processing | As part of the registration for our newsletter, you share your email address and optionally other personal and sociocultural data with us. The data you enter during the newsletter registration will remain with us until you unsubscribe from our newsletter. You can unsubscribe at any time via the provided link in the newsletter or by notifying us accordingly. By unsubscribing, you object to the use of your email address. |
| Which categories of data are processed? | Contact data, Sociocultural data |
| For what purpose is the data processed? | Newsletter dispatch |
| What is the legal basis for processing? | Art. 6 para. 1 lit. a) Consent |
| How long is the data stored? | The duration of data storage is determined by legal retention obligations and generally amounts to 10 years. |
| Who are the recipients of the data? | STAR Cooperation GmbH and affiliated companies and their sub-processors and subcontractors, newsletter service provider Sendinblue GmbH / Brevo, external service providers, or other contractors. |
| Is the data transferred to a third country? | No |
9. Data Processing | Newsletter Tracking Report
| Description of data processing | As part of the use of the newsletter, tracking reporting is implemented, which enables an anonymized evaluation of the newsletters regarding open rates, bounce rates, etc. The newsletter tracking reporting serves the implementation of strategic marketing measures, the derivation of target groups, and the increase of reach. |
| Which categories of data are processed? | Anonymized evaluation of the newsletter (open rate, bounce rate, etc.) |
| For what purpose is the data processed? | Evaluation of anonymized data to implement strategic marketing measures, derive target groups, and increase reach |
| What is the legal basis for processing? | Art. 6 para. 1 lit. a) GDPR |
| How long is the data stored? | The duration of data storage is determined by legal retention obligations and generally amounts to 10 years. |
| Who are the recipients of the data? | STAR Cooperation GmbH and affiliated companies and their sub-processors and subcontractors, DMG MORI Global Marketing GmbH, external service providers, or other contractors. |
| Is the data transferred to a third country? | No |
10. Use of "Cookies"
The online store uses the following types of cookies:
The online store uses the following types of cookies:
- Transient cookies (see a)
- Persistent cookies (see b)
a) Transient cookies are automatically deleted when you close the browser. These include session cookies in particular. These store a so-called session ID, with which various requests from your browser can be assigned to the session. Session cookies are deleted when you log out or close the browser.
b) Persistent cookies are deleted after three months at the latest. You can delete the cookies at any time in the security settings of your browser.
c) You can configure your browser settings according to your wishes and, for example, refuse to accept cookies. However, we would like to point out that in this case you may not be able to use all the functions of the online store.
d) We use cookies to identify you for subsequent visits if you have an account with us. Otherwise you would have to log in again for each visit.
Adjust cookie settings -> Link to open the cookie banner: #uc-show-second-layer
11. Google Analytics
We use Google Analytics, a web analytics service provided by Google Inc (“Google”). Google Analytics is used for web analysis and optimizing the use of the website. The anonymized IP address transmitted by your browser in the context of Google Analytics is not merged with other data from Google. As part of the tracking, order data and information about ordered products are transmitted. The data we send and link with cookies, user identifiers, or advertising IDs will be automatically deleted after 14 months.
For more information about Google's terms of service and privacy policy, visit:
We use Google Analytics to analyze and regularly improve the use of our online store. We can use the statistics obtained to improve our offer and make it more interesting for you as a user. The legal basis for the use of Google Analytics is Art. 6 para. 1 sentence 1 lit. a) GDPR.
Opt-out from Google Analytics:
You can generally prevent your personal data (including your IP address) from being processed by Google Analytics by downloading and installing the browser add-on available at the following link:
Information from the third-party provider: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. User conditions: https://www.google.com/analytics/terms/de.html, overview of data use by Google: https://policies.google.com/technologies/partner-sites?hl=de, as well as the privacy policy: https://www.google.de/intl/de/policies/privacy.
12. Google Tag Manager
We use the Google Tag Manager from Google on our website. Through the Tag Manager, cookies are set that require consent, so the Google Tag Manager is only used with your consent according to Art. 6 para. 1 lit. a GDPR, § 25 para. 1 TTDSG.
13. Address Validation
On our website we offer you the possibility to check certain entries in address forms of our webshop for input errors in real time. This is to avoid problems with the delivery of the products you ordered due to incorrect information.
Furthermore, we want to ensure that their contact information is valid for sending information about their order or for any necessary queries.
For the provision of these functions, we use the service provider Endereco, Balthasar-Neumann-Straße 4b, 97236 Randersacker. The service provider processes the data exclusively according to our instructions. The legal basis for the transmission, processing and temporary storage of the data with the service provider is Art. 6 (1) lit. b DS-GVO, as it is absolutely necessary for the fulfillment of the contract or for the implementation of pre-contractual measures that some of the data entered by you in the input mask is checked for accuracy. The following data is processed by the service provider:
- Address (country, city, postal code, street, house number if applicable)
14. Right to Object
If the processing of your personal data is for the protection of legitimate interests according to Art. 6 para. 1 (e) or (f) GDPR, you have the right, according to Art. 21 GDPR, to object to the processing of your personal data if there are reasons based on your specific situation that oppose the processing. We will then cease the processing unless the processing serves overriding, compelling legitimate interests on our part or the assertion, exercise, or defense of legal claims.
15. Rights of the Data Subject
You have the right to:
You have the right to:
- According to Art. 15 GDPR, request information about the personal data we process about you. In particular, you can request information about the purposes of processing, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage duration, the existence of the right to correction, deletion, restriction of processing or objection, the existence of a right to lodge a complaint, the source of your data, if not collected from us, and the existence of automated decision-making, including profiling, and, if applicable, meaningful information about the details;
- According to Art. 16 GDPR, request the immediate correction of inaccurate or completion of your personal data stored by us;
- According to Art. 17 GDPR, request the deletion of your personal data stored by us, unless processing is necessary for the exercise of the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest, or for the assertion, exercise, or defense of legal claims;
- According to Art. 18 GDPR, request the restriction of processing of your personal data, if the accuracy of the data is contested, the processing is unlawful, but you oppose the deletion and we no longer need the data, but you need it for the assertion, exercise, or defense of legal claims, or if you have objected to processing according to Art. 21 GDPR;
- According to Art. 20 GDPR, receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format, or request its transmission to another controller;
- According to Art. 7 para. 3 GDPR, revoke your consent given to us at any time. This means that we may no longer continue the data processing based on this consent in the future;
- According to Art. 77 GDPR, lodge a complaint with a supervisory authority. In general, you can contact the supervisory authority of your usual place of residence or workplace or our company's registered office. The responsible data protection supervisory authority for us is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg.
If you wish to exercise your rights as a data subject, you can simply send an email to the contact details above or to our data protection officer.