d.u.h.Group GmbH organises competitions and promotional campaigns in which customers and prospective customers can take part. We would like to provide you with the following information regarding the processing of your personal data in connection with these competitions and promotions, in accordance with Article 13 of the GDPR. This privacy notice supplements our general privacy notice, which you can access at https://www.duh-group.com/j/privacy.

1. Name and contact details of the data controller:
d.u.h.Group GmbH, Welle 15, 33602 Bielefeld.

2. Contact details of the Data Protection Officer:
You can contact our Data Protection Officer at datenschutz@duh-group.com or at the postal address given above, adding ‘Data Protection Officer’ to the address.

3. Purposes of data processing:
Your personal data is processed for the purpose of collecting addresses for direct marketing, as well as for the administration of the prize draw/promotion, verifying eligibility to participate, and identifying and notifying the winners. For the purpose of sending and delivering prizes, we may subsequently collect and process further data, e.g. your postal address. In individual cases, a telephone number may also be required if contact needs to be made at short notice (e.g. if concert tickets are to be won). If you have given separate consent to receive marketing communications, you may withdraw your consent at any time, without formal notice, with future effect, using the contact details provided above. Further information can be found in our general privacy policy.
For statistical purposes, we analyse, on an anonymous basis, how many participants took part in the respective competition. This analysis does not allow any conclusions to be drawn about individual participants. The legal basis for this is our legitimate interest pursuant to Article 6(1), first sentence, point (f) of the GDPR.

4. Legal bases
The legal basis for the processing of your data is the performance of the contract arising from your participation in the prize draw, Article 6(1), first sentence, point (b) of the GDPR (“performance of a contract”), as well as our legitimate interest in organising a competition in accordance with Article 6(1), first sentence, point (f) of the GDPR and in sending postal advertising. The legal basis for sending promotional correspondence (by email or post) is, depending on the nature of the competition and the terms and conditions of entry, either:

a. the competition contract, which includes the receipt of promotional emails as a condition of entry (this is set out in the relevant terms and conditions)

b. your separate, voluntary consent to the sending of promotional emails in accordance with Article 6(a) of the GDPR

You may withdraw any consent you have given at any time with effect for the future. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of that consent prior to its withdrawal.

5. Categories of personal data
When you take part in a competition or promotion, we process the data and information you provide in the registration form. This includes the data required for participation, such as:

first name and surname
address
email address (if applicable)
telephone number (if applicable)
as well as any further data and information you may voluntarily provide in the course of your participation.

6. Data erasure and retention period
Depending on the nature of the competition, the data will be stored for marketing purposes. If the sole purpose was to run the competition without any marketing communications, the processed data will be deleted once the competition or promotion has ended or expired and the prizes have been dispatched. The winners’ data will be deleted after three months. If, upon registration, a participant has consented to receiving information about products and services from d.u.h.Group and/or its partners, or if marketing communications are sent as a result of participation in the competition, the further processing of the data and information covered by this consent or the fulfilment of the contract shall take place in accordance with the statutory provisions. Please also refer to our general privacy policy for information on the processing of your data for marketing purposes.

7. Recipients of the data
The recipients of the data are the companies of d.u.h.Group GmbH involved in the competition, as well as the manufacturer or competition partner with whom we jointly organise the competitions. Where necessary, we have entered into the relevant agreements regarding joint responsibility or data processing on behalf of a third party. If no consent for marketing purposes has been given or if the competition terms and conditions do not authorise us to do so, only the winners’ details will be disclosed. As a general rule, your data will not be disclosed to third parties outside d.u.h.Group GmbH for marketing purposes.

8. Specifics regarding Facebook competitions
Competitions are occasionally organised on the company’s Facebook page. Participation usually takes place via a comment posted under the competition post. The winner(s) will be notified in the comments section. To receive your prize, you must provide your address. We ask that you send this exclusively via a private message (PM). This promotion is not affiliated with Facebook and is in no way sponsored, endorsed or organised by Facebook. The terms and conditions specified for the respective competition apply. In all other respects, the data protection information set out here applies.

9. Data subjects’ rights
If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis us as the data controller:
• Right of access pursuant to Article 15 of the GDPR
• Right to rectification pursuant to Article 16 of the GDPR
• Right to erasure pursuant to Article 17 of the GDPR
• Right to restriction of processing pursuant to Article 18 of the GDPR
• Right to be informed pursuant to Article 19 of the GDPR
• Right to data portability pursuant to Article 20 of the GDPR
• Right to object pursuant to Article 21 of the GDPR
• Right to withdraw consent pursuant to Article 7(3) of the GDPR
• Right to lodge a complaint with the competent supervisory authority pursuant to Article 77 of the GDPR

For further details regarding your rights as a data subject, please refer to our general privacy policy.

10. Right to object
The data subject has the right to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them. The controller shall then no longer process the personal data, unless it can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing is necessary for the establishment, exercise or defence of legal claims (Article 21 of the GDPR). You have the right to object at any time to the processing of your personal data for the purposes of direct marketing; this also applies to profiling insofar as it is related to such direct marketing.

To do so, please send a message to one of the contact addresses listed above. Please note that, in the event of an objection, you will no longer be eligible to participate in the prize draw or promotion.