1. Controller

The party responsible for data processing on this website is:

DEXDO GmbH
Winchester Straße 2
35394 Gießen
Germany

Phone: +49 (0) 641 1327 3268
Email: marktplatz@dexdo-online.de
Managing Director: Yilin Wang

We have not appointed a data protection officer, as the legal requirements for doing so are not met. For all questions regarding data protection, you can reach us using the contact details provided above.

2. General Information

We process personal data only to the extent necessary to provide this website, our content and services, or if you have given your consent. Depending on the processing, the legal bases are Art. 6 (1) lit. a GDPR (consent), lit. b (contract and pre-contractual measures), lit. c (legal obligation) and lit. f (legitimate interest).

The transmission between your browser and this website is encrypted using TLS; you can recognize this by the address bar of your browser.

3. Hosting and server location

This website is operated on a server that can be reached at the IP address 43.247.134.18. This address is assigned to VH Global Limited, based in Hong Kong. The server location is therefore outside the European Union.

When this website is accessed, technically necessary data are processed there, in particular your IP address. This therefore constitutes a transfer of personal data to a third country within the meaning of Art. 44 et seq. GDPR. There is no adequacy decision by the European Commission pursuant to Art. 45 GDPR for Hong Kong.

The legal basis for operating the website is our legitimate interest in a technically error-free presentation and provision of our online offering (Art. 6 (1) (f) GDPR). Insofar as a contract is initiated or concluded via the website, the processing is additionally based on Art. 6 (1) (b) GDPR.

For the transfer to Hong Kong, there are currently no appropriate safeguards within the meaning of Art. 46 GDPR in place, in particular no standard contractual clauses. We expressly point this out: a level of data protection equivalent to European law cannot be guaranteed for this transfer; official access under local law cannot be ruled out and your rights may be more difficult to enforce. Switching to a provider within the European Union has been decided and is being prepared. Until then, we limit the data collected via this website to what is necessary for operation and contract processing.

Server log files

Each time a page is accessed, data transmitted by your browser is automatically stored in server log files:

• page accessed and time of access
• amount of data transferred and notification of successful retrieval
• Browser type and browser version
• operating system used
• previously visited page (referrer)
• IP address

This data is required for the operation and security of the website (Art. 6 (1) lit. f GDPR). It is not merged with other data sources.

4. Cookies

This website uses cookies. Cookies are small text files that your browser stores and that do not cause any harm.

We use technically necessary cookies on the basis of Section 25 (2) No. 2 TDDDG and Art. 6 (1) lit. f GDPR. These include in particular:

• Server session cookie (server_name_session) – assigns your requests during your visit, duration 24 hours
• WooCommerce cart and session cookies – store the contents of your shopping cart and your login status; they are only set when you add a product to the cart or log in
• WordPress login cookies – only for registered user accounts
• Language selection – remembers the selected language version

You can set your browser so that you are informed when cookies are set, allow cookies only in individual cases or exclude them entirely. If cookies are deactivated, the functionality of this website may be limited, in particular the shopping cart and customer account.

5. Contact

If you contact us via the contact form, by e-mail or by telephone, we process your details in order to handle your inquiry and in case of follow-up questions. Via the contact form we collect your name, your e-mail address and your message. The form is processed by our own website; no external form service is involved.

The legal basis is Art. 6 (1) (b) GDPR if your inquiry serves the initiation of a contract, otherwise Art. 6 (1) (f) GDPR. We delete the data as soon as the matter is concluded and no statutory retention periods stand in the way.

For sending and receiving e-mails, we use the mail servers of the provider yunyou.top. During e-mail traffic, content and connection data are processed on these servers.

6. Customer account and order processing

A customer account is required to place an order in our online shop. In doing so, we process your master data (name, address, e-mail address, company if applicable, telephone number, and VAT identification number) as well as your contract and payment data.

The legal basis is Art. 6 (1) (b) GDPR. We pass on your data insofar as this is necessary for the performance of the contract – in particular to the shipping company commissioned with the delivery and to our bank for processing the payment.

Retention obligations under commercial and tax law require us to retain contract and billing data for six or ten years respectively (Section 257 HGB, Section 147 AO). After these periods expire, the data will be deleted. You can have your customer account deleted at any time; the aforementioned retention obligations remain unaffected.

7. Payment method

We offer payment in advance by bank transfer. Your payment data is exchanged exclusively between you and your bank as well as our bank. No third-party payment service providers are involved.

8. Fonts

We use the fonts Raleway, Poppins, and Roboto to display our content. These fonts are delivered exclusively from our own server. No connection to third-party servers – in particular to Google Fonts – is established when you access our pages; no data is transmitted to Google in the process.

9. OpenStreetMap

On our contact page we embed map material from OpenStreetMap. The provider is the OpenStreetMap Foundation, St John's Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom. When you access the contact page, map tiles are loaded from their servers and your IP address is transmitted to them.

The legal basis is our legitimate interest in making our location easy to find (Art. 6 (1) (f) GDPR). Privacy policy: wiki.osmfoundation.org/wiki/Privacy_Policy.

10. Data sheets via Dropbox

Individual product pages link to technical data sheets hosted by Dropbox International Unlimited Company, One Park Place, Floor 5, Hatch Street Upper, Dublin 2, Ireland. Accessing such a link establishes a connection to Dropbox; in doing so, your IP address and technical details of your browser are transmitted to Dropbox. This may involve a transfer to the USA. The legal basis is our legitimate interest in providing technical documents (Art. 6 (1) (f) GDPR). Privacy policy of the provider: dropbox.com/privacy.

11. Audience measurement

We use the WP Statistics software to collect anonymized usage statistics in order to identify which content is in demand. The analysis takes place exclusively on our own server; the data is not passed on to third parties. The legal basis is Art. 6 (1) (f) GDPR.

12. Currency Conversion

In our shop, prices can be converted into foreign currencies for guidance. Only when you select a currency other than the euro in the currency selector (or your browser has stored a previous selection) does your browser retrieve the current daily exchange rates from the ExchangeRate-API service (open.er-api.com; provider: www.exchangerate-api.com). In doing so, your IP address is transmitted to the provider; a transfer to third countries outside the EU cannot be ruled out. Your currency selection and the retrieved rates (the latter for 24 hours) are stored exclusively locally in your browser (localStorage); no cookies are set. No retrieval takes place unless a foreign currency is actively selected. The euro prices remain binding for all orders. The legal basis is our legitimate interest in providing convenient price information for international customers (Art. 6(1)(f) GDPR). Provider's privacy information: exchangerate-api.com/terms.

13. Your rights

You have the right at any time to

• information about the data stored about you (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• objection to processing based on legitimate interests (Art. 21 GDPR)

You may revoke any consent you have given at any time with effect for the future. To do so, simply contact us informally using the contact details provided above.

Irrespective of this, you have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The authority responsible for us is:

The Hessian Commissioner for Data Protection and Freedom of Information
P.O. Box 3163, 65021 Wiesbaden
datenschutz.hessen.de

14. Version and amendments

This Privacy Policy is dated August 2026. We will update it if the legal situation or our processing operations change.