Privacy Policy

1. Controller

The controller responsible for the processing of personal data on this website is Dürr Distribution GmbH, Von-Thünen-Straße 10, 59069 Hamm, Germany. Dürr Distribution GmbH operates this website as an intermediary and does not become a party to the purchase contracts it brokers.

Telephone: +49 2381 3391970, email: info@lizenzus.com

No data protection officer has been appointed, as the statutory requirements of § 38 of the German Federal Data Protection Act (BDSG) are not met. Please direct questions on data protection to the address stated above.

2. Principle

We process personal data only to the extent necessary for operating the website and handling your inquiry. This website is aimed at businesses. As a rule, we therefore process contact details of contact persons in their professional capacity.

3. Hosting and Delivery of the Website

This website is hosted by Webflow, Inc., 398 11th Street, San Francisco, CA 94103, USA. The provider supplies the server infrastructure and a worldwide content delivery network through which the pages are transmitted to your browser. In the process, data is processed on servers inside and outside the European Union.

The legal basis is Art. 6 (1)(f) GDPR. Our legitimate interest lies in a secure, stable and fast provision of the website. A data processing agreement under Art. 28 GDPR exists with the provider. The transfer to the United States is safeguarded by standard contractual clauses of the European Commission under Art. 46 (2)(c) GDPR and supplementary safeguards.

3a. Delivery of Software Libraries

To display the website, a widely used JavaScript library (jQuery) is used. It is loaded via a content delivery network of Amazon Web Services (Amazon CloudFront), which our hosting provider uses for this purpose. When the file is retrieved, your browser transmits its IP address to this network for technical reasons, because the file could not otherwise be delivered. We do not evaluate this data, and no cookies are set in the process.

The legal basis is Art. 6 (1)(f) GDPR. Our legitimate interest lies in a reliable and fast delivery of the website. The processing may also take place on servers outside the European Union; it is safeguarded by standard contractual clauses of the European Commission under Art. 46 (2)(c) GDPR.

4. Access Data and Server Logs

Each time a page is accessed, the following data is transmitted for technical reasons and stored in log files:

• IP address of the requesting device
• date and time of access
• name and address of the file retrieved
• amount of data transferred and message on whether the retrieval was successful
• referring address, if the access took place via a link
• information on browser and operating system

This data serves to deliver the pages, to ensure system security and to defend against automated attacks. The legal basis is Art. 6 (1)(f) GDPR. The data is not merged with other data sources, and we draw no conclusions about individual persons from the log data. The logs are deleted after 30 days at the latest, unless a security-relevant incident makes longer retention necessary for clarification.

5. Inquiry and Contact Form

If you use the inquiry form, we process the information you enter:

• company and contact person
• email address and, if provided, telephone number
• VAT identification number, if provided
• products and quantities requested
• your message

We use this information exclusively to process your inquiry and prepare an offer for you. For this purpose, we forward your inquiry to Niebuhr FTS IT GmbH, Georgstraße 38, 30159 Hannover. It is the Seller of the licenses brokered through this website, prepares the offer and concludes the contract with you; details on the roles are set out in the legal notice. The legal basis is Art. 6 (1)(b) GDPR, because the processing serves to carry out pre-contractual measures. Where your inquiry does not lead to a contract, we base further processing on Art. 6 (1)(f) GDPR, with the legitimate interest in answering business inquiries in a traceable manner.

The form is transmitted in encrypted form. Technically, it is handled and stored by our hosting provider; to protect against automated submissions, the service described in section 5a is additionally used. For further processing, we transfer your information to our own system under section 5b.

Inquiries that do not lead to a contract are deleted by us no later than six months after the last correspondence. If the inquiry leads to a contract, the periods under section 7 apply.

5a. Protection of the Inquiry Form against Automated Submissions

The inquiry form is protected against automated mass submissions by the Turnstile service of Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. The service uses technical characteristics of your browser and your connection to check whether the submission comes from a human. In the process, the IP address, information on browser and operating system, and interaction characteristics are processed. For this purpose, Cloudflare sets the cookie _cfuvid, which serves solely to distinguish automated from human access and does not enable profiling.

The legal basis is Art. 6 (1)(f) GDPR. Our legitimate interest lies in keeping the form functional and in defending against abusive submissions. § 25 para. 2 no. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG) applies to the setting of the cookie, because it is strictly necessary to provide the service you have requested. The service is integrated via our hosting provider, which uses Cloudflare as a sub-processor; the transfer to the United States is safeguarded by standard contractual clauses.

5b. Further Processing of Your Inquiry in Our Own System

Your form data is first received and stored by our hosting provider. Immediately afterwards, we transfer it automatically to our own customer management system, which is operated on a server in Germany. There we create an entry for your inquiry with company, contact person and subject of the inquiry, and we additionally store the submission in its original form so that the process remains traceable. Access to this system is limited to a group of persons known by name and is protected by a login procedure with a security key.

The legal basis is Art. 6 (1)(b) GDPR for processing your inquiry and Art. 6 (1)(f) GDPR for the traceable documentation of the process. The deletion periods under section 7 apply.

6. VAT Identification Number

If you provide a VAT identification number, we check its validity using the confirmation procedure of the European Commission and the Federal Central Tax Office. This is necessary to determine correctly the VAT treatment of a supply. The legal basis is Art. 6 (1)(c) GDPR in conjunction with the documentation obligations under VAT law.

7. Storage Period and Retention Periods

We delete personal data as soon as the purpose of the processing has ceased to apply and no statutory retention obligation prevents deletion. In detail:

• server logs: 30 days at the latest
• inquiries without conclusion of a contract: six months at the latest after the last correspondence
• offers, order documents and commercial letters: six years under § 257 para. 4 of the German Commercial Code (HGB)
• invoices and accounting-relevant documents: ten years under § 147 para. 3 of the German Fiscal Code (AO)
• supporting documents on the chain of title of a license: ten years, because they evidence lawful acquisition in the event of an audit of the license by the manufacturer

8. Recipients and Categories of Recipients

We pass on your data only to the extent necessary to perform the contract or required by legal obligations. We forward your inquiry to Niebuhr FTS IT GmbH, Georgstraße 38, 30159 Hannover, which, as the Seller, prepares the offer and concludes the contract with you. Other recipients may be:

• our hosting provider as processor under section 3
• the provider of our email service as processor
• our tax advisor and, in the course of an audit, the tax authorities
• credit institutions for the processing of payments
• legal advisors and courts, to the extent necessary for the enforcement or defense of legal claims

Data is not transmitted to third parties for advertising purposes. Your data is not sold.

9. Analytics and Marketing Tools

This website does not use any tools for audience measurement, for analyzing user behavior or for serving advertising. No tracking across multiple websites takes place, and no profiles are created.

Fonts are loaded from our own delivery network. No connection to third-party font services is established in the process. Maps, video portals and social networks are likewise not embedded.

Should we use such a tool in the future, we will update this policy beforehand and, where required, obtain your consent.

10. Cookies

We do not set any cookies for analytics or advertising purposes. Technically necessary cookies may be set by our hosting provider to ensure the operation of the website and to defend against automated access. Such cookies are required for operation; the legal basis is § 25 para. 2 no. 2 TDDDG in conjunction with Art. 6 (1)(f) GDPR. Consent is not required for this.

11. Your Rights

You have the right

• to request information about the data processed about you (Art. 15 GDPR),
• to request the rectification of inaccurate data (Art. 16 GDPR),
• to request the erasure of your data, provided there is no retention obligation (Art. 17 GDPR),
• to request the restriction of processing (Art. 18 GDPR),
• to receive the data you have provided in a commonly used format (Art. 20 GDPR),
• to withdraw any consent given at any time with effect for the future (Art. 7 (3) GDPR).

Right to object: Where we process data on the basis of a legitimate interest under Art. 6 (1)(f) GDPR, you may object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR).

You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the supervisory authority of the German federal state in which we have our registered office, or the authority at your place of residence.

12. Obligation to Provide Data

The information in the inquiry form is required to process your inquiry. Without it, we cannot prepare an offer for you. There is no statutory or contractual obligation to provide it.

13. Automated Decisions

There is no automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

14. Changes to this Policy

We will amend this policy if the processing changes or new tools are used. The version published on this page applies in each case.

Version as of: September 2026