Privacy Policy

1. Controller
2. Access data and hosting
3. Data processing for contract performance and contact
4. Data processing for shipping
5. Data processing for payment
6. Email marketing
7. Cookies and other technologies
8. Third-party technologies used
9. Integration of the Trusted Shops Trustbadge
10. Social media
11. Your rights
12. Contact

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

DIMAX International GmbH
Flinger Broich 203, 40235 Düsseldorf, Germany
Managing Director: Pavlo Fomin
Phone: +49 211 94289001
Email: shop@dimaxgroup.com

Thank you for visiting our online shop. Protecting your privacy is very important to us. Below you will find detailed information on how we handle your data.

2. Access data and hosting

You can visit our website without providing any personal information. Each time you access the website, the web server automatically stores a server log file. It contains, for example, the name of the requested file, your IP address, the date and time of the request, the volume of data transferred and the requesting provider (access data), and documents the request. These access data are analysed exclusively to ensure the smooth operation of the website and to improve our offer. Under Art. 6(1)(f) GDPR, this serves our legitimate interests in the proper presentation of our offer, which override other interests in a balancing of interests. All access data are deleted no later than thirty days after the end of your visit.

Hosting

Our online shop runs on the Shopify platform, provided by Shopify International Limited, Victoria Buildings, 2nd Floor, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"). Shopify processes the access data and all data collected via forms on this website on our behalf. Shopify uses sub-processors in Canada and the USA, among others. There is an adequacy decision of the European Commission for Canada. For the USA, the adequacy decision on the EU-U.S. Data Privacy Framework applies where the recipient is certified. Otherwise, transfers are based on the European Commission's standard contractual clauses.

3. Data processing for contract performance and contact

3.1 Contract performance

To perform the contract, we collect personal data under Art. 6(1)(b) GDPR if you provide it to us voluntarily as part of your order. This includes enquiries about and the handling of statutory rights in respect of defects, warranty claims, withdrawals and statutory update obligations. Mandatory fields are marked as such, as we need this data to perform the contract and cannot dispatch the order without it. The data collected can be seen in the respective input forms. Further information on passing your data to service providers for order processing, payment and shipping can be found in the following sections.

After the contract has been fully performed, your data will be restricted from further processing and deleted after the retention periods under tax and commercial law (up to ten years) have expired, in accordance with Art. 6(1)(c) GDPR. This does not apply if you have expressly consented to further use (Art. 6(1)(a) GDPR) or if we reserve the right to further use permitted by law, about which we inform you in this privacy policy.

Merchandise management system

For order and contract processing, we use the Base merchandise management system of a provider based in Poland, which processes your data on our behalf.

3.2 Customer account

If you have consented under Art. 6(1)(a) GDPR by choosing to open a customer account, we use and store your data to open the account and for future orders. You can delete your customer account at any time, either via the relevant function in the account or by sending a message to the contact details below. After deletion of the account, your data will be deleted unless statutory retention obligations apply.

3.3 Contacting us

As part of our customer communication, we collect personal data to process your enquiries under Art. 6(1)(b) GDPR if you voluntarily provide it when contacting us (e.g. via the contact form or email). If your enquiry does not relate to a contract, processing is based on our legitimate interest in communicating with you (Art. 6(1)(f) GDPR). Once your enquiry has been fully processed, your data will be deleted unless statutory retention obligations apply.

3.4 Live chat

Our website offers a live chat via Shopify Inbox (provider: see section 2). If you use the chat, we process the messages you enter, your name and email address (if provided) and technical data (IP address, date and time, browser information) in order to respond to your enquiry. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract, and otherwise Art. 6(1)(f) GDPR. We obtain your consent for any non-essential cookies set by the chat (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). Shopify processes the data on our behalf. Transfers to third countries take place as described in section 2.

4. Data processing for shipping

To deliver the goods ordered, we pass your data to the commissioned shipping company to the extent required (Art. 6(1)(b) GDPR). Depending on the type and size of the shipment, we use the following shipping companies: DPD, GLS, DHL, Dachser, DSV and DB Schenker.

Passing data to the shipping provider for delivery notifications

If you have given us your express consent during or after your order, we pass your email address and phone number to the shipping company under Art. 6(1)(a) GDPR, so that it can contact you to announce or coordinate the delivery. You can withdraw your consent at any time with effect for the future. We will then delete the data provided for this purpose unless statutory retention obligations apply.

5. Data processing for payment

5.1 Payment processing

Depending on the payment method you choose, we pass the data required for payment processing to the following recipients (Art. 6(1)(b) GDPR):

Credit card and other payment methods via Shopify Payments: Shopify International Limited (address: see section 2). Payment processing is carried out by Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland.
PayPal: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg.
Klarna: Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden.
Prepayment (bank transfer): our account-holding bank.

In some cases, the payment service providers collect the data required for payment processing themselves, e.g. on their own website or via a technical integration in the checkout process. In that case, the privacy policy of the respective payment service provider applies. Depending on the payment method, data may be transferred to third countries outside the EU/EEA. For the USA, the adequacy decision on the EU-U.S. Data Privacy Framework applies where the recipient is certified. Otherwise, transfers are based on the European Commission's standard contractual clauses.

5.2 Fraud prevention and optimisation of payment processes

Where applicable, we pass additional data to the above service providers, which they use together with the data required for payment processing for fraud prevention and to optimise our payment processes (e.g. invoicing, handling disputed payments, supporting accounting). This is done under Art. 6(1)(f) GDPR on the basis of our overriding legitimate interest in protecting ourselves against fraud and in efficient payment management.

5.3 Identity and credit check with Klarna (Pay now, Pay later, Slice it)

If you choose a Klarna payment method, we ask for your consent under Art. 6(1)(a) GDPR to pass the data required for payment processing and for an identity and credit check to Klarna. For instalment payments, this includes in particular first and last name, address, email address, phone number, date of birth, IP address, gender and the transaction data (item, invoice amount, due dates, total amount, invoice number, taxes, currency, order date and time).

In Germany, the credit agencies listed in Klarna's privacy policy may be used for the check. Klarna uses the information obtained on the statistical probability of payment default to make a balanced decision on the establishment, performance or termination of the contractual relationship. You can present your point of view to Klarna and contest the decision. Further information: https://www.klarna.com/de/datenschutz/

You can withdraw your consent at any time with effect for the future, either to us or to Klarna. In that case, we may no longer be able to offer you certain payment methods.

5.4 Identity and credit check for purchase on account via PayPal and Ratepay

If you choose purchase on account, we ask for your consent under Art. 6(1)(a) GDPR to pass the data required for payment processing and an identity and credit check to Ratepay. This payment method is offered via Ratepay GmbH, Franklinstraße 28–29, 10587 Berlin, Germany, and PayPal (Europe) S.à r.l. et Cie, S.C.A. In Germany, the credit agencies listed in Ratepay's privacy policy may be used for the check. Ratepay uses the information obtained on the statistical probability of payment default to make a balanced decision on the establishment, performance or termination of the contractual relationship. You can withdraw your consent at any time with effect for the future. In that case, we may no longer be able to offer you certain payment methods. Further information: https://www.ratepay.com/legal-payment-dataprivacy/ and https://www.paypal.com/de/legalhub/privacy-full

6. Email marketing

6.1 Newsletter with double opt-in and newsletter tracking

If you subscribe to our newsletter, we will regularly send you our email newsletter based on your consent under Art. 6(1)(a) GDPR, using the data required for this purpose or provided by you separately. Subscription uses the double opt-in procedure: after signing up, you will receive an email asking you to confirm your subscription.

You can unsubscribe at any time via the unsubscribe link in the newsletter or by sending a message to the contact details below. After you unsubscribe, we will delete your email address from the recipient list unless you have expressly consented to further use or we reserve the right to further use permitted by law.

We analyse your user behaviour when sending the newsletter. To do so, we measure, store and analyse opening and click-through rates in order to design future newsletter campaigns ("newsletter tracking"). The emails sent contain single-pixel technologies (e.g. web beacons, tracking pixels) for this purpose. For the analysis, we link in particular the following newsletter data: the page from which the page was requested (referrer URL), the date and time of the request, the type of browser used, the IP address, the email address, and the date and time of subscription and confirmation. We link these data with your email address or IP address and, where applicable, an individual ID. Links in the newsletter may also contain this ID. Newsletter tracking is based on your consent. If you do not want tracking, you can unsubscribe from the newsletter at any time. The data are stored for as long as you are subscribed to the newsletter.

Newsletter delivery via Klaviyo
The newsletter and newsletter tracking are delivered by Klaviyo, Inc., 125 Summer Street, Floor 6, Boston, MA 02110, USA ("Klaviyo"), acting on our behalf. Klaviyo is certified under the EU-U.S. Data Privacy Framework, and transfers to the USA are based on the European Commission's adequacy decision. Where sub-processors are used in countries without an adequacy decision, transfers are based on the European Commission's standard contractual clauses.

6.2 Review requests by email

If you have given us your express consent under Art. 6(1)(a) GDPR during or after your order, we use your email address to ask you to review your order. You can withdraw your consent at any time via the link in the review request or by sending a message to the contact details below.

Review requests are sent via Trusted Shops SE, Subbelrather Str. 15C, 50823 Cologne, Germany ("Trusted Shops"). We receive information from Trusted Shops on the status of each request (e.g. whether it was sent or delivered). This is done under Art. 6(1)(f) GDPR on the basis of our legitimate interest in receiving information on review requests for optimisation purposes and Trusted Shops' legitimate interest in providing this service. We and Trusted Shops are joint controllers for sending review requests and for collecting and displaying review and status information (Art. 26 GDPR). For data protection questions or to exercise your rights, please preferably contact Trusted Shops: https://www.trustedshops.de/impressum/#datenschutz. You can always contact us as well.

7. Cookies and other technologies

7.1 General information

To make your visit to our website attractive, to enable certain functions, to display suitable products and for market research, we use technologies on various pages, including cookies. Cookies are small text files that are automatically stored on your device. Some cookies are deleted at the end of the browser session (session cookies). Others remain on your device and allow us to recognise your browser on your next visit (persistent cookies).

Protection of your device (Section 25 TDDDG)
For technologies that are strictly necessary to provide the digital service you have expressly requested (e.g. shopping cart, login, security), no consent is required for storing information on your device or accessing it (Section 25(2) No. 2 TDDDG). The related data processing is based on our legitimate interest in the optimised presentation of our offer (Art. 6(1)(f) GDPR).

For all other technologies, in particular for analytics and marketing, we obtain your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). Without your consent, parts of the website may not be fully available. You can withdraw or change your consent at any time with effect for the future via the cookie settings (privacy button) on our website.

Types of cookies used

Necessary cookies: required for the website to function (e.g. login, shopping cart, language and country settings, security). They are always active and do not require consent.
Analytics cookies: help us measure how the website is used and improve it. They are only set with your consent.
Marketing cookies: enable (personalised) content and advertising to be displayed and campaign success to be measured, possibly across several websites. They are only set with your consent.

You can find your browser's cookie settings in its help section: Microsoft Edge, Safari, Chrome, Firefox, Opera.

7.2 Consent management platform

We use the Consentmo consent management platform provided by iSense Ltd, 4 Prof. Georgi Bradistilov St., Entrance A, 4th Floor, 1700 Sofia, Bulgaria, acting on our behalf. It informs you about the technologies we use and obtains, manages and documents your consent. This is done under Art. 6(1)(c) GDPR to comply with our obligation to demonstrate consent under Art. 7(1) GDPR. The data stored are the IP address, device and browser information, language setting, URL accessed, date and time of the declaration and your consent behaviour. Cookies are used for this purpose. The data are deleted after one year.

8. Third-party technologies used

Unless otherwise stated below, we use the following technologies only on the basis of your consent under Art. 6(1)(a) GDPR and Section 25(1) TDDDG. The data collected are deleted once the respective purpose has been fulfilled and we stop using the technology. You can withdraw your consent at any time with effect for the future.

8.1 Google services

We use technologies of Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The information collected by Google is usually transferred to and stored on a server of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google LLC is certified under the EU-U.S. Data Privacy Framework. Transfers are based on the European Commission's adequacy decision and otherwise on standard contractual clauses. Further information: https://policies.google.com/privacy

Google Analytics: collects the IP address, time of visit, device and browser information and information on your use of our website for website analysis, and creates pseudonymous usage profiles from this. For visits from the EU, the IP address is used on a server in the EU to derive location data and then deleted immediately. Processing is carried out by Google as a processor.
Google Ads: enables interest-based advertising in Google search results and on third-party websites (remarketing) using a pseudonymous cookie ID. Without your consent, no cookies are stored or read. To close gaps in analysis through behavioural and conversion modelling, only pings with data (user agent, consent status, screen resolution, IP address, page URL, information on ad clicks) are then sent to Google. The IP address is used only to derive the country.
Google Tag Manager: used to manage codes and services on our website. Google may process personal data (e.g. IP address) in the process. Deactivated services remain deactivated via the Tag Manager. Processing is carried out by Google as a processor.
Google Maps: used to display geographical information. In particular, the IP address and location data are transmitted to Google. We have no influence on Google's further processing.
Google reCAPTCHA: used to protect our forms against misuse and spam by automated programs (bots). The IP address, time of visit, browser information and information on your use of our website are collected and analysed using JavaScript and cookies.
YouTube: videos are embedded in privacy-enhanced mode. Data (IP address, time of visit, device and browser information) are only transmitted to Google when you play a video.

8.2 Meta Pixel

We use the Meta Pixel of Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, D04 X2K5, Ireland ("Meta"). The pixel collects the IP address, time of visit, device and browser information and information on your use of our website based on events we define (e.g. page view, purchase, newsletter sign-up), and creates pseudonymous usage profiles from this. A cookie enables your browser to be recognised on other websites. Meta may combine this information with data from your Facebook or Instagram account and use it for personalised advertising. We only receive statistics. We and Meta are joint controllers for the collection and transmission of the data (Art. 26 GDPR). The data are usually transferred to servers of Meta Platforms, Inc., 1 Meta Way, Menlo Park, CA 94025, USA. Meta is certified under the EU-U.S. Data Privacy Framework. Otherwise, transfers are based on standard contractual clauses. Further information: https://www.facebook.com/privacy/policy/

8.3 Klaviyo (onsite tracking)

With your consent, we use Klaviyo's onsite tracking (provider: see section 6.1). A cookie (e.g. "__kla_id") is set to record your behaviour on our website (e.g. products viewed, shopping cart) and, if you have subscribed to our newsletter, link it to your email address. This allows us to send you relevant content (e.g. abandoned cart reminders). Klaviyo is certified under the EU-U.S. Data Privacy Framework.

8.4 Stape (server-side tracking)

We use the Stape service for server-side tag management. The data collected by the analytics and marketing technologies listed above are first sent to a server operated for us by Stape and then forwarded from there to the respective services (e.g. Google, Meta). This allows us to control which data are passed to these services. Processing only takes place with your consent and is carried out by Stape as a processor.

8.5 Shopify Analytics

With your consent, we use Shopify's analytics functions (provider: see section 2). Shopify collects information about your use of our online shop (e.g. traffic source, pages viewed, session duration) using cookies (e.g. "_shopify_y", "_shopify_s"). Transfers to third countries take place as described in section 2.

9. Integration of the Trusted Shops Trustbadge

Trusted Shops widgets are integrated on our website (provider: see section 6.2). They display Trusted Shops services (e.g. trustmark, collected reviews) and offer Trusted Shops products to buyers after they have placed an order. This serves our overriding legitimate interest in optimal marketing by enabling secure shopping (Art. 6(1)(f) GDPR). We and Trusted Shops are joint controllers (Art. 26 GDPR). For questions or to exercise your rights, please preferably contact Trusted Shops. You can always contact us as well.

9.1 Loading the Trustbadge

The Trustbadge is provided by a US content delivery network (CDN) provider. An adequate level of data protection is ensured by the adequacy decision on the EU-U.S. Data Privacy Framework. Where service providers are not certified, standard contractual clauses have been concluded. When the Trustbadge is loaded, the web server automatically stores a server log file containing your IP address, the date and time of the request, the volume of data transferred and the requesting provider. The IP address is anonymised immediately after collection. The anonymised data are used in particular for statistical purposes and error analysis.

When you interact with the Trustbadge, session cookies are set to save the login status and display information about our shop (company details, reviews, buyer protection). A cookie to recognise logged-in users is stored for a maximum of 400 days. Trusted Shops is responsible for this processing.

9.2 Data processing after order completion

After you complete your order, order information (order total, order number, purchased item if applicable) and your email address, hashed using a cryptographic one-way function, are transmitted to Trusted Shops (Art. 6(1)(f) GDPR). This is to check whether you are already registered for Trusted Shops services, in order to offer order-related buyer protection and review services. If you are, further processing is governed by your agreement with Trusted Shops. If not, you will be given the opportunity to register. If you do not register, all transmitted data are automatically deleted by Trusted Shops.

Trusted Shops uses service providers for hosting, monitoring and logging (Art. 6(1)(f) GDPR). Processing may take place in the USA, the United Kingdom and Israel. The European Commission has adopted adequacy decisions for these countries. For the USA, this applies to certified service providers, and otherwise standard contractual clauses have been concluded.

10.1 Social buttons for Facebook, X and Instagram

Social buttons are embedded on our website as simple HTML links only, so no connection to the providers' servers is established when you visit our website. Only when you click a button does the respective network's page open in a new browser window.

10.2 Our online presence on Facebook, Instagram and YouTube

If you have given your consent to the respective provider (Art. 6(1)(a) GDPR), your data are automatically collected and stored for market research and advertising purposes when you visit our pages. Pseudonymous usage profiles are created from these data, e.g. to display advertising within and outside the platforms that presumably matches your interests. Cookies are usually used for this purpose. Details on data processing, your rights and settings options can be found in the providers' privacy policies.

Facebook and Instagram: Meta Platforms Ireland Ltd. (address: see section 8.2). There is a joint controller agreement for processing in connection with visits to our pages (Art. 26 GDPR). Information on Insights data: https://www.facebook.com/legal/terms/page_controller_addendum. Privacy policy: https://www.facebook.com/privacy/policy/
YouTube: Google Ireland Ltd. (address: see section 8.1). Privacy policy: https://policies.google.com/privacy

The data are usually transferred to servers in the USA. The providers are certified under the EU-U.S. Data Privacy Framework. Otherwise, transfers are based on standard contractual clauses.

11. Your rights

As a data subject, you have the following rights:

access to your personal data processed by us (Art. 15 GDPR);
rectification of inaccurate data or completion of incomplete data (Art. 16 GDPR);
erasure of your data (Art. 17 GDPR), unless further processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims;
restriction of processing (Art. 18 GDPR), where you contest the accuracy of the data, the processing is unlawful but you oppose erasure, we no longer need the data but you need them for the establishment, exercise or defence of legal claims, or you have objected under Art. 21 GDPR;
data portability (Art. 20 GDPR): to receive the data you have provided to us in a structured, commonly used and machine-readable format, or to have them transmitted to another controller;
withdrawal of consent at any time with effect for the future (Art. 7(3) GDPR). The lawfulness of processing carried out before the withdrawal is not affected;
lodging a complaint with a supervisory authority (Art. 77 GDPR). As a rule, you can contact the supervisory authority of your habitual residence, your place of work or our registered office. The authority responsible for us is: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany, https://www.ldi.nrw.de

Right to object (Art. 21 GDPR)
If we process your personal data on the basis of our overriding legitimate interests (Art. 6(1)(f) GDPR), you may object to this processing at any time with effect for the future on grounds relating to your particular situation. We will then no longer process your data for these purposes unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

If your data are processed for direct marketing purposes, you may object to this at any time without giving reasons. In that case, we will no longer process your data for these purposes.

12. Contact

If you have any questions about how we collect, process or use your personal data, or if you wish to request access, rectification, restriction or erasure, withdraw your consent or object to processing, please contact:

DIMAX International GmbH
Flinger Broich 203, 40235 Düsseldorf, Germany
Email: shop@dimaxgroup.com
Phone: +49 211 94289001

Last updated: 22 October 2026

© 2026 DIMAX International GmbH
DEWALT®, the DEWALT® Logo and GUARANTEED TOUGH® are trademarks of Stanley Black & Decker, Inc. or an affiliate thereof and are used under license.

Products marketed and distributed by:
DIMAX International GmbH
Flinger Broich 203
40235 Düsseldorf, Germany