Privacy Policy
1. Data Controller
Digital Power Systems GmbH
Haid- und Neu Str. 7
76131 Karlsruhe, Germany
Email: shop@digitalpowersystems.eu
2. Overview of Data Processing
We process personal data only to the extent necessary and on the basis of applicable data protection laws, in particular the GDPR.
3. Data Collected
- Contact data: name, email address, phone number, company name
- Address data: billing and delivery addresses
- Payment data: payment method (processed by Mollie as payment service provider)
- Technical data: IP address, browser type, operating system (server log files)
- Usage data: page views, click behavior, scroll depth (only with your consent)
4. Legal Basis (Art. 6 GDPR)
- Contract performance (Art. 6(1)(b)): order processing, customer account, delivery
- Legitimate interests (Art. 6(1)(f)): website security, server log files, fraud prevention
- Consent (Art. 6(1)(a)): analytics cookies, marketing cookies
- Legal obligation (Art. 6(1)(c)): tax retention obligations
5. Cookies and Tracking
- Essential cookies: Required for core site functionality. Set without consent.
- Analytics cookies: Help us understand site usage. Only with your consent.
- Marketing cookies: Used for targeted advertising. Only with your consent.
Which cookies do we use?
| Name | Provider | Purpose | Duration |
|---|---|---|---|
lang | Digital Power Systems | Stores your language preference | 30 days |
_cookie_consent | localStorage | Stores your cookie choices | Persistent |
_consent_mkt | Digital Power Systems | Marketing-consent flag | 180 days |
| Session / CSRF cookie | Digital Power Systems | Security and session management | Session |
_ga, _gid | Analytics statistics (only with consent) | Up to 2 years / 24 h | |
_gcl_aw | Ads conversion attribution (only with consent) | 90 days | |
_gcl_au | Conversion Linker — links ad clicks to conversions (only with consent) | 90 days |
6. Google Ads and Consent Mode v2
We use Google Ads with Advanced Consent Mode v2. Without your consent, no cookies are set and no personal data is transferred to Google.
7. Payment Service Provider
We use Mollie B.V. for payment processing. See Mollie's privacy policy.
8. Hosting and Server Log Files
Server log files (IP, date, page, browser) are stored for security and deleted after 30 days.
9. Contact Form and Registration
Data you enter is processed to handle your inquiry or manage your account. Not shared with third parties.
10. Fonts
All fonts are hosted locally. No connection to external servers (e.g. Google Fonts).
11. SSL/TLS Encryption
This website uses SSL/TLS encryption for secure data transmission.
12. Your Rights (Art. 15–21 GDPR)
Right of access, rectification, erasure, restriction, data portability, and objection. Contact: shop@digitalpowersystems.eu
13. Right to Lodge a Complaint
You may lodge a complaint with the State Commissioner for Data Protection of Baden-Württemberg.
14. Retention Periods
Data is deleted when no longer needed. Statutory retention: 6–10 years (German Commercial Code / Fiscal Code).
15. B2B Shop
This shop is for businesses only (§ 14 BGB). By registering you confirm you are acting as an entrepreneur.
16. AI-Assisted Application Review (Career Portal)
A recruiter may send your CV text, cover letter, name and profile headline to an AI service outside the EU/EEA to help assess your application. It produces a score and a rationale for a human recruiter — it never decides alone.
This only happens when a recruiter actively requests it; it is not automatic. We do not send the raw CV file, your email address or your phone number to the AI service. No automated decision-making within the meaning of Art. 22 GDPR takes place — the actual decision is always made by a person.
The legal basis for this processing is your consent (Art. 6(1)(a) GDPR), given when you submit your application. You may withdraw this consent at any time; withdrawal does not affect the lawfulness of processing carried out before the withdrawal, and does not affect the rest of your application.
The AI service we currently use is located outside the EU/EEA, in a country for which the European Commission has not adopted an adequacy decision under Art. 45 GDPR. In the absence of such a decision, the transfer takes place on the basis of your explicit consent to the transfer (Art. 49(1)(a) GDPR); Standard Contractual Clauses under Art. 46(2)(c) GDPR are put in place with the provider where concluded. Authorities in the destination country may have access to the data under their own laws, and the remedies available to you there may not be the same as under EU law.
For questions about which AI provider we currently use, or to exercise your rights regarding this processing, contact us at shop@digitalpowersystems.eu.
17. Google Ads Click Measurement and Conversion Reporting
When you reach our shop by clicking a Google advertisement, the web address you arrive at
contains a click identifier generated by Google (gclid, or gbraid /
wbraid for clicks that pass through an app). The identifier itself comes from that web
address and not from a cookie. We read it and store it on our own servers together with the record
of your visit. So that the individual pages you view can be recognised as one coherent visit, an
entry is kept in your browser’s local storage; further details on this and on the other
storage we use are set out in section 6.
The legal basis for this is our legitimate interest in knowing which advertisement brought a visitor to our shop (Art. 6(1)(f) GDPR). You may object to this processing at any time under Art. 21(1) GDPR using the contact details below. The identifier is deleted together with the visit record; the retention period we currently apply is 365 days.
If you then place an order and you have given marketing consent, we additionally store the click identifier with your order and transmit the following to Google so that the sale can be attributed to the advertisement: the click identifier, the time of the order, the currency, a fixed event label (“purchase”) and a value calculated from the order. That value is our contribution margin — the order total less our purchase and shipping costs — not the amount you paid. Where the “enhanced conversions” option is activated, a SHA-256 hash of your e-mail address is transmitted in addition; this option is currently switched off. We do not transmit your name, address, telephone number, IP address or order number. Without your marketing consent, no click identifier is stored with your order and nothing is transmitted to Google.
The legal basis for storing the identifier with your order and transmitting it is your consent (Art. 6(1)(a) GDPR). You may withdraw this consent at any time through the cookie and privacy settings on our website. Withdrawal stops any further transmission; it does not affect the lawfulness of processing carried out before the withdrawal, and data already transmitted to Google cannot be recalled by us.
The recipients are Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. On 10 July 2023 the European Commission adopted an adequacy decision for the EU–U.S. Data Privacy Framework; Google LLC is certified under that framework, so the transfer takes place on the basis of Art. 45 GDPR.
Please note that a click identifier stored with an order is retained for as long as the order itself, because orders are subject to statutory commercial and tax retention periods. This is longer than the 365 days that applies to identifiers stored with a visit record.
No automated decision-making within the meaning of Art. 22 GDPR takes place on the basis of this data. If you have questions about this processing, or wish to object to it or withdraw your consent, contact us at shop@digitalpowersystems.eu.
18. Technical Shop-Improvement Events
To find and fix problems in the shop and to understand how features are used, we record a small number of technical events as you browse and check out: when checkout fails, we log which step and which error code occurred — never any personal or payment data; when you request or enter an account verification code, we log that a code was sent, verified, or expired — never the code itself or your e-mail address; if a sign-in attempt fails, we log that a login failed, identified only by a one-way (irreversible) hash of the e-mail address used, never the e-mail address itself, so that we can spot problems with the login form without knowing who you are; when adding a product to your cart fails, we log the failure without any personal data; and we record, in aggregate and with a short delay, how visitors use search filters and sorting options on category and search pages.
None of this is tied to a cookie, and none of it is used for advertising or marketing. Where it involves you as an identifiable person at all (the hashed login identifier), it does not identify you directly and cannot be reversed back into your e-mail address.
The legal basis for this processing is our legitimate interest in operating a reliable, secure and user-friendly shop (Art. 6(1)(f) GDPR) — finding and fixing broken flows, detecting repeated failed sign-in attempts, and understanding which filters and sort options are actually used. You may object to this processing at any time under Art. 21(1) GDPR using the contact details below.
We keep these events for 730 days (24 months) from when they occur, after which they are automatically deleted. No automated decision-making within the meaning of Art. 22 GDPR takes place on the basis of this data.
If you have questions about this processing or wish to object to it, contact us at shop@digitalpowersystems.eu.
Last updated: March 2026