Privacy Policy

As of: 19 January 2026

Responsible data controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) and other data protection regulations is:

DOLL Fahrzeugbau GmbH

Managing director: Markus Ehl

Industriestr. 13
77728 Oppenau
GERMANY

Phone: +49 (0) 7804 49-0
E-mail: info@doll.eu

Data Protection Officer

You can reach our data protection officer at:

equeo CompCor GmbH

Karl Würz

Kissinger Str. 1-2
14199 Berlin
GERMANY

Phone: +49 (0) 7232 809 14 10
E-mail: K.wuerz@equeo-compcor.de

Hosting and Server-Logfiles

The servers of our website https://www.doll.eu/de/are operated by the provider LEITWERK AG/Germany. We have concluded an order processing contract with the provider in accordance with Art. 28 GDPR. The legal basis for the use of external hosting is the fulfillment of a contract with our potential and existing customers in accordance with Art. 6 para. 1 lit. b GDPR and our legitimate interest in the secure and high-performance provision of our website in accordance with Art. 6 para. 1 lit. f GDPR.

Each time our website is accessed, our system's web server collects information from the end device used. We collect the following data:

  • Information about the browser type
  • Operating system of the user's device
  • Date and time of access
  • The previous website from which the user accessed our websites (referrer)

We only collect IP addresses anonymously, so we do not store any personal data in our log files within the meaning of the GDPR.

Rights of the data subject

As a data subject, you have the following rights under the EU General Data Protection Regulation (GDPR):

Right to access (Art. 15 GDPR)

You have the right to request information about what personal data is stored about you, for what purpose it is processed, from whom it was received or to whom it is disclosed, and how long it will be stored.

Right to rectification (Art. 16 GDPR)

You can request the immediate rectification of inaccurate personal data or the completion of incomplete personal data.

Right to erasure (‘right to be forgotten’) (Art. 17 GDPR)

Under certain circumstances, you may request the erasure of your personal data, e.g. if it is no longer necessary for the purposes for which it was collected or if you have withdrawn your consent.

Right to restriction of processing (Art. 18 GDPR)

You have the right to request the restriction of the processing of your personal data, for example if you dispute the accuracy of the data or if the processing is unlawful but you request restriction instead of erasure.

Right to data portability (Art. 20 GDPR)

You can request that the personal data concerning you that you have provided to us be transmitted to you in a structured, commonly used and machine-readable format – or that we transfer this data directly to another controller.

Right to object (Art. 21 GDPR)

You have the right to object to the processing of your personal data at any time, provided that the processing is based on the legitimate interests of our company or on a task that is in the public interest. In the event of a justified objection, we will cease processing unless there are compelling legitimate grounds for the processing.

Withdrawal of consent (Art. 7 GDPR)

If you have given us your consent, you can withdraw it at any time for the future without giving reasons.

Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement.

Contact

You can contact us by email, telephone, contact form, or letter, which may involve the processing of personal data. We process your data for the purpose of handling and processing your request. We will not disclose your data to third parties without your consent.

The legal basis for processing is our legitimate interest in the effective processing of your request in accordance with Art. 6 (1) lit. f GDPR.

When you contact us by email, we store your email address and the information contained in the email. If you use the contact form, your IP address will also be pseudonymized in addition to the information provided in the contact form. If you contact us by letter, your sender address and the content of the letter will be stored. If you contact us by telephone, we will collect personal data depending on the individual case.

We store your data until you request us to delete it or until the purpose of processing (the processing of your request) has been fulfilled.

Social media profiles

We maintain online profiles on the following social networks (hereinafter referred to as “social media”) in order to communicate with customers, interested parties, and the public and to draw attention to our services:

  • Instagram (Meta Platforms, Inc.)
  • Facebook (Meta Platforms, Inc.)
  • Youtube (Google LLC)
  • LinkedIn (LinkedIn Ireland Unlimited Company)
  • Xing (New Work SE)

For information on the scope and purpose of data processing, please refer to the applicable privacy policies of the respective networks:

  • Instagram: (https://privacycenter.instagram.com/policy)
  • Facebook:(https://www.facebook.com/privacy/policy/?entry_point=facebook_page_footer)
  • Youtube: (https://policies.google.com/privacy?hl=de)
  • LinkedIn: (https://de.linkedin.com/legal/privacy-policy?)
  • Xing: (https://privacy.xing.com/de/datenschutzerklaerung)

Processing is carried out on the basis of Art. 6 (1) lit. f GDPR, as we have a legitimate interest in contemporary public relations work. If consent is required, processing is carried out on the basis of Art. 6 (1) lit. a GDPR.
If you provide additional data (e.g., personal messages) to the services, your consent is generally required. Please note that we have no influence on data processing by social media providers. If you have any questions or wish to exercise your rights as a data subject (e.g., information, deletion), please contact the respective platform operator directly.

You can subscribe to or unsubscribe from our social media profiles at any time. If you do not want social media service providers to collect data about your visit to our profiles, please use the deactivation options (e.g., log out, advertising tracker blocking) in your user account or install appropriate browser add-ons.

Google Adsense for Youtube

We use the “Google AdSense for YouTube” service on our website as part of the “YouTube” service. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Irland.

The legal basis for the use of Google Adsense for Youtube is your consent pursuant to Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time with effect for the future.

The data processed by Google AdSense for YouTube includes your IP address, device information, viewing behavior, interaction data, and cookies are set to provide personalized advertising.

If you are logged into a Google account, Google Adsense for YouTube may link data collected to your user profile in order to display personalized advertising.

Google processes this data to display personalized advertising and analyze user interactions with advertisements.

It cannot be ruled out that personal data may be transferred to unsafe third countries (United States) where the level of data protection is lower than in the EU. We have concluded a Data Processing Addendum with Google, which guarantees that personal data will only be processed in accordance with our instructions and in compliance with the GDPR. Google is certified under the EU-US Data Privacy Framework, which regulates the secure processing of EU citizens data in the US. Further information on the privacy policy of Google Adsense for Youtube can be found at: https://policies.google.com/privacy

Google Analytics

We use the 'Google Analytics' service on our website to evaluate user behavior. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Irland.

The legal basis for the use of Google Analytics is your consent pursuant to Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time with effect for the future.

The data processed by Google Analytics includes your IP address, browser and device information, location data, time of visit, information on website interaction, and it sets cookies.

If you are logged into a Google account, this data can be linked to a user profile.

The purpose of data processing is the statistical analysis of website usage and user interactions to optimize website performance and user experience.

The default data retention period for Google Analytics is 14 months.

It cannot be ruled out that personal data may be transferred to unsafe third countries (United States) where the level of data protection is lower than in the EU. Google is certified under the EU-US Data Privacy Framework, which regulates the secure processing of EU citizens data in the US. We have entered into a data processing agreement (DPA) with Google that ensures that personal data will only be processed in accordance with our instructions and in compliance with the GDPR.

Further information on the privacy policy of Google Analytics can be found at: https://support.google.com/analytics/topic/2919631?hl=en&ref_topic=1008008,3544742,2986333,&sjid=1881441919987619365-EU

Information about the cookies used can be found at: https://policies.google.com/technologies/cookies

You can prevent the processing of your data by clicking on this link: https://tools.google.com/dlpage/gaoptout

Google Fonts

We use the 'Google Fonts' service on our website to integrate external fonts for improved visual presentation. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Irland. The legal basis for the use of Google Fonts is your consent pursuant to Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time with effect for the future.

The data processed by Google Fonts includes your IP address, browser and device information, and the time of the request.

The purpose of data processing is the optimized and uniform presentation of fonts on the website. It cannot be ruled out that personal data may be transferred to unsafe third countries (United States) where the level of data protection is lower than in the EU. Google is certified under the EU-US Data Privacy Framework, which regulates the secure processing of EU citizens data in the US.

Further information on the privacy policy of Google Fonts can be found at: https://policies.google.com/privacy

Information about the cookies used can be found at: https://policies.google.com/technologies/cookies

You can prevent the processing of your data by clicking on this link: https://policies.google.com/privacy#infochoices

Google Maps

We use the 'Google Maps' service on our website to visually display geographic information and provide directions. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Irland.

The legal basis for the use of Google Maps is your consent pursuant to Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time with effect for the future.

The data processed by Google Maps includes your IP address, location data, device information, browser details, usage data, and it may set cookies.

If you are logged into a Google account, Google Maps data can be linked to a user profile.

The purpose of data processing is to display interactive maps and provide location-based services to users.

It cannot be ruled out that personal data may be transferred to unsafe third countries (United States) where the level of data protection is lower than in the EU. We have entered into a data processing agreement (DPA) with Google that ensures that personal data will only be processed in accordance with our instructions and in compliance with the GDPR. Google is certified under the EU-US Data Privacy Framework, which regulates the secure processing of EU citizens data in the US.

Further information on the privacy policy of Google Maps can be found at: https://policies.google.com/privacy#infocollect

Google Tag Manager

We use the 'Google Tag Manager' service on our website to manage website tags efficiently. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Irland.

The legal basis for the use of Google Tag Manager is your consent pursuant to Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time with effect for the future.

The data processed by Google Tag Manager includes your IP address, browser and device information, and information on website interaction; Google Tag Manager itself does not set cookies but may trigger other services that do.

The purpose of data processing is the simplified integration and management of website tags and tracking codes to analyze user interactions.

Further information on the privacy policy of Google Tag Manager can be found at: https://policies.google.com/privacy

Information about the cookies used can be found at: https://policies.google.com/technologies/cookies

You can prevent the processing of your data by clicking on this link: https://tools.google.com/dlpage/gaoptout

YouTube

We use the video service “Youtube” on our website. The provider of the service is the company Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Irland.

The legal basis for the use of Youtube is your consent pursuant to Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time with effect for the future.

Google collects and processes your IP address, browser and operating system information, and location data. Actions such as watching videos or creating playlists are also processed. Cookies are also set during this process. YouTube integrates other Google services, such as Google Fonts, Google Photos, and Google Ads (formerly Doubleclick).

If you are logged into a Google account, this data can be linked to a user profile. Your user behavior is recorded and analyzed for advertising purposes.

The purpose of data processing is to provide video content and integrate it on our website.

According to Google's privacy policy, the retention period for data processed by YouTube varies depending on the type of data and user settings. By default, activity data (such as watched videos, search history, etc.) is automatically deleted after 36 months (3 years) for new accounts or users who have not previously set a retention period. Users can manually adjust this retention period to 3 months, 18 months, or choose to retain data indefinitely.

Detailed information can be found at: https://policies.google.com/privacy#inforetaining

It cannot be ruled out that personal data may be transferred to unsafe third countries (United States) where the level of data protection is lower than in the EU. Google is certified under the EU-US Data Privacy Framework, which regulates the secure processing of EU citizens data in the US. We have entered into a data processing agreement (DPA) with Google that ensures that personal data will only be processed in accordance with our instructions and in compliance with the GDPR.


Further information on the privacy policy of Youtube can be found at: https://policies.google.com/privacy

Information about the cookies used can be found at: https://policies.google.com/technologies/cookies

You can prevent the processing of your data by clicking on this link: https://myaccount.google.com/data-and-privacy

YouTube NoCookie

We use Youtube NoCookie (also known as Youtube in privacy-enhanced mode) on our website to embed videos without using cookies that track user behavior. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Irland.

The legal basis for the use of Youtube NoCookie is your consent pursuant to Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time with effect for the future.

The data processed by Youtube NoCookie includes your IP address, device information and information on video interaction. It stores data in the browser's web storage.

The purpose of data processing is the integration of videos while minimizing the use of cookies and enhancing user privacy.

It cannot be ruled out that personal data may be transferred to unsafe third countries (United States) where the level of data protection is lower than in the EU. We have entered into a data processing agreement (DPA) with Google that ensures that personal data will only be processed in accordance with our instructions and in compliance with the GDPR. Google is certified under the EU-US Data Privacy Framework, which regulates the secure processing of EU citizens data in the US.

Further information on the privacy policy of Youtube NoCookie can be found at: https://policies.google.com/privacy#infocollect

Information about the cookies used can be found at: https://policies.google.com/technologies/cookies

You can prevent the processing of your data by clicking on this link: https://policies.google.com/privacy#infochoices

Meta Pixel

We use the 'Meta Pixel' service (also known as 'Facebook Pixel') on our website to analyze user behavior and measure the effectiveness of our advertising campaigns. The provider is Meta Platforms Ireland Limited 4 Grand Canal Square, Grand Canal Harbour Dublin 2, Irland.

The legal basis for the use of Meta Pixel is your consent pursuant to Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time with effect for the future.

The data processed by Meta Pixel include IP address, browser information, operating system, device information, location data, referrer URL, interactions on the website, Facebook user ID (if users are logged in to Facebook), and it sets cookies.

Meta Pixel collects user data that can be used to create user profiles for targeted advertising purposes.

The purpose of data processing is analysis of user behavior, measurement of advertising effectiveness, creation of target groups and personalized advertising.

It cannot be ruled out that personal data may be transferred to unsafe third countries (United States) where the level of data protection is lower than in the EU. Meta is certified under the EU-US Data Privacy Framework, which regulates the secure processing of EU citizens data in the US. We have concluded a Data Processing Addendum with Meta, which guarantees that personal data will only be processed in accordance with our instructions and in compliance with the GDPR. Further information on the privacy policy of Meta Pixel can be found at: https://www.facebook.com/privacy/policy

Information about the cookies used can be found at: https://www.facebook.com/policies/cookies/

You can prevent the processing of your data by clicking on this link: https://www.facebook.com/settings?tab=ads

Applications

When you apply for a job with us, your personal data will be processed. The legal basis for processing is Art. 6 (1) (b) GDPR in connection with the implementation of pre-contractual measures. If your data is required after the application process has been completed in order to defend against legal claims, processing will be carried out on the basis of our legitimate interest in a duty of proof in accordance with Art. 6 (1) lit. f GDPR, for example in connection with the Equal Treatment Act.

We process the data that you have provided to us in your application and that we need to assess your suitability for the position in question.

The purposes of the processing are to manage your application, assess your suitability for the vacant position, and contact you in connection with your application or possible alternative positions.

We delete your data after six months. If you have agreed to be included in the applicant pool, we will delete it after two years. If your application leads to employment, we will store your data for the duration of your employment with us.

Applicant Management System d.vinci

Our website integrates the application form and career page component of the d.vinci service provided by d.vinci HR Systems GmbH, Nagelsweg 37–39, 20097 Hamburg, Germany.

When you access these pages, a connection is established to d.vinci's servers to deliver the content. d.vinci processes the data collected in this process exclusively on our behalf and based on a data processing agreement pursuant to Article 28 of the GDPR

Data transmission occurs via an HTTPS-encrypted connection, and d.vinci implements technical and organizational measures to ensure information security. Further information can be found in d.vinci's privacy policy: https://www.dvinci.de/datenschutz/

Use of SalesViewer®

Our website uses the SalesViewer® analytics tool to evaluate anonymous information about the usage behavior of our visitors. The company is located in Germany at Universitätsstraße 60, 44789 Bochum. The goal is to continuously improve the quality of our content and services and to provide interested parties with more targeted and relevant information.
For this purpose, a technically necessary tracking code is used, which identifies company data based on the IP address. This processing is carried out exclusively for legitimate business purposes. No personal data is stored.
You can object to data collection by SalesViewer® at any time. Further information on data handling and your rights can be found in our privacy policy. Additional information can be found in the SalesViewer® privacy policy at https://www.salesviewer.com/de/plattform/datenschutz/.