PRIVACY POLICY (GPDR INFO)
Important note:
Please refer to the original in German: -> Here
1) Responsible party:
Sina Blum
Neuwieder Straße 15a
56566 Neuwied
hello [at] sinablum.eu
2) Data collected for website operation and log files
a) What data is processed for which purpose?
When you visit our website, some information is temporarily collected to ensure the site works properly. This may include:
Date & time of access
IP address
Hostname
Referring website
Pages visited
Request success/failure
Data volume
Browser and version
Operating system
Temporary storage of this data is necessary for the operation of a website visit and to enable delivery of the website. Further storage in log files occurs to ensure the functionality of the website and the security of the IT systems. These purposes also constitute our legitimate interest in data processing.
b) Legal basis
Data is processed according to Art. 6 (1) f GDPR.
c) Recipients of personal data
The website is hosted by:
STRATO GmbH
Otto-Ostrowski Str. 7
10249 Berlin
impressum [at] strato.de
The host receives the aforementioned data as a processor on behalf of the controller.
d) Storage period
Data is deleted as soon as it is no longer necessary for the purpose for which it was collected.
3) Data collected for contract fulfillment
a) What data is processed and for what purpose?
Customer data is collected for creating quotes, processing orders, and handling contact inquiries.
Customer master data (e.g., address, phone number, name, email address, bank details)
These data are only collected if customers provide them via email, phone, or similar. There is no automatic collection via the website itself.
b) Legal basis
The legal basis for processing data to fulfill our services and perform contractual measures, as well as to respond to inquiries, is Art. 6 (1) b GDPR. The legal basis for processing to fulfill legal obligations is Art. 6 (1) c GDPR. The legal basis for processing to protect legitimate interests is Art. 6 (1) f GDPR. In cases where processing is necessary to protect vital interests of the data subject or another natural person, Art. 6 (1) d GDPR applies.
c) Recipients of personal data
If a customer places an order and receives an invoice, this may be shared with third parties for contract fulfillment. This includes payment service providers, tax authorities, accountants, and business management software.
d) Storage period
Data is deleted as soon as it is no longer required for the purpose for which it was collected. Legal retention periods for invoices apply.
4) Cookies
The website uses so-called cookies. Cookies do not harm your computer and do not contain viruses. Cookies are used to make our offering more user-friendly, effective, and secure. Cookies are small text files that are stored on your computer by your browser.
Most of the cookies we use are so-called “session cookies.” They are automatically deleted at the end of your visit. Other cookies remain stored on your device until you delete them. These cookies allow us to recognize your browser on your next visit.
You can configure your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for specific cases or generally, and enable automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.
Cookies that are required to carry out electronic communication or to provide certain functions requested by you (e.g., shopping cart function) are stored based on Art. 6 (1) f GDPR. The website operator has a legitimate interest in storing cookies to provide technically error-free and optimized services. Other cookies (e.g., for analyzing your surfing behavior) are treated separately in this privacy policy.
Social Media
In addition to this website, I maintain profiles on social media platforms. You can visit these via the corresponding buttons. When you do so, personal data may be transmitted to the respective platform. It is possible that, in addition to storing the data you provide on the platform, the platform operator may process further information.
1)
a) Operated by third parties
The platforms we use and provide with our content are operated by:
Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA).
b) Scope and content of data processing
The platform operator may process data from your device, such as IP address, processor type, browser version, and installed plugins. When visiting social media pages, the platform operator records your IP address, among other information.
In addition, platform operators may collect and process other personal data over which we have no control. Data processing may occur wholly or partly outside the European Union, which may make enforcement of your rights more difficult. Providers based in the United States certified under the Privacy Shield are committed to complying with EU data protection standards.
Details and options for managing privacy, including withdrawal and objection, are described in the privacy policies of the respective platform:
Instagram: http://instagram.com/about/legal/privacy/
User data may be processed by the platform for market research and advertising purposes. The platform may create user profiles from your behavior and interests, including data stored via cookies.
If you are logged into your social media account while visiting our page, the platform operator may recognize your visit and assign it to your account.
c) Purpose of processing
Data from your device is processed to deliver page content. Additional data processing by the platform may occur for market research and advertising purposes.
d) Legal basis
Processing of user data is based on our legitimate interest in effective communication and user information (Art. 6 (1) f GDPR). If a platform requests your consent, the legal basis is Art. 6 (1) a and Art. 7 GDPR.
2) Messages
a) Description and scope of data processing
If you are logged into your social media account while visiting my social media profile and the platform provides a messaging function, you can send me a message via the corresponding button. In such cases, the personal data included in the message is stored. I use this data exclusively to process the conversation.
b) Legal basis for data processing
The legal basis for processing this data is Art. 6 (1) f GDPR. If your message relates to the preparation or conclusion of a contract with me, the additional legal basis is Art. 6 (1) b GDPR. If a contract is concluded and there is a legal obligation to retain the message, Art. 6 (1) c GDPR serves as the legal basis for the duration of the retention period.
c) Purpose of data processing
Personal data from messages is used solely to process the conversation. This also represents my legitimate interest in processing the data.
If the contact relates to the preparation, conclusion, or execution of a contractual relationship, the processing serves this additional purpose. If legal retention obligations apply, the storage also fulfills these obligations.
d) Duration of storage
Data is deleted once it is no longer required for the purpose it was collected. For personal data sent via email, this is the case when the conversation is concluded. A conversation is considered concluded when it is clear from the circumstances that the matter has been fully resolved.
If the contact relates to the preparation, conclusion, or execution of a contract, data is stored as long as claims or other rights arising from the contractual relationship may exist (e.g., warranty or compensation claims). The duration generally corresponds to the statutory limitation period.
If a statutory retention obligation (§ 147 AO; § 257 HGB) exists, data is retained until the end of the legal retention period.
e) Right to object and deletion
Users may object to the storage of their personal data at any time. In this case, the conversation cannot continue.
Objections may be made, for example, by sending an email. We will then delete all personal data collected during the conversation, unless retention is legally required.
If the personal data is necessary to establish or execute a contractual relationship with you, no right of objection exists.
6) Rights of Users
a) Right of Access
You have the right to request information about the personal data we process about you under Art. 15 GDPR.
b) Right to Object
You have the right to object to the processing of your personal data for specific reasons (see Section II).
c) Right to Rectification
If the information we hold about you is inaccurate or incomplete, you can request correction under Art. 16 GDPR. If your data is incomplete, you can request its completion.
d) Right to Erasure
You can request the deletion of your personal data under Art. 17 GDPR.
e) Right to Restriction of Processing
You have the right under Art. 18 GDPR to request a restriction on the processing of your personal data.
f) Right to Complain
If you believe that the processing of your personal data violates data protection law, you have the right under Art. 77 (1) GDPR to lodge a complaint with a data protection authority of your choice. This includes the authority responsible for this company:
The State Commissioner for Data Protection and Freedom of Information Rhineland-Palatinate
Prof. Dr. Dieter Kugelmann
Hintere Bleiche 34
55116 Mainz, Germany
Complaint form | datenschutz.rlp.de
g) Right to Data Portability
If the conditions of Art. 20 (1) GDPR are met, you have the right to receive data that we process automatically on the basis of your consent or to fulfill a contract, and to have it transferred to yourself or to a third party.
Please note: the collection of data for providing the website and storing log files is strictly necessary for the operation of the website. This processing does not rely on consent under Art. 6 (1) a GDPR or on a contract under Art. 6 (1) b GDPR, but is justified under Art. 6 (1) f GDPR. Therefore, the conditions of Art. 20 (1) GDPR do not apply in this context.
You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data carried out on the basis of Art. 6 (1) f GDPR. The data controller will then no longer process your personal data unless they can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves the establishment, exercise, or defense of legal claims.
Please note: the collection of data for providing the website and the storage of log files is strictly necessary for the operation of the website.