Data protection

Data protection

automatic translation

1) Information about the collection of personal data and contact details of the controller 1.1 I am pleased that you are visiting our website and thank you for your interest. In the following, I will inform you about how your personal data is handled when you use my website. Personal data is all data with which you can be personally identified. 1.2 The person responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Linda Gleissner (Barbenstr. 5, 83059 Kolbermoor, linda.gleissnerart@protonmail.com.) The controller is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data. 2) Data collection when visiting our website If you use my website for information purposes only, i.e. if you do not register or otherwise provide me with information, I only collect data that your browser transmits to our server (so-called "server log files"). When you visit my website, I collect the following data, which is technically necessary for me to display the website to you: - Date and time of access - Amount of data sent in bytes - Source/reference from which you came to the page - Browser used - Operating system used - IP address used (if applicable: in anonymized form) The processing is carried out in accordance with Art. 6 (1) (f) GDPR on the basis of my legitimate interest in improving the stability and functionality of my website. The data will not be passed on or used in any other way. However, I reserve the right to subsequently check the server log files if there are concrete indications of illegal use. 3) Cookies In order to make visiting my website more attractive and to enable the use of certain functions, the website uses cookies, i.e. small text files that are stored on your device. Some of these cookies are automatically deleted when you close the browser (so-called "session cookies"), while others remain on your device for longer and enable page settings to be saved (so-called "persistent cookies"). In the latter case, you can find out how long the cookies are stored in the overview of your web browser's cookie settings. If personal data is also processed by individual cookies used by me, the processing is carried out in accordance with Art. 6 Para. 1 lit. b GDPR either for the execution of the contract, in accordance with Art. 6 Para. 1 lit. a GDPR in the case of consent given or in accordance with Art. 6 Para. 1 lit. f GDPR to protect my legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit. You can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or to exclude the acceptance of cookies in certain cases or in general. Please note that if you do not accept cookies, the functionality of our website may be limited. 4) Contact us When you contact me (e.g. via contact form or email), personal data will be processed - exclusively for the purpose of processing and answering your request and only to the extent necessary for this purpose. The legal basis for processing this data is my legitimate interest in answering your request in accordance with Art. 6 (1) (f) GDPR. If your contact is aimed at a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR. Your data will be deleted if it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention periods to the contrary. 5) Data processing when opening a customer account In accordance with Art. 6 Paragraph 1 Letter b of GDPR, personal data will continue to be collected and processed to the extent required if you provide it to me when opening a customer account. You can find out which data is required to open an account in the input mask of the corresponding form on my website. You can delete your customer account at any time and can do so by sending a message to the above-mentioned address of the person responsible. After your customer account has been deleted, your data will be deleted provided that all contracts concluded through it have been fully processed, there are no statutory retention periods to the contrary and I have no legitimate interest in continuing to store it. 6) Data processing for order processing 6.1 To the extent necessary for the execution of the contract for delivery and payment purposes, the personal data collected by me will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 Paragraph 1 Letter b of GDPR. If I owe you updates for goods with digital elements or for digital products on the basis of a corresponding contract, I will process the contact details you provided when ordering (name, address, email address) in order to inform you personally about upcoming updates within the legally stipulated period by suitable communication channels (e.g. by post or email) within the scope of our statutory information obligations in accordance with Art. 6 Paragraph 1 Letter c GDPR. Your contact details will be used strictly for the purpose of notifications about updates owed by me and will only be processed by me for this purpose to the extent that this is necessary for the respective information. To process your order, I also work with the following service provider(s), who support me in whole or in part in the implementation of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information. 7) Rights of the data subject 7.1 The applicable data protection law grants you the following data subject rights (rights to information and intervention) vis-à-vis the controller with regard to the processing of your personal data, whereby reference is made to the legal basis stated for the respective conditions for exercising them: - Right to information according to Art. 15 GDPR; - Right to rectification in accordance with Art. 16 GDPR; - Right to erasure pursuant to Art. 17 GDPR; - Right to restriction of processing pursuant to Art. 18 GDPR; - Right to information in accordance with Art. 19 GDPR; - Right to data portability according to Art. 20 GDPR; - Right to revoke consent granted in accordance with Art. 7 Para. 3 GDPR; - Right to complain according to Art. 77 GDPR. 7.2 RIGHT OF OBJECTION IF I PROCESS YOUR PERSONAL DATA BASED ON MY OVERRIDING LEGITIMATE INTEREST AS PART OF A BALANCE OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE. IF YOU EXERCISE YOUR RIGHT TO OBJECT, I WILL STOP PROCESSING THE DATA IN QUESTION. HOWEVER, I RESERVE THE RIGHT TO CONTINUE PROCESSING IF I CAN PROVE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS. IF I PROCESS YOUR PERSONAL DATA FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU CAN EXERCISE YOUR OBJECTION AS DESCRIBED ABOVE. IF YOU EXERCISE YOUR RIGHT TO OBJECT, I WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES. 8) Duration of storage of personal data The duration for which personal data is stored is determined based on the respective legal basis, the purpose of processing and – if applicable – also on the respective statutory retention period (e.g. retention periods under commercial and tax law). When personal data is processed on the basis of an explicit consent in accordance with Art. 6 (1) (a) GDPR, these data will be stored until the data subject revokes his or her consent. If there are statutory retention periods for data that are processed within the framework of legal transactions or quasi-legal obligations on the basis of Art. 6 (1) (b) GDPR, these data will be routinely deleted after expiry of the retention periods, provided that they are no longer required to fulfill or initiate a contract and/or I have no legitimate interest in continuing to store them. When processing personal data on the basis of Art. 6 (1) (f) GDPR, these data will be stored until the data subject exercises his or her right of objection in accordance with Art. 21 (1) GDPR, unless I can demonstrate compelling legitimate grounds for the processing which outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims. When processing personal data for the purpose of direct advertising on the basis of Art. 6 (1) (f) GDPR, these data will be stored until the data subject exercises his or her right of objection in accordance with Art. 21 (2) GDPR. Unless otherwise stated in the other information in this declaration on specific processing situations, stored personal data will be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.