Privacy Policy

**Note: this page is translated. Click here for the original privacy policy is in German**

The address of our website is: https://makeityoursthelabel.com

1. BASICS

This privacy policy is intended to inform the users of this website about the nature, scope and purpose of the collection and use of personal data by the website operator.

RESPONSIBLE

Make It Yours – The Label FZE

Maria Frantzen

Company Address: 

Business Center, Sharjah Publishing City Free Zone, Sharjah, United Arab Emirates

Formation Number: 4100953

Imprint:https://makeityoursthelabel.com/en/imprint/

We take data protection very seriously and treat your personal data confidentially and in accordance with the statutory provisions. As new technologies and the continuous development of this website may result in changes to this privacy policy, we recommend that you read through the privacy policy again at regular intervals. Definitions of the terms used (e.g. “personal data” or “processing”) can be found in Art. 4 GDPR.

2. WHAT PERSONAL DATA WE COLLECT AND WHY WE COLLECT IT

The website operator collects, uses and discloses your personal data only if this is permitted by law or if you consent to the collection of data. Personal data is any information that can be used to identify you and that can be traced back to you – for example, your name, e-mail address and telephone number. You can also visit this website without providing any personal information. However, in order to improve our online offer, we store (without personal reference) your access data to this website. This access data includes, for example, the file you requested or the name of your Internet provider. Due to the anonymization of the data, it is not possible to draw conclusions about your person. We, the website operator or page provider, collect data about accesses to the website based on our legitimate interest (see Art. 6 para. 1 lit. f. GDPR) and store them as “server log files” on the website server.  The following data is logged in this way:

  • Inventory data (e.g., names, addresses).
  • Content data (e.g. text input, photographs, videos).
  • Contact information (e.g., email, phone numbers).
  • Meta/communication data (e.g. device information, IP addresses).
  • Usage data (e.g. websites visited, interest in content, access times).
  • Location data (data indicating the location of an end user’s terminal device).
  • Contract data (e.g. subject matter of the contract, term, customer category).
  • Payment data (e.g. bank details, invoices, payment history).

Categories of affected persons

  • Business and contractual partners
  • Interested parties
  • Communication partner
  • Customers
  • Users (e.g., website visitors, users of online services).

The server log files are stored for a maximum of 7 days and then deleted. The data is stored for security reasons, e.g. to be able to clarify cases of misuse. If data must be retained for evidentiary reasons, it is exempt from deletion until the incident is finally resolved.

3. SAFETY MEASURES 

3.1. SHORTENING THE IP ADDRESS

If it is possible for us or if it is not necessary to store the IP address, we will shorten your IP address or have it shortened. In the case of IP address shortening, also known as “IP masking”, the last octet, i.e., the last two numbers of an IP address, is deleted (in this context, the IP address is an identifier individually assigned to an Internet connection by the online access provider). The shortening of the IP address is intended to prevent or make it significantly more difficult to identify a person by their IP address.

3.2. SSL OR TLS ENCRYPTION

For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator, this site uses an SSL or SSL protocol. TLS encryption. You can recognize an encrypted connection by the fact that the browser address bar changes from “http://” to “https://” and by the lock symbol in your browser bar. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

4. USE OF COOKIES

“Cookies” are small files that are stored on users’ computers. Different information can be stored within the cookies. The primary purpose of a cookie is to store information about a user (or the device on which the cookie is stored) during or after his visit within an online offer. Temporary cookies, or “session cookies” or “transient cookies”, are cookies that are deleted after a user leaves an online offer and closes his browser. In such a cookie, for example, the contents of a shopping cart in an online store or a login status can be stored. “Permanent” or “persistent” cookies are those that remain stored even after the browser is closed. For example, the login status can be saved when users visit them after several days. Likewise, such a cookie may store the interests of users, which are used for reach measurement or marketing purposes. Third-party cookies” are cookies that are offered by providers other than the responsible party that operates the online offer (otherwise, if they are only its cookies, they are referred to as “first-party cookies”). We may use temporary and permanent cookies and explain this in our privacy policy. If users do not want cookies to be stored on their computer, they are asked to disable the corresponding option in the system settings of their browser. Stored cookies can be deleted in the system settings of the browser. The exclusion of cookies may lead to functional restrictions of this online offer. A general objection to the use of cookies used for online marketing purposes can be declared for a large number of the services, especially in the case of tracking, via the U.S. sitehttp://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/ . Common browsers offer the setting option to not allow cookies. Note: It is not guaranteed that you will be able to access all the features of this website without restrictions if you make appropriate settings.

4.1. Notes on legal bases:

The legal basis on which we process your personal data using cookies depends on whether we ask for your consent. If this applies and you consent to the use of cookies, the legal basis for the processing of your data is the declared consent. Otherwise, the data processed with the help of cookies is processed on the basis of our legitimate interests (e.g. in the business operation of our online offer and its improvement) or, if the use of cookies is necessary to fulfill our contractual obligations.

4.2. Turn off cookies

We have clearly informed you in the context of calling up the website that you can prevent the storage of certain cookies when visiting our website by clicking on the opt out function. To the extent that you have not done so, we will assume that you have consented to the use of cookies that you have not opted out of. You can revoke this consent at any time informally by simply sending an email to us or using the options below. Insofar as you have not objected, our website uses your data within the scope of our legitimate interest in a technically flawless online offering and its economically efficient design and optimization in accordance with the German Data Protection Act. Art. 6 par. 1 lit. f GDPR and on the basis of your implied consent according to. Art 6 par. 1 lit. a GDPR cookies so that our offer can be used better, more effectively and more securely. Cookies are text files that are stored on your computer and store certain data about your user behavior on our site, so that, for example, an offer corresponding to your previous use can be made. These may be so-called “session cookies”, which are automatically deleted at the end of your visit to our website. However, there are also cookies that are permanently stored on your computer unless you delete them. It is then possible for us to recognize your browser the next time you visit our website and to make you offers that correspond to your previous use of our website. Your browser allows you to prevent the use of cookies in whole or in individual cases. Please refer to the user manual of your browser for more information. You can also delete cookies, we have compiled some instructions here: for Chrome: https://support.google.com/chrome/answer/95647?co=GENIE.Platform%3DDesktop&hl=de for Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac for Firefox: https://support.mozilla.org/de/kb/cookies-loeschen-daten-von-websites-entfernen for Edge: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies for Internet Explorer: https://support.microsoft.com/de-de/help/278835/how-to-delete-cookie-files-in-internet-explorer Blocking cookies may limit the functionality of our website and other websites you visit. You can permanently prevent cookies from being stored in your browser by downloading and installing the plugin linked below. Here you will find more information. Likewise, you can prevent the use of cookies by third parties towards you by going to the Network Advertising Initiative’s disable page according to theinstructions there declare your opt-out. You can find the same offer on this US website.

4.2.1. Borlabs Cookie OptOut

For Cookie OptOut we use the WordPress PlugIn from Borlabs (https://borlabs.io/borlabs-cookie/) and you can make your settings here: [borlabs-cookie type=”btn-cookie-preference” title=”Change settings” /]  

5. SERVER LOG FILES

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

  • Browser type and version
  • Operating system used
  • Referrer URL
  • Host name of the accessing computer
  • Time of the server request
  • IP address

This data is not merged with other data sources. The collection of this data is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website – for this purpose, the server log files must be recorded.

6. COMMENTS

Comments and contributions: When users leave comments or other contributions, their IP addresses may be stored based on our legitimate interests. This is done for our security, in case someone leaves illegal content in comments and posts (insults, forbidden political propaganda, etc.). In this case, we ourselves may be prosecuted for the comment or post and are therefore interested in the identity of the author. Furthermore, we reserve the right to process the user’s data for the purpose of spam detection on the basis of our legitimate interests. On the same legal basis, in the case of surveys, we reserve the right to store the IP addresses of users for their duration and to use cookies to avoid multiple votes. The personal information provided in the context of comments and contributions, any contact and website information as well as the content-related information will be stored permanently by us until the user objects.

6.1. Akismet Anti-Spam Check

We use the service “Akismet” based on our legitimate interests. With the help of Akismet, comments from real people are distinguished from spam comments. For this purpose, all comment data is sent to a server in the USA, where it is analyzed and stored for four days for comparison purposes. If a comment has been classified as spam, the data will be stored beyond this time. This information includes the name entered, the e-mail address, the IP address, the comment content, the referrer, information about the browser used as well as the computer system and the time of the entry. Users are welcome to use pseudonyms or refrain from entering their name or email address. You can completely prevent the transfer of data by not using our commenting system. That would be a pity, but unfortunately we don’t see any alternatives that work just as effectively.

6.2. Gravatar profile pictures 

We use the service Gravatar within our online offer and especially in the blog. Gravatar is a service where users can sign up and store profile pictures and their email addresses. If users leave posts or comments on other online presences (especially blogs) with the respective e-mail address, their profile pictures can be displayed next to the posts or comments. For this purpose, the email address provided by users is transmitted to Gravatar in encrypted form for the purpose of checking whether a profile is stored for it. This is the only purpose of the transmission of the e-mail address. It will not be used for other purposes, but will be deleted afterwards: The use of Gravatar is based on our legitimate interests, as we use Gravatar to offer post and comment authors the possibility to personalize their posts with a profile picture. By displaying the images, Gravatar obtains the IP address of the users, as this is necessary for a communication between a browser and an online service. If users do not want a user image associated with their Gravatar email address to appear in the comments, they should use an email address that is not on file with Gravatar to comment. We also point out that it is also possible to use an anonymous email address or no email address at all, if users do not want their own email address to be sent to Gravatar. Users can completely prevent the transfer of data by not using our commenting system.

  • Types of data processed: inventory data (e.g. names, addresses), contact data (e.g. e-mail, telephone numbers), content data (e.g. text entries, photographs, videos), usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses).
  • Data subjects: Users (e.g., website visitors, users of online services).
  • Purposes of processing:Contractual performance and service, feedback (e.g. collecting feedback via online form), security measures, managing and responding to requests, providing our online offer and user friendliness, server monitoring and error detection, firewall.
  • Legal basis: Contract fulfillment and pre-contractual inquiries (Art. 6 par. 1 p. 1 lit. b. GDPR), Legitimate Interests (Art. 6 par. 1 p. 1 lit. f. GDPR), consent (Art. 6 par. 1 p. 1 lit. a GDPR), protection of vital interests (Art. 6 par. 1 p. 1 lit. d. GDPR).

Services used and service providers:

  • Akismet Anti-Spam Check:Akismet Anti-Spam Check; Service Provider: Automattic Inc, 60 29th Street #343, San Francisco, CA 94110, USA; website: https://automattic.com; privacy policy: https://automattic.com/privacy.
  • Profile pictures from Gravatar: Profile pictures; Service provider: Automattic Inc, 60 29th Street #343, San Francisco, CA 94110, USA; website:https://automattic.com; privacy policy: https://automattic.com/privacy.
  • Sucuri: firewall and security and error detection capabilities; service provider: Sucuri LLC, parent company: GoDaddy Media Temple, Inc. d/b/a Sucuri, 6060 Center Dr. Suite 500, Los Angeles CA 90045, USA; Privacy Policy:https://sucuri.net/privacy.

7. GOOGLE ANALYTICS

This website uses functions of the web analysis service Google Analytics. The provider is Google Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Google Analytics uses so-called “cookies”. These are text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States.

7.1. IP anonymization

We have activated the IP anonymization function on this website. As a result, your IP address is shortened by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.

7.2. Browser plug-in

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de

7.3. Objection to data collection

You can prevent the collection of your data by Google Analytics by turning off cookies (see 4.2.). 

7.4. Order data processing

We have concluded an order data processing contract with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

7.5. Demographic characteristics in Google Analytics

This website uses the “demographic characteristics” function of Google Analytics. This allows reports to be generated that contain statements about the age, gender and interests of site visitors. This data comes from interest-based advertising from Google as well as visitor data from third-party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as shown in the item “Objection to data collection”.

8. EMBEDDED CONTENT FROM OTHER SITES

Posts on this website may contain embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves exactly as if the visitor had visited the other website. These websites may collect information about you, use cookies, embed additional third party tracking services, and record your interaction with that embedded content, including your interaction with the embedded content if you have an account and are logged into that website.

9. USE OF SCRIPT LIBRARIES (Google Web Fonts)

In order to display my content correctly and graphically appealing across browsers, I use script libraries and font libraries on this website, such as Google Webfonts (https://www.google.com/webfonts/) or Font Awesome (https://fontawesome.com/). These are transferred to your browser’s cache to avoid multiple loads. For example, if the browser does not support Google Web Fonts or prevents access, content is displayed in a default font. Calling script libraries or font libraries automatically triggers a connection to the operator of the library. It is theoretically possible – although it is currently unclear whether and, if so, for what purposes – for operators of such libraries to collect data. The privacy policy of the library operator Google can be found here: https://www.google.com/policies/privacy/ Go to Font Awesome privacy policy: https://fontawesome.com/privacy

10. GOOGLE reCAPTCHA

We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on our websites. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. The purpose of reCAPTCHA is to verify whether data entry on our websites (e.g. in a contact form) is made by a human or by an automated program. For this purpose, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis starts automatically as soon as the website visitor enters the website. For analysis, reCAPTCHA evaluates various information (e.g. IP address, time spent by the website visitor on the website or mouse movements made by the user). The data collected during the analysis is forwarded to Google. The reCAPTCHA analyses run completely in the background. Website visitors are not made aware that an analysis is taking place. The data processing is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in protecting its web offerings from abusive automated spying and from SPAM. For more information about Google reCAPTCHA and Google’s privacy policy, please see the following links: https://policies.google.com/privacy?hl=de and https://www.google.com/recaptcha/intro/android.html.

10. SOCIAL MEDIA

10.1. Social media plugins with Shariff

Plugins from social media are used on our pages (e.g. Facebook, Twitter, Google+, Instagram, Pinterest, XING, LinkedIn, Tumblr). You can usually recognize the plugins by the respective social media logos. To ensure data protection on our website, we only use these plugins together with the so-called “Shariff” solution. This application prevents the plug-ins integrated on our website from transmitting data to the respective provider when you first enter the page. Only when you activate the respective plugin by clicking the associated button, a direct connection to the provider’s server is established (consent). As soon as you activate the plugin, the respective provider receives the information that you have visited our site with your IP address. If you are logged into your respective social media account (e.g. Facebook) at the same time, the respective provider can assign the visit to our pages to your user account. Activating the plugin constitutes consent within the meaning of Art. 6 para. 1 lit. a of the GDPR. You can revoke this consent at any time with effect for the future.

10.2. Facebook Plugins (Like & Share Button)

Plugins of the social network Facebook, provider Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA, are integrated on our pages. You can recognize the Facebook plugins by the Facebook logo or the “Like” button on our site. You can find an overview of the Facebook plugins here:https://developers.facebook.com/docs/plugins. When you visit our pages, a direct connection between your browser and the Facebook server is established via the plugin. Facebook thereby receives the information that you have visited our site with your IP address. If you click the Facebook “Like” button while you are logged into your Facebook account, you can link the content of our pages on your Facebook profile. This allows Facebook to assign the visit to our pages to your user account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by Facebook. For more information, see Facebook’s privacy policy at: https://de-de.facebook.com/privacy/explanation. If you do not want Facebook to be able to associate your visit to our pages with your Facebook user account, please log out of your Facebook user account. The use of Facebook plugins is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in ensuring the greatest possible visibility in social media.

10.3. Instagram Plugin

Functions of the Instagram service are integrated on our pages. These functions are offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. If you are logged into your Instagram account, you can link the content of our pages to your Instagram profile by clicking on the Instagram button. This allows Instagram to associate the visit to our pages with your user account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by Instagram. The use of the Instagram plugin is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in ensuring the greatest possible visibility in social media. For more information, please see Instagram’s privacy policy: https://instagram.com/about/legal/privacy/.

10.4. Pinterest Plugin

On our site, we use social plugins of the social network Pinterest, which is operated by Pinterest Inc, 808 Brannan Street, San Francisco, CA 94103-490, USA (“Pinterest”). When you visit a page that contains such a plugin, your browser establishes a direct connection to Pinterest’s servers. The plugin transmits log data to the Pinterest server in the USA. This log data may include your IP address, the address of websites you visit that also contain Pinterest features, browser type and settings, the date and time of the request, how you use Pinterest, and cookies. The use of the Pinterest plugin is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in ensuring the greatest possible visibility in social media. For more information on the purpose, scope and further processing and use of the data by Pinterest, as well as your rights in this regard and options for protecting your privacy, please refer to Pinterest’s privacy policy: https://policy.pinterest.com/de/privacy-policy.

11. USER’S RIGHTS

As a user, you have the right to request free information about what personal data has been stored about you. You also have the right to rectify incorrect data and to restrict the processing or erasure of your personal data. If applicable, you may also exercise your right to Data portability claim. If you believe that your data has been processed unlawfully, you may lodge a complaint with the competent supervisory authority.

11.1. DELETION OF THE DATA

Unless your request conflicts with a legal obligation to retain data (e. g. Data retention), you have the right to have your data deleted. Data stored by us will be deleted if it is no longer required for its intended purpose and there are no legal retention periods. If deletion cannot be carried out because the data is required for permissible legal purposes, data processing will be restricted. In this case, the data will be blocked and not processed for other purposes.

11.2. RIGHT OF WITHDRAWAL 

You have the right to withdraw consent granted in accordance with Art. 7 par. 3 GDPR with effect for the future

11.3. RIGHT OF OBJECTION

Users of this website may exercise their right to object to the processing of their personal data at any time. If you wish to correct, block, delete or obtain information about the personal data stored about you, or if you have any questions regarding the collection, processing or use of your personal data, or if you wish to revoke any consent you have given, please contact us at the following e-mail address: [E-Mail-Adresse einfügen]

12. Online Marketing

12. 1 AWIN Performance Advertising Network

We participate in the performance advertising network of AWIN AG, Eichhornstraße 3, 10785 Berlin (hereinafter “AWIN”). As part of its tracking services, AWIN stores cookies for the documentation of transactions (e.g., of leads and sales) on end devices of users who visit or use websites or other online offers of its customers (e.g., register for a newsletter or place an order in an online store). These cookies serve the sole purpose of correctly assigning the success of an advertising medium and the corresponding billing within its network. In a cookie, only the information about when a certain advertising medium was clicked on by an end device is placed. In the AWIN tracking cookies, an individual sequence of numbers is stored, which cannot be assigned to the individual user, and with which the partner program of an advertiser, the publisher, and the time of the user’s action (click or view) are documented. In this context, AWIN also collects information about the terminal device from which a transaction is carried out, e.g. the operating system and the calling browser. If the information also contains personal data, the described processing is based on our legitimate financial interest in processing commission payments with AWIN pursuant to Art. 6 para. 1 lit. f GDPR. If you do not want cookies to be stored in your browser, you can do this by changing the appropriate browser settings. You can deactivate the storage of cookies in your respective browser under Tools/Internet options, limit them to certain websites or set your browser to notify you as soon as a cookie is sent. Please note, however, that in this case you will have to reckon with a limited display of the online offers and a restricted user guidance. You can also delete cookies at any time. In this case, the information stored therein will be removed from your terminal device. For more information on AWIN’s use of data, please see the company’s privacy policy: https://www.awin.com/de/rechtliches

12.2. NEWSLETTER

With the following information we inform you about the contents of our newsletter as well as the registration, dispatch and statistical evaluation procedure and your rights of objection. By subscribing to our newsletter, you agree to receive it and to the procedures described. Newsletter content: We send newsletters, e-mails and other electronic notifications with promotional information (hereinafter “newsletter”) only with the consent of the recipients or a legal permission. Insofar as the contents of the newsletter are specifically described in the course of registration, they are decisive for the consent of the user. For the rest, our newsletters contain information about our services and us. Double opt-in and logging:  The registration for our newsletter takes place in a so-called double opt-in process. I.e. after registration you will receive an email asking you to confirm your registration. This confirmation is necessary so that no one can log in with foreign e-mail addresses. Subscriptions to the newsletter are logged in order to be able to prove the subscription process in accordance with legal requirements. This includes the storage of the login and confirmation time, as well as the IP address. Likewise, changes to your data stored with the shipping service provider are logged. Login data: To subscribe to the newsletter, it is sufficient to provide your e-mail address. Optionally, we ask you to enter a name for the purpose of personal address in the newsletter. The dispatch of the newsletter and the associated performance measurement are based on the consent of the recipients in accordance with. Art. 6 par. 1 lit. a, Art. 7 GDPR in conjunction with § 7 para. 2 Nr. 3 UWG or, if consent is not required, on the basis of our legitimate interests in direct marketing pursuant to. Art. 6 par. 1 lt. f. GDPR in conjunction with. § 7 Par. 3 UWG. The logging of the registration process is based on our legitimate interests according to. Art. 6 par. 1 lit. f GDPR. We are interested in using a user-friendly and secure newsletter system that serves our business interests, meets the expectations of users and allows us to prove consent. Cancellation/Revocation – You can cancel the receipt of our newsletter at any time, i.e. revoke your consents. You will find a link to cancel the newsletter at the end of each newsletter. We may store unsubscribed email addresses for up to three years based on our legitimate interests before deleting them to be able to prove consent formerly given. The processing of this data is limited to the purpose of a possible defense against claims. An individual deletion request is possible at any time, provided that the former existence of consent is confirmed at the same time.

12.2.1. Newsletter – Mailchimp

Newsletter – The newsletter is sent using the dispatch service provider “MailChimp”, a newsletter dispatch platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. You can view the privacy policy of the shipping service provider here: https://mailchimp.com/legal/privacy/. The Rocket Science Group LLC d/b/a MailChimp is certified under the Privacy Shield agreement, thereby providing a guarantee of compliance with the European level of data protection (https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active). The shipping service provider is used on the basis of our legitimate interests pursuant to. Art. 6 par. 1 lit. f GDPR and a contract processing agreement according to. Art. 28 Par. 3 p. 1 GDPR used. The dispatch service provider may use the data of the recipients in pseudonymous form, i.e. without assignment to a user, to optimize or improve its own services, e.g. to technically optimize the dispatch and presentation of the newsletter or for statistical purposes. However, the dispatch service provider does not use the data of our newsletter recipients to write to them itself or to pass the data on to third parties.

12.2.2. Newsletter – Success measurement

The newsletters contain a so-called “web beacon”, i.e. a pixel-sized file that is retrieved from our server when the newsletter is opened, or if we use a shipping service provider, from their server. In the course of this retrieval, technical information, such as information about the browser and your system, as well as your IP address and the time of the retrieval are collected. This information is used for the technical improvement of the services based on the technical data or the target groups and their reading behavior based on their retrieval locations (which can be determined with the help of the IP address) or the access times. Statistical surveys also include determining whether newsletters are opened, when they are opened, and which links are clicked. For technical reasons, this information can be assigned to individual newsletter recipients. However, it is neither our intention nor, if used, that of the shipping service provider to monitor individual users. The evaluations serve us much more to recognize the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users. A separate revocation of the performance measurement is unfortunately not possible, in this case the entire newsletter subscription must be cancelled.

13. ORDER PROCESSING ONLINE STORE

We process the data of our customers in the context of the order processes in our online store to enable them to select and order the selected products and services, as well as their payment and delivery, or execution. The data processed includes inventory data, communication data, contract data, payment data and the data subjects of the processing include our customers, prospective customers and other business partners. The processing is carried out for the purpose of providing contractual services within the framework of the operation of an online store, billing, delivery and customer services. Here we use session cookies to store the contents of the shopping cart. The processing is carried out on the basis of Art. 6 para. 1 lit. b (Execution of order processes) and c (Legally required archiving) GDPR. In this context, the information marked as required is necessary for the justification and fulfillment of the contract. We disclose the data to third parties only within the scope of delivery, payment or within the scope of legal permissions and obligations to legal advisors and authorities. The data is only processed in third countries if this is necessary for the fulfillment of the contract (e.g. at the customer’s request for delivery or payment). Within the scope of registration and renewed logins as well as the use of our online services, we store the IP address and the time of the respective user action. The storage is based on our legitimate interests, as well as those of users in protection against misuse and other unauthorized use. In principle, this data will not be passed on to third parties, unless it is necessary for the pursuit of our claims or there is a legal obligation to do so in accordance with the German Data Protection Act. Art. 6 par. 1 lit. c GDPR. The deletion takes place after the expiry of legal warranty and comparable obligations, the necessity of keeping the data is reviewed every three years; in the case of legal archiving obligations, the deletion takes place after their expiry (end of commercial law (6 years) and tax law (10 years) retention obligation).

13.1. External payment service providers

We use external payment service providers through whose platforms users and we can make payment transactions (e.g., each with a link to the privacy policy, Paypal (https://www.paypal.com/de/webapps/mpp/ua/privacy-full), Klarna (https://www.klarna.com/de/datenschutz/), Skrill (https://www.skrill.com/de/fusszeile/datenschutzrichtlinie/),  In the context of the fulfillment of contracts, we use the payment service providers on the basis of Art. 6 para. 1 lit. b. GDPR. In addition, we use external payment service providers on the basis of our legitimate interests pursuant to Art. Art. 6 par. 1 lit. f. GDPR to provide our users with effective and secure payment options. The data processed by the payment service providers includes inventory data, such as name and address, bank data, such as account numbers or credit card numbers, passwords, TANs and checksums, as well as contract, total and recipient-related data. The information is necessary to carry out the transactions. However, the data entered is only processed by the payment service providers and stored with them. I.e. we do not receive any account or credit card related information, but only information with confirmation or negative information of the payment. Under certain circumstances, the data may be transmitted by the payment service providers to credit agencies. The purpose of this transmission is to check identity and creditworthiness. In this regard, we refer to the terms and conditions and data protection information of the payment service providers. The terms and conditions and the data protection information of the respective payment service providers apply to the payment transactions, which can be accessed within the respective websites or transaction applications. We also refer to these for further information and assertion of revocation, information and other data subject rights.

13.2. Administration, financial accounting, office organization, contact management

We process data in the context of administrative tasks as well as organization of our operations, financial accounting and compliance with legal obligations, such as archiving. In doing so, we process the same data that we process in the course of providing our contractual services. The processing bases are Art. 6 para. 1 lit. c. GDPR, Art. 6 para. 1 lit. f. GDPR. Customers, interested parties, business partners and website visitors are affected by the processing. The purpose and our interest in the processing lies in the administration, financial accounting, office organization, archiving of data, i.e. tasks that serve the maintenance of our business activities, performance of our tasks and provision of our services. The cancellation of the data with regard to contractual services and contractual communication corresponds to the data mentioned in these processing activities. In this context, we disclose or transmit data to the tax authorities, advisors, such as tax consultants or auditors, as well as other fee offices and payment service providers. Furthermore, we store information on suppliers, event organizers and other business partners on the basis of our business interests, e.g. for the purpose of contacting them at a later date. We store this data, which is mostly company-related, permanently.

14. CHANGE IN MY PRIVACY POLICY

I reserve the right to occasionally adapt this privacy policy to ensure that it always complies with current legal requirements or to implement changes to my services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your next visit.

More information

Source: https://www.datenschutz.org/datenschutzerklaerung/