Data protection

1. Data protection at a glance

General information

The following information is intended to give you a simple overview of what will happen to your personal data when you visit this website. The term “personal data” is used below to refer to any data with which you can be personally identified. This privacy policy contains detailed information about our data protection practices.

Collection of data on this website

Who is responsible for collecting data on this website?

The website operator is responsible for processing data on this website. You can find the relevant contact details in this privacy policy (see “Information on the controller”).

How will we collect your data?

Some of the data we collect will be provided by you. This may include data that you enter in a contact form.

Other data will be collected by our IT systems, either automatically or with your consent, when you visit our website. This particularly includes technical data (e.g. your Internet browser, operating system or the time of your visit). This data will be collected automatically as soon as you enter our website.

What will we use your data for?

Some of your data will be collected to ensure that our website is delivered correctly. Other data may be used to analyse your user behaviour.

What rights do you have with regard to your data?

You have the right to obtain free information about the source, recipients and purpose of the personal data we have stored on you. You can request this at any time. You also have the right to request the rectification or erasure of your data. If you have consented to data processing, you can withdraw your consent with future effect whenever you like. If certain conditions are met, you also have the right to request the restriction of the processing of your personal data. You can also lodge a complaint with the competent supervisory authority.

If you have any questions about the information provided on this page or any other aspects of data protection, you can contact us at any time.

2. Hosting

Our website content is hosted by:

Strato

This is a hosting service provided by Strato AG, Otto-Ostrowski-Straße 7, D-10249 Berlin (“Strato”). When you visit our website, Strato will record various log files including your IP addresses.

You can find more information in Strato’s privacy policy: https://www.strato.de/datenschutz/.

We use Strato on the basis of point (f) of Art. 6 (1) GDPR. We have a legitimate interest in ensuring that our website can be accessed as reliably as possible. If your consent is requested, your data will be processed exclusively on the basis of point (a) of Art. 6 (1) GDPR and Section 25 (1) of the German Act on Data Protection and Privacy in Telecommunications and Telemedia (TTDSG), provided you also allow us to store cookies or to access information on your device (e.g. via device fingerprinting), as described in the TTDSG. You may withdraw your consent at any time.

Third-party processing

We have entered into a data processing agreement with the provider named above. This is a contract required under data protection law to ensure that the provider only processes our website users’ personal data according to our instructions and in accordance with the GDPR.

3. General and mandatory information

Data protection

We find it very important to protect your personal data. We will treat your personal data confidentially in accordance with the applicable data protection regulations and this privacy policy.

Various forms of personal data will be collected when you use this website. “Personal data” means any data with which you can be personally identified. The aim of this privacy policy is to make you aware of the data that will be collected when you visit our website and to explain how we will use this data. We also provide more information on the purposes of our data processing.

Please note that data transferred via the Internet (e.g. email communication) may be affected by security issues. Data cannot be completely protected against third-party access.

Information on the controller

The party responsible for data processing (“controller”) on this website is:

Żaneta Hofman
Daglfingerstr. 100
81929 München
Email: blackswantextilearts@gmail.com

The “controller” is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data (e.g. names, email addresses).

Retention period

Unless a specific retention period is indicated in this privacy policy, we will store your personal data until the purpose for which it was being processed no longer applies. If you make a legitimate request for deletion or withdraw your consent to data processing, your data will be deleted unless we are otherwise legally permitted to continue storing your personal data (e.g. due to retention requirements under tax and commercial law); if this is the case, your personal data will be deleted when those permissions no longer apply.

General information about the legal basis for data processing on this website

If you consent to data processing, we will process your personal data on the basis of point (a) of Art. 6 (1) GDPR; if you consent to the processing of any special categories of personal data, as defined in Art. 9 (1) GDPR, we will process this data on the basis of point (a) of Art. 9 (2) GDPR. If you explicitly consent to the transfer of personal data to third countries, we will also process your data on the basis of point (a) of Art. 49 (1) GDPR. If you allow us to store cookies or access information on your device (e.g. via device fingerprinting), we will also process your data on the basis of Section 25 (1) TTDSG. You may withdraw your consent at any time. If your data is required to perform a contract or to take steps prior to entering into a contract, we will process your data on the basis of point (b) of Art. 6 (1) GDPR. If your data is required to comply with a legal obligation, we will process your data on the basis of point (c) of Art. 6 (1) GDPR. Data processing may also be carried out on the basis of our legitimate interests in accordance with point (f) of Art. 6 (1) GDPR. The relevant legal basis for each type of processing can be found in the following sections of this privacy policy.

Recipients of personal data

As part of our business activities, we work with various third parties. In some cases, we have to provide them with personal data. We will only pass on your personal data to third parties if this is necessary to perform a contract, if we are legally obliged to do so (e.g. disclosures to tax authorities), if we have a legitimate interest under point (f) of Art. 6 (1) GDPR, or if we are otherwise legally permitted to pass on your data. When instructing third parties to carry out data processing on our behalf, we only pass on our customers’ personal data on the basis of a data processing agreement. In cases where we are joint controllers with another party, we set out our respective responsibilities in a contract.

Right to withdraw your consent to data processing

Many forms of data processing are only possible with your express consent. You may withdraw your consent at any time. If you withdraw your consent, however, this will not affect the lawfulness of any data processing performed up to that point in time.

Right to object to data collection in particular cases and direct marketing (Art. 21 GDPR)

IF DATA PROCESSING IS BASED ON POINT (E) OR (F) OF ART. 6 (1) GDPR, YOU HAVE THE RIGHT TO OBJECT, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA, INCLUDING ANY PROFILING BASED ON THOSE PROVISIONS. THE RELEVANT LEGAL BASIS FOR EACH TYPE OF PROCESSING CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU FILE AN OBJECTION, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR UNLESS YOUR PERSONAL DATA IS PROCESSED FOR THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS (RIGHT TO OBJECT UNDER ART. 21 (1) GDPR).

IF YOUR PERSONAL DATA IS BEING PROCESSED FOR DIRECT MARKETING, YOU MAY ALWAYS OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH PURPOSES, INCLUDING ANY PROFILING RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, WE WILL NO LONGER USE YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES (RIGHT TO OBJECT UNDER ART. 21 (2) GDPR).

Right to lodge a complaint with the competent supervisory authority

If the provisions of the GDPR are ever breached, you have the right to lodge a complaint with a data protection supervisory authority, particularly in the Member State of your habitual place of residence / work or the location of the alleged breach. Even after lodging a complaint, you reserve the right to seek other forms of administrative or judicial remedy.

Right to data portability

If we are processing your data by automated means on the basis of your consent or for the performance of a contract, you may ask for this data to be returned to you or transferred to a third party in a commonly used, machine-readable format. If you ask for your data to be transferred directly to another controller, we will only be able to honour your request if this is technically feasible.

Access, rectification and erasure

In accordance with the applicable legal provisions, you have the right to obtain free information on your stored personal data, as well as its source, recipients and the purpose of processing at any time; if applicable, you may also request the rectification or erasure of your data. If you have any questions about this or any other aspects of data protection, you can contact us at any time.

Right to the restriction of processing

You have the right to request the restriction of the processing of your personal data. You can contact us about this at any time. You may request the restriction of processing in the following cases:

  • If you dispute the accuracy of the personal data we hold on you, it will usually take some time for us to process your request. While we check the accuracy of your personal data, you may request the restriction of processing.
  • If your personal data is being or has been processed unlawfully, you may opt against the erasure of your data and request the restriction of processing instead.
  • If we no longer require your personal data but you need it for the establishment, exercise or defence of legal claims, you may opt against the erasure of your data and request the restriction of processing instead.
  • If you have objected to data processing in accordance with Art. 21 (1) GDPR, a balance must be struck between your legitimate interests and ours. If it is not yet clear whose interests prevail, you may request the restriction of the processing of your personal data.

If the processing of your personal data has been restricted, it may only be processed (with the exception of storage) with your consent, or for the establishment, exercise or defence of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of an important public interest of the European Union or a Member State.

SSL and TLS encryption

This site uses SSL and TLS encryption to ensure security and to protect the transmission of sensitive data, including any orders or enquiries that you may send to the website operator. You can tell whether an encrypted connection has been established, as your browser’s address bar will have changed from “http://” to “https://” and a padlock symbol will be displayed in your browser bar.

If SSL or TLS encryption is enabled, third parties will not be able to intercept any data you send us.

4. Collection of data on this website

Email, telephone or fax enquiries

If you contact us by email, telephone or fax, we will save and process your enquiry, including any personal data contained therein (e.g. name), to deal with your request. We will not share this data without your consent.

If your enquiry concerns the performance of a contract or any steps taken prior to entering into a contract, your data will be processed on the basis of point (b) of Art. 6 (1) GDPR. In all other cases, the processing will be based on our legitimate interest in the effective handling of any enquiries addressed to us (point (f) of Art. 6 (1) GDPR) or on your consent (point (a) of Art. 6 (1) GDPR) if you are asked to give this; you may withdraw your consent at any time.

We will retain your data entered in the contact form until you ask for it to be deleted, until you withdraw your consent to storage, or until the purpose for which your data was collected no longer applies (e.g. once your enquiry has been fully processed). We reserve the right to comply with mandatory legal provisions, particularly statutory retention periods.

5. Plug-ins and tools

Google Fonts (local hosting)

This website uses Google Fonts to ensure a uniform typeface. Google Fonts are installed locally; no connection will be established to the Google servers.

You can find more information about Google Fonts at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://policies.google.com/privacy?hl=de.

Source: https://www.e-recht24.de

crossmenu