Privacy Policy Agreement

This data protection declaration informs you about the nature, scope and purpose of the processing of personal data (hereinafter referred to as „data“) within our online offer and the websites, functions and content associated with it, as well as external online presences, such as our social media profiles (hereinafter collectively referred to as „online offer“). With regard to the terms used, such as „processing“ or „controller“, we refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR).

Person in Charge (Mailing Address):
Kersten Glaser
Im Winkel 5
59192 Bergkamen
Deutschland

info(at)kerstenglaser.de

Types of data processed:
– Inventory data (e.g., names, addresses).
– Contact data (e.g., e-mail, telephone numbers).
– Content data (e.g., text input, photographs, videos).
– Usage data (e.g., web pages visited, interest in content, access times).
– Meta/communication data (e.g., device information, IP addresses).

Categories of data subjectsVisitors and users of the online offer (hereinafter we also refer to the data subjects collectively as „users“).

Purpose of processing:
– Provision of the online offer, its functions and content.
– Answering contact requests and communication with users.
– Security
– Marketing

Used Terms

„Personal data“ means any information relating to an identified or identifiable natural person (hereinafter „data subject“); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier (e.g. cookie) or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Connection with personal data. The term is broad and encompasses virtually every handling of data.

„Pseudonymization“ means the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures which ensure that the personal data are not attributed to an identified or identifiable natural person.

„Profiling“ means any automated processing of personal data which consists in using such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects relating to that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location or change of location.

„Controller“ means the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data.

„Processor“ means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the Controller.

Relevant Legal Bases

In accordance with Art. 13 GDPR, we inform you about the legal basis of our data processing. If the legal basis is not mentioned in the privacy policy, the following applies: The legal basis for obtaining consent is Art. 6(1)(a) and Art. 7 GDPR, the legal basis for processing for the performance of our services and implementation of contractual measures and responding to requests is Art. 6(1)(b) GDPR, the legal basis for processing for the performance of our legal obligations is Art. 6(1)(c) GDPR, and the legal basis for processing for the protection of our legitimate interests is Art. 6(1)(f) GDPR. In the event that vital interests of the data subject or another natural person make processing of personal data necessary, Art. 6 (1) lit. d GDPR serves as the legal basis.

Security

We take appropriate technical and organizational measures to ensure a level of protection appropriate to the risk in accordance with Article 32 of the GDPR, taking into account the state of the art, the costs of implementation and the nature, scope, circumstances and purposes of the processing, as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons.

The measures include, in particular, safeguarding the confidentiality, integrity and availability of data by controlling physical access to the data, as well as the access, input, transfer, safeguarding of availability and its separation. Furthermore, we have established procedures to ensure the exercise of data subjects‘ rights, deletion of data, and response to data compromise. Furthermore, we already take the protection of personal data into account during the development and selection of hardware, software and processes, in accordance with the principle of data protection through technology design and through data protection-friendly default settings (Art. 25 GDPR).

Cooperation with Processors and Third Parties

If, in the course of our processing, we disclose data to other persons and companies (order processors or third parties), transmit it to them or otherwise grant them access to the data, this will only be done on the basis of a legal permission (e.g. if a transmission of the data to third parties, such as payment service providers, is required for the performance of the contract pursuant to Art. 6 (1) lit. b GDPR), you have consented, a legal obligation provides for this or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.).

If we commission third parties with the processing of data on the basis of a so-called „order processing agreement“, this is done on the basis of Art. 28 GDPR.

Transfers to Third Countries

If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or if this is done in the context of using third-party services or disclosing or transferring data to third parties, this is only done if it is done in order to fulfil our (pre-)contractual obligations, on the basis of your consent, due to a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we only process or allow the processing of data in a third country if the special requirements of Art. 44 ff. GDPR are met. This means that the processing is carried out, for example, on the basis of special guarantees, such as the officially recognised determination of a level of data protection corresponding to that of the EU (e.g. for the USA through the „Privacy Shield“) or compliance with officially recognised special contractual obligations (so-called „standard contractual clauses“).

Rights of the Data Subjects

You have the right to request confirmation as to whether data in question is being processed and to information about this data, as well as further information and a copy of the data in accordance with Art. 15 GDPR.

You have the right according to. Article 16 of the GDPR, you have the right to request that the data concerning you be completed or that the inaccurate data concerning you be corrected.

In accordance with Art. 17 GDPR, you have the right to demand that the data in question be deleted without delay or, alternatively, to demand restriction of the processing of the data in accordance with Art. 18 GDPR.

You have the right to request to receive the data relating to you that you have provided to us in accordance with Art. 20 GDPR and to request its transfer to other data controllers.

You also have the right to lodge a complaint with the competent supervisory authority pursuant to Art. 77 GDPR.

Right of Rrevocation

The right to revoke your consent pursuant to Art. 7 (3) GDPR with effect for the future.

Right of Appeal

You may object to the future processing of data concerning you in accordance with Art. 21 GDPR at any time. The objection can be made in particular against processing for direct marketing purposes.

Cookies and Right to Refuse Direct Advertising

Cookies“ are small files that are stored on users‘ computers. Different information can be stored within the cookies. A cookie is primarily used to store information about a user (or the device on which the cookie is stored) during or after his or her visit to an online offer. Temporary cookies, or „session cookies“ or „transient cookies“, are cookies that are deleted after a user leaves an online offer and closes his or her browser. In such a cookie, for example, the contents of a shopping basket in an online shop or a login status can be stored. Cookies that remain stored even after the browser is closed are referred to as „permanent“ or „persistent“. For example, the login status can be stored if users visit them after several days. Likewise, the interests of users can be stored in such a cookie, which is used for range measurement or marketing purposes. Third-party cookies“ are cookies that are offered by providers other than the responsible party that operates the online offer (otherwise, if they are only its cookies, they are referred to as „first-party cookies“).

We may use temporary and permanent cookies and will explain this in our privacy policy.

If users do not want cookies to be stored on their computer, they are asked to deactivate the corresponding option in the system settings of their browser. Stored cookies can be deleted in the system settings of the browser. The exclusion of cookies can lead to functional restrictions of this online offer.f.

A general objection to the use of cookies for online marketing purposes can be declared for a large number of services, especially in the case of tracking, via the US website http://www.aboutads.info/choices/ or the EU website http://www.youronlinechoices.com/. Furthermore, the storage of cookies can be achieved by deactivating them in the browser settings. Please note that not all functions of this online offer can then be used.

Deletion of Data

The data processed by us will be deleted or restricted in its processing in accordance with Articles 17 and 18 GDPR. Unless expressly stated within the scope of this data protection declaration, the data stored by us will be deleted as soon as it is no longer required for its intended purpose and the deletion does not conflict with any statutory retention obligations. If the data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. I.e. the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for reasons of commercial or tax law.

In accordance with legal requirements in Germany, storage is in particular for 10 years in accordance with §§ 147 para. 1 AO, 257 para. 1 nos. 1 and 4, para. 4 HGB (books, records, management reports, accounting vouchers, commercial books, documents relevant for taxation, etc.) and 6 years in accordance with § 257 para. 1 nos. 2 and 3, para. 4 HGB (commercial letters).

According to legal requirements in Austria, storage is carried out in particular for 7 years pursuant to § 132 para. 1 BAO (accounting records, vouchers/invoices, accounts, receipts, business papers, statement of income and expenditure, etc.), for 22 years in connection with real property and for 10 years for records in connection with electronically provided services, telecommunications, radio and television services provided to non-entrepreneurs in EU member states and for which the Mini-One-Stop-Shop (MOSS) is claimed.

Contact

When contacting us (e.g. via contact form, email, telephone or social media), the user’s details will be used to process the contact request and handle it in accordance with Art. 6 Para. 1 lit. b. (in the context of contractual/pre-contractual relations), Art. 6 para. 1 lit. f. (other enquiries) GDPR. The user’s details may be stored in a customer relationship management system („CRM system“) or comparable enquiry organisation.

We delete the requests if they are no longer necessary. We review the necessity every two years; furthermore, the legal archiving obligations apply.

Comment Function

In order to leave a comment, the user is asked to enter a comment text, his/her name, email address and a website. The provision of a name is compulsory, but pseudonyms are permitted. The e-mail address is to be given for contacting me and will only be seen by me and will not be published.

By contacting us, a submitted comment can of course be deleted again.

WordPress as a content management system offers the possibility to write comments under blog posts and similar content. The cookie stores the name, email address and website of a commenter in order to display them again if the commenter wants to write another comment on this website.

WordPress Emoji is an emoji set loaded from wordpress.org. No cookies in the technical sense are set on the user’s client, but technical and personal data such as the IP address are transferred from the client to the service provider’s server to enable the use of the service.

Hosting and E-Mail Dispatch

The hosting services used by us serve to provide the following services: Infrastructure and platform services, computing capacity, storage space and database services, e-mail dispatch, security services and technical maintenance services, which we use for the purpose of operating this online offer.

In doing so, we or our hosting provider process inventory data, contact data, content data, contract data, usage data, meta data and communication data of customers, interested parties and visitors of this online offer on the basis of our legitimate interests in an efficient and secure provision of this online offer pursuant to Art. 6 (1) lit. f GDPR in conjunction with Art. 28 GDPR (conclusion of a contract processing agreement). Art. 28 GDPR (conclusion of order processing agreement).

Collection of Access Data and Log Files

We, or rather our hosting provider, collect data on the basis of our legitimate interests within the meaning of Art. 6 para. 1 lit. f. German Data Protection Act, we collect data about each access to the server on which this service is located (so-called server log files). The access data includes the name of the website accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user’s operating system, referrer URL (the previously visited page), IP address and the requesting provider.

Log file information is stored for security reasons (e.g. to clarify acts of abuse or fraud) for a maximum of 7 days and then deleted. Data whose further storage is required for evidentiary purposes is exempt from deletion until the respective incident has been finally clarified.

Online presence in Social Media

We maintain online presences within social networks and platforms in order to be able to communicate with the customers, interested parties and users active there and to inform them about our services there. When calling up the respective networks and platforms, the terms and conditions and data processing guidelines of their respective operators apply.

Unless otherwise stated in our privacy policy, we process the data of users if they communicate with us within the social networks and platforms, e.g. write posts on our online presences or send us messages.

Integration of Third-Party Services and Content

Within our online offer, we use content or service offers of third-party providers on the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. GDPR) content or service offers from third-party providers in order to integrate their content and services, such as videos or fonts (hereinafter uniformly referred to as „content“).

This always requires that the third-party providers of this content are aware of the IP address of the user, as without the IP address they would not be able to send the content to their browser. The IP address is therefore necessary for the display of this content. We endeavour to only use content whose respective providers only use the IP address to deliver the content. Third-party providers may also use so-called pixel tags (invisible graphics, also known as „web beacons“) for statistical or marketing purposes. The „pixel tags“ can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user’s device and may contain, among other things, technical information about the browser and operating system, referring websites, time of visit and other information about the use of our online offering, as well as being linked to such information from other sources.

Vimeo

We can embed the videos of the platform „Vimeo“ of the provider Vimeo Inc., Attention: Legal Department, 555 West 18th Street New York, New York 10011, USA. Privacy policy: https://vimeo.com/privacy. We would like to point out that Vimeo may use Google Analytics and refer to the data protection declaration (https://www.google.com/policies/privacy) as well as opt-out options for Google Analytics (http://tools.google.com/dlpage/gaoptout?hl=de) or the Google settings for data use for marketing purposes (https://adssettings.google.com/.).

Youtube

We integrate the videos of the platform „YouTube“ of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy policy: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.

Google Fonts

We integrate the fonts („Google Fonts“) of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy policy: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.

Google ReCaptcha

We integrate the function for the recognition of bots, e.g. for entries in online forms („ReCaptcha“) of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy policy: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.

Google Maps

We integrate the maps of the „Google Maps“ service of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The data processed may include, in particular, IP addresses and location data of the users, which, however, are not collected without their consent (usually executed within the framework of the settings of their mobile devices). The data may be processed in the USA. Privacy policy: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.

OpenStreetMap

We integrate the maps of the „OpenStreetMap“ service (https://www.openstreetmap.de), which are offered on the basis of the Open Data Commons Open Database License (ODbL) by the OpenStreetMap Foundation (OSMF). Privacy policy: https://wiki.openstreetmap.org/wiki/Privacy_Policy.

Map functions and caching of the selected settings. This data may include, in particular, IP addresses and location data of the users, which, however, are not collected without their consent (usually executed within the framework of the settings of their mobile devices).

The data may be processed in the USA. Further information can be found in the OpenStreetMap privacy policy: https://wiki.openstreetmap.org/wiki/Privacy_Policy.

Typekit Fonts by Adobe

We use external „Typekit“ fonts from the provider Adobe Systems Software Ireland Limited, 6-6 Riverwalk Citywest Business Campus Dublin 24, Republic of Ireland, on the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offering within the meaning of Art. 6 (1) lit. f. GDPR). GDPR) external „Typekit“ fonts from the provider Adobe Systems Software Ireland Limited, 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Republic of Ireland. Adobe is certified under the Privacy Shield agreement and thereby offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000TNo9AAG&status=Active).

Use of Facebook Social Plugins

We use social plugins („plugins“) of the social network facebook.com, which is operated by Facebook Ireland Ltd. GDPR) social plugins („plugins“) of the social network facebook.com, which is operated by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland („Facebook“). The plugins can display interaction elements or content (e.g. videos, graphics or text contributions) and are recognisable by one of the Facebook logos (white „f“ on a blue tile, the terms „Like“, „Like“ or a „thumbs up“ sign) or are marked with the addition „Facebook Social Plugin“. The list and appearance of Facebook social plugins can be viewed here: https://developers.facebook.com/docs/plugins/.

Facebook is certified under the Privacy Shield agreement and thereby offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).

When a user calls up a function of this online offer that contains such a plugin, his or her device establishes a direct connection with the Facebook servers. The content of the plugin is transmitted by Facebook directly to the user’s device and integrated into the online offer by the latter. In the process, user profiles can be created from the processed data. We therefore have no influence on the scope of the data that Facebook collects with the help of this plugin and therefore inform users according to our level of knowledge.

Durch die Einbindung der Plugins erhält Facebook die Information, dass ein Nutzer die entsprechende Seite des Onlineangebotes aBy integrating the plugins, Facebook receives the information that a user has accessed the corresponding page of the online offer. If the user is logged in to Facebook, Facebook can assign the visit to his or her Facebook account. If users interact with the plugins, for example by clicking the Like button or posting a comment, the corresponding information is transmitted from their device directly to Facebook and stored there. If a user is not a member of Facebook, there is still the possibility that Facebook will find out and store his or her IP address. According to Facebook, only an anonymised IP address is stored in Germany.

The purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as the relevant rights and settings options for protecting the privacy of users, can be found in Facebook’s privacy policy: https://www.facebook.com/about/privacy/.

If a user is a Facebook member and does not want Facebook to collect data about him/her via this online offer and link it to his/her membership data stored on Facebook, he/she must log out of Facebook and delete his/her cookies before using our online offer. Further settings and objections to the use of data for advertising purposes are possible within the Facebook profile settings: https://www.facebook.com/settings?tab=ads or via the US site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/. The settings are platform-independent, i.e. they are applied to all devices, such as desktop computers or mobile devices.

Instagram

Within our online offer, functions and contents of the service Instagram, offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA, may be integrated. This may include, for example, content such as images, videos or texts and buttons with which users can share content of this online offer within Instagram. If the users are members of the Instagram platform, Instagram can assign the call-up of the above-mentioned content and functions to the users‘ profiles there. Instagram privacy policy: http://instagram.com/about/legal/privacy/.

Steam

Within our online offer, functions and contents of the service Steam, offered by Valve Corporation, Att. Data Protection officer, P.O. Box 1688, Bellevue, WA 98009, USA, may be integrated. This may include, for example, content such as images, videos or texts and buttons with which users can interact with content of this online offer within Steam. If the users are members of the Steam platform, Steam can assign the call-up of the above-mentioned content and functions to the profiles of the users there. In addition, this website may link to pages/game entries of the Steam platform or to the Steam internal shop. Privacy policy of Steam: http://instagram.com/about/legal/privacy/.

Steam is an online platform on which video games are sold. Steam allows content published on Steam (such as video games and workshop content) to be embedded directly into websites. Cookies are used to collect visited websites and detailed statistics about user behaviour. This data can be linked to the data of users logged on to store.steampowered.com or steampowered.com.

Pinterest

Within our online offer, functions and contents of the service Pinterest, offered by Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA, may be integrated. This may include, for example, content such as images, videos or texts and buttons with which users can share content of this online offer within Pinterest. If the users are members of the Pinterest platform, Pinterest can assign the call-up of the above-mentioned content and functions to the user’s profile there. Pinterest privacy policy: https://about.pinterest.com/de/privacy-policy.

SoundCloud

WWe use functions (widgets) of the social media network SoundCloud of the company SoundCloud Limited, Rheinsberger Str. 76/77, 10115 Berlin, Germany on our website. You can recognise the widgets by the familiar orange logo. By using functions such as playing music, data is transmitted to SoundCloud, stored and analysed. In this privacy policy, we show you what data is involved, why we use SoundCloud and how you can manage or prevent your data or the data transfer.

The social media network SoundCloud is an online music platform that serves the exchange and distribution of audio files. On SoundCloud, musicians or podcasters offer their audio files for download. In addition, SoundCloud also allows you to embed the audio files in other websites. And that’s exactly what we did. Typical for SoundCloud are the graphic representations of the audio files in wave form and the comment bar. This way, registered users can listen to and comment on music tracks or podcasts at any time.

Our aim is to provide you with the best possible service on our website. By that we don’t just mean our products or services. A holistic customer service also includes how comfortable you feel on our website and how helpful our website is for you. Through the embedded SoundCloud playback function, we can deliver acoustic content to you directly and free of charge. You don’t have to follow a link to listen to an audio file, but can start right away via our website.As soon as you visit one of our web pages that has a widget (like or share button or play function) built in, your browser connects to a SoundCloud server. In the process, data from you may be transferred to SoundCloud, managed and stored there. For example, SoundCloud learns in this way your IP address and which page (in this case ours) you visited and when. If you have a SoundCloud account and are logged in while browsing our website, the collected data will be directly assigned to your account. You can only prevent this by logging out of SoundCloud while you are on our website. In addition to the information mentioned above, data about your user behaviour is also stored in the cookies. For example, whenever you click a button, play or pause a piece of music, this information is stored in the cookies. The widget or SoundCloud is thus able to recognise you and sometimes the widget is also used to deliver personalised content to you. SoundCloud not only uses its own cookies, but also cookies from third-party providers such as Facebook or Google Analytics. These cookies serve the company to get more information about your behaviour on external websites and its own platform. We as the website operator do not receive any information about your user behaviour through the cookies used by SoundCloud. The data transfer and therefore also the information about technical devices and your behaviour on the website takes place between you and SoundCloud.

Google+

Within our online offer, functions and contents of the Google+ platform, offered by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA („Google“), may be integrated. This may include, for example, content such as images, videos or texts and buttons with which users can share content of this online offer within Google. If the users are members of the Google+ platform, Google can assign the call-up of the above-mentioned content and functions to the user’s profile there.Google is certified under the Privacy Shield agreement and thereby offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active). For more information on Google’s use of data, settings and opt-out options, please refer to Google’s privacy policy (https://policies.google.com/technologies/ads) and the settings for the display of advertisements by Google (https://adssettings.google.com/authenticated).

Comments and Posts

When users leave comments or other contributions, their IP addresses are stored for 7 days on the basis of our legitimate interests as defined in Art. 6 (1) lit. f. GDPR for 7 days. This is done for our security in case someone leaves unlawful content in comments and posts (insults, prohibited political propaganda, etc.). In this case, we ourselves can be prosecuted for the comment or post and are therefore interested in the identity of the author.

Comment Subscriptions

The follow-up comments can be subscribed to by users with their consent pursuant to Art. 6 para. 1 lit. a GDPR. Users will receive a confirmation email to verify that they are the owner of the email address entered. Users can unsubscribe from ongoing comment subscriptions at any time. The confirmation email will contain information on the cancellation options.

Real Cookie Banner

We use the „Real Cookie Banner“ consent tool to manage the cookies and similar technologies used (tracking pixels, web beacons, etc.) and the relevant consents. Details on how „Real Cookie Banner“ works can be found at https://devowl.io /de/rcb/datenverarbeitung/.
The legal basis for the processing of personal data in this context is Art. 6 (1) (c) GDPR and Art. 6 (1) (f) GDPR. Our legitimate interest is the management of the cookies and similar technologies used and the relevant consents.
The provision of personal data is neither contractually required nor necessary for the conclusion of a contract. You are not obliged to provide the personal data. If you do not provide the personal data, we cannot manage your consents.

Created with Datenschutz-Generator.de by RA Dr. Thomas Schwenke, AdSimple and own formulations.