Data protection declaration
This privacy statement explains you personal data (short „data“) within our online offer and the about the nature, the scope and purpose of the processing of personal with its related Web pages, features, content and external online presences, like for example our social media profiles on. (hereinafter jointly referred to as "Online offer"). In terms of on the used terminology, such as "Processing" or "Responsible", we refer to the definitions in article 4 of the data protection Regulation (DSGVO).
Person in charge
Susanne Schmidt
Karten-Himmel.de
Seydlitzviertel 11
16303 Schwedt / oder
Germany
03332/836115
shop@karten-himmel.de
Types of data processed:
-Inventory data (E.g., names, addresses).
-Contact information (E.g., E-Mail, phone numbers).
-Content data (for example, text input, photographs, videos).
-Use data (E.g., interest in content, access times visited Web pages,).
-Meta - / communication data (for example, device information, IP addresses).
Categories of data subjects
Visitors and users of the website (below refer to the affected people collectively as "Users").
Purpose of the processing
-Provision of the website, its features and content. -Respond to contact requests and communication with users. -Safety measures. Audience measurement/marketing
Used terminology
"Personal data" means any information relating to an identified or identifiable natural person (hereinafter referred to as "data subject"); identify a natural person is considered, the directly or indirectly, in particular by means of assignment to an identifier such as a name, an identification number, location data, to an online ID (E.g. cookie) or to one or more special features can be identified, are the expression of the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
"Processing" is anyone with or without the help of automated procedures performed operation or every such operation number in connection with personal data. The concept goes a long way and includes practically every dealing with data.
The natural or legal person, public authority, agency or other body which determines the purposes and means of the processing of personal data alone or jointly with others, is known as "Responsible".
Relevant legal bases
In accordance with article 13 DSGVO we inform you with the legal bases of our data processing operations. If the legal basis in the privacy statement is not called, the following applies: the legal basis for the obtaining of consent is article 6 par. 1 lit. a and article 7 DSGVO, the legal basis for the processing to meet is our services and contractual measures, as well as answering questions on article 6 par. 1 lit. b DSGVO, the legal basis for the processing to fulfil our legal obligations is article 6 par. 1 lit. c DSGVO, and the legal basis for the processing to preserve our legitimate interests is article 6 par. 1 lit. f DSGVO. The case that vital interests of the data subject or another natural person require a processing of personal data, article 6 serves for par. 1 lit. d DSGVO as the legal basis.
Cooperation with subcontractors and third parties
If we disclose information to other persons and companies (subcontractors or third parties) during our processing, they send to them or otherwise provide them access to the data, this is done only on the basis of a legal permit () for example, if a transmission of data to third parties, such as to payment, pursuant Article 6 par. 1 lit. b DSGVO to the performance of the contract is required), you have given your consent, so provides a legal obligation or on the basis of our vested interests (E.g. for the use of agents, Web hosting providers, etc.).
If we hire third parties to process data on the basis of a so-called "contract processing agreement", this is done on the basis of article 28 DSGVO.
Transfers to third countries
If we process data in a third country (i.e. outside the European Union (EU) or the European economic area (EEA)) or third-party disclosure, or transfer of data to third parties this is done in the context of the use of services This is only if it is done to meet our (pre) contractual obligations, upon your consent, due to a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual licences, process or we let the data to a third country only in the presence of the special conditions of articles 44 et seq. DSGVO process. I.e. the processing occurs for example based on special guarantees, such as determining officially recognized, one of the EU of appropriate level of data protection (E.g. for the USA through the "Privacy shield") or compliance with officially recognised special contractual Obligations (so-called "standard contractual clauses").
Rights of the persons concerned
You have the right to ask whether the data will be processed a confirmation and information on these data as well as more information and copy of the data in accordance with article 15 DSGVO.
They have accordingly. Article to require 16 DSGVO the right, the completion of the data concerning you or the correction of incorrect data.
You have in accordance with article 17 DSGVO the right to require that relevant data will be immediately deleted, or alternatively in accordance with article 18 DSGVO to require a limitation of the data.
You have the right to require that the personal data that you have provided to us in accordance with article 20 DSGVO to get and submitting them to other officials to demand.
You 77 DSGVO the right to submit a complaint to the competent supervisory authority have article also gem..
Right of withdrawal
You have the right, granted consent pursuant article to withdraw 7 para 3 DSGVO with effect for the future
Right of objection
You can contradict the future processing of personal data in accordance with article 21 DSGVO at any time. The opposition can be made in particular for processing for purposes of direct marketing.
Cookies and right of objection in direct marketing
Small files called "Cookies", which are stored on computers of users. Different readings can be stored within the cookies. A cookie is used primarily to save the information to a user (or the device on which the cookie is stored) during or after his visit within a website. Cookies are known as temporary cookies, or "Session-Cookies" or "transient cookie", which are deleted after a user leaves an online offer and closes his browser. For example the contents of a shopping cart in an online store or a login traffic jams can be stored in such a cookie. Cookies are called "permanent" or "persistent", which will be retained after the browser is closed. So, for example, the login status can be saved when the users search them for several days. As the interests of users, it can be stored in such a cookie used for audience measurement, or marketing purposes. Cookies are referred to as "Third party cookies", which are offered by other vendors as the person in charge, who runs the online offer, (otherwise, if they are only the cookies it is called "First-Party Cookies").
We may use temporary and permanent cookies and enlighten about this in our privacy policy.
If users do not want that stored cookies on your computer, they will be asked the appropriate option in the system settings of your browser to disable. Stored cookies can be deleted in the system settings of the browser. The exclusion of cookies can lead to functional limitations of this online offer.
A general opposition to the use of cookies for purposes of online marketing in a variety of services, especially in the case of tracking, on the American side of http://www.aboutads.info/choices/ or the EU side can http:// www.youronlinechoices.com/ are explained. Also, the storage of cookies can be achieved using whose cut-off in the settings of your browser. Please note that if necessary, not all functions of this website can be used.
Deletion of data
The data processed by us will be in accordance with articles 17 and 18 DSGVO deleted or restricted in their processing. If not explicitly specified in the context of this privacy policy, the data stored with us are deleted as soon as they are no longer required for its intended purpose and no statutory retention obligations preclude deletion. If the data is not deleted because they are required for other legally permissible purposes, the processing is restricted. I.e. the data is locked and not processed for any other purpose. This applies E.g. for data that must be kept for commercial or fiscal reasons.
According to legal requirements in Germany is storage for 6 years in accordance with article 257, paragraph 1 HGB (books, inventories, opening balance sheets, financial statements, commercial letters, accounting documents, etc.) as well as for 10 years in accordance with § 147 ABS. 1 AO (books, Records, reports, accounting records, commercial and business letters, tax-related documents, etc.).
According to statutory provisions in Austria, the storage for 7 J according to article 132, paragraph 1 is BAO (accounting records, receipts/invoices, accounts, documents, business papers, statement of revenue and expenditure, etc.), for 22 years in connection with Land and for 10 years for documents in connection with electronically supplied services, telecommunication, radio and television services provided to non-entrepreneurs in EU Member States and for which the mini-one-stop-shop (MOSS) in claim in wealthier countries.
Business-related processing
In addition we process
-Contract data (E.g., subject matter, maturity, customer category). -Payment data (E.g., bank details, payment history)
of our customers, prospective customers and business partners for the purpose of provision of contractual services, service and customer care, marketing, advertising and market research.
Hosting
The hosting services used by us are the provision of the following services: infrastructure and platform services, compute, storage and database services, security services and technical Maintenance services, we employ for the purposes of the operation of this website.
This process of customers, prospective customers, and visitors to this website on the basis of our legitimate interests we or our hosting provider inventory data, contact data, content data, contract data, usage data, meta - and communication data to an efficient and safe provision of this website according Article 6 par. 1 lit. f DSGVO i.V.m article 28 DSGVO (contract order processing).
Collection of access data and log files
We or our hosting provider, does paragraph 1 on basis of our legitimate interests within the meaning of article 6 lit. f. DSGVO data on every access to the server on which this service resides (so-called server log files). To access data, message about successful retrieval, browser type and version, the operating system of the user, referrer URL (the previously visited page), IP address, and which belong to the retrieved Web page, file, name date and time of the retrieval, amount of data, requesting provider.
Log file information is stored for security reasons (E.g. to the elucidation of abuse or fraud) for a period of 7 days and then deleted. Data, which more conservation is required for evidentiary purposes are excluded from deletion until final clarification of the incident.
Ordering from the online store and customer account
We process the data of our customers within the framework of the orders in our online store, to give them to allow the selection and ordering of selected products and services, as well as their payment and delivery or execution.
Payment data belongs to the processed data communication data, inventory data, contract data, and our customers, prospective customers and other business partners belong to the persons affected by the processing. The processing takes place for the purpose of the provision of contractual services in the context of the operation of an online shop, billing, delivery and customer services. Here we use session cookies for storing the contents of the shopping cart and persistent cookies to store the login status.
The processing takes place on the basis of article 6 par. 1 lit. b (ordering operations) and c (legally required archiving) DSGVO. This requires the information marked as required on the establishment and fulfilment of the contract. We disclose the information to third parties only in the scope of delivery, payment, or within the framework of the statutory licenses and obligations with regard to legal advisors and authorities. The data is only processed in third countries, if this is necessary for the performance of the contract (E.g. on customer request delivery or payment).
Users can optionally create a user account, by you can see your orders in particular. As part of the registration, the particulars of the obligation to be communicated to users. The user accounts are not public and can not be indexed by search engines. If users cancel their account, their data with regard to the user account will be deleted, subject to their retention is for commercial or fiscal reasons complies. Article 6 par. 1 lit. (c) DSGVO necessary. Information in the customer's account will remain until its cancellation with subsequent filing in the case of a legal obligation. It is whether the users to back up their data after termination before the end of the contract.
We store the IP address and time of each user action during the registration, use of our online services, and renewed registrations. The storage is done on basis of our legitimate interests, as well as the users of protection from abuse and any other unauthorized use. A transfer of this data to third parties is not generally, unless it is necessary to pursue our claims or there is a legal obligation pursuant to do this, article 6 par. 1 lit. (c) DSGVO.
The deletion will take place after legal warranty and similar obligations, the necessity of the retention of data is checked every three years; in the case of legal obligations of archiving are deleted after expiry (end of commercial (6 years) and tax (10 years) retention period).
Administration, accounting, Office management, contact management
We process data within the framework of administrative tasks and organization of our operations, financial accounting and compliance with the legal obligations, such as for example the archiving. We process the same data that we process in the context of the provision of our contractual services. The processing bases are article 6 (1) lit. C. DSGVO, art. 6 par. 1 lit. F. DSGVO. Processing affects customers, prospects, business partners, and site visitors. The purpose and our interest in the processing lies in the administration, financial accounting, Office organization, archiving of data, i.e. tasks related to the maintenance of our business activities, the performance of our tasks and the provision of our Services. The deletion of the data with regard to contractual services and the contractual communication corresponds to the information mentioned in these processing activities.
We disclose or transmit data to the financial administration, consultants, such as, tax advisors or auditors, as well as other fee offices and payment service providers.
We also store information on suppliers, organizers and other business partners on the basis of our business interests, e.g. for the purpose of later contact. This majority of business-related data, we store in principle permanently.
Amazon Affiliate Program
We are based on our legitimate interests (i.e. interest in the economic operation of our online offer within the meaning of article 6 para 1 lit. f. DSGVO) Participants of the Amazon EU Partner Program, which was conceived to provide a medium for websites , by means of which the placement of advertisements and links to Amazon.de advertising reimbursement can be earned (so-called affiliate system). Amazon uses cookies to be able to track the origin of the orders. Among other things, Amazon can see that you clicked the Partner link on this site and then purchased a product from Amazon.
For more information on Amazon's use of data and objections, please see the Company's privacy policy: http://www.amazon.de/gp/help/customer/display.html/ref=footer_privacy?ie=UTF8&nodeId=3312401.
Registration function
Users can optionally create a user account. As part of the registration, the required mandatory information is communicated to the users. The data entered during the registration will be used for the purpose of using the offer. Users can be informed by e-mail about supply or registration relevant information, such as changes in the scope of the offer or technical circumstances. If users have terminated their user account, their data will be deleted with respect to the user account, subject to their retention is corresponding for commercial or tax reasons. Article 6 (1) lit. C DSGVO necessary. It is the responsibility of the users to secure their data in the event of termination before the end of the contract. We are entitled to permanently delete all data stored by the user during the duration of the contract.
As part of the use of our Regsitrierungs and registration functions as well as the usage of the user account, the IP address and the time of the respective user action will be saved. The storage takes place on the basis of our legitimate interests, as well as the user's protection against misuse and other unauthorized use. This data is not passed on to third parties in principle, unless it is necessary for the pursuit of our claims or there is a legal obligation according to article 6 para 1 lit. (c) DSGVO. The IP addresses will be anonymized or deleted at the latest after 7 days.
Contact
When contacting us (e.g. via contact form, e-mail, telephone or via social media), the information of the user for the processing of the contact request and its processing is according to article 6 para 1 lit. b) DSGVO processed. Users ' information can be stored in a Customer relationship management system ("CRM system") or similar request organization.
We will delete the requests if they are no longer required. We review the requirement every two years; The statutory archiving obligations also apply.
Comments and contributions
If users leave comments or other contributions, their IP addresses will be based on our legitimate interests within the meaning of article 6 (1). F. DSGVO saved for 7 days. This is for our safety if someone leaves unlawful content in comments and contributions (insults, forbidden political propaganda, etc.). In this case we can be prosecuted for the comment or contribution and are therefore interested in the identity of the author.
Newsletter
With the following instructions we inform you about the contents of our newsletter as well as the registration, dispatch and statistical evaluation procedure as well as your right to object. By subscribing to our newsletter, you agree to the reception and the procedures described. Content of the newsletter: We send out newsletters, e-mails and other electronic notifications with promotional information (hereinafter "newsletter") only with the consent of the recipient or a legal permission. If the contents are specifically described in the context of an application for the newsletter, they are decisive for the consent of the users. In addition, our newsletter contains information about our services and us. Double opt-In and logging: the registration for our newsletter is done in a so-called double-opt-in procedure. i.e. After you have registered, you will receive an e-mail asking you to confirm your registration. This confirmation is necessary so that no one can register with foreign e-mail addresses. Registrations for the newsletter are logged in order to be able to prove the registration process according to the legal requirements. This includes the storage of the logon and confirmation date as well as the IP address. The changes to the data stored by the shipping service provider are also logged.
Registration information: To sign up for the newsletter, it is sufficient to provide your e-mail address. Optionally, we ask you to provide a name for your personal address in the newsletter.
Germany: The sending of the newsletter and the success measurement associated with it are carried out on the basis of the consent of the recipients according to article 6 para 1 lit. A, art. 7 DSGVO i. V. M § 7 para 2 No. 3 UWG or on the basis of the legal permission according to § 7 para. 3 UWG.
The logging of the registration procedure is based on our legitimate interests in accordance with article 6 (1) lit. F DSGVO. We are interested in the use of a user-friendly and secure newsletter-module that serves our business interests as well as the expectations of the users and allows us to provide proof of consent.
Cancellation-You can cancel the reception of our newsletter at any time, i.e. Revoke your consent. A link to cancel the newsletter can be found at the end of each newsletter. We may store the e-mail addresses held for up to three years on the basis of our legitimate interests before we delete them in order to be able to prove a previously given consent. The processing of this data is limited to the purpose of possible defence against claims. An individual cancellation request is possible at any time, if at the same time the former existence of a consent is confirmed.
Google Analytics
On the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of art. 6 para. 1 lit. f. DSGVO), we use Google Analytics, a web Analysis Service of Google LLC ("Google"). Google uses cookies. The information generated by the cookie about use of the website by the user are usually transmitted to a server of Google in the USA and stored there.
Google is certified under the privacy shield agreement and this provides a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI & State = Active).
Google will use this information on our behalf, to evaluate the use of our online offer by users to reports about the activities within this online offer to put together and more, with the use of this website and the Use of Internet related services, us to provide. This pseudonymous user profiles of users can be created from the processed data.
We use Google Analytics only with activated IP anonymization. This means that the IP address of the user is reduced by Google within Member States of the European Union or in other States party to the agreement on the European economic area. Only in exceptional cases, the full IP address to a server of Google in the USA is transferred and cut there.
The IP address provided by the user's browser is not merged with other data of Google. The user can prevent the storage of cookies by setting your browser software; the user can also prevent the capture of the generated by the cookie on your use of the website data and Google, as well as the processing of this data by Google, by her browser plug-in available from the following link Download and install: http://tools.google.com/dlpage/gaoptout?hl=de.
Learn more information about the use of data by Google, settings and appeal possibilities on the Web pages of Google: https://www.google.com/intl/de/policies/privacy/partners ("data use by Google for your use of the sites or apps our partner"), http://www.google.com/policies/technologies/ads ("data usage for advertising purposes"), http://www.google.de/settings/ads ("manage information, Google used to show you advertising").
Google re/marketing services
We use on basis of our legitimate interests (i.e., interest in the analysis, optimization and economic operation of our website for the purposes of article 6 par. 1 lit. f. DSGVO) marketing and remarketing services (short "Google marketing services") the Google LLC, 1600 Amphitheatre Parkway, mountain view, CA 94043, USA, ("Google").
Google is certified under the privacy shield agreement and this provides a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI & State = Active).
The Google marketing services allow us to show targeted advertisements for and on our website, to present users only ads that match their interests potentially. If E.g. ads for products a user, for which he has interested on other Web sites, called this the "remarketing". For these purposes a code runs when call to our and other Web sites, on which Google marketing services are active, directly by Google from Google and it are so-called (remarketing) tags (invisible graphics or code, also called "Web Beacons" called) in the Web page included. With their help an individual cookie is on the device of the user, i.e. a small file saved (instead of cookies can also comparable technologies be used). The cookies can be used by different domains from google.com, DoubleClick.NET, invitemedia.com, admeld.com, googlesyndication.com, or googleadservices.com. Noted in this file, which websites of the user visited, what content he is interested in and what deals he clicked has, further technical information about the browser and operating system, referring Web sites, visiting hours and other information to the Use of the website. It is also the IP address of users covered, where we communicated in the context of Google Analytics that shorten the IP address within Member States of the European Union or in other States party to the agreement on the European economic area and transferred only in exceptional cases to a server of Google in the USA and there cut. The IP address is merged within with data of the user of offers from Google. The above information can be also connected to such information from other sources on the part of Google. If the user visited then other Web sites the ads matched to him can appear according to his interests him.
The data of users are processed in the context of the Google marketing services pseudonym. I.e. Google stores and processes such as the name or E-mail address of the user, but processes the data in the relevant cookie-related within anonymous user profiles. I.e. from the point of view of Google ads not a specifically identified person are managed and displayed, but for the cookie holder, regardless of who is the owner of this cookie. This does not apply if a user has explicitly allowed Google to process the data without the use of pseudonyms. The information collected by Google marketing services about users are transmitted to Google and stored on Google's servers in the United States.
The Google marketing services used by us include the online advertising program "Google AdWords". In the case of Google AdWords, each advertiser receives a different "conversion cookie". Cookies can not be tracked thus via the websites of advertisers. The information collected by means of cookies serve to create conversion stats to advertisers who have opted in to conversion tracking. The advertisers know the total number of users who have clicked on their ad and were redirected to a page with a conversion tracking tag. You will receive any information, which can identify the user personally.
We can integrate third-party advertisements on basis of Google "AdSense" marketing services. AdSense uses cookies, which the circuitry that enables Google and its partner sites, ads on the basis of visits by users on this site and other sites on the Internet.
Also we can use the "Google day Manager" insert the Google analysis and marketing services to integrate into our site and manage.
More information about the use of data for marketing purposes by Google, information on the overview page: https://www.google.com/policies/technologies/ads, Google's privacy policy is available at https://www.google.com/policies/privacy.
If you want to contradict inter food-related advertising by Google marketing services, you can use the settings provided by Google and opt-out options: http://www.google.com/ads/preferences.
Online presences in social media
We maintain online presence within social networks and platforms to communicate with there active customers, prospective customers and users and they find there about our services. When you call of the respective networks and platforms, the terms and conditions and the data processing guidelines apply their respective operators.
Unless otherwise specified in our privacy policy we process the data of the user as long as they communicate with us within the social networks and platforms, E.g. posts on our online presences compose or send messages to us.
Use of Facebook social plugins
We use on basis of our legitimate interest (i.e. interest in the analysis, optimization and economic operation of our website for the purposes of article 6 par. 1 lit. F. DSGVO) Social plugins ("plugins") of the social network facebook.com, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"). The plugins can include interaction elements or content (e.g. videos, graphics or text contributions) and can be seen on one of the Facebook logos (white "f" on blue tile, the terms "like", "like" or a "thumbs up" sign) or are with the addition "Facebook Social plugin". The list and the appearance of the Facebook social plugins can be viewed here: https://developers.facebook.com/docs/plugins/.
Facebook is certified under the Privacy Shield Agreement and provides a guarantee to comply with European Data protection Law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).
When a user calls a function of this online offer that contains such a plugin, his device establishes a direct connection with the servers of Facebook. The content of the plugin is transmitted directly by Facebook to the user's device and is included in the online offer. Users can create user profiles from the processed data. We therefore have no influence on the amount of data that Facebook collects with the help of this plugin and therefore informs users according to our knowledge level.
By incorporating the plugins, Facebook receives the information that a user has accessed the corresponding page of the online offer. If the user is logged on to Facebook, Facebook can assign the visit to his Facebook account. When users interact with the plugins, for example press the Like button or leave a comment, the corresponding information is transmitted from their device directly to Facebook and stored there. If a user is not a member of Facebook, there is still the possibility that Facebook will know and store its IP address. According to Facebook, only an anonymized IP address is stored in Germany.
The purpose and scope of the data collection and the further processing and use of the data by Facebook as well as the relevant rights and settings for the protection of the privacy of the users can be read in the privacy information of Facebook: https:// www.facebook.com/about/privacy/.
If a user is Facebook and does not want Facebook to collect data about him via this online offer and link it with his member data stored on Facebook, he must log out before using our online offer on Facebook and his Delete Cookies. Further settings and contradictions to the use of data for advertising purposes are possible within the Facebook profile settings: Https://www.facebook.com/settings?tab=ads or via the US-American site http://www.aboutads.info/choices/or the EU page http://www.youronlinechoices.com/. The settings are platform independent, i.e. they are applied to all devices, such as desktop computers or mobile devices.
Created with Datenschutz-Generator.de by RA Dr. Thomas Pan
