1) Introduction and contact
details of the person responsible
1.1 We are pleased that you
are visiting our website and thank you for your interest. Below
we will inform you about how your personal data is handled when
you use our website. Personal data is all data with which you
can be personally identified.
1.2 The person responsible
for data processing on this website within the meaning of the
General Data Protection Regulation (GDPR) is Ferber & Pena
Y Freitas GBR, c/o Postflex #10224, Emsdettener Str. 10, 48268
Greven, Email: me@alesiadavina.com. The person responsible for
the processing of personal data is the natural or legal person
who, alone or jointly with others, decides on the purposes and
means of processing personal data.
2) Data collection when you
visit our website
2.1 If you use our website
for informational purposes only, i.e. if you do not register or
otherwise provide us with information, we only collect data
that your browser transmits to the site server (so-called
server log files). When you access our website, we collect the
following data, which is technically necessary for us to
display the website to you:
- Our visited
website
- Date and time at the time
of access
- Amount of data sent in
bytes
- Source/reference from
which you came to the page
- Browser used
- Operating system
used
- IP address used (if
necessary: in anonymized form)
Processing is carried out in
accordance with Article 6 Paragraph 1 Letter f of the GDPR
based on our legitimate interest in improving the stability and
functionality of our website. The data will not be passed on or
used in any other way. However, we reserve the right to
subsequently check the server log files if there are concrete
indications of illegal use.
2.2 For security reasons and
to protect the transmission of personal data and other
confidential content (e.g. orders or inquiries to the person
responsible), this website uses SSL or TLS encryption. You can
recognize an encrypted connection by the string https:// and
the lock symbol in your browser bar.
3) Cookies
In order to make visiting
our website attractive and to enable the use of certain
functions, we use cookies, which are small text files that are
stored on your device. Some of these cookies are automatically
deleted after you close the browser (so-called session
cookies), while some of these cookies remain on your device for
a longer period of time and allow page settings to be saved
(so-called persistent cookies). In the latter case, you can
find out the storage period in the overview of the cookie
settings in your web browser. If personal data is also processed
through individual cookies we use, the processing takes place
in accordance with Art. 6 Para. 1 lit. b GDPR either to
implement the contract, in accordance with Art. 6 Para. 1 lit
in accordance with Art. 6 Para. 1 lit. f GDPR to protect our
legitimate interests in the best possible functionality of the
website as well as a customer-friendly and effective design of
the page visit. You
can set your browser so that you are informed about the setting
of cookies and can decide individually whether to accept them
or exclude the acceptance of cookies for certain cases or in
general. Please note
that if you do not accept cookies, the functionality of our
website may be restricted.
4) Contact us
When you contact us (e.g.
via contact form or email), personal data is processed -
exclusively for the purpose of processing and answering your
request and only to the extent necessary for this
purpose.
The legal basis for
processing this data is our legitimate interest in answering
your request in accordance with Article 6 (1) (f) GDPR. If your
contact is aimed at a contract, the additional legal basis for
the processing is Article 6 (1) (b) GDPR. Your data will be
deleted if the circumstances indicate that the matter in
question has been conclusively clarified and provided that
there are no legal retention obligations to the
contrary.
5) Data processing for order
processing
5.1 To the extent necessary
for contract processing for delivery and payment purposes, the
personal data we collect will be passed on to the commissioned
transport company and the commissioned credit institution in
accordance with Article 6 Paragraph 1 Letter b GDPR.
If we owe you updates for
goods with digital elements or for digital products on the
basis of a corresponding contract, we will process the contact
details you provided when ordering (name, address, email
address) in order to provide you with our legal information
obligations in accordance with Art. 6 Para 1 lit. Your contact
details will be used strictly for the purpose of communicating
updates owed by us and will only be processed by us for this
purpose to the extent that this is necessary for the respective
information. To
process your order, we also work with the service provider
listed below, who will support us in whole or in part in the
implementation of concluded contracts. Certain personal data
will be transmitted to this service provider in accordance with
the following information. If you choose a payment method from the
provider with which you pay in advance (e.g. credit card
payment), the payment details you provided during the ordering
process (including name, address, bank and payment card
information, currency and transaction number) as well as
information about the content of your order will be sent to
them passed on in accordance with Article 6 Paragraph 1 Letter
b GDPR. In this case, your data will be passed on exclusively
for the purpose of processing payments with the provider and
only to the extent that it is necessary for this purpose. When
data is transferred to the provider location, an appropriate
level of data protection is guaranteed by an adequacy decision
by the European Commission.
6) Rights of the person
concerned
6.1 The applicable data
protection law grants you the following data subject rights
(rights of information and intervention) towards the person
responsible with regard to the processing of your personal
data, whereby reference is made to the legal basis listed for
the respective exercise requirements:
- Right to information in
accordance with Art. 15 GDPR;
- Right to rectification in
accordance with Art. 16 GDPR;
- Right to deletion in
accordance with Art. 17 GDPR;
- Right to restriction of
processing in accordance with Art. 18 GDPR;
- Right to information in
accordance with Art. 19 GDPR;
- Right to data portability
in accordance with Art. 20 GDPR;
- Right to revoke consent
given in accordance with Art. 7 Para. 3 GDPR;
- Right to complain in
accordance with Art. 77 GDPR.
6.2 RIGHT TO
OBJECT
IF WE PROCESS YOUR PERSONAL
DATA AS PART OF A BALANCE OF INTERESTS BASED ON OUR
OVERWHELMING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY
TIME TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE
FOR REASONS ARISING FROM YOUR PARTICULAR
SITUATION.
IF YOU USE YOUR RIGHT TO
OBJECT, WE WILL STOP PROCESSING THE AFFECTED DATA. HOWEVER,
FURTHER PROCESSING IS RESERVED IF WE CAN PROVE COMPLEX REASONS
FOR THE PROCESSING THAT ARE DESIGNED TO BE PROTECTED, WHICH
OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FUNDAMENTAL
FREEDOMS, OR IF THE PROCESSING SERVES THE ASSERTMENT, EXERCISE
OR DEFENSE OF LEGAL CLAIMS.
IF YOUR PERSONAL DATA IS
PROCESSED BY US FOR DIRECT ADVERTISING, YOU HAVE THE RIGHT TO
OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA
CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU MAY
EXERCISE YOUR OPT-OUT AS DESCRIBED ABOVE.
IF YOU USE YOUR RIGHT TO
OBJECT, WE WILL STOP PROCESSING THE AFFECTED DATA FOR DIRECT
ADVERTISING PURPOSES.
7) Duration of storage of
personal data
The duration of storage of
personal data is determined based on the respective legal
basis, the purpose of processing and - if relevant -
additionally based on the respective legal retention period
(e.g. commercial and tax retention periods).
When processing personal
data on the basis of express consent in accordance with Article
6 (1) (a) GDPR, the data concerned will be stored until you
revoke your consent.
If there are statutory
retention periods for data that are processed within the
framework of legal or transaction-like obligations on the basis
of Art. 6 Para. 1 lit and/or we have no legitimate interest in
further storage.
When processing personal
data on the basis of Article 6 Paragraph 1 Letter f of the
GDPR, this data will be stored until you exercise your right to
object in accordance with Article 21 Paragraph 1 of the GDPR,
unless we can provide compelling legitimate reasons for this
demonstrate that the processing outweighs your interests,
rights and freedoms, or the processing serves to assert,
exercise or defend legal claims.
When processing personal
data for the purpose of direct advertising on the basis of
Article 6 Paragraph 1 Letter f of the GDPR, this data will be
stored until you exercise your right to object in accordance
with Article 21 Paragraph 2 of the GDPR.
Unless otherwise stated in
the other information in this declaration about specific
processing situations, stored personal data will be deleted
when they are no longer necessary for the purposes for which
they were collected or otherwise processed.