privacy policy
The use of our website is generally possible without providing any personal data. However, if a data subject wishes to use special services via our website, processing of personal data could become necessary. If the processing of personal data is necessary and there is no legal basis for such processing, we generally obtain the consent of the person concerned.
The processing of personal data, such as the name, address, e-mail address or telephone number of a data subject, is always carried out in accordance with the General Data Protection Regulation and in accordance with the country-specific data protection regulations that apply to us. With this data protection declaration we would like to inform the public about the type, scope and purpose of the personal data we collect, use and process. Furthermore, data subjects are informed about the rights to which they are entitled using this data protection declaration.
As the person responsible for processing, we have implemented numerous technical and organizational measures to ensure the most complete protection possible for the personal data processed via this website. Nevertheless, internet-based data transmissions can generally have security gaps, so that absolute protection cannot be guaranteed. For this reason, every data subject is free to transmit personal data to us by alternative means, for example by telephone.
2. definitions
Our data protection declaration is based on the terms used by the European legislator for directives and regulations when issuing the General Data Protection Regulation (GDPR). Our data protection declaration should be easy to read and understand for both the public and our customers and business partners. To ensure this, we would like to explain the terms used in advance.
We use, among others, the following terms in this data protection declaration:
a) personal data
Personal data is any information that relates to an identified or identifiable natural person (hereinafter “data subject”). A natural person is considered to be identifiable if he or she can be identified directly or indirectly, in particular by means of an identifier such as a name, an identification number, location data, an online identifier or one or more special characteristics that express the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person.
b) affected person
Data subject is any identified or identifiable natural person whose personal data is processed by the person responsible for processing.
c) processing
Processing is any process or series of processes carried out with or without the aid of automated processes in connection with personal data, such as collecting, recording, organizing, arranging, storing, adapting or changing, reading, querying, using, disclosure by transmission, distribution or other form of provision, alignment or association, restriction, deletion or destruction.
d) restriction of processing
Restriction of processing is the marking of stored personal data with the aim of restricting their future processing.
e) profiling
Profiling is any type of automated processing of personal data, which consists in using this personal data to evaluate certain personal aspects relating to a natural person, in particular aspects relating to work performance, economic situation, health, personal to analyze or predict the preferences, interests, reliability, behavior, location or movement of that natural person.
f) pseudonymization
Pseudonymization is the processing of personal data in such a way that the personal data can no longer be assigned to a specific data subject without the use of additional information, provided that this additional information is kept separately and is subject to technical and organizational measures that ensure that the personal data not be assigned to an identified or identifiable natural person.
g) controller or person responsible for processing
The person responsible or responsible for processing is the natural or legal person, authority, institution or other body that alone or jointly with others decides on the purposes and means of processing personal data. If the purposes and means of this processing are determined by Union law or the law of the Member States, the controller or the specific criteria for his nomination may be provided for in accordance with Union law or the law of the Member States.
h) processor
Processor is a natural or legal person, authority, institution or other body that processes personal data on behalf of the controller.
i) recipient
The recipient is a natural or legal person, authority, institution or other body to which personal data is disclosed, regardless of whether it is a third party or not. However, authorities which may receive personal data in the context of a specific investigation mandate under Union or Member State law shall not be deemed to be recipients.
j) third
A third party is a natural or legal person, authority, institution or other body other than the data subject, the controller, the processor and the persons who are authorized to process the personal data under the direct responsibility of the controller or the processor.
k) consent
Consent is any expression of intent given voluntarily by the data subject for a specific case in an informed and unambiguous manner in the form of a statement or other clear confirmatory act by which the data subject indicates that he or she agrees to the processing of personal data concerning him or her is.
3. name and address of the person responsible for processing
The person responsible within the meaning of the General Data Protection Regulation, other data protection laws applicable in the member states of the European Union and other provisions of a data protection nature is:
studiorundholz gmbh
carsten rundholz
hötenweg 4
47669wachtendonk
germany
tel.: +49 28 36 91 98 40
e-mail: info@studiorundholz.de
website: rundholz.shop
4. Collection of general data and information
Our website collects a series of general data and information each time the website is accessed by a data subject or an automated system. This general data and information is stored in the server's log files. What can be recorded are the (1) browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system accesses our website (so-called referrers), (4) the sub-websites which are accessible via an accessing system is controlled on our website, (5) the date and time of access to the website, (6) an internet protocol address (IP address), (7) the internet service provider of the accessing system and (8) other similar data and information that serves to protect against threats in the event of attacks on our information technology systems.
When using this general data and information, we do not draw any conclusions about the data subject. Rather, this information is needed to (1) deliver the content of our website correctly, (2) optimize the content of our website as well as the advertising for it, (3) ensure the long-term functionality of our information technology systems and the technology of our website and ( 4) to provide law enforcement authorities with the information necessary for prosecution in the event of a cyber attack. These anonymously collected data and information are evaluated by us both statistically and with the aim of increasing data protection and data security on our website in order to ultimately ensure an optimal level of protection for the personal data we process. The anonymous data from the server log files is stored separately from all personal data provided by a data subject.
5. legal basis for processing
Art. 6 i lit. a DS-GVO serves as the legal basis for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary to fulfill a contract to which the data subject is a party, as is the case, for example, with processing operations that are necessary for the delivery of goods or the provision of another service or consideration, the processing is based on Art. 6 i lit. b DS-GVO. The same applies to processing operations that are necessary to carry out pre-contractual measures, for example in cases of inquiries about our products or services. If we are subject to a legal obligation that requires the processing of personal data, such as to fulfill tax obligations, the processing is based on Art. 6 i lit. c DS-GVO. In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor were injured in our company and his name, age, health insurance details or other vital information would then have to be passed on to a doctor, hospital or other third party. then the processing would take place in Art. 6 i lit. d GDPR. Ultimately, processing operations could be based on Art. 6 i lit. f DS-GVO. Processing operations that are not covered by any of the above-mentioned legal bases are based on this legal basis if the processing is necessary to protect a legitimate interest on our part or that of a third party, provided that the interests, fundamental rights and freedoms of the data subject do not prevail. We are permitted to carry out such processing operations in particular because they have been specifically mentioned by European legislators. In this respect, he was of the opinion that a legitimate interest could be assumed if the data subject is a customer of the person responsible (recital 47 sentence 2 GDPR).
6. legal or contractual requirements for the provision of personal data; necessity for the conclusion of the contract; Obligation of the data subject to provide the personal data; possible consequences of non-provision
We explain to you that the provision of personal data is partly required by law (e.g. tax regulations) or can also result from contractual regulations (e.g. information about the contractual partner). Sometimes it may be necessary for a data subject to provide us with personal data in order to conclude a contract provides data that must subsequently be processed by us. For example, the data subject is obliged to provide us with personal data if we conclude a contract with them. Failure to provide the personal data would mean that the contract with the person concerned could not be concluded. Before the person concerned provides personal data, the person concerned must contact one of our employees. Our employee explains to the person concerned on a case-by-case basis whether the provision of the personal data is required by law or contract or is necessary for the conclusion of the contract, whether there is an obligation to provide the personal data and what consequences the non-provision of the personal data would have.
7. cookies
Our websites use cookies. Cookies are text files that are stored and stored on a computer system via an internet browser.
Numerous websites and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a string through which websites and servers can be assigned to the specific internet browser in which the cookie was stored. This enables the visited websites and servers to distinguish the individual browser of the data subject from other internet browsers that contain other cookies. A specific internet browser can be recognized and identified via the unique cookie ID.
By using cookies, we can provide the users of this website with more user-friendly services that would not be possible without the setting of cookies.
Using a cookie, the information and offers on our website can be optimized in the interests of the user. As already mentioned, cookies enable us to recognize the users of our website. The purpose of this recognition is to make it easier for users to use our website. For example, the user of a website that uses cookies does not have to re-enter their access data each time they visit the website because this is done by the website and the cookie stored on the user's computer system. Another example is the cookie of a shopping cart in the online shop. The online shop remembers the items that a customer has placed in the virtual shopping cart via a cookie.
The person concerned can prevent the setting of cookies through our website at any time by means of an appropriate setting on the internet browser used and thus permanently object to the setting of cookies. Furthermore, cookies that have already been set can be deleted at any time via an internet browser or other software programs. This is possible in all common internet browsers. If the data subject deactivates the setting of cookies in the internet browser used, not all functions of our website may be fully usable.
8. newsletter tracking
Our newsletters contain so-called tracking pixels. A tracking pixel is a miniature graphic that is embedded in emails that are sent in HTML format to enable log file recording and log file analysis. This allows a statistical evaluation of the success or failure of online marketing campaigns to be carried out. Using the embedded tracking pixel, we can see whether and when an email was opened by a data subject and which links in the email were accessed by the data subject.
Such personal data collected via the tracking pixels contained in the newsletters will be stored and evaluated by the person responsible for processing in order to optimize the newsletter dispatch and to better adapt the content of future newsletters to the interests of the data subject. This personal data will not be passed on to third parties. Affected persons are entitled at any time to revoke the relevant separate declaration of consent issued via the double opt-in procedure. After revocation, these personal data will be deleted by the person responsible for processing. We automatically interpret a cancellation from receiving the newsletter as a revocation.
9. Contact option via the website
Due to legal regulations, our website contains information that enables quick electronic contact with us and direct communication with us, which also includes a general address for the so-called electronic mail (e-mail address). If a data subject contacts the person responsible for processing by email or via a contact form, the personal data transmitted by the data subject will be automatically stored. Any personal data transmitted on a voluntary basis by a data subject to the person responsible for processing will be stored for the purposes of processing or contacting the data subject. This personal data will not be passed on to third parties.
10. subscription to our newsletter
On our website, users are given the opportunity to subscribe to our newsletter. Which personal data is transmitted to the person responsible for processing when ordering the newsletter is determined by the input mask used for this purpose.
We inform our customers and business partners about our offers at regular intervals by means of a newsletter. In principle, the newsletter can only be received by the data subject if (1) the data subject has a valid e-mail address and (2) the data subject registers to receive the newsletter. For legal reasons, a confirmation email will be sent using the double opt-in procedure to the email address entered by a data subject for the first time to receive the newsletter. This confirmation email is used to check whether the owner of the email address, as the data subject, has authorized receipt of the newsletter.
When registering for the newsletter, we also save the IP address assigned by the internet service provider (ISP) of the computer system used by the person concerned at the time of registration as well as the date and time of registration. The collection of this data is necessary in order to be able to understand the (possible) misuse of the e-mail address of a data subject at a later point in time and therefore serves to provide legal protection for the person responsible for processing.
The personal data collected when you register for the newsletter will only be used to send our newsletter. Furthermore, subscribers to the newsletter could be informed by email if this is necessary for the operation of the newsletter service or a related registration, as could be the case in the event of changes to the newsletter offer or a change in technical circumstances. The personal data collected as part of the newsletter service will not be passed on to third parties. The subscription to our newsletter can be canceled by the person concerned at any time. The consent to the storage of personal data that the data subject has given us for sending the newsletter can be revoked at any time. For the purpose of revoking your consent, there is a corresponding link in every newsletter. It is also possible to unsubscribe from the newsletter at any time directly on the website of the person responsible for processing or to communicate this to the person responsible for processing in another way.
11. legitimate interests in processing pursued by the controller or a third party
The processing of personal data is based on Article 6 i lit. f GDPR, our legitimate interest is to carry out our business activities for the benefit of the well-being of all our employees and our shareholders.
12. Duration for which the personal data will be stored
The criterion for the duration of storage of personal data is the respective statutory retention period. After the deadline has expired, the relevant data will be routinely deleted unless it is no longer required to fulfill the contract or initiate a contract.
13. routine deletion and blocking of personal data
The person responsible for processing processes and stores personal data of the data subject only for the period necessary to achieve the purpose of storage or if this is required by the European directive and regulation maker or another legislator in laws or regulations that the person responsible for processing is subject to.
If the storage purpose no longer applies or if a storage period prescribed by the European directive and regulation provider or another responsible legislator expires, the personal data will be blocked or deleted routinely and in accordance with legal regulations.
source: