Privacy Policy
GENERAL INFORMATION
The following information provides a brief overview of what happens to your personal data when you visit this website. Personal data is any information that can be used to identify you personally. For detailed information on the subject of data protection, please refer to our privacy policy set out below.
DATA COLLECTION ON THIS WEBSITE
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. Their contact details can be found in the section “Information on the Responsible Entity” in this privacy policy.
How do we collect your data?
Some data is collected when you provide it to us. This may include, for example, information you enter into a contact form.
Other data is collected automatically, or with your consent, by our IT systems when you visit the website. This primarily includes technical data, such as your internet browser, operating system, or the time the page was accessed. This data is collected automatically as soon as you enter the website.
What do we use your data for?
Some of the data is collected to ensure that the website is provided without errors. Other data may be used to analyse your user behaviour.
If contracts can be concluded or initiated via the website, the data you submit will also be processed for contract offers, orders, or other service enquiries.
What rights do you have regarding your data?
You have the right to obtain information, free of charge and at any time, about the origin, recipients, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data.
If you have given consent to data processing, you may withdraw that consent at any time with effect for the future. Under certain circumstances, you also have the right to request the restriction of the processing of your personal data.
Furthermore, you have the right to lodge a complaint with the competent supervisory authority.
You may contact us at any time with questions regarding this or any other data protection matter.
HOSTING
Hosting
We host the content of our website with the following provider:
WIX
The provider is Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel (hereinafter referred to as “WIX”).
WIX is a tool for creating and hosting websites. When you visit our website, WIX is used to analyse user behaviour, visitor sources, the region of website visitors, and visitor numbers. WIX stores cookies in your browser that are necessary for displaying the website and ensuring its security (necessary cookies).
The data collected through WIX may be stored on various servers worldwide. WIX servers are located, among other places, in the USA. For details, please refer to WIX’s privacy policy:
https://de.wix.com/about/privacy
According to WIX, data transfers to the USA and other third countries are based on the European Commission’s Standard Contractual Clauses or comparable safeguards pursuant to Article 46 GDPR. Further details can be found here:
https://de.wix.com/about/privacy-dpa-users
WIX is used on the basis of Article 6(1)(f) GDPR. We have a legitimate interest in ensuring the reliable presentation of our website. If consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent covers the storage of cookies or access to information on the user’s device, such as device fingerprinting, within the meaning of the TDDDG. Consent may be withdrawn at any time.
The company is certified under the EU–US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the United States intended to ensure compliance with European data protection standards when processing data in the USA. Every company certified under the DPF undertakes to comply with these data protection standards.
Further information is available from the provider at the following link:
PRIVACY POLICY
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with applicable data protection laws and this Privacy Policy.
When you use this website, various types of personal data may be collected. Personal data is information that can be used to identify you personally. This Privacy Policy explains what data we collect and what we use it for. It also explains how and for what purpose this takes place.
Please note that data transmission over the internet, such as communication by email, may be subject to security vulnerabilities. Complete protection of data against access by third parties cannot be guaranteed.
NOTICE REGARDING THE DATA CONTROLLER
Data Controller
The entity responsible for processing personal data on this website is:
Anna Klara Stadelmaier
Teutonenstraße 26
90402 Nuremberg
Germany
Phone: 015733181476
Email: kontakt@anna-klara-stadelmaier.de
The data controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data, such as names and email addresses.
STORAGE DURATION
Unless a more specific storage period is stated in this Privacy Policy, your personal data will be stored until the purpose for processing no longer applies. If you request deletion or withdraw your consent, your data will be deleted unless there are other legally permissible grounds for storage, such as tax or commercial retention obligations. In that case, the data will be deleted once those grounds no longer apply.
GENERAL INFORMATION ON THE LEGAL BASES FOR DATA PROCESSING ON THIS WEBSITE
If you have consented to the processing of your personal data, we process it on the basis of Article 6(1)(a) GDPR or Article 9(2)(a) GDPR, where special categories of personal data under Article 9(1) GDPR are processed. If you have expressly consented to the transfer of personal data to third countries, the processing is also based on Article 49(1)(a) GDPR.
If you have consented to the storage of cookies or to access to information on your device, for example through device fingerprinting, the processing is additionally based on Section 25(1) TDDDG. You may withdraw your consent at any time.
If your data is required to fulfil a contract or to carry out pre-contractual measures, we process it on the basis of Article 6(1)(b) GDPR. We also process your data where this is necessary to comply with a legal obligation, based on Article 6(1)(c) GDPR.
Data processing may also be carried out on the basis of our legitimate interests pursuant to Article 6(1)(f) GDPR. The specific legal basis applicable in each individual case is set out in the following sections of this Privacy Policy.
RECIPIENTS OF PERSONAL DATA
In the course of our business activities, we work with various external entities. This may also require the transfer of personal data to these external entities. We disclose personal data to external parties only where this is necessary to fulfil a contract, where we are legally required to do so (e.g. sharing data with tax authorities), where we have a legitimate interest in the disclosure pursuant to Article 6(1)(f) GDPR, or where another legal basis permits the data transfer.
When using data processors, we disclose our customers’ personal data only on the basis of a valid data processing agreement. In the case of joint processing, a joint controller agreement is concluded.
WITHDRAWAL OF YOUR CONSENT TO DATA PROCESSING
Many data processing activities are only possible with your express consent. You may withdraw your consent at any time. The lawfulness of data processing carried out before the withdrawal remains unaffected by the withdrawal.
RIGHT TO OBJECT TO DATA PROCESSING IN SPECIFIC CASES AND TO DIRECT MARKETING (ARTICLE 21 GDPR)
If the processing of your personal data is based on Article 6(1)(e) or (f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this privacy policy. If you object, we will no longer process your affected personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims (objection pursuant to Article 21(1) GDPR).
Where your personal data are processed for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for such marketing purposes; this also applies to profiling insofar as it is related to such direct marketing. If you object, your personal data will subsequently no longer be used for the purpose of direct marketing (objection pursuant to Article 21(2) GDPR).
RIGHT TO LODGE A COMPLAINT WITH THE COPETENT SUPERVISORY AUTHORITY
In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, particularly in the Member State of their habitual residence, place of work, or the place of the alleged infringement. This right to lodge a complaint is without prejudice to any other administrative or judicial remedies.
RIGHT TO DATA PORTABILITY
You have the right to receive the data that we process automatically based on your consent or in performance of a contract, in a commonly used, machine-readable format, or to have it transferred to another controller. Direct transfer to another controller will only be carried out where technically feasible.
RIGHT OF ACCESS, RECTIFICATION AND ERASURE
You have the right, within the scope of applicable legal provisions, to obtain free information at any time about your stored personal data, its origin and recipients, and the purpose of data processing. Where applicable, you also have the right to have this data corrected or deleted. You may contact us at any time with regard to this or any other questions concerning personal data.
RIGHT TO RESTRICTION OF PROCESSING
You have the right to request the restriction of processing of your personal data at any time. You may contact us regarding this at any time. The right to restriction of processing applies in the following cases:
-
If you dispute the accuracy of your personal data stored by us, we generally need time to verify this. During the verification period, you have the right to request restriction of processing.
-
If the processing of your personal data was or is unlawful, you may request restriction of data processing instead of erasure.
-
If we no longer need your personal data, but you require it to establish, exercise or defend legal claims, you have the right to request restriction of processing instead of erasure.
-
If you have lodged an objection under Article 21(1) GDPR, a balancing test must be carried out between your interests and ours. While it has not yet been determined whose interests prevail, you have the right to request restriction of processing.
If the processing of your personal data has been restricted, such data may be processed—apart from being stored—only with your consent, for the establishment, exercise or defence of legal claims, to protect the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.
INQUIRY BY EMAIL OR TELEPHONE
If you contact us by email or telephone, your inquiry, including all personal data arising from it (such as your name and the nature of your inquiry), will be stored and processed for the purpose of handling your request. We will not disclose this data without your consent.
The processing of this data is based on Article 6(1)(b) GDPR if your inquiry is related to the performance of a contract or is necessary for taking pre-contractual steps. In all other cases, processing is based on our legitimate interest in effectively handling inquiries addressed to us (Article 6(1)(f) GDPR) or on your consent (Article 6(1)(a) GDPR), where requested. You may withdraw your consent at any time.
The data you send us in contact inquiries will remain with us until you request its deletion, withdraw your consent to its storage, or the purpose for storing the data no longer applies—for example, once your request has been fully processed. Mandatory statutory provisions, particularly statutory retention periods, remain unaffected.
PLUGINS AND TOOLS - YOUTUBE
This website embeds videos from YouTube. The operator is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. When you visit one of our webpages on which YouTube is embedded, a connection to YouTube’s servers is established. This informs the YouTube server which of our pages you have visited.
YouTube may also store various cookies on your device or use comparable technologies for recognition, such as device fingerprinting. This enables YouTube to obtain information about visitors to this website. This information is used, among other things, to collect video statistics, improve user-friendliness, and prevent fraud attempts. The data collected is also processed within Google’s advertising network.
If you are logged into your YouTube account, you enable YouTube to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account. YouTube is used in the interest of presenting our online offerings attractively. This constitutes a legitimate interest within the meaning of Article 6(1)(f) GDPR. Where consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent covers the storage of cookies or access to information on the user’s device, such as device fingerprinting, within the meaning of the TDDDG. Consent may be withdrawn at any time.
Further information on the handling of user data can be found in YouTube’s privacy policy at:
https://policies.google.com/privacy?hl=en
The company is certified under the EU–US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the United States intended to ensure compliance with European data protection standards when processing data in the United States. Every company certified under the DPF undertakes to comply with these data protection standards. Further information is available from the provider at:
https://www.dataprivacyframework.gov/participant/5780.
PLUGINS AND TOOLS - GOOGLE-FONTS
This website uses Google Fonts, provided by Google, to display fonts consistently. When you access a page, your browser loads the required fonts into its cache so that text and fonts can be displayed correctly. For this purpose, your browser must connect to Google’s servers. Google thereby learns that this website was accessed via your IP address.
Google Fonts is used on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in ensuring a consistent appearance of the website. Where consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent covers the storage of cookies or access to information on the user’s device, such as device fingerprinting, within the meaning of the TDDDG. Consent may be withdrawn at any time. If your browser does not support Google Fonts, a standard font from your computer will be used.
Further information about Google Fonts is available at:
https://developers.google.com/fonts/faq
You can find Google’s privacy policy at:
https://policies.google.com/privacy?hl=en
The company is certified under the EU–US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the United States intended to ensure compliance with European data protection standards when processing data in the United States. Every company certified under the DPF undertakes to comply with these data protection standards. Further information is available from the provider at:
https://www.dataprivacyframework.gov/participant/5780
Source: https://www.e-recht24.de