Privacy policy of Dirty Smash by Nele Reinsch and Paul Lüpke GbR

Since May 25, 2018, the provisions of the EU General Data Protection Regulation (hereinafter: GDPR) have applied throughout Europe. The following information provides you with a simple overview of the processing of personal data carried out by Dirty Smash by Nele Reinsch and Paul Lüpke GbR in accordance with this new regulation (see Art. 13 GDPR). Personal data is all data with which you can be personally identified.

Please read our data protection information carefully. If you have any questions or comments about this data protection information, you can send them at any time to the e-mail address given in section 2.

1. overview

Data processing by Dirty Smash by Nele Reinsch and Paul Lüpke GbR is essentially carried out for the following purposes:

All data required for the performance of a contract with Dirty Smash by Nele Reinsch und Paul Lüpke GbR will be processed for the purpose of processing the contract. If external service providers are also involved in the processing of the contract, e.g. payment service providers, your data will be passed on to them to the extent necessary in each case. Your data will also be passed on to the extent necessary in each case if the contract with Dirty Smash by Nele Reinsch und Paul Lüpke GbR relates exclusively to tattoo advice and the provision of an independent tattoo artist.

inform you about new offers and promotions from time to time.

to optimize our website or to display advertising in the browser of your device. When you visit the Dirty Smash by Nele Reinsch und Paul Lüpke GbR website, various information is exchanged between your device and our server. This may also involve personal data. In accordance with the provisions of the GDPR, you have various rights that you can assert against us. These include the right to object to selected data processing, in particular data processing for advertising purposes. The option to object is highlighted in print. If you have any questions about our data protection information, you are welcome to contact our company data protection officer at any time. You will find the contact details below under point 2.

2. contact details of the controller and the company data protection officer

This data protection information applies to data processing by Dirty Smash by Nele Reinsch und Paul Lüpke GbR, Rudolf Breitscheid-Straße 79, 03046 Cottbus (“controller”), and for the following websites: dirtysmash.de.

The company data protection officer of Dirty Smash by Nele Reinsch und Paul Lüpke GbR can be contacted at the following email address:

3. calling up a DirtySmash website

When you visit our website, the browser used on your device automatically sends information to the server of our website and stores it temporarily in a log file. We have no influence on this. The following information is also collected without your intervention and stored until it is automatically deleted: the IP address of the requesting internet-enabled device, the date and time of access, the name and URL of the file accessed, the website/application from which the access was made (referrer URL), the browser you are using and, if applicable, the operating system of your internet-enabled computer and the name of your access provider.

The legal basis for processing the IP address is Article 6(1)(f) GDPR. Our legitimate interest follows from the purposes of data collection listed below. At this point, we would like to point out that we are not able to draw any direct conclusions about your identity from the data collected, nor do we do so.

We use the IP address of your end device and the other data listed above for the following purposes: Ensuring a smooth connection setup, ensuring a comfortable use of our website, evaluation of system security and stability.

The data is stored for a maximum period of one month and then automatically deleted. We also use cookies, tracking tools, targeting methods and social media plug-ins for our website. The exact procedures involved and how your data is used for this purpose are explained in more detail in section 8 below.

We use the “Real Cookie Banner” consent tool to manage the cookies and similar technologies used (tracking pixels, web beacons, etc.) and related consents. Details on how “Real Cookie Banner” works can be found at https://devowl.io/de/rcb/datenverarbeitung/.

The legal basis for the processing of personal data in this context is Art. 6 para. 1 lit. c GDPR and Art. 6 para. 1 lit. f GDPR. Our legitimate interest is the management of the cookies and similar technologies used and the related consents.

The provision of personal data is neither contractually required nor necessary for the conclusion of a contract. You are not obliged to provide the personal data. If you do not provide the personal data, we will not be able to manage your consent.

4. data processing upon conclusion of a contract

The purpose of Dirty Smash by Nele Reinsch and Paul Lüpke GbR is tattoo consulting and tattoo engraving and/or the procurement of an independent tattoo artist as well as the trade in tattoo care products and lifestyle products and vouchers. In this context, we process the data required for the conclusion, execution or termination of a contract with you. This includes

First name, last name

Billing and delivery address

E-mail address

Invoice and payment data

Telephone number, if applicable

The legal basis for this is Article 6(1)(b) GDPR, i.e. you provide us with the data on the basis of the contractual relationship between you and us. We are also obliged to process your e-mail address due to a requirement in the German Civil Code (BGB) to send an electronic order confirmation (Article 6(1)(c) GDPR). If we do not use your contact data for advertising purposes, we store the data collected for contract processing until the expiry of the statutory or possible contractual warranty and guarantee rights. After expiry of this period, we store the information required under commercial and tax law for the contractual relationship for the legally specified periods on the basis of Art. 6 para. 1 c) GDPR in blocked form. For this period (regularly six or ten years after the end of the year in which the contract was concluded), the data will be processed again solely in the event of a review by the tax authorities.

If you have selected a payment method other than prepayment or cash on delivery, we will pass on the necessary payment details to a payment service provider commissioned by us. We will pass on details of your delivery address to a logistics company commissioned by us for the purpose of processing the purchase contract. If you agree to this, we will transmit your e-mail address and, if applicable, your telephone number to the logistics company commissioned by us to ensure that the goods are delivered in accordance with your wishes. Depending on the products ordered and the delivery options selected, the logistics company may contact you in advance of the delivery to inform you of the delivery time or to coordinate details of the delivery with you. The data will be transmitted solely for this purpose and deleted after delivery.

5. data processing for advertising purposes

The following statements relate to the processing of personal data for advertising purposes. The GDPR declares such data processing on the basis of Article 6(1)(f) as conceivable in principle and as a legitimate interest. The duration of data storage for advertising purposes does not follow any rigid principles and is based on the question of whether storage is necessary for advertising purposes.

If you have concluded a contract with us, we will treat you as an existing customer. In this case, we will process your postal contact data without your specific consent in order to send you information about new services and/or products. From time to time, we will send your postal contact details to carefully selected companies for one-off use for advertising purposes. We process your e-mail address in order to send you information about our own similar products without your specific consent.

Right of objection

You can object to data processing for the aforementioned purposes (advertising) at any time free of charge, separately for the respective communication channel and with effect for the future. All you need to do is send an e-mail or a letter by post to the contact details given in section 2.

If you file an objection, the contact address concerned will be blocked for further advertising data processing. We would like to point out that in exceptional cases, advertising material may still be sent temporarily even after we have received your objection. This is technically due to the necessary lead time for advertising mailings and does not mean that we will not implement your objection. Thank you for your understanding.

6th Newsletter

On our website we offer you the opportunity to subscribe to our newsletter. In order to ensure that no errors have been made when entering the e-mail address, we use the so-called double opt-in procedure: After you have entered your e-mail address in the registration field, we will send you a confirmation link. Only when you click on this confirmation link will your e-mail address be added to our mailing list. Your electronic contact data will be processed at this point solely on the basis of your consent (Article 6(1)(a) GDPR). You can revoke your consent at any time with effect for the future. All you need to do is send a short email to the email address given under 2. or click on the “Unsubscribe” button at the end of each newsletter.

7. customer account

In order to provide you with the greatest possible convenience when contacting us, we offer you the permanent storage of your personal data in a password-protected customer account. The creation of the customer account is voluntary and is based on your consent within the meaning of Article 6 (1) (a) GDPR. After setting up a customer account, you do not need to enter your data again. You can also view and change the data stored about you in your customer account at any time.

In addition to the data requested when placing an order, you must enter a password of your choice to set up a customer account. This is used together with your e-mail address to access your customer account. Please treat your personal access data confidentially and in particular do not make it accessible to unauthorized third parties. We cannot accept any liability for misused passwords unless we are responsible for the misuse. Please note that you will automatically remain logged in even after leaving our website, unless you actively log out. You have the option of deleting your customer account at any time. Please note, however, that this does not also delete the data that can be viewed in the customer account.

8. cookies, plugins and tools, Google Web Fonts

We use so-called cookies on our website. If these cookies are personal data, they are used on the basis of Article 6(1)(f) GDPR. Our interest in optimizing our website and also addressing you with advertising based on your visit to our website is to be regarded as legitimate within the meaning of the aforementioned provision. Cookies are small files that your browser automatically creates and that are stored on your end device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not cause any damage to your end device and do not contain any viruses, Trojans or other malware. Information is stored in the cookie that results in each case in connection with the specific end device used. However, this does not mean that we obtain direct knowledge of your identity. On the one hand, the use of cookies serves to make the use of our website more convenient for you. For example, we use so-called session cookies to recognize that you have already visited individual pages of our website or that you have already logged into your customer account. These are automatically deleted after you leave our site. In addition, we also use temporary cookies for the purpose of user-friendliness, which are stored on your end device for a specified period of time. If you visit our site again to use our services, it is automatically recognized that you have already visited us and which entries and settings you have made so that you do not have to enter them again.

If you have a customer account with Litty Wave Ink and are logged in or activate the “stay logged in” function, the information stored in cookies will be added to your customer account.

On the other hand, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer for you and to display information specifically tailored to you. These cookies enable us to automatically recognize that you have already visited our website when you return. These cookies are automatically deleted after a defined period of time. Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a message always appears before a new cookie is created. However, completely deactivating cookies may mean that you cannot use all the functions of our website. The storage duration of cookies depends on their purpose and is not the same for everyone.

This site uses so-called web fonts provided by Google for the uniform display of fonts. The Google fonts are installed locally. There is no connection to Google servers.

9 Google, Facebook & YouTube

9.1 Google

9.1.1 Google Tag Manager

Google Tag Manager is a solution with which we can manage so-called website tags via an interface (and thus integrate Google Analytics and other Google marketing services into our online offering, for example). The Tag Manager itself (which implements the tags) does not process any personal user data. With regard to the processing of users’ personal data, please refer to the following information on Google services. Usage guidelines: https://www.google.com/intl/de/tagmanager/use-policy.html.

9.1.2 Google Analytics

On the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. GDPR), we use Google Analytics, a web analysis service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). GDPR) Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google uses cookies. The information generated by the cookie about the use of the online offer by the user is usually transmitted to a Google server in the USA and stored there.

Google is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

Google will use this information on our behalf to evaluate the use of our online offer by users, to compile reports on the activities within this online offer and to provide us with further services associated with the use of this online offer and the use of the Internet. Pseudonymous user profiles can be created from the processed data.

We only use Google Analytics with activated IP anonymization. This means that the IP address of the user is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there.

The IP address transmitted by the user’s browser will not be merged with other Google data. Users can prevent the storage of cookies by setting their browser software accordingly; users can also prevent Google from collecting the data generated by the cookie and relating to their use of the online offer and from processing this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

Further information on the use of data by Google, setting and objection options, can be found in Google’s privacy policy (https://policies.google.com/privacy) and in the settings for the display of advertisements by Google (https://adssettings.google.com/authenticated).

Users’ personal data is deleted or anonymized after 14 months.

9.1.3 Google Universal Analytics

We use Google Analytics in the form of “Universal Analytics”. “Universal Analytics” refers to a Google Analytics process in which the user analysis is based on a pseudonymous user ID and thus a pseudonymous profile of the user is created with information from the use of different devices (so-called “cross-device tracking”).

9.1.4 Target group formation with Google Analytics

We use Google Analytics to display the ads placed by Google and its partners within advertising services only to those users who have also shown an interest in our online offering or who have certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited) that we transmit to Google (so-called “remarketing” or “Google Analytics audiences”). With the help of remarketing audiences, we also want to ensure that our ads correspond to the potential interest of users.

9.1.5 Google Adsense with personalized ads
On the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. GDPR), we use the services of Google Ireland Limited, Gordon House, Barrow Street Dublin 4, Ireland (“Google”). GDPR) the services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

Google is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

We use the AdSense service, with the help of which ads are displayed on our website and we receive remuneration for their display or other use. For these purposes, usage data such as the click on an ad and the IP address of the user are processed, whereby the IP address is shortened by the last two digits. User data is therefore processed pseudonymously.

We use Adsense with personalized ads. Google draws conclusions about the interests of users based on the websites they visit or apps they use and the user profiles created in this way. Advertisers use this information to tailor their campaigns to these interests, which is beneficial for users and advertisers alike. For Google, ads are personalized when collected or known data determines or influences the ad selection. This includes previous search queries, activities, website visits, the use of apps, demographic and location information. Specifically, this includes: demographic targeting, targeting on interest categories, remarketing and targeting on customer matching lists and target group lists uploaded to DoubleClick Bid Manager or Campaign Manager.

Further information on the use of data by Google, setting and objection options, can be found in Google’s privacy policy (https://policies.google.com/technologies/ads) and in the settings for the display of advertisements by Google (https://adssettings.google.com/authenticated).

9.1.6 Google Adsense with non-personalized ads

On the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. GDPR), we use the services of Google Ireland Limited, Gordon House, Barrow Street Dublin 4, Ireland (“Google”). GDPR) the services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

Google is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

We use the AdSense service, with the help of which ads are displayed on our website and we receive remuneration for their display or other use. For these purposes, usage data such as the click on an ad and the IP address of the user are processed, whereby the IP address is shortened by the last two digits. User data is therefore processed pseudonymously.

We use Adsense with non-personalized ads. The ads are not displayed on the basis of user profiles. Non-personalized ads are not based on previous user behavior. Contextual information is used for targeting, including rough (e.g. at location level) geographical targeting based on the current location, the content on the current website or app and current search terms. Google prohibits all personalized targeting, including demographic targeting and targeting based on user lists.

Further information on the use of data by Google, setting and objection options, can be found in Google’s privacy policy (https://policies.google.com/technologies/ads) and in the settings for the display of advertisements by Google (https://adssettings.google.com/authenticated).

9.1.7 Google AdWords and conversion measurement

On the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. GDPR), we use the services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). GDPR) the services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, (“Google”).

Google is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

We use the online marketing process Google “AdWords” to place ads in the Google advertising network (e.g. in search results, in videos, on websites, etc.) so that they are displayed to users who are likely to be interested in the ads. This allows us to display ads for and within our online offering in a more targeted manner in order to present users only with ads that potentially match their interests. If, for example, a user is shown ads for products that they have shown an interest in on other online offers, this is referred to as “remarketing”. For these purposes, when our and other websites on which the Google advertising network is active are accessed, a code from Google is executed directly by Google and so-called (re)marketing tags (invisible graphics or code, also known as “web beacons”) are integrated into the website. With their help, an individual cookie, i.e. a small file, is stored on the user’s device (comparable technologies can also be used instead of cookies). This file records which websites the user has visited, which content they are interested in and which offers the user has clicked on, as well as technical information about the browser and operating system, referring websites, time of visit and other information about the use of the online offer.

We also receive an individual “conversion cookie”. The information obtained with the help of the cookie is used by Google to create conversion statistics for us. However, we only learn the anonymous total number of users who clicked on our ad and were redirected to a page with a conversion tracking tag. However, we do not receive any information with which users can be personally identified.

User data is processed pseudonymously within the Google advertising network. This means that Google does not store and process the user’s name or email address, for example, but processes the relevant data in relation to cookies within pseudonymous user profiles. This means that, from Google’s perspective, the ads are not managed and displayed for a specifically identified person, but for the cookie owner, regardless of who this cookie owner is. This does not apply if a user has expressly allowed Google to process the data without this pseudonymization. The information collected about the user is transmitted to Google and stored on Google’s servers in the USA.

Further information on the use of data by Google, setting and objection options, can be found in Google’s privacy policy (https://policies.google.com/technologies/ads) and in the settings for the display of advertisements by Google (https://adssettings.google.com/authenticated).

9.1.8 Google Maps

This site uses the map service Google Maps via an API. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. To use the functions of Google Maps, it is necessary to save your IP address. This information is usually transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer. The use of Google Maps is in the interest of an appealing presentation of our online offers and to make it easy to find the places we have indicated on the website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. You can find more information on the handling of user data in Google’s privacy policy: https://www.google.de/intl/de/policies/privacy/.

9.2. Facebook pixel, custom audiences and Facebook conversion

Within our online offer, the so-called “Facebook pixel” of the social network Facebook, which is operated by Facebook Inc, 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are resident in the EU, Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”), is used due to our legitimate interests in the analysis, optimization and economic operation of our online offer and for these purposes.

Facebook is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).

With the help of the Facebook pixel, it is possible for Facebook to determine the visitors of our online offer as a target group for the display of ads (so-called “Facebook ads”). Accordingly, we use the Facebook pixel to display the Facebook ads placed by us only to those Facebook users who have also shown an interest in our online offering or who have certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited) that we transmit to Facebook (so-called “custom audiences”). With the help of the Facebook pixel, we also want to ensure that our Facebook ads correspond to the potential interest of users and are not annoying. With the help of the Facebook pixel, we can also track the effectiveness of Facebook ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook ad (so-called “conversion”).

The processing of data by Facebook takes place within the framework of Facebook’s data usage policy. Accordingly, general information on the display of Facebook ads can be found in Facebook’s data usage policy: https://www.facebook.com/policy. Specific information and details about the Facebook pixel and how it works can be found in Facebook’s help section: https://www.facebook.com/business/help/651294705016616.

You can object to the collection by the Facebook pixel and use of your data to display Facebook ads. To set which types of ads are displayed to you within Facebook, you can go to the page set up by Facebook and follow the instructions on the settings for usage-based advertising: https://www.facebook.com/settings?tab=ads. The settings are platform-independent, i.e. they are applied to all devices, such as desktop computers or mobile devices.

You can also object to the use of cookies for reach measurement and advertising purposes via the deactivation page of the network advertising initiative (http://optout.networkadvertising.org/) and additionally the US website (http://www.aboutads.info/choices) or the European website (http://www.youronlinechoices.com/uk/your-ad-choices/).

9.3 YouTube with enhanced data protection

Our website uses plugins from the YouTube website. The operator of the pages is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. We use YouTube in extended data protection mode. According to YouTube, this mode means that YouTube does not store any information about visitors to this website before they watch the video. However, the transfer of data to YouTube partners is not necessarily excluded by the extended data protection mode. For example, YouTube establishes a connection to the Google DoubleClick network regardless of whether you watch a video. As soon as you start a YouTube video on our website, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account. Furthermore, YouTube can store various cookies on your end device after starting a video. With the help of these cookies, YouTube can obtain information about visitors to our website. This information is used, among other things, to record video statistics, improve user-friendliness and prevent fraud attempts. The cookies remain on your end device until you delete them. If necessary, further data processing operations may be triggered after the start of a YouTube video, over which we have no influence. The use of YouTube is in the interest of an appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. You can find more information about data protection at YouTube in their privacy policy at: https://www.youtube.com/t/privacy_at_youtube.

10. contact form

We offer visitors to our website the opportunity to contact us via a contact form. We use the information you provide via the contact form (mandatory information is marked with an asterisk) exclusively for the purpose of processing your request. The legal basis for this is both your consent within the meaning of Article 6(1)(a) GDPR and Article 6(1)(f) GDPR. The proper processing of your request is to be regarded as a legitimate interest within the meaning of the GDPR. If you contact us in connection with a contractual relationship between you and us, Article 6(1)(b) GDPR, i.e. this contractual relationship, is also the legal basis for data processing. You can revoke your consent to the use of data as explained above at any time with effect for the future free of charge by sending a short message to the contact details given under 2. The legality of the processing based on your consent up to the time of your revocation is not affected by this. However, we would like to point out that it will no longer be possible to process your request from the time of any revocation. Outside the existence of a revocation, your data relating to the request will be deleted after your request has been processed. You can find out how we proceed in the event of the exercise of data subject rights under 5.

11. recipients outside the EU

With the exception of the processing described under 8, we do not pass on your data to recipients based outside the European Union or the European Economic Area. The processing mentioned under 8. causes data to be transferred to the servers of the providers of tracking or targeting technologies commissioned by us. These servers are located in the USA. In the case of Google Analytics, data is transferred on the basis of an order processing contract. This is a contract text agreed with the data protection supervisory authorities.

12. your rights

In addition to the right to withdraw your consent given to us, you have the following additional rights if the respective legal requirements are met:

Right to information about your personal data stored by us in accordance with Art. 15 GDPR; in particular, you can obtain information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the origin of your data if it has not been collected directly from you,

Right to rectification of inaccurate data or completion of correct data in accordance with Art. 16 GDPR,

Right to erasure of your data stored by us in accordance with Art. 17 GDPR, insofar as no statutory or contractual retention periods or other statutory obligations or rights to further storage are to be complied with,

Right to restrict the processing of your data in accordance with Art. 18 GDPR, insofar as the accuracy of the data is disputed by you, the processing is unlawful but you refuse to delete it; the controller no longer needs the data, but you need it to assert, exercise or defend legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR,

Right to data portability pursuant to Art. 20 GDPR, i.e. the right to receive selected data stored by us about you in a commonly used, machine-readable format or to request transmission to another controller

Right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters.

Right of objection

Under the conditions of Art. 21 para. 1 GDPR, data processing may be objected to for reasons arising from the particular situation of the data subject.

The above general right to object applies to all processing purposes described in this data protection information that are processed on the basis of Article 6(1)(f) GDPR. In contrast to the specific right to object to data processing for advertising purposes (see above under 5.), we are only obliged under the GDPR to implement such a general objection if you give us reasons of overriding importance (e.g. a possible danger to life or health). You also have the option of contacting the competent supervisory authority.

If you assert one or more of the data subject rights listed above against us, we will store this information in anonymized form on the basis of Article 6(1)(f) GDPR. The fact that we can also prove proper compliance with your request in cases of doubt is to be regarded as a legitimate interest within the meaning of this provision. This anonymized information, i.e. information that can no longer be linked to your person, will not be deleted.

13. data security

All data transmitted by you personally, including your payment data, is transmitted using the generally accepted and secure SSL (Secure Socket Layer) standard. SSL is a secure and proven standard that is also used in online banking, for example. You can recognize a secure SSL connection by the “s” appended to http (i.e. https://…) in the address bar of your browser or by the lock symbol at the bottom of your browser.

We also use suitable technical and organizational security measures to protect your personal data stored by us against manipulation, partial or complete loss and against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.
Cookie Consent with Real Cookie Banner