Data protection declaration| ||42
Diese Datenschutzerklärung klärt Sie über die Art, den Umfang und Zweck der Verarbeitung von personenbezogenen Daten (nachfolgend kurz „Daten“) innerhalb unseres Onlineangebotes und der mit ihm verbundenen Webseiten, Funktionen und Inhalte sowie externen Onlinepräsenzen, wie z.B. unser Social Media Profile auf (nachfolgend gemeinsam bezeichnet als „Onlineangebot“). Im Hinblick auf die verwendeten Begrifflichkeiten, wie z.B. „Verarbeitung“ oder „Verantwortlicher“ verweisen wir auf die Definitionen im Art. 4 der Datenschutzgrundverordnung (DSGVO).
Responsible person
Flower Power flower shop| ||47
Inhaberin: Kathrin Heckendorf (ehemals: John)
Kaiserin-Augusta-Allee 87
10589 Berlin
Telephone: 030 – 3 45 73 03
Fax: 030 – 3 45 77 64
E-mail: mail@gurejaia.info
Types of processed data:
– Inventory data (e.g., names, addresses).
– Contact details (e.g., email, telephone numbers).
– Content data (e.g., text entries, photographs, videos).
– Usage data (e.g., websites visited, interest in content, access times).
– Meta/communication data (e.g., device information, IP addresses).
Categories of data subjects
Visitors and users of the online offering (hereinafter we refer to the data subjects collectively as “ User”).
Purpose of processing
– Provision of the online offer, its functions and Contents.
– Answering contact requests and communicating with users.
– Security measures.
– Reach measurement/marketing
Terms used
“Personal data” is all information that relates to an identified or identifiable natural person (hereinafter “data subject”); A natural person is considered identifiable if he or she can be identified directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier (e.g. cookie) or one or more special features, which are an expression of the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person.
“Processing” is any process or series of processes carried out with or without the aid of automated processes Connection with personal data. The term is wide-ranging and encompasses practically all handling of data.
“Pseudonymization” means the processing of personal data in such a way that the personal data can no longer be assigned to a specific data subject without the use of additional information, provided that this additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data is not assigned to an identified or identifiable natural person.
“Profiling” means any type of automated processing of personal data, which consists in using this personal data to evaluate certain personal aspects relating to a natural person, in particular aspects relating to work performance, economic situation, health, personal preferences, interests, reliability, behavior, location or change of location to analyze or predict that natural person.
The “controller” is the natural or legal person, public authority, institution or other body that alone or jointly with others decides on the purposes and means of processing personal data , means.
“processor” means a natural or legal person, public authority, institution or other body that processes personal data on behalf of the controller.
Relevant legal bases
In accordance with Art. 13 GDPR, we will inform you of the legal basis for our data processing. If the legal basis is not stated in the data protection declaration, the following applies: The legal basis for obtaining consent is Article 6 Paragraph 1 Letter a and Article 7 GDPR, the legal basis for processing to fulfill our services and implement contractual measures as well Answering inquiries is Art. 6 Para. 1 lit. b GDPR, the legal basis for processing to fulfill our legal obligations is Art. 6 Para. 1 lit. c GDPR, and the The legal basis for processing to protect our legitimate interests is Article 6 (1) (f) GDPR. In the event that the vital interests of the data subject or another natural person require the processing of personal data, Article 6 Paragraph 1 Letter d GDPR serves as the legal basis.
Security measures
We take security measures in accordance with Art. 32 GDPR, taking into account the state of the art, the implementation costs and the type, scope, circumstances and purposes of the processing as well as the different probability of occurrence and severity the risk to the rights and freedoms of natural persons, appropriate technical and organizational measures to ensure a level of protection appropriate to the risk.
The measures include, in particular, ensuring confidentiality, Integrity and availability of data by controlling physical access to the data, as well as its access, input, distribution, ensuring availability and its separation. We have also set up procedures to ensure that the rights of those affected are exercised, data are deleted and data are at risk. We also take the protection of personal data into account when developing or selecting hardware, software and procedures, in accordance with the principle of data protection through technology design and through data protection-friendly default settings (Art. 25 GDPR).
Collaboration with processors and third parties
If, as part of our processing, we disclose data to other people and companies (processors or third parties), transfer it to them or otherwise give them access to the data grant, this only takes place on the basis of legal permission (e.g. if a transfer of data to third parties, such as payment service providers, in accordance with Art. 6 Para. 1 lit. b GDPR is necessary for the fulfillment of the contract), you have consented to this, a legal obligation or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.).
If we allow third parties to process data on the basis of a so-called If you commission a “order processing contract”, this is done on the basis of Art. 28 GDPR.
Transfers to third countries
If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or this occurs as part of the use of third-party services or disclosure or transmission of data to third parties, this only occurs if it is necessary to fulfill our (pre-)contractual obligations Obligations, based on your consent, based on a legal obligation or based on our legitimate interests. Subject to legal or contractual permissions, we only process or have the data processed in a third country if the special requirements of Art. 44 ff. GDPR are met. This means that the processing is carried out, for example, on the basis of special guarantees, such as the officially recognized determination of a data protection level that corresponds to the EU (e.g. for the USA through the “Privacy Shield”) or compliance with officially recognized special contractual obligations (so-called “standard contractual clauses”).
Rights of the data subjects
You have the right to request confirmation as to whether the data in question is being processed and to receive information about this data as well as further information and a copy of the data in accordance with Art. 15 GDPR.
You have accordingly. 16 GDPR you have the right to request that the data concerning you be completed or that incorrect data concerning you be corrected.
In accordance with Article 17 GDPR, you have the right to request that the data in question be deleted immediately or alternatively to request a restriction on the processing of the data in accordance with Art. 18 GDPR.
You have the right to request that the data concerning you, which you have provided to us in accordance with Art. 20 GDPR and to request that they be transmitted to other responsible parties.
You also have the right to lodge a complaint with the responsible supervisory authority in accordance with Art. 77 GDPR.
Right of withdrawal
You have the right to revoke your consent in accordance with Art. 7 Para. 3 GDPR with effect for to revoke your consent in the future
Right to object
You can object to the future processing of your data at any time in accordance with Article 21 of the GDPR. The objection can in particular be made against processing for direct advertising purposes.
Cookies and the right to object to direct advertising
“Cookies” are small files that are stored on users’ computers. Different information can be stored within the cookies. A cookie is primarily used to store information about a user (or the device on which the cookie is stored) during or after their visit to an online offering. Temporary cookies, or “session cookies” or “transient cookies,” are cookies that are deleted after a user leaves an online offering and closes their browser. Such a cookie can, for example, store the contents of a shopping cart in an online shop or a login status. Cookies that remain stored even after the browser is closed are referred to as “permanent” or “persistent”. For example, the login status can be saved if users visit it after several days. Such a cookie can also store the interests of the users, which are used for range measurement or marketing purposes. “Third-party cookies” are cookies that are offered by providers other than the person responsible for operating the online offering (otherwise, if they are only their cookies, they are referred to as “first-party cookies”).
We can use temporary and permanent cookies and explain this in our data protection declaration.
If users do not want cookies to be stored on their computer, they are asked to select the corresponding option in the system settings to deactivate your browser. Saved cookies can be deleted in the browser's system settings. The exclusion of cookies can lead to functional restrictions of this online offer.
A general objection to the use of cookies used for online marketing purposes can be made for a large number of services, especially in the case of tracking, via the US Pagehttp://www.aboutads.info/choices/ or the EU pagehttp://www.youronlinechoices.com/| ||139 erklärt werden. Des Weiteren kann die Speicherung von Cookies mittels deren Abschaltung in den Einstellungen des Browsers erreicht werden. Bitte beachten Sie, dass dann gegebenenfalls nicht alle Funktionen dieses Onlineangebotes genutzt werden können.
Deletion of data
The data processed by us will be deleted in accordance with Articles 17 and 18 GDPR limited in their processing. Unless expressly stated in this data protection declaration, the data stored by us will be deleted as soon as they are no longer required for their intended purpose and the deletion does not conflict with any legal retention obligations. Unless the data is deleted because it is required for other legally permissible purposes, its processing will be restricted. This means the data will be blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax reasons.
According to legal requirements in Germany, storage is carried out in particular for 10 years in accordance with Sections 147 Paragraph 1 AO, 257 Paragraph 1 No. 1 and 4, Paragraph 4 HGB (books, records, management reports, accounting documents, commercial books, documents relevant to taxation, etc.) and 6 years in accordance with Section 257 Paragraph 1 Nos. 2 and 3, Paragraph 4 HGB (commercial letters ).
According to legal requirements in Austria, storage is carried out in particular for 7 years in accordance with Section 132 Paragraph 1 BAO (accounting documents, receipts/invoices, accounts, receipts, business papers, list of income and expenses, etc.) , for 22 years in relation to immovable property and for 10 years in relation to documents relating to electronically provided services, telecommunications, radio and television services provided to non-entrepreneurs in EU Member States and for which the mini one-stop shop ( MOSS) is used.
Contacting
When contacting us (e.g. via contact form, email, telephone or via social media), the user's information is processed to process the contact request and process it in accordance with Article 6 Paragraph 1 Letter b) GDPR. User information can be stored in a customer relationship management system (“CRM system”) or comparable inquiry organization.
We delete the requests if they are no longer necessary. We review the necessity every two years; The statutory archiving obligations also apply.
Jetpack (WordPress Stats)
Based on our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offering within the meaning of Art. 6 Para. 1 lit. f. GDPR) the plugin Jetpack (here the sub-function “Wordpress Stats”), which integrates a tool for the statistical evaluation of visitor access and is from Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA. Jetpack uses so-called “cookies”, text files that are stored on your computer and which enable analysis of your use of the website.
The information generated by the cookie about your use of this online offer is stored on a server stored in the USA. User profiles can be created from the processed data, which are only used for analysis and not for advertising purposes. For more information, see Automattic's privacy policy:https://automattic.com/privacy/ and Jetpack cookie notices: https: //jetpack.com/support/cookies/.
Online presences in social media
We maintain online presences within social networks and platforms in order to communicate with those active there To communicate with customers, interested parties and users and to inform them about our services. When you access the respective networks and platforms, the terms and conditions and data processing guidelines of their respective operators apply.
Unless otherwise stated in our data protection declaration, we process users' data if they communicate with us within the social networks and platforms , e.g. write posts on our online presence or send us messages.
Inclusion of third-party services and content
Within our online offering, we rely on our legitimate interests (i.e. interest in analysis, optimization and economic operation of our online offering within the meaning of Art. 6 Para. 1 lit. f. GDPR) content or service offerings from third-party providers in order to integrate their content and services, such as videos or fonts (hereinafter referred to as “content”).
This always assumes that the third party providers of this content are aware of the user's IP address, as without the IP address they would not be able to send the content to their browser. The IP address is therefore required to display this content. We strive to only use content whose respective providers only use the IP address to deliver the content. Third parties may also use so-called pixel tags (invisible graphics, also known as “web beacons”) for statistical or marketing purposes. The “pixel tags” can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information can also be stored in cookies on the user's device and may contain, among other things, technical information about the browser and operating system, referring websites, visiting time and other information about the use of our online offering, as well as being linked to such information from other sources.|| |177
Erstellt mit Datenschutz-Generator.de von RA Dr. Thomas Schwenke