PRIVACY
PRIVACY POLICY
Responsible for data processing is:
Jennifer Göbelhaider
Sonnenbergerstr. 32A
65193 Wiesbaden
jenno@artofviva.de
We are pleased that you are interested in our online shop. Protecting your privacy is very important to us. Below we inform you in detail about the handling of your data.
1. Access data and hosting
You can visit our website without providing any personal information. Each time a website is called up, the web server automatically saves a so-called server log file, which contains, for example, the name of the requested file, your IP address, date and time of the call, the amount of data transferred and the requesting provider (access data) and documents the call.
If you only use our website for informational purposes, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data that is technically necessary for us to display the website to you:
• Visited website
• Date and time at the time of access
• Quantity of the data sent in bytes
• Source/reference from which you came to the page
• Browser used
• Operating system used
• IP address used (if necessary: in anonymous form)
The processing takes place in accordance with Article 6 Paragraph 1 Letter f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of illegal use.
Hosting services by a third party
In the context of processing on our behalf a third-party provider provides us with the services for hosting and displaying the website. This serves to protect our overriding legitimate interests in a correct presentation of our offer within the framework of a balancing of interests. All data that is collected as part of the use of this website or in the forms provided for this purpose in the online shop as described below is processed on its servers. Processing on other servers only takes place within the framework explained here.
Hosting by Shopify
We use the shop system of the service provider Shopify International Limited, Victoria Buildings, 2nd floor, 1st floor -2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"), for the purpose of hosting and displaying the online shop on the basis of processing on our behalf. All data collected on our website is processed on Shopify's servers. As part of the aforementioned Shopify services, data may also be processed as part of further processing on behalf of Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc .or Shopify (USA) Inc. In the case of the transmission of data to Shopify Inc. in Canada, the appropriate level of data protection is guaranteed by the European Commission's adequacy decision. Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc. and Shopify (USA) Inc. in the USA are certified for the US-European data protection agreement "Privacy Shield", which ensures compliance with the data protection level applicable in the EU guaranteed.
For more information about Shopify's privacy policy, visit the following website: https://www.shopify.de/legal/datenschutz
Further processing on servers other than those of Shopify mentioned above will only take place within the framework communicated below
2. Data collection and data use for contract processing, contact
We collect personal data if you voluntarily provide it to us as part of your order or when contacting us (e.g. via contact form or e-mail). Mandatory fields are marked as such, since in these cases we need the data to process the contract or to process your contact and you cannot send the order or contact without providing them. Which data is collected can be seen from the respective input forms. We use the data provided by you in accordance with Article 6 Paragraph 1 Sentence 1 lit. b GDPR to process the contract and your inquiries. If you have given your consent to this in accordance with Article 6 Paragraph 1 Clause 1 Letter a GDPR by deciding to open a customer account, we will use your data for the purpose of opening a customer account. After the contract has been completed or your customer account has been deleted, your data will be restricted for further processing and deleted after the retention periods under tax and commercial law have expired, unless you have expressly consented to further use of your data or we reserve the right to use the data beyond that is permitted by law and about which we inform you in this statement. The deletion of your customer account is possible at any time and can be done either by sending a message to the contact option described below or using a function provided for this purpose in the customer account.
3. Data transfer
In order to fulfill the contract in accordance with Article 6 Paragraph 1 Sentence 1 lit. b GDPR, we pass on your data to the shipping company commissioned with the delivery, insofar as this is necessary for the delivery of the goods ordered. Depending on which payment service provider you select in the ordering process, we pass on the payment data collected for this purpose to the credit institution commissioned with the payment and, if applicable, to the payment service provider commissioned by us or to the selected payment service to process payments. Some of the selected payment service providers also collect this data themselves if you create an account there. In this case, you must register with the payment service provider with your access data during the ordering process. In this respect, the data protection declaration of the respective payment service provider applies.
Data transfer to shipping service provider
If you have given us your express consent to this during or after your order, we will give it on the basis of this in accordance with Art. 6 Paragraph 1 sentence 1 lit. a GDPR forwards your e-mail address to the selected shipping service provider so that they can contact you before delivery for the purpose of delivery notification or coordination.
The consent can be revoked at any time by sending a message to the contact option described below or directly to the shipping service provider at the contact address listed below. After revocation, we will delete the data you have provided for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.
For In the event that the shipment is made via DHL, we will pass on your respective data to Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn.
4.E-mail newsletter
E-mail advertising with registration for the newsletter
If you register for our newsletter, we use the necessary or separately communicated information Data in order to send you our e-mail newsletter on a regular basis based on your consent in accordance with Article 6 (1) sentence 1 lit. a GDPR.
Unsubscribing from the newsletter is possible at any time and can be done either by sending a message to the contact option described below or via a link provided for this purpose in the newsletter. After unsubscribing, we will delete your e-mail address, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we will inform you in this declaration.
You will receive our newsletter by e-mail via the Omnisend service from the provider Soundest Limited , 22 Mare Street, London, E8 4RT, United Kingdom (Omnisend). If you subscribe to our newsletter, we will transmit the data you have provided for this purpose to Omnisend. The data is processed with your express consent, which we ask for before registering (Article 6 (1) (a) GDPR).
Using the Omnisend service, we can statistically analyze our newsletter campaigns. When you open an e-mail sent with Omnisend, a file contained in the e-mail (so-called web beacon) connects to Omnisend's servers. This enables us to analyze whether you have opened a newsletter message and which links you may have clicked on. In addition, Omnisend anonymously collects technical information in our system (e.g. time of retrieval, IP address, browser type and operating system). The technical information is collected exclusively for the statistical analysis of our newsletter campaigns and cannot be assigned to the respective newsletter recipient. We use the results of these analyzes to better adapt future newsletters to the interests of the recipients. This serves our legitimate interest in providing a user-friendly newsletter system and for our own marketing purposes within the meaning of Article 6 (1) (f) GDPR. The data determined in this way will of course not be passed on to third parties.
If you do not wish to receive an analysis or a newsletter via Omnisend, you can unsubscribe from the newsletter at any time by sending us a message to the e-mail address given in the imprint . In addition, we provide a link to unsubscribe in every newsletter e-mail.
Omnisend is certified under the US-European data protection agreement "Privacy Shield" and thus undertakes to comply with EU data protection regulations. Omnisend's privacy policy can be found at: https://www.omnisend.com/privacy.
5. Cookies and web analysis
In order to make visiting our website attractive and to enable the use of certain functions, to display suitable products or for market research, we use so-called cookies on various pages. This serves to protect our overriding legitimate interests in an optimized presentation of our offer in accordance with Article 6 Paragraph 1 Sentence 1 lit. f GDPR. Cookies are small text files that are automatically saved on your end device. Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your end device and enable us to recognize your browser the next time you visit (persistent cookies).You can see the duration of storage in the overview in the cookie settings of your web browser. You can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings.
You can find these for the respective browser under the following links:
Internet Explorer™: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Safari™: https://support.apple. com/de-de/guide/safari/sfri11471/12.0/mac/10.14
Chrome™: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
Firefox™: https://support.mozilla.org/en/kb/allow-and-reject-cookies
Opera™ : https://help.opera.com/en/latest/web-preferences/#cookies
If cookies are not accepted, the functionality of our website may be restricted.
As part of the use of Google Analytics (see below), this website also uses the so-called DoubleClick cookie, which allows your browser to be recognized when you visit other websites allowed. The information automatically generated by the cookie about your visit to this website is usually transmitted to a Google server in the USA and stored there. The IP address is shortened by activating IP anonymization on this website before transmission within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there. The anonymized IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
Google will use this information to compile reports on website activity and to provide other services related to website activity provide. This serves to safeguard our overriding legitimate interests in optimal marketing of our website in accordance with Article 6 Paragraph 1 Sentence 1 lit. f GDPR. Google may also transfer this information to third parties if required to do so by law or if third parties process this data on Google's behalf. After the end of our use of Google DoubleClick, the data collected in this context will be deleted.
Google DoubleClick is an offer from Google Ireland Limited, a company registered and operated under Irish law with its registered office in Gordon House , Barrow Street, Dublin 4, Ireland. (www.google.de).
Insofar as information is transferred to Google servers in the USA and stored there, the American company Google LLC is certified under the EU-US Privacy Shield. A current certificate can be viewed here. For companies certified under the Privacy Shield, an appropriate level of data protection is determined based on the agreement between the USA, the European Commission and Switzerland.
You can deactivate the DoubleClick cookie via this link. You can also find out more about the setting of cookies from the Digital Advertising Alliance and make settings for this. Finally, you can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or exclude the acceptance of cookies for certain cases or in general. If cookies are not accepted, the functionality of our website may be restricted.
Essential cookies
Necessary cookies help make a website usable by enabling basic functions such as page navigation and access to secure areas of the website. Without these cookies the website cannot function properly work.
Statistics and marketing cookies
Statistical cookies help shop owners to understand how customers interact with websites by collecting and reporting information anonymously. Marketing cookies are used to track visitors across websites. The aim is to place advertising that is relevant and appealing to the individual user and is therefore more valuable to third-party advertisers.
Use of Google (Universal) Analytics for web analysis
This website uses Google (Universal) Analytics for website analysis. The web analytics service is provided by Google Ireland Limited, a company incorporated and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (www.google.de). This serves to protect our overriding legitimate interests in an optimized presentation of our offer in accordance with Article 6 Paragraph 1 Sentence 1 lit. f GDPR. Google (Universal) Analytics uses methods that enable an analysis of your use of the website, such as cookies. The automatically collected information about your use of this website is usually transferred to a Google server in the USA and stored there. By activating IP anonymization on this website, the IP address is shortened before transmission within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there. The anonymized IP address transmitted by your browser as part of Google Analytics is generally not merged with other Google data. The data collected in this context will be deleted after we no longer use Google Analytics.
Insofar as information is transferred to Google servers in the USA and stored there, the American company Google LLC is under the EU -US Privacy Shield certified. A current certificate can be viewed here. Based on this agreement between the USA and the European Commission, the latter has established an appropriate level of data protection for companies certified under the Privacy Shield.
You can prevent the collection of the data generated by the cookie and related to your use of the website (incl. your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de
As an alternative to the browser plugin, you can click this link to prevent future detection by Google Analytics on this website. An opt-out cookie is stored on your end device. If you delete your cookies, you must click the link again
6. Online Marketing
Google Ads Remarketing
We use Google Ads to advertise this website in Google search results and on third-party websites. For this purpose, when you visit our website, the so-called remarketing cookie is set by Google, which automatically enables interest-based advertising using a pseudonymous cookie ID and based on the pages you visit. This serves to safeguard our overriding legitimate interests in optimal marketing of our website in accordance with Article 6 Paragraph 1 Sentence 1 lit. f GDPR.After the end of our use of Google Ads Remarketing, the data collected in this context will be deleted
Any further data processing will only take place if you have given Google consent to your web and app browser history being processed by Google Linked to their Google Account and information from their Google Account is used to personalize ads they see across the web. In this case, if you are logged in to Google while visiting our website, Google will use your data together with Google Analytics data to create and define target group lists for cross-device remarketing. For this purpose, Google will temporarily link your personal data to Google Analytics data in order to form target groups.
Google Ads is an offer from Google Ireland Limited, a company incorporated and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (www.google.de).
Insofar as information is transferred to Google servers in the USA and stored there, the American company Google LLC is certified under the EU-US Privacy Shield.
A current certificate can be viewed here. Based on this agreement between the USA and the European Commission, the latter has established an adequate level of data protection for companies certified under the Privacy Shield.
You can deactivate the remarketing cookie via this link. You can also find out more about the setting of cookies from the Digital Advertising Alliance and make settings for this.
Our online presence on Facebook, Google, Instagram, Pinterest
Our presence on social networks and platforms serves a better, active communication with our customers and interested parties. We provide information there about our products and current special offers. When you visit our online presence in social media, your data can be automatically collected and stored for market research and advertising purposes. So-called usage profiles are created from this data using pseudonyms. These can be used, for example, to place advertisements inside and outside the platforms that presumably correspond to your interests. Cookies are usually used on your end device for this purpose. Visitor behavior and user interests are stored in these cookies. According to Art. 6 (1) lit. f GDPR, this serves to protect our legitimate interests in an optimized presentation of our offer and effective communication with customers and interested parties. If you are asked by the respective social media platform operators for your consent (consent) to the data processing, e.g. with the help of a checkbox, the legal basis for the data processing is Article 6 Paragraph 1 lit the aforementioned social media platforms have their headquarters in the USA, the following applies: The European Commission has issued an adequacy decision for the USA. This goes back to the EU-US Privacy Shield. A current certificate for the respective company can be viewed here.
Detailed information on the processing and use of the data by the providers on their website as well as a contact option and your rights and setting options to protect your privacy, in particular objection options ( opt-out), please refer to the data protection notices of the providers linked below.
If you still need help in this regard, you can contact us.
Data processing is based on an agreement between joint controllers in accordance with Art. 26 GDPR, which you can view here:
Facebook: https://www.facebookcom/about/privacy/
Google/ YouTube: https://policies.google.com/privacy
Instagram: https://help.instagram.com/519522125107875
Pinterest: https://about .pinterest.com/de/privacy-policy
Opt-out option:
Facebook: https://www.facebook.com/settings?tab =ads
Google/ YouTube: https://adssettings.google.com/authenticated
Instagram: https://help.instagram.com/519522125107875
Pinterest: https://www.pinterest.de /?next=/settings/
7. Contact options and your rights
As a data subject, you have the following rights:
according to Art. 15 GDPR, the right to request information about your personal data processed by us to the extent specified there;
according to Art. 16 GDPR, the right to immediately request the To request the correction of incorrect or incomplete personal data stored by us;
according to Art. 17 DSGVO the right to request the deletion of your personal data stored by us, provided that further processing
- to exercise the right to free Expression of opinion and information;
- to fulfill a legal obligation;
- for reasons of public interest or
- to assert, exercise or defend legal claims
is required;
according to Art. 18 GDPR the right to request the restriction of the processing of your personal data, insofar as
- you dispute the accuracy of the data;
- the processing is unlawful, you a refuse to delete them;
- we no longer need the data, but you need them to assert, exercise or defend legal claims or
- you have lodged an objection to the processing in accordance with Art. 21 GDPR;
according to Art. 20 GDPR the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request transmission to another person responsible;
according to Art. 77 GDPR the right to to complain to a supervisory authority. As a rule, you can contact the supervisory authority at your usual place of residence or work or at our company headquarters If you have given your consent or object to a specific use of data, please contact us directly using the contact details in our imprint.
8. Right to object
Insofar as we process personal data as explained above in order to safeguard our legitimate interests which outweigh our interests, you can object to this processing with effect for the future. If the processing is for direct marketing purposes, you can exercise this right at any time as described above. If the processing is for other purposes, you only have a right to object if there are reasons that arise from your particular situation.
After you have exercised your right to object, we will no longer process your personal data for these purposes, unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.
This does not apply if the processing for direct marketing purposes. Then we will no longer process your personal data for this purpose.