Source: https://www.artedona.com/en/Privacy-Policy/
Timestamp: 2019-04-18 11:17:05+00:00

Document:
We are honored that you visit our website and thank you for your interest in our company. The security of your data is essential to us. We not only ensure that we comply with the European General Data Protection Regulation (GDPR) but we also ask ourselves what we would expect from a sophisticated online retail store to feel comfortable about entrusting our personal data online. For this reason we handle your personal data with utmost care and respect.
You can print or save this document by using the common functionality of your internet browser.
Should you object to the acquisition, processing or utilization of your data by Artedona in keeping with the stipulations of these data-protection provisions, whether entirely or for individual measures, you can send your objection per e-mail, by fax or by letter again using the previously mentioned contact options.
Besides contacting us or our data protection officer you also have the possibility to contact our responsible regulatory authority directly at any time.
We take the protection of your personal data very seriously. We treat your personal data as confidential and in accordance with the European General Data Protection Regulation (GDPR).
Personal data means any information relating to an identified or identifiable natural person ("data subject"). This includes among others your name, your address, your e-mail address, your phone number, your IP-address, and any other data that you provide while registering for a customer account with us.
We transmit and forward your personal data to third parties for the purpose of order fulfillment, and to processors, that process your personal data only with our specific or general written authorization (Art. 28 GDPR).
The criteria used to determine the period of storage of personal data is the respective statutory retention period. After expiration of that period, the corresponding data is routinely deleted, as long as it is no longer necessary for the fulfillment of the contract, the initiation of a contract, or the completion of the initial purpose of the data collection.
If you have given consent to the processing of your personal data, you have the right to withdraw your consent at any time. The withdrawal of consent shall not affect the lawfulness of data processing based on consent given before its withdrawal.
We do not perform any automated decision-making, including profiling.
Data processing is carried out in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. We store the information in our log files for 14 days. All content older than that is automatically deleted from the log files.
Generally, there are two types of cookies: so called "session cookies" which are automatically deleted after your visit, and cookies that remain in your device's memory for a longer time period or until you delete them. These cookies make it possible to recognize your browser when you visit our website again.
Most of the cookies that we use are session cookies and are automatically deleted when you end your session or close your browser.
Cookies which are necessary to allow electronic communications or to provide certain functions you wish to use (such as the shopping cart) are stored pursuant to Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in the storage of cookies to ensure an optimized service provided free of technical errors.
We may work together with advertising partners who help us to make our website more interesting for you. For this purpose, cookies from partner companies may also be stored on your device when you visit our website (third-party cookies). You will be informed individually and separately about the use of such cookies and the scope of the information collected in each case within the following sections.
Please note that you can set your browser in such a way that you are informed about the setting of cookies and you can decide individually about their acceptance or exclude the acceptance of cookies for certain cases or generally. Please note that the functionality of our website may be limited if cookies are not accepted.
This data is collected and saved only for our internal use, for order-fulfillment and our own purpose. Should a registered customer place an order through a customer account, then we may forward relevant personal data to third parties that are involved in and for the purpose of order fulfillment, such as logistics companies.
We will process the data provided during registration only based on your consent per Art. 6 (1) (a) GDPR.
You have the right to withdraw your consent at any time. An informal e-mail to service@artedona.com making this request is sufficient. The withdrawal of consent shall not affect the lawfulness of data processing based on consent given before its withdrawal.
During order processing and fulfillment, we collect, process, and use personal data only insofar as it is necessary to prepare and complete your order. This is done based on Art. 6 (1) (b) GDPR, which allows the processing of data to fulfill a contract or for measures preliminary to a contract.
To process your order we require your full name, your billing and shipping addresses, a telephone number to contact you in case of delivery problems and your e-mail address. If you pay by direct debit, this data also includes your bank account details. We give this data to those third-party companies, which are necessary to deliver your order to your doorstep. For example, our shipping partners UPS and DHL need to receive your shipping address, and our payment service provider, TeleCash GmbH & Co. KG requires your billing address and credit card data to process your payment.
If applicable, we perform credit checks for customers who are based in Germany.
We transmit customer data (name, address and if applicable date of birth) for the purpose of creditworthiness checks, the procurement of information to assess the default risk based on mathematical-statistical processes by using address data of customers, as well as for the purpose of address verification (validity check) to infoscore Consumer Data GmbH, Rheinstr. 99, 76532 Baden-Baden, Germany. The legal basis for such transmissions are Art. 6 (1) (b) and Art. 6 (1) (f) GDPR. Data transmissions based on these regulations are only permissible, if they are necessary to protect our legitimate interests or the legitimate interests of third parties and if they don't outweigh the interests of the basic rights and basic liberties of the concerned persons requiring the protection of their personal data. Detailed information about infoscore Consumer Data GmbH in terms of article 14 of the European General Data Protection Regulation (GDPR) can be found at https://finance.arvato.com/icdinfoblatt.
We do not store any credit card details. Such payment details are exclusively stored on the secure server of our payment service provider, TeleCash GmbH & Co. KG. We are "PCI-compliant" which means that we are compliant with the so called "Payment Card Industry Data Security Standard". This standard defines a secure process for credit card payments.
When paying via PayPal, credit card via PayPal, or direct debit via PayPal we transmit your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). The transfer takes place in accordance with Art. 6 (1) (b) GDPR and only insofar as this is necessary for payment processing.
We offer visitors to our website the option to register for our e-mail newsletter by providing a valid e-mail address. Further data is collected only on a voluntary basis. Registering for our newsletter requires a double opt-in process. Once you have subscribed to our newsletter using our website form, you will receive an e-mail containing a link. Please confirm your subscription by clicking on this link (thereby completing the "double opt-in").
We collect personal data during the newsletter registration process with the purpose of distributing our newsletter.
We will process the data provided during newsletter sign-up only based on your consent per Art. 6 (1) (a) GDPR. You have the right to withdraw your consent at any time. You can unsubscribe from our newsletter at any time through the link in the newsletter, through your customer account, or by contacting our customer service team at service@artedona.com. The withdrawal of consent shall not affect the lawfulness of data processing based on consent given before its withdrawal.
Distribution of our newsletter is performed by our partner company (processor) Mission One GmbH, Messerschmittstr. 7, 89231 Neu-Ulm, Germany. We only transmit the minimum required information.
Our newsletter contains so-called tracking pixels. A tracking pixel is a miniature graphic embedded in such e-mails, which are sent in HTML format to enable log file recording and analysis. This allows a statistical analysis of the success or failure of online marketing campaigns. Based on the embedded tracking pixel, we may see if and when an e-mail was opened by the recipient, and which links in the e-mail were clicked on by the recipient.
Such personal data collected in the tracking pixels contained in the newsletters are stored and analyzed by us in order to optimize the layout and distribution of our newsletter. Newsletter tracking is carried out in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in optimizing the layout and distribution of the newsletter. Personal data collected through newsletter-tracking will not be passed on to third parties.
You are at any time entitled to revoke the respective separate declaration of consent issued by means of the double-opt-in procedure. After a revocation, these personal data will be deleted by us. We automatically regard a withdrawal from the receipt of the newsletter as a revocation.
Such personal data transmitted through the contact form is stored for the purpose of processing your enquiry and of replying to any ensuing questions. We do not share this information without your permission.
We will process any data you enter into the contact form only with your consent per Art. 6 (1) (a) GDPR. You may revoke your consent at any time. An informal e-mail making this request is sufficient. The data processed before we receive your request may still be legally processed.
Web-analytics is the collection, gathering, and analysis of data about the behavior of visitors to websites. As examples, a web-analysis service collects data about the website from which a person has come (the so-called referrer), which specific pages (URLs) were visited on a website, or how often and for what duration these pages were viewed. We use web-analytics mainly for the optimization of our website and in order to carry out a cost-benefit analysis of our internet marketing measures.
This website uses Google Analytics, a web-analytics service. It is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics uses so-called "cookies". These are text files that are stored on your computer and that allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.
This website uses Google Analytics exclusively with the extension "_anonymizeIp()", which ensures an anonymization of the IP address by shortening it and excludes a direct personal relationship. As a result of the extension, your IP address will previously be shortened by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases, the full IP address will be transmitted to a Google server in the USA and shortened there. In these exceptional cases, processing is carried out in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes.
You can also prevent the collection of your data by Google Analytics by clicking on the following link: Disable Google Analytics. An opt-out cookie will be set to prevent your data from being collected on future visits to this website.
Our Artedona website can easily be shared on Facebook, Pinterest and Twitter. Our implemented solution strongly protects your data privacy. Our social-sharing buttons contain only static links to the social networks. You will be forwarded to the social network in a separate browser window.
If you visit one of our pages featuring a YouTube plugin, a connection to the YouTube servers is established. Thereby, the YouTube server gets informed about which of our pages you have visited.
Further information about handling user data, can be found in the data protection declaration of YouTube under: https://policies.google.com/privacy?hl=en.
Our website uses web fonts provided by Google. When you open a page on our website, your browser loads the required web fonts automatically into your browser cache to display texts and fonts correctly.
When you call up a page of our website, your browser makes a direct connection with Google servers. Google thus becomes aware that our web page was accessed via your IP address.
The use of Google Web fonts is done in the interest of a uniform and attractive presentation of our website. This constitutes a justified interest pursuant to Art. 6 (1) (f) GDPR.
Your personal data is securely transmitted using https-encryption. This also applies when you are placing an order with us or when you register for a customer account on our website. We encrypt your data using the SSL (Secure Socket Layer) protocol.
Our servers are protected by a Firewall against unauthorized access. We do not store any credit card details. Such payment details are exclusively stored on the secure server of our payment service provider, TeleCash GmbH & Co. KG. We are "PCI-compliant" which means that we are compliant with the so called "Payment Card Industry Data Security Standard". This standard defines a secure process for credit card payments.
Regarding your personal data, the General Data Protection Regulation (GDPR) provides you with the rights described in the following sub-chapters. Our data protection officer can be contacted at any time regarding your questions about your rights. You can contact him by e-mail datenschutz@artedona.com.
According to Art. 15 GDPR, the data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the information that is outlined in Art. 15 GDPR. This includes the personal data that is stored as well as its origin, the recipient and the purpose for which it has been processed. If you wish to claim your right of access, you may contact us at any time.
According to Art. 16 GDPR, the data subject shall have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement. If you wish to claim your right to rectification, you may contact us at any time.
According to Art. 17 GDPR, the data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay and the controller shall have the obligation to erase personal data without undue delay where one of the grounds outlined in Art. 17 GDPR applies. If you wish to claim your right to erasure, you may contact us at any time.
According to Art. 18 GDPR, the data subject shall have the right to obtain from the controller restriction of processing, where one of the conditions outlined in Art. 18 GDPR applies. If you wish to claim your right to restriction of processing, you may contact us at any time.
According to Art. 20 GDPR, you have the right to have data which we process based on your consent or in fulfillment of a contract automatically delivered to yourself or to a third party in a standard, machine-readable format. If you require the direct transfer of data to another responsible party, this will only be done to the extent technically feasible. If you wish to claim your right to data portability, you may contact us at any time.
According to Art. 7 (3) GDPR, the data subject shall have the right to withdraw his or her consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. If you wish to claim your right to withdraw consent, you may contact us at any time.
According to Art. 77 GDPR, if there has been a breach of data protection legislation, the person affected may lodge a complaint with a supervisory authority.
According to Art. 21 GDPR, if, within the framework of a consideration of interests, we process your personal data on the basis of our predominant legitimate interest, you have the right at any time to object to this processing with effect for the future on the grounds that arise from your particular situation.
If you exercise your right to object, we will stop processing the data concerned for direct marketing purposes.
If you wish to exercise your right to object, you may contact as at any time, e.g. by writing an e-mail to service@artedona.com.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 15
 Art. 15
 Art. 16
 Art. 17
 Art. 17
 Art. 18
 Art. 18
 Art. 20
 Art. 7
 Art. 77
 Art. 21