Source: https://struzik-art.com/en/privacy
Timestamp: 2019-04-22 11:09:00+00:00

Document:
We undertake to comply with statutory data protection regulations and endeavour always to take into account the principles of data avoidance and data minimisation.
We have designed our Privacy Statement in accordance with the principles of clarity and transparency. However, should there be any ambiguity regarding the use of various terms, the corresponding definitions can be found here: https://gdpr-info.eu.
You have given us your consent to the processing of your personal data for one or more purposes. See Art. 6 (1) (1) (a) GDPR.In this context, we will inform you in detail of the purposes of the processing and document your express consent.
Processing of your personal data is necessary for the performance of a contract or to take steps prior to entering into a contract with you. See Art. 6 (1) (1) (b) GDPR.
Processing of the personal data is necessary to protect our legitimate interests, except where such interests are overridden by your own or by your fundamental rights and freedoms. See Art 6 (1) (1) (f) GDPR.
However, we will always inform you at the appropriate points of the legal basis on which your personal data is being processed.
The transfer is necessary in accordance with Art. 6 (1) (1) (f) GDPR for the purpose of asserting, exercising or defending legal claims, and there is no reason to assume that you have an overriding interest worthy of protection in your data not being transferred.
this is legally permissible and necessary for managing contractual relationships with you, in accordance with Art. 6 (1) (1) (b) GDPR.
We store all personal data which you provide to us only for as long as they are required for the purposes for which they were transferred to us, or for as long as required by law. Once the purpose has been achieved, or upon expiry of the statutory storage periods, we will erase or restrict the data.
This site uses SSL encryption for security reasons and to safeguard the transfer of confidential content, such as any requests you send to us as the operators of the site. An encrypted connection may be identified by the change in the address from “http://” to “https://” and by the padlock symbol in your browser’s address bar.
With SSL encryption activated, the data which you transfer to us cannot be read by third parties.
the browser used and, if applicable, your computer’s operating system and the name of your access provider.
Data which permit your identification as a person, such as the IP address, will be deleted after 7 days at the latest. Any data stored by us beyond this period will be pseudonymised, so that they can no longer be associated with you.
The legal basis for the data processing is Art. 6 (1) (1) (f) GDPR. Our legitimate interest derives from the data collection purposes referenced above. Under no circumstances do we use the data collected for the purpose of identifying you as a person.
We provide a form on our website for you to contact us at any time. In order to use the contact form, you are required to enter a name (so that we may address you in person) and a valid e-mail address which we can use to contact you, so that we know who is making the request and we are able to process it.
If you use the contact form to send us requests, your data from the request form will be processed, including the contact details you provided in it and your IP address, pursuant to Art. 6 (1) (1) (b) and (f) GDPR, for the implementation of pre-contractual measures in response to your request or to exercise our legitimate interest, i.e. in the performance of our business activities.
You are also welcome to send us an e-mail using the e-mail address provided on our website. In this case, we will store and process your e-mail address and the data provided by you in the e-mail, pursuant to Art. 6 (1) (1) (b) and (f) GDPR, in order to process your message.
Requests and the data associated with them will be erased no later than 3 months after receipt, unless they are required for further contractual relationship purposes.
Data processed via cookies are required for the aforementioned purposes for the protection of our legitimate interests and those of third parties, in accordance with Art. 6 (1) (1) (f) GDPR.
Most browsers automatically accept cookies based on their settings. However, you can configure your browser either so that no cookies are stored on your client device, or at least so that a message is displayed before a new cookie is stored. If you completely deactivate the cookie feature in your browser, you may not be able to use all the features of our website.
In order to make your use of our range of services more enjoyable, we use what are known as “session cookies”, to recognise that you have already visited individual pages on our website.
These session cookies are automatically deleted after you have left our site.
These temporary cookies are stored on your client device for a specified period of time.
These cookies are automatically deleted after a specified period of time.
The existence of automated decision-making, including profiling, and, where appropriate, meaningful information about the logic involved.
In accordance with Art. 16 GDPR, you shall have the right to request the prompt rectification of inaccurate or incomplete personal data stored by us.
For reasons of public interest in the area of public health pursuant to Art. 9 (2) (h) and (i) and Art. 9 (3) GDPR.
You contest the accuracy of your personal data.
The processing is unlawful and you oppose the erasure of your personal data.
We no longer require the personal data for the purposes of the processing, but you require them for the establishment, exercise or defence of legal claims.
You object to processing pursuant to Art. 21 (1) GDPR.
we will notify all recipients to whom your personal data have been disclosed, unless this proves impossible or involves disproportionate effort. You may request that we inform you about those recipients.
You shall have the right to obtain the personal data which you have provided to us in a structured, commonly used and machine-readable format.
You shall also have the right to request the transfer of these data to a third party, provided that processing was carried out by automated means and based on your consent pursuant to Art. 6 (1) (1) (a) or Art. 9 (2) (a) or for the performance of a contract pursuant to Art. 6 (1) (1) (b) GDPR.
Pursuant to Art. 7 (3) GDPR, you shall have the right at any time to withdraw consent previously granted to us by you. The withdrawal of consent shall not affect the lawfulness of processing carried out based on that consent before its withdrawal.
We may carry out no further processing based on the withdrawal of your consent.
Pursuant to Art. 77 GDPR, you shall have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data is contrary to the GDPR.
However, such decisions shall not be based on special categories of personal data referred to in Art. 9 (1) GDPR, unless Art. 9 (2) (a) or (g) GDPR applies and suitable measures to safeguard your rights and freedoms and legitimate interests are in place.
In the cases referred to in a) and c), we shall implement suitable measures to safeguard your rights and freedoms and legitimate interests, including at least the right to obtain human intervention on our part, to express your point of view, and to contest the decision.
If we amend the Privacy Statement, this will be indicated on the homepage and registered customers will be informed by e-mail.

References: Art. 6
 Art. 6
 Art 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 16
 Art. 9
 Art. 9
 Art. 21
 Art. 6
 Art. 9
 Art. 6
 Art. 7
 Art. 77
 Art. 9
 Art. 9