Source: https://bhutanhouse.org/en/privacy-statement/
Timestamp: 2019-04-19 05:14:43+00:00

Document:
Thank you for your interest in Bhutan House e.K., our products and the information on our website. We assure you that our company takes data protection very seriously and that your personal data will only be collected and processed in accordance with the General Data Protection Regulation (GDPR/DSGVO) and other applicable data protection regulations.
The data collected on this website are processed by the website operator. The operator’s contact details can be found in the website’s required legal information.
Some data are collected when you provide it to us. This could be, for example, data you fill in a order form.
Part of the data is collected to ensure the proper functioning of the website. Other data can be used for the proper processing of an order or to analyse how visitors use the site.
You always have the right to request information about your stored data, its origin, its recipients, and the purpose of its collection at no charge. You also have the right to request that it be corrected, blocked, or deleted. You can contact us at any time using the address given in the legal information if you have further questions about the issue of privacy and data protection. You may also, of course, file a complaint with the competent regulatory authorities.
Payment transactions using common means of payment (e.g. Visa or MasterCard) are only made via encrypted SSL or TLS connections. You can recognize an encrypted connection in your browser’s address line when it changes from “http://” to “https://” and the lock icon in your browser line is visible.
As permitted by law, you have the right to be provided at any time with information free of charge about any of your personal data that is stored as well as its origin, the recipient and the purpose for which it has been processed. You also have the right to have this data corrected, blocked or deleted. You can contact us at any time using the address given in our legal information if you have further questions on the topic of personal data.
We hereby expressly prohibit the use of contact data published in the context of website legal information requirements with regard to sending promotional and informational materials not expressly requested. The website operator reserves the right to take specific legal action if unsolicited advertising material, such as email spam, is received.
The basis for data processing is Art. 6 (1) (f) GDPR(DSGVO), which allows the processing of data to fulfil a contract or for measures preliminary to a contract.
On our website you will find various places where you can make electronic contact. This also includes electronic mail (email). If you send us e.g. a request, your details from the form or email, including the contact data you provided, will be stored for the purpose of processing the enquiry and in the event of follow-up questions. We do not share this data without your consent.
The processing of the data provided by you on a voluntary basis is thus carried out exclusively on the basis of your consent (Art. 6 para. 1 lit. a GDPR/DSGVO). You may revoke this consent at any time. An informal email making this request is sufficient. The data processed before we receive your request may still be legally processed.
We will retain the data you provide until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer pertains. Any mandatory statutory provisions, especially those regarding mandatory data retention periods, remain unaffected by this provision.
We will process the data provided during registration only based on your consent per Art. 6 (1)(a) GDPR/DSGVO. You may revoke your consent at any time with future effect. An informal email making this request is sufficient. The data processed before we receive your request may still be legally processed.
We collect, process, and use personal data only insofar as it is necessary to establish, or modify legal relationships with us (master data). This is done based on Art. 6 (1) (b) GDPR/DSGVO, which allows the processing of data to fulfil a contract or for measures preliminary to a contract. We collect, process and use your personal data when accessing our website (usage data) only to the extent required to enable you to access our service or to bill you for the same.
The basis for data processing is Art. 6 (1) (b) GDPR/DSGVO, which allows the processing of data to fulfil a contract or for measures preliminary to a contract.
Google Analytics uses so-called “cookies”. These are text files that are stored on your computer and that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.
Google Analytics cookies are stored based on Art. 6 (1) (f) GDPR/DSGVO. The website operator has a legitimate interest in analysing user behaviour to optimize both its website and its advertising.
Conversion cookies are stored based on Art. 6 (1) (f) GSPR/DSGVO. The website operator has a legitimate interest in analysing user behaviour to optimize both its website and its advertising.
On our website we use contents, services and achievements of third parties, like e.g. Web Fonts, videos and links to other sides. In order to make this available, it is necessary that the IP address is transmitted from your device to the third party provider. Although we always try to choose a configuration that uses as little data as possible when using such tools and services, we have no influence on whether the IP address may be stored.
For this purpose, your browser has to establish a direct connection to Google servers. Google thus becomes aware that our web page was accessed via your IP address. The use of Google Web fonts is done in the interest of a uniform and attractive presentation of our website. This constitutes a justified interest pursuant to Art. 6 (1) (f) GDPR/DSGVO.
We use links to other websites (e.g. YouTube, TED) at various points on our website. These links will be changed from time to time. If you click on such a link, the information mentioned in point 3 will be transmitted to the operator of the other website. This data protection declaration does not regulate the collection, transfer or handling of personal data by third parties. Please check the data protection declaration of the respective responsible body.
We do not use social media plugins on our website, only direct links or so-called social bookmarks. Social bookmarks are also included as links to the corresponding services. Here too, the information mentioned in point 3 will be transmitted to the operator of the other website and you should check the data protection declaration of the respective responsible body. After clicking on the integrated graphic, the user is forwarded to the page of the respective provider. In addition, if an Internet page is forwarded via the “Share this content” button, it is possible that the corresponding Internet page becomes visible on Twitter, Facebook etc. and can be seen there as an activity in the respective profile of the user.
If you select payment via PayPal, the payment data you provide will be supplied to PayPal based on Art. 6 (1) (a) (Consent) and Art. 6 (1) (b) GDPR/DSGVO (Processing for contract purposes). By selecting this payment option, you automatically consent to the transfer of your personal data necessary for payment processing. You have the option to revoke your consent at any time with future effect. It does not affect the processing of data previously collected.
Our website also accepts credit card payments via Stripe. This service is provided by Stripe Inc., head quarter: 185 Berry Street, Suite 550, San Francisco, CA 94107, USA (further called Stripe).
Your data will be transmitted to Stripe based on Art. 6 (1)(a) (Consent) and Art. 6 (1)(b) GDPR/DSGVO (Processing for contract purposes). By selecting this payment option, you automatically consent to the transfer of your personal data necessary for payment processing. You have the option to revoke your consent at any time with future effect. It does not affect the processing of data previously collected.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6