Source: https://sabinewachs-porzellan.de/en/datenschutz/
Timestamp: 2019-04-22 16:35:11+00:00

Document:
Insofar as we obtain the consent of the data subject for processing of personal data, Art. 6 para. 1 lit. a GDPR as legal basis. In the processing of personal data necessary for the performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b GDPR as legal basis. This also applies to processing operations required to carry out pre-contractual actions. Insofar as processing of personal data is required to fulfill a legal obligation that is subject to our company, Art. 6 para. 1 lit. c GDPR as legal basis. In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR as legal basis. If processing is necessary to safeguard the legitimate interests of our company or a third party, and if the interests, fundamental rights and freedoms of the data subject do not prevail over the first interest, Art. 6 para. 1 lit. f DSGVO as legal basis for processing.
The temporary storage of the IP address by the system is necessary to allow delivery of the website to the computer of the user. To do this, the user’s IP address must be kept for the duration of the session. Storage in log files is done to ensure the functionality of the website. In addition, the data is used to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context. For these purposes, our legitimate interest in the processing of data according to Art. 6 para. 1 lit. f GDPR.
The data will be deleted as soon as it is no longer necessary for the purpose of its collection. In the case of collecting the data for providing the website, this is the case when the respective session is completed. In the case of storing the data in log files, this is the case after no more than seven days. Within this period, all IP addresses are completely anonymized.
In order to best protect the data transmitted by the user, this website uses SSL encryption in its entirety. You recognize such encrypted connections with the prefix “https: //” in the page link in the address bar of your browser. Unencrypted pages are identified by “https: //”. All data that you submit to this website – such as contact forms, page views or logins – are protected by SSL encryption against unauthorized access by third parties.
This website is hosted on servers of the company All-Inkl.com, Hauptstraße 68, 02742 Friedersdorf, because the operator of this website does not have technical facilities to host the site itself. This means that the company All-Inkl.com has the potential to view data processed and stored by this website and to process them within the scope of the technical necessity.
For this reason, a contract processing contract has been concluded with All-Inkl.com, which guarantees that all provisions of the GDPR will be used and that all personal data will be used securely and in accordance with applicable legal provisions.
The data of the users collected in this way are pseudonymized by technical precautions. Therefore, an assignment of the data to the calling user is no longer possible. The data will not be stored together with other personal data of the users. Further information on the use of analysis services is listed under VII.
The processing of users’ personal data enables us to analyze the surfing behavior of our users. By analyzing the obtained data, we are able to compile information about the use of the individual components of our website. This helps us to constantly improve our website and its user-friendliness. For these purposes, our legitimate interest lies in the processing of the data according to Art. 6 para. 1 lit. f GDPR. The anonymisation of the IP address sufficiently takes into account the interest of users in their protection of personal data.
The data will be deleted as soon as they are no longer needed for our recording purposes. In our case, this is the case after 90 days.
You can contact us via the provided e-mail address on our website. In this case, the user’s personal data transmitted by e-mail will be stored. In this context, there is no disclosure of the data to third parties. The data is used exclusively for processing the conversation.
The legal basis for the processing of personal data with the use of Youtube is Art. 6 para. 1 lit. a GDPR.
Our website uses the Content Management System (CMS) WordPress. As one of the most widely used CMS worldwide, WordPress is often the target of unauthorized access attempts by third parties (hackers, bot networks, etc.). In terms of optimal data protection and the security of all content provided here, the WordPress installation of this site works with an additional function, a so-called plugin. The plugin “iThemes Security” makes useful and sometimes indispensable precautions to ensure the security of the website and thus the security of any personal data.
Our CMS has a so-called “backend”, an access to the administrative interface. This access is hidden and principally only accessible for the owner of this website. This access is monitored and logged by “iThemes Security”, for example in the case of mis-registrations or attempts to find access data through frequent password testing (“brute force method”). Unauthorized access attempts are stored in our database including IP address for 7 days and then deleted. In the case of several unlawful access attempts, storage and blocking of the IP is planned beyond this period.
It is not to be expected that this will be the case for any user of this site. Nevertheless, in the sense of a transparent data policy, the technical possibility should be mentioned at this point.
IThemes Security also allows for analysis of brute force attacks on servers outside the EU. This feature is disabled on this page, iThemes Security will never send data to servers outside the EU.
The legal basis for the processing of personal data using “iThemes Security” is Article 6 (1) lit. f GDPR.
“IThemes Security” protects this site from technical attacks and access attempts by third parties. This ensures the security of the entire website and the stability of our server, as well as the protection of any personal data processed elsewhere. The IP addresses used for the check are only used by iThemes Security for this purpose. In this purpose, our legitimate interest in the processing of IP addresses according to Art. 6 para. 1 lit. f GDPR.
IP addresses are only stored by iThemes Security for brute-force attacks. Unauthorized access attempts are stored in our database including IP address for 7 days and then deleted. In the case of several unlawful access attempts, storage and blocking of the IP is planned beyond this period.
By calling this page, your IP address will be checked by “iThemes Security” and is absolutely necessary for the secure operation of the website. There is consequently no contradiction on the part of the user. However, it is possible to delete any stored IP addresses at the request of the user from our database.
However, these decisions must not be based on special categories of personal data under Art. 9 (1) GDPR, unless Art. 9 (2) lit. a or g GDPR applies and reasonable measures have been taken to protect the rights and freedoms as well as your legitimate interests. With regard to the cases referred to in (1) and (3), the person responsible shall take appropriate measures to uphold the rights and freedoms and their legitimate interests, including at least the right to obtain the intervention of a person by the controller, to express his / her own position and heard on challenge of the decision.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 9
 Art. 9