Source: https://www.artcraftmodel.com/en/datenschutz/
Timestamp: 2019-04-18 17:12:24+00:00

Document:
We take the protection of your data seriously and make every effort to collect and store as little data as possible. Nevertheless, a certain degree of storage and evaluation of user data is necessary to guarantee and improve the operation of this website. The use of this Internet site is basically possible without having to provide any personal data. Nor is there any assignment of data to a specific person - unless you tell us your name, for example in an e-mail, via one of our forms or as part of an order.
If you use one of the services offered on this website or buy goods, this also regularly requires the collection, processing and storage of personal data, such as your name, your address, your e-mail address or telephone number. This collection, processing and storage takes place either on the basis of your express consent obtained beforehand or on the basis of a corresponding legal approval and on the basis of the provisions of the European Data Protection Basic Regulation and the German Federal Data Protection Act.
We would like to inform you here about the type, scope and purpose of the data collected, processed, stored and used by us via this website as well as about your rights in this context.
We use SSL transport encryption on this site. This serves among other things the protection of confidential contents, for example in the case of inquiries to us. You can see that the connection is actually encrypted in the address line of your browser, which always starts with "https://" and confirms the existing transport encryption with a green lock symbol.
an objection as to whether or not there has been an infringement of this Regulation or whether the proposed measure is in conformity with this Regulation against the controller or the processor, where the objection clearly indicates the scope of the risks posed by the draft decision in relation to the fundamental rights and freedoms of data subjects and, where appropriate, the free movement of personal data within the Union.
For processing operations for which we request consent for a specific processing purpose, the processing is carried out on the basis of Article 6(1)(a) of the Basic Data Protection Regulation.
Insofar as the processing of personal data is necessary for the performance of a contract to which the data subject is a party (e.g. for the delivery of goods or the rendering of another service or consideration) or for the performance of pre-contractual measures (e.g. for enquiries about our products or services), the processing is based on Article 6 paragraph 1 letter b of the Basic Data Protection Regulation.
Insofar as processing of personal data is necessary on the basis of a legal obligation applicable to us, such as for the fulfilment of tax obligations or commercial storage regulations, the processing is carried out on the basis of Article 6 paragraph 1 letter c of the Basic Data Protection Regulation.
Where the processing of personal data should exceptionally be necessary to protect the vital interests of the data subject or another natural person, processing would be carried out on the basis of Article 6(1)(d) of the Basic Data Protection Regulation.
The processing of personal data necessary to safeguard a legitimate interest of our company or of a third party shall be carried out on the basis of Article 6(1)(f) of the Basic Data Protection Regulation, unless the interests or fundamental rights and freedoms of the data subject which require the protection of personal data prevail. Such a legitimate interest also represents the conduct of our business for the well-being of all our employees and our shareholders.
The provision of personal data may be required for legal (e.g. commercial or tax) reasons or for reasons of contract execution. If such data (such as information on a contractual partner) is not made available to us for processing, we cannot conclude a corresponding contract.
This data is collected anonymously by us and stored separately from all personal data provided to us by a data subject.
evaluate use profiles under a pseudonym, but only if you have not made use of your legal right to object to this use of your data. Some of our services require that we use so-called cookies.
These are small (text files) that your web browser stores on your device. Cookies may store information about your visit to our website that enables us to recognise your browser and to distinguish it from the browsers of other persons affected.
visitor tracking through advertising networks.
This website uses "Google Analytics" for statistical analysis of visitor access. This is a web analysis service offered by Google Inc. Google Inc. acts on our behalf as a contract processor. The data is collected and processed via servers operated by Google Inc, which are usually not located in the European Union but in the USA. Pseudonymous user profiles of visitors to our website are created.
We use the web analysis service "Google Analytics" with activated "IP-Anonymisation". This shortens the IP address of visitors to our website. This shortening of the IP address is not done by us, but by Google Inc.
Important for you: You can generally prevent the installation of cookies by setting your browser software accordingly. Alternatively, you can prevent Google from collecting, processing and storing the data generated by the cookie by downloading and installing the browser plug-in available at https://tools.google.com/dlpage/gaoptout?hl=en.
The data protection declaration of Google Inc. applicable to the "Google Analytics" service can be viewed at https://support.google.com/analytics/answer/6004245?hl=en .
If you send us an e-mail or contact us via a contact form, the personal data voluntarily transmitted to us will be automatically stored and, if necessary, processed for the purpose of processing or contacting you. This includes - if stated by you - in particular your name, your address or e-mail address, your telephone number and any other information you provide voluntarily. If you contact us via a form provided on this website, your IP address will also be stored. As a matter of principle, we only use the resulting personal data to the extent necessary for processing your inquiries and orders. This data is never passed on to third parties, unless we are legally obliged to do so.
This website offers you the possibility of registration. This registration takes place under indication of personal data, which we inquire in the form provided for this purpose. In addition, the IP address used by you and the date and time of sending the registration form are recorded. This personal data is collected and stored by us for internal use, for the purpose of communicating with you, for processing existing or future contractual relationships (e.g. orders), for protecting our technical system and for preventing misuse and, if necessary, for passing on to one or more contract processors (such as postal, parcel and payment service providers).
As a registered person, you can change or delete your personal data provided at the time of registration at any time, provided there are no legal regulations to the contrary, such as legal retention regulations. You can also obtain information from us at any time about which personal data about you as the person concerned is stored.
If you subscribe to a newsletter offered by us on this website, you must submit certain personal data, in particular your e-mail address, to us using the corresponding input form.
For legal reasons we use the "Double-Opt-In"-procedure for the newsletter registration by means of an automatically processed confirmation e-mail to the e-mail address provided by you. We hereby check whether the owner of the e-mail address you have provided has actually authorised the receipt of the newsletter as the person concerned.
for sending information and enquiries by e-mail which are necessary or required for the operation or further development of the newsletter service.
A newsletter subscription can be cancelled at any time and consent to the storage of personal data can be revoked at any time. Such termination or revocation may be effected via the link contained in each newsletter or by other communication to the controller. In the event of both termination and revocation, we will delete the respective personal data, unless otherwise required by law, and discontinue sending the newsletter to the person concerned.
In addition to the information provided via the input form, we also store the date and time of your registration and the IP address you use for this purpose. This is done for the purpose of our own legal protection and to protect our technical systems against misuse.
The newsletters we send contain pixel tags, i.e. miniature graphics embedded in the e-mail, whose call is recorded in a log file and is used to determine whether and when the respective newsletter was opened. In the same way, the links contained in the newsletter are recorded and evaluated. This data is stored and processed exclusively for the purpose of statistical evaluation of the newsletter dispatch, optimisation of the newsletter dispatch and better adaptation of the newsletter content to the respective subscriber.
We use the offer of Google Adwords to draw attention to our attractive offers with the help of advertising materials (so-called Google Adwords) on external websites. We can determine in relation to the data of the advertising campaigns how successful the individual advertising measures are. We are interested in showing you advertisements that are of interest to you, to make our website more interesting for you and to achieve a fair calculation of advertising costs.
These cookies enable Google to recognise your Internet browser. If the user visits a certain page of the website of an adword customer and if the cookie has not yet expired, Google and the customer will be able to tell that the user clicked on the ad and was forwarded to this page. Each Google AdWords customer gets a different cookie. Thus, cookies cannot be tracked via the website of AdWords clients. We do not collect and process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. On the basis of these evaluations we can recognise which of the used advertising measures are particularly effective. We do not receive any further data from the use of advertising material; in particular, we cannot identify users on the basis of this information.
Due to the marketing tools used, your browser automatically establishes a direct connection to the Google server. We have no influence on the extent and further use of the data collected by Google through the use of this tool and therefore inform you according to our level of knowledge: By integrating AdWords Conversion, Google receives information that you have accessed the corresponding part of our website or clicked on an ad from us. If you are registered with a Google service, Google may associate your visit with your account. Even if you are not registered with Google or have not logged in, it is possible that the provider may obtain and store your IP address.
You can prevent participation in this tracking process in various ways: a) by setting your browser software accordingly, in particular by suppressing third-party cookies, you will not receive any ads from third-party providers; b) by deactivating cookies for conversion tracking, by setting your browser so that cookies are blocked by the domain "www.googleadservices.com", https://www.google.com/settings/ads, this setting being deleted when you delete your cookies; c) by deactivating the interest-based ads of the providers that are part of the "About Ads" self-regulation campaign via the link http://www.aboutads.info/choices, this setting being deleted when you delete your cookies; d) by permanently deactivating Firefox, Internet Explorer or Google Chrome in your browsers under the link https://www.google.com/settings/ads/plugin. Please note that in this case you may not be able to use all functions of this offer in full.
Besides Adwords Conversion we use the application Google Remarketing. This is a process we would like to use to contact you again. This application allows you to see our advertisements after visiting our website when you continue to use the Internet. This is done by means of cookies stored in your browser, which are used to record and evaluate your usage behaviour when Google visits various websites. This is how Google can determine your previous visit to our website. According to Google's own statements, Google does not merge the data collected in the context of remarketing with your personal data, which may be stored by Google. According to Google, pseudonymisation is used for remarketing in particular.
Due to the marketing tools used, your browser automatically establishes a direct connection to the Google server. We have no influence on the extent and further use of the data collected by Google through the use of this tool and therefore inform you according to our level of knowledge: By integrating DoubleClick, Google receives information that you have accessed the corresponding part of our website or clicked on an ad from us. If you are registered with a Google service, Google may associate your visit with your account. Even if you are not registered with Google or have not logged in, it is possible that the provider may obtain and store your IP address.
The website also uses the re-marketing function "Custom Audiences" of Facebook Inc. "("Facebook"). This allows users of the website to see interest-based advertisements ("Facebook ads") when visiting the social network Facebook or other websites that also use the process. We thus track the interest of showing you advertisements that are of interest to you, to make our website more interesting for you.
Due to the marketing tools used, your browser automatically establishes a direct connection to the Facebook server. We have no influence on the extent and further use of the data collected by Facebook through the use of this tool and therefore inform you according to our level of knowledge: By integrating Facebook Custom Audiences, Facebook receives information that you have accessed the corresponding part of our website or clicked on an ad from us. If you are registered with a Facebook service, Facebook may associate your visit with your account. Even if you are not registered with Facebook or have not logged in, it is possible that the provider may obtain and store your IP address and other identification features.
The function "Facebook Custom Audiences" can be deactivated[here and] for logged in users at https://www.facebook.com/settings/?tab=ads.
The legal basis for processing is Art. 6 para. 1. S. 1 lit. f DSGVO. For more information about Facebook's data processing, please visit https://www.facebook.com/about/privacy.
The Trusted Shops Trustbadge is included on this website to display our Trusted Shops seal of approval and any collected evaluations as well as to offer Trusted Shops products to buyers after an order.
This serves to safeguard our legitimate interests in the optimal marketing of our offer in accordance with Art. 6 Para. 1 S. 1 lit. f DSGVO, which predominate in the context of a balancing of interests. The Trustbadge and the services advertised with it are an offer of Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne.
When the trust badge is called, the web server automatically saves a so-called server log file, which contains e.g. your IP address, date and time of the call, transferred data volume and the requesting provider (access data) and documents the call. This access data is not evaluated and is automatically overwritten at the latest seven days after the end of your page visit.
Further personal data will only be transferred to Trusted Shops if you have consented to this, decide to use Trusted Shops products after completing an order or have already registered for use. In this case, the contractual agreement between you and Trusted Shops applies.
The Google Customer Reviews widget is included on this website to display Google customer reviews and any reviews collected.
This serves to safeguard our legitimate interests in the optimal marketing of our offer in accordance with Art. 6 Para. 1 S. 1 lit. f DSGVO, which predominate in the context of a balancing of interests. The widget and the services advertised with it are an offer of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
When the widget is called up, the web server automatically saves a so-called server log file, which contains e.g. your IP address, date and time of the call, transferred data volume and the requesting provider (access data) and documents the call. In addition, the order number, e-mail address, invoice country and identification numbers of the purchased products are transmitted for orders placed.
You can find the data protection declaration at https://www.google.com/policies/privacy/. Under https://adssettings.google.com/authenticated you can object to the data processing.
This website uses the map service provider "Google Maps" of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The processed data may in particular include location data and IP addresses of users, which, however, may not be collected without their consent (within the framework of the settings of their mobile devices and browsers). The data may be processed in the USA. You can find the data protection declaration at https://www.google.com/policies/privacy/. Under https://adssettings.google.com/authenticated you can object to the data processing.
This website uses "Youtube" videos of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. We use the extended data protection mode "nocookie". You can find the data protection declaration at https://www.google.com/policies/privacy/. Under https://adssettings.google.com/authenticated you can object to the data processing.
In the event that an employment contract is concluded with the job applicant, we will store the personal data transmitted to us for the purpose of processing the employment relationship.
Otherwise we will automatically delete the personal data transmitted to us two months after cancellation, insofar as there are no other legitimate interests of the data controller to the contrary. Such a justified interest contrary to deletion may be, for example, a duty of documentation and evidence required due to violation of the General Equal Treatment Act or a legal defence in a legal action brought or threatened by the job applicant against us.
Personal data of data subjects shall be processed or stored by the controller, subject to other legal provisions, only for the period necessary to achieve the storage purpose. A further determining criterion for the duration of the storage of personal data is the respective legal retention period.
After the storage purposes have ceased to apply and existing legal storage periods have expired, the personal data will be blocked or deleted by the data controller in accordance with the statutory provisions and requirements, even without a corresponding request from the data subject.
the existence of automated decision-making including profiling in accordance with Art. 22 para. 1 and 4 DSGVO and - at least in these cases - meaningful information on the logic involved and the scope and intended effects of such processing for the data subject. (Note: We do not use profiling or other automated decision making methods.
a copy of the personal data which is the subject of the processing. For all other copies requested by the data subject, the data processor may charge an appropriate fee on the basis of the administrative costs. Where the data subject submits the application electronically, the information shall be provided in a common electronic format, unless otherwise indicated. This right to receive a copy must not prejudice the rights and freedoms of others.
The data subject revokes his/her consent, on which the processing was based pursuant to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a DSGVO, and there is no other legal basis for the processing.
The data subject shall object to processing in accordance with Article 21 para 1 of the basic Regulation on data protection and there are no overriding legitimate grounds for processing or the data subject shall object to processing in accordance with Article 21 para 2 of the basic Regulation on data protection.
The personal data concerning you was collected in relation to information society services offered pursuant to Article 8 para. 1 DSGVO.
If the data controller has made the personal data concerning you public and is obliged to delete it pursuant para. 1, he shall take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform data processors that process the personal data that a data subject has requested the deletion of all links to this personal data or of copies or replications of this personal data.
This does not apply if processing is necessary.
the data subject has lodged an objection to the processing in accordance with Article 21(1) of the basic Regulation on data protection until it has been established whether the controller's legitimate reasons outweigh those of the data subject.
If the processing of personal data has been restricted following this, such data may only be processed - apart from being stored - with the consent of the data subject or for the purpose of asserting, exercising or defending rights or protecting the rights of another natural or legal person or on grounds of an important public interest of the Union or a Member State. A data subject who has obtained a restriction on processing shall be informed by the controller before the restriction is lifted.
In exercising this right to data transferability, the data subject also has the right to request that the personal data be transferred directly from one data controller to another data controller, insofar as this is technically feasible. This right must not prejudice the rights and freedoms of others.
The exercise of this right to data transferability does not affect the right to deletion ("right to be forgotten"). The right shall not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority conferred on the controller.
i.e. the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you under Article 6(1)(e) or (f) of the DSBER; this also applies to profiling based on these provisions. The controller no longer processes the personal data concerning you, unless he can prove compelling reasons worthy of protection for the processing, which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
If the personal data is processed for direct marketing purposes, the data subject has the right to object at any time to the processing of the personal data for the purpose of such advertising; this also applies to profiling, insofar as it is associated with such direct marketing.
If the data subject objects to the processing for direct marketing purposes, the personal data will no longer be processed for these purposes.
The data subject has the possibility to exercise his/her right of objection in connection with the use of Information Society services by means of automated procedures using technical specifications, notwithstanding Directive 2002/58/EC.
The data subject shall have the right to object to the processing of personal data concerning him/her for scientific or historical research purposes or for statistical purposes in accordance with Article 89(1) of the basic Regulation on data protection for reasons arising from his particular situation, unless such processing is necessary for the performance of a task in the public interest.
the right not to be subject to a decision based exclusively on automated processing - including profiling - that has legal effect against him/her or significantly impairs him/her in a similar manner.
is done with the express consent of the data subject.
In the cases referred to in letters a and c, the person responsible shall take reasonable measures to safeguard your rights, freedoms and legitimate interests, including at least the right to obtain the intervention of a person by the controller, to state his own position and to challenge the decision.
Automated decisions may not be based on specific categories of personal data, unless the data subject has consented or processing on the basis of Union law or the law of a Member State proportionate to the objective pursued preserves the very essence of the right to data protection and provides for appropriate and specific measures to safeguard the fundamental rights and interests of the data subject on grounds of a substantial public interest.

References: Art. 6
 Art. 6
 Art. 6
 Art. 22
 Art. 6
 Art. 9