Source: https://www.pattydoo.de/en/privacy-declaration-according-gdpr
Timestamp: 2019-04-19 12:17:29+00:00

Document:
We process inventory data (e.g., name, address and e-mail address) as well as contract data (e.g., services used, payment information) of our customers, interested parties and business partners for the purpose of fulfilling our contractual obligations and services pursuant to Art. 6 Para. 1 letter b. DSGVO and for marketing, advertising and market research purposes pursuant to Art. 6 para. 1 lit. f. DSGVO. The entries marked as mandatory in online forms are required for the conclusion of the contract.
As we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a EU Data Protection Ordinance (GDPR) serves as the legal basis. In the processing of personal data required for the performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures. As the processing of personal data is required to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis. In the event that the vital interests of the data subject or another natural person require the processing of personal data, article 6(1) (d) GDPR serves as the legal basis.
If we transfer data to other persons and companies (contractors or third parties) within the scope of our processing or otherwise grant them access to the data, this is only on the basis of a legal permission, you have consented, a legal obligation this provides, the processing of contractual relationships with you or we have a legitimate interest in the data transmission (e.g. when using agents, web hosters, etc.). If we commission third parties with the processing of data on the basis of a so-called "order processing contract", this is done on the basis of art. 28 GDPR.
We operate company profiles within social networks and platforms in order to communicate with active customers, interested parties and users and to inform them about our services. When accessing the respective networks and platforms, the terms and conditions and the data processing guidelines of their respective operators apply.
Most browsers automatically accept cookies. However, you can configure your browser so that no cookies are stored on your computer or a message always appears before a new cookie is created. However, the complete deactivation of cookies may prevent führen from allowing you to use all functions of our website.
Contact with us is possible via the e-mail address service@pattydoo.de provided. In this case, the user's personal data transmitted by e-mail will be stored. In this context, the data will not be passed on to third parties. The data is used exclusively for processing the conversation.
The user has the possibility to revoke his consent to the processing of personal data at any time. If the user contacts us by e-mail (service@pattydoo.de), he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued. All personal data stored in the course of contacting us will be deleted in this case.
So we know who sent the request and can answer it. Data processing for the purpose of contacting us is carried out in accordance with Art. 6 Para. 1 S. 1 lit. f DSGVO. The personal data collected by us for the use of the contact form will be automatically deleted after you have completed your request.
In the course of the registration process, your consent is obtained for the processing of the data and reference is made to this data protection declaration. The registration for our newsletter takes place in a so-called double opt-in procedure. This means that after registration you will receive an e-mail asking you to confirm your registration. This confirmation is necessary so that no one can log in with other e-mail addresses. Subscriptions to the newsletter are logged in order to be able to prove the registration process in accordance with legal requirements. This includes the storage of the login and confirmation time, as well as the IP address. The changes to your data stored with the shipping service provider are also logged.
The Rocket Science Group LLC d/b/a MailChimp is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with the European data protection level, information on this here.
Furthermore, Mailchimp can use this data in pseudonymous form, i.e. without assignment to a user, to optimize or improve its own services, e.g. to technically optimize the sending and presentation of the newsletter or for statistical purposes to determine from which countries the recipients come. However, Mailchimp does not use the data of our newsletter recipients to write them down or pass them on to third parties.
The legal basis for the processing of the data after registration for the newsletter by the user is Art. 6 para. 1 lit. a GDPR. The collection of the user's e-mail address serves to send the newsletter. The collection of other personal data as part of the registration process serves to prevent misuse of the services or the e-mail address used. The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. The user's e-mail address will therefore be stored for as long as the subscription to the newsletter is active.
The tracking measures listed below and used by us are carried out on the basis of Art. 6 para. 1 sentence 1 f GDPR. With the tracking measures used, we want to ensure that our website is designed to meet requirements and is continually optimised. On the other hand, we use the tracking measures to statistically record the use of our website and to evaluate it for the purpose of optimising our website für These interests are to be regarded as legitimate within the meaning of the aforementioned provision. The respective data processing purposes and data categories can be found in the corresponding tracking tools.
We use social plug-ins of the social networks Facebook on our website on the basis of Art. 6 Para. 1 S. 1 lit. f DSGVO in order to make pattydoo better known. The advertising purpose behind this is to be regarded as a legitimate interest within the meaning of the DSGVO. Responsibility for data protection-compliant operation is to be guaranteed by the respective provider. The integration of these plug-ins by us takes place by means of the so-called two-click method in order to protect visitors to our website in the best possible way.
Social media plugins from Facebook are used on our website to make their use more personal. For this we use the "LIKE" or "SHARE" button. This is an offer from Facebook. If you access a page of our website that contains such a plugin, your browser establishes a direct connection with the Facebook servers. The content of the plugin is transmitted directly from Facebook to your browser, which integrates it into the website. By integrating the plugins, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook account or are not logged in to Facebook. This information (including your IP address) is transmitted directly from your browser to a Facebook server in the USA and stored there. If you are logged in to Facebook, Facebook can directly associate your visit to our website with your Facebook account. If you interact with the plug-ins, for example by clicking the "LIKE" or "SHARE" button, the corresponding information is also transmitted directly to a Facebook server and stored there. The information is also published on Facebook and displayed to your Facebook friends. Facebook may use this information for the purpose of advertising, market research and tailoring Facebook Pages to your needs. To this end, Facebook creates usage, interest and relationship profiles, e.g. to evaluate your use of our website with regard to the advertisements displayed to you on Facebook, to inform other Facebook users about your activities on our website and to provide other services associated with the use of Facebook. If you do not want Facebook to associate the information collected through our website with your Facebook account, you must log out of Facebook before visiting our website. Please refer to Facebook's Privacy Notice (https://www.facebook.com/about/privacy) for the purpose and scope of data collection and the further processing and use of the data by Facebook, as well as your rights and privacy settings in this regard.
You have the right to request information as to whether the personal data concerning you is transferred to a third country or to an international organisation. In this context, you can request to be informed about the appropriate guarantees in accordance with Art. 46 GDPR in connection with the transmission.
If the limitation of the processing has been restricted according to the above conditions, you will be informed by the person responsible before the restriction is lifted.
You have the right to object at any time to the processing of personal data concerning you on the basis of Art. 6 para. 1 lit. e or f GDPR for reasons arising from their particular situation; this also applies to profiling based on these provisions. The person responsible no longer processes the personal data concerning you, unless he can prove compelling reasons worthy of protection for the processing, which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims. If personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling, insofar as it is associated with such direct marketing.
Without prejudice to any other administrative or judicial remedy, you have the right of appeal to a supervisory authority, in particular in the Member State where you are staying, working or suspected of having infringed the GDPR, if you believe that the processing of personal data concerning you is contrary to it. The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy under Article 78 GDPR.
This data protection declaration has been created in part with the help of the data protection generator of RA Dr. Thomas Schwenke (sections marked with *).

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 art. 28
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 46
 Art. 6