Source: https://www.artbyluphalia.com/datenschutz/
Timestamp: 2020-04-03 23:40:08
Document Index: 262624809

Matched Legal Cases: ['Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 45', 'Art. 6', 'Art. 22', 'Art. 22', 'Art. 46', 'Art. 89', 'Art. 21', 'Art. 6', 'Art. 9', 'Art. 6']

Datenschutz | Art by Luphalia
Wir freuen uns über Ihren Besuch auf unserer Website. Da der Schutz Ihrer personenbezogenen Daten für uns besonders wichtig ist, informieren wir Sie nachfolgend umfassend über die im Zusammenhang mit unserer Website https://www.artbyluphalia.com/ stattfinden Datenverarbeitungen.
4.1 Zahlungsdienstleister
4.1.2 Stripe
Wenn Sie sich für eine Zahlungsart des Zahlungsdienstleisters Stripe entscheiden, werden personenbezogene Daten an die Stripe Payments Europe Ltd, Block 4, Harcourt Centre, Harcourt Road, Dublin 2, Ireland, („Stripe“) übermittelt. Es werden die im Rahmen des Bestellvorgangs mitgeteilten Informationen nebst den Informationen über Ihre Bestellung (Name, Anschrift, Kontonummer, Bankleitzahl, evtl. Kreditkartennummer, Rechnungsbetrag, Währung und Transaktionsnummer) weitergeben. Die Weitergabe Ihrer Daten erfolgt ausschließlich zum Zwecke der Zahlungsabwicklung mit dem Zahlungsdienstleister Stripe. Nähere Informationen zum Datenschutz finden Sie unter https://stripe.com/de/terms.
Art by Luphalia
Inh. Jenny Albrecht
Wenn Sie Fragen zum Datenschutz haben oder eines Ihrer Rechte geltend machen wollen, wenden Sie sich bitte per Post an die vorgenannte Anschrift oder per E-Mail an Art-by-Luphalia@gmx.de. Wir werden bemüht sein Ihr Anliegen so schnell wie möglich zu bearbeiten.
We are pleased about your visit to our website. Since the protection of your personal data is particularly important to us, we would like to inform you in the following about the data processing that takes place in connection with our website https://www.artbyluphalia.com/.
The legislator requires that personal data are processed lawfully, fairly and in a way that is comprehensible to the data subject ("lawfulness, fairness, transparency"). In order to ensure this, we first inform you in this section about the individual legal definitions which are also used in this data protection declaration:
1.6 File system
1.7. Responsible person
"'third party' means any natural or legal person, public authority, agency or any other body, other than the data subject, the controller, the processor and the persons who, under the direct authority of the controller or the processor, are authorized to process personal data.
The processing of personal data is lawful only if there is a legal basis for the processing. Pursuant to Article 6 (1) sentence 1 letters a) to f) of the DPA, the legal basis for the processing may be, in particular
the data subject has given his or her consent to the processing of personal data relating to him or her for one or more specified purposes;
processing is necessary for the performance of a contract to which the data subject is party or for the implementation of pre-contractual measures taken at the request of the data subject;
In this section we inform you about which data is processed by us if you use our website for purely informational purposes, i.e. if you do not actively transmit data to us when visiting our website.
When you view our website, we collect the following data in so-called log files, which are technically necessary for us to be able to show you our website and to guarantee its stability and security:
We are entitled to collect and store this data in accordance with Art. 6 para. 1 sentence 1 letter f) DSGVO, as we have a legitimate interest in the security and stability of our website. They are automatically deleted after seven days at the latest, unless there is a justified suspicion of unlawful action.
3.2.2 Cookie settings
If you want to order in our web shop, it is necessary for the conclusion of the contract that you provide your personal data, which we need to process your order. Mandatory data necessary for the processing of contracts are marked separately, further data are voluntary. We process the data provided by you to process your order. For this purpose we can also pass on your payment data to our house bank.
The legal basis for this is Art. 6 para. 1 sentence 1 letter b) DSGVO, according to which personal data may be processed for the fulfilment of a contract.
We offer several payment methods for the use of our webshop and use different payment service providers. Depending on which payment method you choose, different data is transmitted to the respective payment service provider. The legal basis for the transmission is also Art. 6 para. 1 sentence 1 letter b) DSGVO, as the payment data is required to process the contract with you.
If you decide to pay by PayPal, your personal data will be transmitted to PayPal. The prerequisite for using PayPal is the opening of a PayPal account. When using or opening a PayPal account, your name, address, telephone number and e-mail address must be submitted to PayPal. The legal basis for the transmission of data is Art. 6 para. 1 letter a DSGVO (consent) and Art. 6 para. 1 letter b DSGVO (processing for the performance of a contract).
The operator of the payment service PayPal is :
With the payment option PayPal you agree to the transmission of personal data such as name, address, telephone number and e-mail address to PayPal. What other data is collected by PayPal can be found in the respective PayPal privacy policy. This can be found under: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
If you choose a payment method from the payment service provider Stripe, personal data will be transferred to Stripe Payments Europe Ltd, Block 4, Harcourt Centre, Harcourt Road, Dublin 2, Ireland, ("Stripe"). The information provided during the ordering process, together with information about your order (name, address, account number, bank code, possibly credit card number, invoice amount, currency and transaction number) is passed on. The transfer of your data is exclusively for the purpose of payment processing with the payment service provider Stripe. Further information on data protection can be found at https://stripe.com/de/terms.
If you would like to contact us via our contact form, we ask you for your express permission to process your e-mail address and the other data you have provided. We are then entitled to process these data in accordance with Art. 6 Para. 1 S. 1 letter a) DSGVO. Of course, your data will only be used strictly for the purpose of processing and answering your inquiry and will be deleted immediately after final processing.
If you contact us by post, e-mail, telephone or fax, your inquiry including all personal data resulting from it will be stored and processed by us for the purpose of processing your request. We will not pass on this data without your consent. The processing of this data is carried out on the basis of Art. 6 para. 1 sentence 1 letter b) DSGVO, insofar as your enquiry is connected with the fulfilment of a contract concluded with us or is necessary for the implementation of pre-contractual measures. Otherwise, processing is based on Art. 6 para. 1 sentence 1 letter f) DSGVO, as we have a legitimate interest in the effective processing of the inquiries addressed to us. In addition, we may also be entitled to be informed under Art. 6 para. 1 sentence 1 letter f) DSGVO. c) DSGVO, as we are legally obliged to enable rapid electronic contact and direct communication with us.
Of course, your data will be used strictly for the purpose of processing and answering your enquiry and will be deleted again after final processing, unless we are subject to legal storage obligations.
This website uses Google Analytics with the extension "_anonymizeIp()". This allows IP addresses to be processed in a shortened form, thus excluding the possibility of personal references. If the data collected about you contains a personal reference, this is immediately excluded and the personal data is therefore deleted immediately.
We use Google Analytics to analyse and regularly improve the use of our website. We can use the statistics obtained to improve our offer and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has subjected itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. In accordance with the decision of the European Commission of 12.07.2016, data transmission to the USA in compliance with the provisions of the agreement offers an adequate level of protection within the meaning of Art. 45 DSGVO. The legal basis for the use of Google Analytics is Art. 6 para. 1 sentence 1 letter f) DSGVO.
Information provided by the third party provider: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. user conditions:
9. obligation to provide and profiling
There is no legal obligation to provide us with personal data.
There is no automated decision-making within the meaning of Art. 22 EU-DSGVO
In this section we inform you about the rights you are entitled to with regard to your personal data.
10.1 Revocation of consent
10.2 Right to confirmation
the existence of automated decision-making, including profiling in accordance with Art. 22, paragraphs 1 and 4 DPA and, at least in these cases, meaningful information on the logic involved and the scope and intended consequences of such processing for the data subject.
If personal data are transferred to a third country or to an international organisation, you have the right to be informed of the appropriate guarantees pursuant to Art. 46 FADP in connection with the transfer. We will provide a copy of the personal data that is the subject of the processing. For any further copies that you request personally, we may charge a reasonable fee based on the administrative costs. If you make the request electronically, the information shall be provided in a standard electronic format, unless the request states otherwise. The right to receive a copy pursuant to paragraph 3 shall not prejudice the rights and freedoms of other persons.
10.4 Right of rectification
10.5 Right of deletion ("right to be forgotten")
Where the controller has made the personal data public and is under an obligation to delete them in accordance with paragraph 1, he shall take reasonable measures, including technical measures, taking into account the available technology and the implementation costs, to inform data controllers who process the personal data that a data subject has requested them to delete all links to those personal data or to make copies or replications of them.
The right of deletion ("right to be forgotten") does not apply insofar as the processing is necessary:
for reasons of public interest in the field of public health pursuant to Article 9(2)(h) and (i) and Article 9(3) DPA;
for archiving, scientific or historical research purposes in the public interest or for statistical purposes pursuant to Art. 89 para. 1 DPA, insofar as the right referred to in para. 1 is likely to render impossible or seriously hamper the attainment of the objectives of such processing, or
10.6 Right to limit processing
the data subject has lodged an objection to the processing pursuant to Art. 21 (1) DPA, as long as it is not yet clear whether the legitimate reasons of the controller outweigh those of the data subject.
If processing has been restricted in accordance with the above conditions, such personal data - apart from being stored - shall be processed only with the consent of the data subject or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or on grounds of an important public interest of the Union or a Member State.
the processing is based on a consent pursuant to Art. 6, para. 1, letter a or Art. 9, para. 2, letter a or on a contract pursuant to Art. 6, para. 1, letter b DPA, and
When exercising the right to data transfer as per paragraph 1, you have the right to obtain that personal data be transferred directly from one controller to another controller, insofar as this is technically feasible. The exercise of the right to data transferability does not affect the right to deletion ("right to be forgotten"). This right shall not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
Under Article 21 of the DPA, you have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you on the basis of Article 6 paragraph 1 e) or f) of the DPA, including profiling based on these provisions. The controller no longer processes the personal data unless he can demonstrate compelling legitimate reasons for processing which outweigh the interests, rights and freedoms of the data subject, or unless the processing is carried out for the purpose of asserting, exercising or defending legal claims.
You have the right to object, for reasons arising from your specific situation, to the processing of personal data concerning you for the purposes of scientific or historical research or for statistical purposes, in accordance with Article 89(1), unless the processing is necessary for the performance of a task carried out in the public interest.
11. person responsible & contact
is responsible for data protection:
Owner Jenny Albrecht
At the seven ponds 1
If you have any questions regarding data protection or wish to assert one of your rights, please contact us by post at the above address or by e-mail at Art-by-Luphalia@gmx.de. We will try to process your request as soon as possible.
Due to the rapid development of the Internet and data protection law, we expressly reserve the right to make changes to this data protection declaration.