Privacy statement – Svenja Huckle

Privacy statement according to the GDPR

I. Name and address of the person responsible

The person responsible as laid down in the General Data Protection Regulation, other national data protection regulations of the member states as well as other data protection regulations is:

Svenja Huckle
Vor dem Roten Tore 29
21335 Lüneburg / Germany
Tel.: 0049 41 31 21 99 469
E-Mail: info@svenjahuckle.de
Website: www.svenjahuckle.de

Since less than ten (10) people are involved in data processing, no data protection officer has been appointed in accordance with the law.

II. General information about data processing

1. Extent of the processing of personal data
As a matter of principle, we only process personal data of our users insofar as it is necessary for providing a functional website as well as our contents and services. Personal data of our users is routinely only processed after the user has consented. An exception hereto are such cases where obtaining prior consent is not possible for practical reasons and the data processing is permitted by law.

2. Legal basis for processing personal data
Insofar as we obtain the consent of the person concerned for processing personal data, Art. 6 (1) lit. a EU-General Data Protection Regulation (GDPR) serves as legal framework.
In the context of processing personal data which is necessary for executing a contract, whose contracting party is the person concerned, Art. 6 (1) lit. b GDPR serves as legal framework. This also applies to processing operations which are necessary for the implementation of precontractual measures.
Insofar as the processing of personal data is necessary for the execution of a legal obligation which our company is subject to, Art. 6 (1) lit. c GDPR serves as legal framework.
In the event that vital interests of the person concerned or of another natural person require the processing of personal data, Art. 6 (1) lit. d GDPR serves as legal framework.
If the data processing is necessary for the preservation of a legitimate interest of our company or a third party and if the interests, fundamental rights and fundamental freedoms of the person concerned do not outweigh this first-mentioned interest, Art. 6 (1) lit. f GDPR serves as legal basis for the processing.

3. Data deletion and storage period
The personal data of the person concerned will be deleted or blocked as soon as the purpose of the storage ceases to exist. Storage of the data can furthermore take place if it is stipulated by the European or national legislator in Union legislation, regulations or other provisions, which the person responsible is subject to. Data blocking or deletion will then also take place as soon as the storage period required by the norms mentioned expires, unless further storage of the data is necessary for the conclusion or execution of a contract.

III.
1. Description and extent of the data processing
Every time our website is visited, our system automatically collects data and information about the computer system of the calling computer.
In doing so, the following data is gathered:
(1) Information about the browser type and the version used
(2) The operating system of the user
(3) The Internet service provider of the user
(4) The IP address of the user
(5) Date and time of the visit
(6) Websites from which the user’s system accesses our website
(7) Websites, which are called up by the user’s system via our website
(8) The language setting chosen by the user
This data is also stored in the logfiles of our system. This data is not stored with other personal data of the user.

2. Legal basis for processing personal data
The legal basis for the temporary storage of the data is Art. 6 (1) lit. f GDPR.

3. Purpose of the data processing
The temporary storage of IP addresses by our system is necessary in order to enable the delivery of the website to the user’s computer. Therefore, the user’s IP address has to be stored for the duration of the session.
This is also the purpose of our legitimate interest in the data processing according to Art. 6 (1) lit. f GDPR.

4. Duration of storage
The data is deleted as soon as it is no longer necessary for the achievement of the purpose. In the case of gathering data for the provision of the website, this will be the case when the respective session is terminated.

5. Possibility to object and possibility of disposal
Gathering the data in order to provide the website and storing the data in logfiles is absolutely necessary for the operation of a functioning website. On the user’s part, there is no possibility of objecting.

IV. Use of cookies

1. Description and extent of the data processing
Our website uses cookies. Cookies are text files stored in the web browser or by the web browser on the user’s computer system. When a user calls up the website, a cookie can be stored on the user’s operating system. This cookie contains a characteristic string of characters which allows for clear identification of the browser in case of a second visit to the website.
On the one hand, the use of cookies serves to make the use of our services more comfortable for you. Thus, we use so-called session cookies in order to determine whether you have already visited certain pages on our website. These will be automatically deleted when you leave our site.
Most browsers automatically accept cookies. However, you can configure your browser in such a way that no cookies are stored on your computer or a notice will always appear before a new cookie is set up. Having said this, deactivating cookies completely can result in you not being able to access all the functions of our website.

2. Legal basis for the data processing
The legal basis for processing personal data by using cookies is Art. 6 (1) lit. f GDPR.

V. Contact via mail

1. Description and extent of the data processing
Contacting us is possible via the mail address provided. In this case, the user’s personal data transmitted with the e-mail will be stored.
In this context, there will be no transfer of the data to third parties. The data will be exclusively used for the processing of the conversation.

2. Legal basis for the data processing
In the case that the user’s consent has been obtained, the legal basis for the data processing is Art. 6 (1) lit. a GDPR.
Art. 6 (1) lit. f GDPR serves as legal framework for the processing of data transmitted in the course of the sending of an e-mail. If the contact via mail aims at the conclusion of a contract, Art. 6 (1) lit. b GDPR serves as an additional legal basis.

3. Purpose of the data processing
In the case of a communication via mail, the necessary legitimate interest in the data processing lies exclusively in the processing of the communication.

4. Duration of storage
The data is deleted as soon as its collection is no longer necessary for the achievement of the purpose. In the case of the personal data transmitted via mail, this will be the case when the respective conversation with the user is finished. The conversation is finished, when it is clear from the circumstances that the respective issue has been fully resolved.

5. Possibility to object and possibility of disposal
The user has the possibility of withdrawing his or her consent to the processing of personal data at any time. If the user contacts us via mail, he or she can revoke the storage of his or her personal data at any given time via mail. In such a case, the conversation cannot be continued.
All personal data collected in the course of the communication will in this case be deleted.

VI. Google Web Fonts

We use Google Fonts on our websites. Google Fonts is provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

When calling up our sites, fonts are loaded via Google’s servers. In doing so, your IP address is transmitted to Google’s servers. Moreover, in this context, Google will learn which site you are currently visiting. If you are logged into your Google account, Google will merge this information with your profile.

You can find more information about Google Web Fonts under https://developers.google.com/fonts/faq and in Google’s privacy policy: https://www.google.com/policies/privacy/

VII. Rights of the persons concerned

If personal data of you is being processed, you are a person concerned in the sense of the GDPR and you have the following rights against the person responsible:
You have the right:

• to request information about your personal data processed by us according to Art. 15 GDPR. More particularly, you may request information about the purposes of the data processing, the category of the personal data, the categories of recipients to whom your data was or will be disclosed, the planned storage period, the existence of a right to correction, deletion or restriction of data processing or objection to the processing, the existence of a right to appeal, the origin of your data, if it was not collected through us, as well as about the existence of an automated decision-making including profiling and, where applicable, conclusive information about their details;
• to immediately request the correction of incorrect or the completion of your personal data stored by us according to Art. 16 GDPR;
• to request the deletion of your personal data stored by us according to Art. 17 GDPR, provided that its processing is not necessary for exercising the right to freedom of expression and information, for fulfilling a legal obligation, for reasons of public interest or the assertion, exercise or defense of legal claims;
• to request a restriction to the processing of your personal data according to Art. 18 GDPR, insofar as the accuracy of the data is contested by you, the processing is unlawful, but you refuse its deletion and we do not need the data anymore, however you need it in order to assert, exercise or defend
legal claims or you have filed an objection against the data processing according to Art. 21 GDPR;
• to request the forwarding of the personal data you provided us with, in a structured, common and machine-readable format, to you or another person responsible according to Art. 20 GDPR;
• to withdraw your consent given previously towards us at any given time according to Art. 7 (3) GDPR. This means that we will not be permitted to continue the data processing based on this consent in the future and
• to register a complaint with a regulatory authority according to Art. 77 GDPR. As a rule, you can appeal to the regulatory authority at your usual residence or place of work.

VIII. Right to object

If your personal data is processed on the basis of legitimate interests according to Art. 6 (1) S. 1 lit. f GDPR, according to Art. 21 GDPR, you have the right to object to the processing of your personal data, provided that reasons for this exist which result from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right to object which will be implemented by us without specification of a particular situation. If you want to exercise your right to withdraw your consent or to object, an e-mail to info@svenjahuckle.de will be sufficient.

IX. Up-to-dateness and changes to the privacy statement
This privacy policy is currently valid and was amended in May 2018. It can become necessary to make changes to this privacy statement due to the further development of our website and offers or due to amended legal or administrative regulations. The prevailing privacy statement can be called up and printed out at any time on the website via https://svenjahuckle.de/en/privacy-statement.