1. Overview of data protection
General information
The following information will provide you with an easy to navigate overview of what will happen with your personal data when you visit our website. The term “personal data” comprises all data that can be used to personally identify you. For detailed information about the subject matter of data protection, please consult our Data Protection Declaration, which we have included beneath this copy.Data recording on our website
Who is the responsible party for the recording of data on this website (i.e. the “controller”)?
The data on this website is processed by the operator of the website, whose contact information is available under section “Information Required by Law” on this website.
How do we record your data?
We collect your data as a result of your sharing of your data with us. This may, for instance be information you enter into our contact form.
Our IT systems automatically record other data when you visit our website. This data comprises primarily technical information (e.g. web browser, operating system or time the site was accessed). This information is recorded automatically when you access our website.
What are the purposes we use your data for?
A portion of the information is generated to guarantee the error free provision of the website. Other data may be used to analyse your user patterns.
What rights do you have as far as your information is concerned?
You have the right to receive information about the source, recipients and purposes of your archived personal data at any time without having to pay a fee for such disclosures. You also have the right to demand that your data are rectified, blocked or eradicated. Please do not hesitate to contact us at any time under the address disclosed in section “Information Required by Law” on this website if you have questions about this or any other data protection related issues. You also have the right to log a complaint with the competent supervising agency.
Moreover, under certain circumstances, you have the right to demand the restriction of the processing of your personal data. For details, please consult the Data Protection Declaration under section “Right to Restriction of Data Processing.”
Analysis tools and tools provided by third partiesThere is a possibility that your browsing patterns will be statistically analysed when your visit our website. Such analyses are performed primarily with cookies and with what we refer to as analysis programmes. As a rule, the analyses of your browsing patterns are conducted anonymously; i.e. the browsing patterns cannot be traced back to you. You have the option to object to such analyses or you can prevent their performance by not using certain tools. For detailed information about this, please consult our Data Protection Declaration below.
You do have the option to object to such analyses. We will brief you on the objection options in this Data Protection Declaration.
2. General information and mandatory information
Data protection
The operators of this website and its pages take the protection of your personal data very seriously. Hence, we handle your personal data as confidential information and in compliance with the statutory data protection regulations and this Data Protection Declaration.
Whenever you use this website, a variety of personal information will be collected. Personal data comprises data that can be used to personally identify you. This Data Protection Declaration explains which data we collect as well as the purposes we use this data for. It also explains how, and for which purpose the information is collected.
We herewith advise you that the transmission of data via the Internet (i.e. through e-mail communications) may be prone to security gaps. It is not possible to completely protect data against third party access.
Information about the responsible party (referred to as the “controller” in the GDPR)The data processing controller on this website is:
Style Pot GmbH
Sälzer Straße 22
DE-56235 Ransbach-Baumbach
Phone: +49 (0) 2623 4017
E-Mail: info(at)style-pot.de
The controller is the natural person or legal entity that single-handedly or jointly with others makes decisions as to the purposes of and resources for the processing of personal data (e.g. names, e-mail addresses, etc.).
Revocation of your consent to the processing of dataA wide range of data processing transactions are possible only subject to your express consent. You can also revoke at any time any consent you have already given us. To do so, all you are required to do is sent us an informal notification via e-mail. This shall be without prejudice to the lawfulness of any data collection that occurred prior to your revocation.Right to object to the collection of data in special cases; right to object to direct advertising (Art. 21 GDPR)
In the event that data are processed on the basis of Art. 6 Sect. 1 lit. e or f GDPR, you have the right to at any time object to the processing of your personal data based on grounds arising from your unique situation. This also applies to any profiling based on these provisions. To determine the legal basis, on which any processing of data is based, please consult this Data Protection Declaration. If you log an objection, we will no longer process your affected personal data, unless we are in a position to present compelling protection worthy grounds for the processing of your data, that outweigh your interests, rights and freedoms or if the purpose of the processing is the claiming, exercising or defence of legal entitlements (objection pursuant to Art. 21 Sect. 1 GDPR).
If your personal data is being processed in order to engage in direct advertising, you have the right to at any time object to the processing of your affected personal data for the purposes of such advertising. This also applies to profiling to the extent that it is affiliated with such direct advertising. If you object, your personal data will subsequently no longer be used for direct advertising purposes (objection pursuant to Art. 21 Sect. 2 GDPR).
Right to log a complaint with the competent supervisory agencyIn the event of violations of the GDPR, data subjects are entitled to log a complaint with a supervisory agency, in particular in the member state where they usually maintain their domicile, place of work or at the place where the alleged violation occurred. The right to log a complaint is in effect regardless of any other administrative or court proceedings available as legal recourses.
Right to data portability
You have the right to demand that we hand over any data we automatically process on the basis of your consent or in order to fulfil a contract be handed over to you or a third party in a commonly used, machine readable format. If you should demand the direct transfer of the data to another controller, this will be done only if it is technically feasible.
SSL and/or TLS encryption
For security reasons and to protect the transmission of confidential content, such as purchase orders or inquiries you submit to us as the website operator, this website uses either an SSL or a TLS encryption programme. You can recognise an encrypted connection by checking whether the address line of the browser switches from “http://” to “https://” and also by the appearance of the lock icon in the browser line.
If the SSL or TLS encryption is activated, data you transmit to us cannot be read by third parties.
Information about, blockage, rectification and eradication of dataWithin the scope of the applicable statutory provisions, you have the right to at any time demand information about your archived personal data, their source and recipients as well as the purpose of the processing of your data. You may also have a right to have your data rectified, blocked or eradicated. If you have questions about this subject matter or any other questions about personal data, please do not hesitate to contact us at any time at the address provided in section “Information Required by Law.”
Right to demand processing restrictionsYou have the right to demand the imposition of restrictions as far as the processing of your personal data is concerned. To do so, you may contact us at any time at the address provided in section “Information Required by Law.” The right to demand restriction of processing applies in the following cases:
- In the event that you should dispute the correctness of your data archived by us, we will usually need some time to verify this claim. During the time that this investigation is ongoing, you have the right to demand that we restrict the processing of your personal data.
- If the processing of your personal data was/is conducted in an unlawful manner, you have the option to demand the restriction of the processing of your data in lieu of demanding the eradication of this data.
- If we do not need your personal data any longer and you need it to exercise, defend or claim legal entitlements, you have the right to demand the restriction of the processing of your personal data instead of its eradication.
- If you have raised an objection pursuant to Art. 21 Sect. 1 GDPR, your rights and our rights will have to be weighed against each other. As long as it has not been determined whose interests prevail, you have the right to demand a restriction of the processing of your personal data.
If you have restricted the processing of your personal data, these data – with the exception of their archiving – may be processed only subject to your consent or to claim, exercise or defend legal entitlements or to protect the rights of other natural persons or legal entities or for important public interest reasons cited by the European Union or a member state of the EU.
Rejection of unsolicited e-mailsWe herewith object to the use of contact information published in conjunction with the mandatory information to be provided in section “Information Required by Law” to send us promotional and information material that we have not expressly requested. The operators of this website and its pages reserve the express right to take legal action in the event of the unsolicited sending of promotional information, for instance via SPAM messages.
4. General information on data protection
Extent of the processing of personal data
We collect and use personal data of our users only to the extent essential to provide a functional website as well as its contents and services. The collection and use of any personal data of our users occurs only after consent of the user. An exception applies in those cases where a prior assent is not possible and according to statutory provisions the processing of the data is legal.
Statutory Clause for the processing of personal data
If we obtain an agreement for the collection of personal data of the person concerned, the statutory clause Art. 6 Abs. 1 lit. a EU-Datenschutzgrundverordnung (DSGVO) applies.
For the processing of personal data which is required in compliance with a contract, of which the concerned person is a party, Art. 6 Abs. 1 lit. b DSGVO serves as the statutory clause. This also applies for processes which are required for precedent measures of a contract.
If personal data is required in compliance with a legal obligation applicable to our company, Art. 6 Abs. 1 lit. c DSGVO serves as statutory clause.
In case that vital interests of persons concerned or another individual person require the processing of personal data, acts Art. 6 Abs. 1 lit. d DSGVO applies as the statutory clause.
If the processing is required to observe a legitimate interest of our company or a third party and if the interests, basic rights and fundamental freedom of the concerned person do not outweigh the former, Art. 6 Abs. 1 lit. f DSGVO serves as statutory clause for the processing.
Data erasure and storage period
The personal data of the concerned person will be deleted or blocked as soon as the purpose of the storage becomes omitted. Storage may occur beyond that if required by European or national decrees, laws, or other provisions which are applicable to the party responsible. The data will also be blocked or deleted if the storage period required by the afore-mentioned laws expires, unless the continued storage of this data is necessary for the conclusion or execution of a contract.
5. Usage of cookies
Description and amount of data processing
Our website uses cookies. Cookies are text files which are stored on the user’s computer system in or by the web browser. If a user visits a website, a cookie can be stored on the operation system of the user. This cookie contains a characteristic string which allows a distinct identification of the web browser if the site is revisited. We use cookies to make our website user-optimized. Certain elements on our website require to identify the browser even after changing the website. The cookies will be stored and transmitted containing the following data:
(1) Language settings
(2) Log-In information
The legal basis for the processing of personal data using cookies is Art. 6 Abs. 1 lit. f DSGVO.
Purpose of the processing of data
Purpose of the technically required cookies is to simplify the use of websites for the user. Some functions of our website cannot be offered without cookies. For these it is essential that the browser will be recognized after changing the website. We require cookies for the following applications:
(1) Take-over of language settings
(2) Memorization of search keys
The user data collected by technically required cookies will not be used to create user profiles. In this purpose is also our legitimate interest in the processing of personal data according to Art. 6 Abs. 1 lit. f DSGVO.
Storage period, objection and disposal optionsCookies are stored on the user’s computer and transmitted by it to our website. Therefore you as user have complete control on the use of cookies. By adjusting the settings of your browser you may disable or restrict the transmittance of cookies. Already stored cookies can be deleted at any time. This can be done automatically. If cookies for our website are disabled, possibly not all functions of our website can be used to the full extent.
6. Provision of the website and creation of log files
Description and amount of data processing
With each call of our website, our system automatically collects data and information of the computer system of the calling computer.
The following data will be collected:
(1) information of the browser type and version
(2) the system software of the user
(3) the web service provider of the user
(4) the IP address of the user
(5) date and time of access
(6) websites from which the system of the user enters our website
(7) websites which are accessed by the user’s system from our website
The data will be stored in log files in our system. The storage of this data does not concur with personal data of the user.
Statutory Clause for the processing of dataStatutory clause for the temporary storage of the data and log files is Art. 6 Abs. 1 lit. f DSGVO
Purpose of the data processing
The temporary storage of the IP address is necessary to allow the transfer of the website to the computer of the user. For this the IP address of the user needs to be stored for the period of the session.
The storage of the log files ensures the functional capability of the website. The data is also necessary to optimize the website and prove the security of our IT systems.
The data will not be evaluated for marketing purposes. In this purpose is also our legitimate interest of the data processing according to Art. 6 Abs. 1 lit. f DSGVO.
Period of storage
The data will be deleted as soon as they are no longer necessary for the purpose of their collection. In case of data collection for the provision of the website this applies as soon as the respective session is ended.
If the data has been stored in log files this applies after seven days at latest. An exceeding storage period is possible. In this case the IP address of the user will be deleted or alienated so the mapping of the calling clients will not be possible.5. Objection and disposal options
The collection of data for the provision of the website and the storage in log files is inevitable for the operation of the website. Therefore it is not possible for the user to object.
7. Right of the aggrieved party
If your personal data is being processed, you are an aggrieved party in terms of DSGVO and you have the lawful rights against the party responsible:
You may demand a confirmation from the party responsible if any personal data concerning your person have been processed by us.
If such a processing of personal data applies, you may demand information on the following of the party responsible:
(1) Purpose of the personal data being processed
(2) categories of personal data being processed
(3) recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed
(4) planned period of storage of your personal data or, if precise indication is not possible, criteria for the determination of the storage period
(5) the right of correction or disposal of the your personal data, right of limitation of the processing by the party responsible or right of objection to the processing by the party responsible.
(6) the existence of a right of legal remedy at the inspecting authority
(7) any available information on the origin of the personal data, if the data was not collected from the concerned person himself
(8) the existence of an automated decision-making including profiling according to Art. 22 Abs. 1 and 4 DSGVO and – at least in such cases – significant information on the involved logic as we as range and intended impact of such a processing for the person concerned.
You have the right to demand information if your personal data will be transmitted to a third party country or an international organization. In this case you may demand to be informed of the applicable guarantees according to Art. 46 DSGVO with regards to the transmission.
Right for correctionYou have right to correction and / or completion of your personal data collected if those are untrue or incomplete. The party responsible has to correct the data immediately.
Right of limitation of the processing
The following premises allow you to demand a limitation of the processing of your personal data:
(1) if you dispute the correctness of your personal data for a period which allows the party responsible to verify the correctness of your data
(2) if the processing is not rightful and you object to the deletion of your personal data and instead demand a limited use of your personal data
(3) the party responsible no longer requires your personal data for the purpose of processing, you however need the data for enforcement, exertion or defense of your legal rights
(4) if you objected to the processing of your data according to Art. 21 Abs. 1 DSGVO and it is not determined yet if your legitimate reasons outweigh the reason of the responsible party.
If the processing of your personal data has been limited, the data may – apart from being stored – only be processed with your consent or for the enforcement, exertion or defense of the legal rights of an individual or juristic person or for reasons of an important public interest of the Union or a member state.
If the processing has been limited according to the previously mentioned premises, the party responsible will inform you before suspending the limitation.
i. ) Obligation to delete
You may demand of the party responsible to delete your personal data immediately, and the person responsible is obliged to delete this data immediately if one of the following reasons applies:
(1) Your personal data is no longer necessary for the purpose for which it was collected or otherwise processed
(2) you revoke your assent on which the processing was based according to Art. 6 Abs. 1 lit. a or Art. 90 Abs. 2 lit. a DSGVO and there is no other legal cause for the processing.
(3) you object to the processing according to Art. 21 Abs. 1 DSGVO and there are no other prior legitimate reasons for the processing or you object to the processing according to Art. 21 Abs. 2 DSGVO.
(4) your personal data has been illegally processed.
(5) the deletion of your personal data is necessary to follow a legal obligation of the law of the Union or a the law of the member states
(6) your personal data has been collected in regards to offered services of the information society according to Art. 8 Abs. 1 DSGVO.
If the responsible party has published your personal data and is obliged according to Art. 17 Abs. 1 DSGVO to delete this data, he will – with regards to the available technology and implementation cost – meet appropriate measures, also technically, to inform the party responsible for the processing of the personal data that you have demanded deletion of, any links to this personal data, or copies or replications thereof.
iii. ) Exceptions
The right of deletion does not apply, as far as the processing is necessary
(1) for the exertion of a right of free speech and information
(2) for the exertion of a lawful obligation which requires the processing of the data according to a law of the Union or member states which apply to the party responsible or to observe a task which is of public interest or partial to public authority which was assigned to the person responsible
(3) for reasons of public interest in terms of public health according to Art. 9 Abs. 2 lit. h and i as well as Art. 9 Abs. 3 DSGVO
(4) for archiving purposes of public interest, scientific or historic research or statistic purposes according to Art. 89 Abs. 1 DSGVO, if the mentioned right of section a) does not likely render the achievement of these purposes impossible or significantly compromises these, or
(5) for the enforcement, exertion or defense of the legitimate claim.
If you have claimed your right of correction, deletion or limitation of the processing of your data to the relevant authority, is said authority obliged to inform any recipients of your personal data of this correction, deletion or limitation of the processing of your data, unless this is proven impossible or only possible with unreasonable efforts. You have the right to be informed of these recipients by the relevant authority.6. Right of data transferability
You have the right to receive the data provided by you to the party responsible in a structured, current and machine-readable format. You further have the right to transfer your personal data provided for the party responsible to another party responsible without obstruction of the third party if
(1) the processing is based on an assent according to Art. 6 Abs. 1 lit. a DSGVO or Art. 9 Abs. 2 lit. a DSGVO or based on a contract according to Art. 6 Abs. 1 lit. b DSGVO and
(2) the processing is based on automatic systems.
In exertion of this right you also have the right to request the transmittance of your personal data from the responsible party directly to another responsible party if this is technically possible. The freedom and rights of other persons may not be impaired by this.
The right of data transferability does not apply to the processing of personal data which is necessary to comply with a task of public interest or during exertion of a task of public authority which was assigned to the person responsible
You have right to object any time to the processing of your personal data based on Art. 6 Abs. 1 lit e or f DSGVO for reasons of your personal situation – this also applies to profiling based on this regulation.
The party responsible will no longer process your personal data unless he can provide mandatory, protection worthy reasons for the processing which outweigh your interest, rights and freedom, or the processing serves the enforcement, exertion or protection of legal claims.
If your personal data is being processed for direct marketing you may object at any time against the processing of your data for such purposes, this also applies to the profiling if it is connected to direct marketing.
If you object to the processing for the purpose of direct marketing, your personal data will not be used for this purpose.
You have the option, in connection with the use of services of the information society – regardless of guideline 2002/58/EG – to make use of your right of withdrawal with automatic procedures which use technical specifications.
Right of withdrawal of the declaration of consent to data protection regulations
You have the right to withdraw your declaration of consent to the data protection regulations at any time. The withdrawal does not affect the legitimacy of the processing of the data from consent until withdrawal. You have the right to not be subject of a processing, including profiling, based only on an automated processing which may have legal impact or may considerably impair you in a similar way. This does not apply if the decision
Automated decision in individual cases including profiling
(1) is necessary for the agreement and compliance of a contract between you and the relevant authority.
(2) is allowed because of statutory provisions of the Union or member states, which apply to the relevant authority and these statutory provisions contain appropriate measures to respect your rights and freedom as well as your legitimate interest or
(3) occurs with your explicit consent.
These decisions may however not base on special categories of personal data according to Art. 9 Abs. 1 DSGVO, as far as Art. 9 Abs. 2 lit a or g DSGVO does not apply and appropriate measures to protect the right and freedom as well as legitimate interests were taken.
Regarding the cases described in (1) and (3), the relevant authority will take appropriate measures to ensure the right and freedom as well as the legitimate interests which includes at least the right to obtain the intervention of a person on behalf of the relevant authority, the right to present the own point of view and the right to appeal against the decision.
Notwithstanding any otherwise administrative sanctions or judicial remedies, you have the right to appeal at an inspecting authority, especially in the member state of your inhabitancy, your work place or the place of the alleged infringement if you are under the impression that the processing of your personal data offends the DSGVO.
The inspecting authority to which the complaint has been filed informs the complainant about the status and result of the complaint including the possibility of judicial remedies according to Art. 78 DSGVO.
The regional representative for data protection and freedom of information Rhineland Palatinate:
Prof. Dr. Dieter Kugelmann
Hintere Bleiche 34
55116 Mainz
Phone: +49 (0)6131 208-2449
Website: https://www.datenschutz.rlp.de/
E-mail: poststelle(at)datenschutz.rlp.de