Data Collection on This Website

1. PRIVACY AT A GLANCE

2. Hosting

The provider is Alfahosting GmbH, Ankerstraße 3b, 06108 Halle (Saale), Germany.
When you visit our website, Alfahosting collects various log files, including your IP address.
Further information can be found in Alfahosting's privacy policy:

https://alfahosting.de/datenschutz/

The use of Alfahosting is based on Article 6(1)(f) GDPR. We have a legitimate interest in ensuring the most reliable presentation of our website.
Where consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TTDSG, insofar as the consent includes the storage of cookies or access to information on the user's device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent may be revoked at any time.

Alfahosting

We host the content of our website with the following provider:

We have concluded a Data Processing Agreement (DPA) with the above-mentioned provider. This is a contract required under data protection law that ensures the provider processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.

Data Processing Agreement

3. General Information & Mandatory Information

4. DATA COLLECTION ON THIS WEBSITE

Privacy Policy

You have the right to receive information, free of charge and at any time, about the origin, recipients, and purpose of your stored personal data.
You also have the right to request the correction or deletion of this data.
If you have given your consent to data processing, you may revoke this consent at any time with effect for the future.
Furthermore, under certain circumstances, you have the right to request the restriction of the processing of your personal data.
You also have the right to lodge a complaint with the competent supervisory authority.
You may contact us at any time regarding this or any other questions relating to data protection.

What rights do you have regarding your data?

Some of the data is collected to ensure that the website is provided without errors.
Other data may be used to analyze user behavior.
If contracts can be concluded or initiated via the website, the transmitted data will also be processed for contract offers, orders, or other business inquiries.

What do we use your data for?

Some data is collected when you provide it to us. This may include, for example, data that you enter into a contact form.
Other data is collected automatically or with your consent by our IT systems when you visit the website. This mainly includes technical data (e.g. internet browser, operating system, or time of page access). This data is collected automatically as soon as you access this website.

How do we collect your data?

Data processing on this website is carried out by the website operator. You can find the operator's contact details in the section "Information on the Responsible Party" in this privacy policy.

Who is responsible for data collection on this website?

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified.

Detailed information on data protection can be found in the privacy policy set out below.

General Information

Within the framework of the applicable legal provisions, you have the right at any time to obtain free information about your stored personal data, its origin, recipients, and the purpose of data processing. You also have the right to request the rectification or erasure of this data.

You may contact us at any time regarding this or any other questions relating to personal data.

Information, Rectification, and Erasure

You have the right to receive the data that we process automatically on the basis of your consent or in fulfillment of a contract in a commonly used, machine-readable format.
Where you request the direct transfer of data to another controller, this will only be carried out where technically feasible.

Right to Data Portability

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, particularly in the Member State of their habitual residence, place of work, or the place of the alleged infringement. This right exists without prejudice to any other administrative or judicial remedies.

Right to Lodge a Complaint with the Competent Supervisory Authority

Where data processing is based on Article 6(1)(e) or Article 6(1)(f) GDPR, you have the right to object at any time to the processing of your personal data on grounds relating to your particular situation. This also applies to profiling based on these provisions. The relevant legal basis for processing can be found in this Privacy Policy.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or where the processing serves the establishment, exercise, or defense of legal claims (objection pursuant to Article 21(1) GDPR).

If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing. This also applies to profiling related to direct marketing. If you object, your personal data will no longer be used for direct marketing purposes (objection pursuant to Article 21(2) GDPR).

Right to Object to Data Collection in Special Cases and to Direct Marketing (Article 21 GDPR)

Many data processing operations are only possible with your explicit consent. You may withdraw your consent at any time.
The legality of the data processing carried out before the withdrawal remains unaffected.

Withdrawal of Your Consent to Data Processing

As part of our business activities, we cooperate with various external parties. In some cases, this also requires the transfer of personal data to those external parties.
We only disclose personal data where this is necessary for the performance of a contract, where we are legally obliged to do so, where we have a legitimate interest pursuant to Article 6(1)(f) GDPR, or where another legal basis permits the disclosure. Where we use processors, we only transfer personal data on the basis of a valid Data Processing Agreement. In the case of joint processing, a Joint Controller Agreement is concluded.

Recipients of Personal Data

If you have given your consent to data processing, we process your personal data on the basis of Article 6(1)(a) GDPR or Article 9(2)(a) GDPR, provided special categories of personal data are processed under Article 9(1) GDPR. If you have expressly consented to the transfer of personal data to third countries, processing is also based on Article 49(1)(a) GDPR.
If you have consented to the storage of cookies or access to information on your device (e.g., via device fingerprinting), processing is additionally carried out on the basis of Section 25(1) TTDSG. Consent may be withdrawn at any time. Where your data is required for the performance of a contract or for the implementation of pre-contractual measures, we process your data on the basis of Article 6(1)(b) GDPR. Furthermore, we process your data where necessary to comply with a legal obligation on the basis of Article 6(1)(c) GDPR.
Data processing may also be carried out on the basis of our legitimate interest pursuant to Article 6(1)(f) GDPR. The specific legal basis applicable in each individual case is explained in the relevant sections of this Privacy Policy.

Legal Basis for Data Processing on this Website

Unless a more specific storage period has been stated within this Privacy Policy, your personal data will remain with us until the purpose for processing no longer applies.
If you submit a legitimate request for deletion or withdraw your consent to data processing, your data will be deleted unless we have other legally permissible reasons for retaining your personal data (for example, tax or commercial law retention periods). In the latter case, deletion will take place once those reasons no longer apply.

Storage Period

The party responsible for data processing on this website is:

DJAMILA FIEREK ART
Djamila Fierek
Obere Dorfstr. 3c
85653 Aying

Telephone: +491728614155
E-Mail: [email protected]

The responsible party is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data (e.g., names, e-mail addresses, etc.).

Information on the Responsible Party

The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the applicable data protection regulations and this Privacy Policy. Whenever you use this website, various personal data is collected. Personal data is any data that can be used to personally identify you. This Privacy Policy explains which data we collect, how we use it, and for what purpose. Please note that data transmission over the Internet (e.g., communication via e-mail) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.

Data Protection

You have the right to request the restriction of the processing of your personal data. You may contact us at any time to exercise this right.

The right to restriction of processing applies in the following cases:
If you contest the accuracy of your personal data stored by us, we generally require time to verify this. During the verification period, you have the right to request restriction of processing.
If the processing of your personal data is unlawful, you may request restriction instead of deletion.if we no longer need your personal data but you require it for the establishment, exercise, or defense of legal claims, you have the right to request restriction instead of deletion.
If you have objected pursuant to Article 21(1) GDPR, a balance must be struck between your interests and ours. Until it is determined whose interests prevail, you have the right to request restriction of processing.
Where processing has been restricted, such data may only be processed—with the exception of storage—with your consent or for the establishment, exercise, or defense of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.

Right to Restriction of Processing

For security reasons and to protect the transmission of confidential content—such as orders or inquiries that you send to us as the website operator—this website uses SSL or TLS encryption. You can recognize an encrypted connection by the change in your browser's address bar from "http://" to "https://" and by the lock icon displayed in your browser.

When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

SSL / TLS Encryption

Our website uses so-called "cookies." Cookies are small data files that do not cause any damage to your device. They are either stored temporarily for the duration of a session (session cookies) or permanently (persistent cookies) on your device. Session cookies are automatically deleted once you leave the website. Persistent cookies remain stored on your device until you delete them yourself or they are automatically removed by your web browser.

Cookies may originate from us (first-party cookies) or from third-party providers (third-party cookies). Third-party cookies enable the integration of certain services provided by third parties within websites (for example, cookies used for payment processing services). Cookies serve various purposes. Many cookies are technically necessary, as certain website functions would not work without them (for example, shopping cart functionality or displaying videos). Other cookies are used to analyze user behavior or for marketing purposes.

Cookies that are required to carry out electronic communication, provide certain functions requested by you (e.g., shopping cart functionality), or optimize the website (e.g., cookies for measuring web traffic) are stored on the basis of Article 6(1)(f) GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies to ensure technically error-free and optimized service delivery. Where consent has been requested for the storage of cookies and similar recognition technologies, processing is carried out exclusively on the basis of this consent (Article 6(1)(a) GDPR and Section 25(1) TTDSG). Consent may be withdrawn at any time.

You can configure your browser to notify you whenever cookies are set, allow cookies only in individual cases, exclude the acceptance of cookies for specific cases or in general, and activate automatic deletion of cookies when closing your browser. Disabling cookies may limit the functionality of this website.

Information on which cookies and services are used on this website can be found in this Privacy Policy.

Cookies

We have concluded a Data Processing Agreement (DPA) with Usercentrics to ensure that personal data is processed exclusively according to our instructions and in compliance with the GDPR.

Data Processing Agreement

We use WhatsApp to communicate with customers and other third parties.

The provider is:

WhatsApp Ireland Limited
4 Grand Canal Square
Grand Canal Harbour
Dublin 2
Ireland

Communication via WhatsApp is protected by end-to-end encryption, preventing WhatsApp or third parties from accessing the communication content.
However, WhatsApp receives access to metadata generated during the communication process (e.g., sender, recipient, and time). We also note that WhatsApp states it shares personal data with its parent company Meta, based in the United States. Further information can be found in WhatsApp's Privacy Policy:

https://www.whatsapp.com/legal/privacy-policy

The use of WhatsApp is based on our legitimate interest in fast and effective communication with customers, interested parties, and business partners pursuant to Article 6(1)(f) GDPR. If consent has been requested, processing is carried out exclusively on the basis of your consent and may be revoked at any time.
Messages exchanged via WhatsApp remain with us until you request deletion, withdraw your consent, or the purpose for storing the data no longer applies. Mandatory statutory retention obligations remain unaffected. Data transfers to the USA are based on the EU Standard Contractual Clauses.

We have also concluded a Data Processing Agreement with WhatsApp.

Communication via WhatsApp

If you send us inquiries via the contact form, the information you provide, including the contact details entered, will be stored by us for the purpose of processing your request and in case of follow-up questions.

We do not share this data without your consent. The processing of this data is based on Article 6(1)(b) GDPR, provided that your inquiry is related to the performance of a contract or necessary for pre-contractual measures. In all other cases, processing is based on our legitimate interest in efficiently handling inquiries (Article 6(1)(f) GDPR) or on your consent (Article 6(1)(a) GDPR) if this has been requested. The data entered in the contact form will remain with us until you request deletion, withdraw your consent to storage, or the purpose for storing the data no longer applies (e.g., after your request has been fully processed). Mandatory statutory retention periods remain unaffected.

Contact Form

This website uses the consent management technology provided by Usercentrics to obtain and document your consent for storing certain cookies and using specific technologies.

The provider is:

Usercentrics GmbH
Sendlinger Straße 7
80331 Munich
Germany

Website: https://usercentrics.com/

When you visit our website, the following personal data may be transmitted to Usercentrics:

Your consent(s) or withdrawal of consent
Your IP address
Information about your browser
Information about your device
Date and time of your visit
Geolocation

Usercentrics also stores a cookie in your browser to assign your given consent or withdrawal of consent. The collected data is stored until you request deletion, delete the Usercentrics cookie yourself, or the purpose for storing the data no longer applies. Mandatory statutory retention obligations remain unaffected.

Usercentrics is used to obtain the legally required consent for the use of certain technologies. The legal basis is Article 6(1)(c) GDPR.

Consent Management with Usercentrics

5. social media

Functions of the Instagram service are integrated into this website.

These features are provided by:

Meta Platforms Ireland Limited
4 Grand Canal Square
Grand Canal Harbour
Dublin 2
Ireland

If the social media element is active, a direct connection is established between your device and Instagram's servers. Instagram thereby receives information that you have visited this website. If you are logged into your Instagram account, clicking the Instagram button allows you to link the content of this website to your Instagram profile. This enables Instagram to associate your visit to this website with your user account.

Please note that, as the website provider, we have no knowledge of the content of the transmitted data or how Instagram uses it.
The use of Instagram is based on Article 6(1)(f) GDPR, reflecting our legitimate interest in achieving the widest possible visibility on social media.

Where consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TTDSG. Consent may be withdrawn at any time. Where personal data is collected on this website and forwarded to Facebook or Instagram, both we and Meta Platforms Ireland Limited act as joint controllers pursuant to Article 26 GDPR. Joint responsibility is limited exclusively to the collection and transfer of the data to Meta. The subsequent processing carried out by Meta is not part of the joint responsibility.

Further information can be found in Instagram's Privacy Policy:
https://privacycenter.instagram.com/policy/

Instagram

6. E-COMMERCE & PAYMENT PROVIDERS

We collect, process, and use personal customer and contract data for the establishment, content design, and modification of our contractual relationships. Personal data relating to the use of this website (usage data) is collected, processed, and used only to the extent necessary to enable the user to access the service or to bill for its use.

The legal basis is Article 6(1)(b) GDPR.

Customer data will be deleted after completion of the order or termination of the business relationship, subject to any statutory retention obligations.

Processing Customer and Contract Data