Privacy Policy

1. Overview of Data Protection

General Information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data refers to all data that can personally identify you. For detailed information on data protection, please refer to our privacy policy outlined below this text.

Data Collection on This Website
Who is responsible for data collection on this website?
The data processing on this website is carried out by the website operator. You can find their contact details in the section "Information about the Responsible Party" in this privacy policy.

How do we collect your data?
Your data is collected in two ways:

Data that you provide to us directly, e.g., by filling out a contact form.
Data that is automatically collected by our IT systems when you visit the website. This includes technical data (e.g., internet browser, operating system, or time of the page visit). Data collection occurs automatically as soon as you enter the website.

For what purposes do we use your data?
Some data is collected to ensure the website functions properly. Other data may be used to analyze your user behavior.

What rights do you have regarding your data?
You have the right to request information about the origin, recipients, and purpose of your stored personal data free of charge at any time. You also have the right to request the correction or deletion of your data. If you have provided consent to data processing, you can withdraw it at any time with future effect. Furthermore, you have the right to request the restriction of your data processing under certain circumstances. You also have the right to lodge a complaint with the competent supervisory authority. For any questions regarding data protection, you can contact us at any time.

Analytics Tools and Third-Party Tools
When visiting this website, your browsing behavior may be statistically analyzed, primarily using analytics programs. Detailed information on these analytics tools can be found in the privacy policy below.

2. Hosting

We host our website content with the following provider: WIX
Provider: Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel ("WIX").

WIX is a tool for creating and hosting websites. When you visit our website, WIX analyzes user behavior, visitor sources, visitor locations, and visitor numbers. WIX stores cookies in your browser that are essential for displaying the website and ensuring security (essential cookies).

The data collected by WIX may be stored on various servers worldwide, including servers in the USA. For more details, refer to WIX’s Privacy Policy: https://de.wix.com/about/privacy.

Data Transfer to the USA and Other Third Countries
According to WIX, data transfers are based on the EU Commission's Standard Contractual Clauses or similar guarantees under Art. 46 GDPR. Details are available here: https://de.wix.com/about/privacy-dpa-users.

Legal Basis for the Use of WIX
The use of WIX is based on Art. 6(1)(f) GDPR, as we have a legitimate interest in ensuring the reliable presentation of our website. If consent has been requested, processing is based on Art. 6(1)(a) GDPR and § 25(1) TTDSG (German Telecommunication and Telemedia Data Protection Act), provided consent includes the storage of cookies or access to user device information (e.g., device fingerprinting). Consent can be withdrawn at any time.

Data Processing Agreement (DPA)
We have signed a Data Processing Agreement (DPA) with the provider mentioned above. This legally required agreement ensures that the provider processes personal data of our website visitors only according to our instructions and in compliance with the GDPR.

3. General Notes and Mandatory Information

Data Protection
The operators of this website take the protection of your personal data very seriously. We handle your personal data confidentially and in compliance with statutory data protection regulations and this privacy policy.

Note on Responsible Party
The responsible party for data processing on this website is:

Lea Fladung
Seiffertstraße 68
28359 Bremen
Phone: +4915758812456
Email: leafladung@web.de

The responsible party is the natural or legal person who determines the purposes and means of processing personal data (e.g., names, email addresses, etc.).

Data Storage Duration
Unless otherwise specified, your personal data will remain with us until the purpose for its processing ceases. If you request deletion or withdraw your consent for data processing, your data will be deleted unless legally permissible reasons for its storage exist (e.g., tax or commercial retention periods).

Rights Related to Your Data

Right to Withdraw Consent: You can revoke your consent to data processing at any time, with future effect.
Right to Object to Data Processing (Art. 21 GDPR): If data processing is based on Art. 6(1)(e) or (f) GDPR, you may object at any time due to reasons arising from your specific situation.
Right to Lodge a Complaint: If you believe your rights under the GDPR have been violated, you can file a complaint with the supervisory authority in your country of residence or workplace.

SSL or TLS Encryption
For security and to protect the transmission of sensitive data, this website uses SSL or TLS encryption. You can recognize an encrypted connection by the browser’s address bar switching from "http://" to "https://" and a lock icon appearing.

Right to Data Portability
You have the right to receive your data in a machine-readable format or to request its transfer to another responsible party.

Right to Restriction of Processing
You can request the restriction of processing your personal data in certain circumstances, such as:

Disputing the accuracy of the data.
Unlawful data processing but opting for restricted processing instead of deletion.

Objection to Marketing Emails
The use of contact data published within the legal notice for sending unsolicited advertisements is prohibited. Legal actions may be taken against senders of spam emails.

4. Data Collection on This Website

Cookies
Our website uses so-called "cookies." Cookies are small text files that do not harm your device. They are either stored temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your device. Session cookies are automatically deleted after your visit. Permanent cookies remain stored on your device until you delete them yourself or your web browser automatically deletes them.

In some cases, cookies from third-party companies may also be stored on your device when you access our site (third-party cookies). These enable us or you to use certain services provided by the third party (e.g., cookies for processing payment services).

Cookies serve various purposes. Many cookies are technically necessary as certain website functions would not work without them (e.g., the shopping cart function or video display). Other cookies are used to evaluate user behavior or display advertisements.

Cookies required to carry out the electronic communication process, to provide certain functions requested by you (e.g., the shopping cart function), or to optimize the website (e.g., cookies to measure web audience) are stored based on Art. 6 (1) lit. f GDPR unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies to ensure the technically error-free and optimized provision of its services. If consent to store cookies and similar recognition technologies has been requested, processing is exclusively based on this consent (Art. 6 (1) lit. a GDPR and § 25 (1) TTDSG); consent can be revoked at any time.

You can configure your browser to inform you about the setting of cookies, allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or in general, and enable automatic deletion of cookies when the browser is closed. If cookies are deactivated, the functionality of this website may be restricted.

If third-party cookies or cookies for analysis purposes are used, we will inform you separately within this privacy policy and, if necessary, request your consent.

Server Log Files
The provider of these pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These include:

Browser type and version
Operating system used
Referrer URL
Hostname of the accessing computer
Time of the server request
IP address

This data is not merged with other data sources.

The collection of this data is based on Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of their website, for which server log files must be collected.

Contact Form
If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provide there, will be stored by us for processing the inquiry and in case of follow-up questions. We do not pass on this data without your consent.

The processing of this data is based on Art. 6 (1) lit. b GDPR, if your request is related to the fulfillment of a contract or necessary to carry out pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective processing of inquiries directed to us (Art. 6 (1) lit. f GDPR) or on your consent (Art. 6 (1) lit. a GDPR) if this has been requested.

The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to storage, or the purpose for data storage no longer applies (e.g., after your inquiry has been processed). Mandatory statutory provisions – especially retention periods – remain unaffected.

Inquiries by Email, Phone, or Fax
If you contact us by email, phone, or fax, your inquiry, including all resulting personal data (name, inquiry), will be stored and processed by us for the purpose of handling your request. We do not share this data without your consent.

The processing of this data is based on Art. 6 (1) lit. b GDPR if your inquiry is related to the fulfillment of a contract or necessary for carrying out pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective processing of inquiries addressed to us (Art. 6 (1) lit. f GDPR) or on your consent (Art. 6 (1) lit. a GDPR) if this has been requested.

The data you send to us via contact inquiries will remain with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies (e.g., after your request has been processed). Mandatory legal provisions – particularly statutory retention periods – remain unaffected.

5. Social Media

Social Media Plugins with Shariff
Plugins from social media platforms (e.g., Instagram) are used on this website. These plugins are usually recognizable by the respective social media logos. To ensure data protection on this website, we only use these plugins in conjunction with the "Shariff" solution. This application prevents the plugins integrated into this website from transferring data to the respective provider as soon as you enter the site.

Only when you activate the respective plugin by clicking the corresponding button will a direct connection to the provider's server be established (consent). Once you activate the plugin, the provider receives the information that you have visited this website with your IP address. If you are logged into your social media account (e.g., Facebook), the respective provider can associate your visit to this website with your user account.

Activating the plugin constitutes consent under Art. 6 (1) lit. a GDPR and § 25 (1) TTDSG. You can revoke this consent at any time with effect for the future.

Instagram Plugin
Functions of the Instagram service are integrated into this website. These functions are offered by Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

If you are logged into your Instagram account, you can link the content of this website to your Instagram profile by clicking the Instagram button. This allows Instagram to associate your visit to this website with your user account. We point out that, as the website operator, we have no knowledge of the content of the transmitted data or its use by Instagram.

The storage and analysis of the data are based on Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in ensuring maximum visibility in social media. If consent has been requested, the processing is carried out exclusively based on Art. 6 (1) lit. a GDPR and § 25 (1) TTDSG, provided the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.

If personal data is collected on our website with the help of the tool described here and forwarded to Facebook or Instagram, we and Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, are jointly responsible for this data processing (Art. 26 GDPR). This joint responsibility is limited exclusively to the collection of the data and its transmission to Facebook or Instagram. The subsequent processing by Facebook or Instagram is not part of the joint responsibility.

The obligations jointly incumbent upon us have been set out in a joint processing agreement. The text of the agreement can be found at: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing privacy information when using the Facebook or Instagram tool and for the privacy-compliant implementation of the tool on our website. For the security of Facebook or Instagram products, Facebook is responsible.

You can assert your rights (e.g., requests for information) regarding the data processed by Facebook or Instagram directly with Facebook. If you assert your rights with us, we are obligated to forward these requests to Facebook.

The data transfer to the USA is based on the standard contractual clauses of the European Commission. Details can be found here:
https://www.facebook.com/legal/EU_data_transfer_addendum,
https://help.instagram.com/519522125107875,
and https://de-de.facebook.com/help/566994660333381.

Further information can be found in Instagram's privacy policy: https://instagram.com/about/legal/privacy/.

6. Plugins and Tools

Google Web Fonts (Local Hosting)
This site uses so-called web fonts provided by Google for the uniform display of fonts. The Google Fonts are installed locally. No connection to Google servers is established.

Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://policies.google.com/privacy?hl=en.