1. Name and contact details of the controller responsible for processing and the company Data Protection Officer
Controller: Jule Waibel Designs, Gerichtstraße 23, Hof 3, 1.OG, 13347 Berlin, Tel.: 0178/6624352
(hereinafter referred to as JW)
The Data Protection Officer of Jule Waibel Designs can be reached at the address Gerichtstraße 23, 13347 Berlin Germany by email at email@example.com.
2. Collection and storage of personal data, nature and purpose of its use
a) Visiting the website
When visiting our website https://shop.julewaibel.com/ our website’s server is automatically sent information from the browser you are using on your device. This information is temporarily stored in a "log file". The following information will be collected without any action on your part and stored until it is automatically deleted:
- IP address of the requesting computer
- Date and time of access
- Name and URL of the requested file
- Accessing website (referrer URL)
- Browser used and, if applicable, the operating system of your computer as well as the name of your access provider
We process the above mentioned data for the following purposes:
- Ensuring you seamlessly connect to the website
- Ensuring convenient use of our website
- Evaluating system security and stability
- For further administrative purposes
The legal basis for data processing is Article 6 (1) (f) General Data Protection Regulation (GDPR). Our legitimate interest for data collection follows from the purposes listed above. Under no circumstances will we use the data collected for the purpose of drawing conclusions about you personally.
b) Registering for our newsletter
If you have given your express consent in accordance with Article 6 (1) (a) GDPR, we will use your email address to regularly send you our newsletter. Providing an email address is sufficient to receive the newsletter.
You can unsubscribe at any time, for example via a link at the end of each newsletter. Alternatively you can send an email to firstname.lastname@example.org at any time stating your wish to unsubscribe.
c) Using our contact form
If you have any questions, please contact us using the form provided on the website. A valid email address must be provided so that we know who the enquiry came from and are able to answer it. Further information can be provided voluntarily.
Data given for the purpose of contacting us will be processed in accordance with Article 6 (1) (a) GDPR on the basis of your voluntary consent.
The personal data collected by us when you use the contact form will be automatically deleted after your request has been processed.
3. Disclosing data
Your personal data will not be disclosed to third parties for purposes other than those listed below.
We will only disclose your personal data to third parties if:
- You have given your express consent for this in accordance with Article 6 (1) (a) GDPR;
- Disclosure in accordance with Article 6 (1) (f) GDPR is necessary for the establishment, exercise or defence of legal claims and there is no reason to believe that you have an overriding and legitimate interest in the non-disclosure of your data;
- In the event that there is a statutory obligation for disclosure in accordance with Article 6 (1) (c) GDPR;
- This is permitted by law and is necessary to fulfil our contractual obligations to you in accordance with Article 6 (1) (b) GDPR.
Information is stored in the cookie that is associated in each case with the specific device used. However, this does not mean that we immediately become aware of your identity.
In addition, we also use temporary cookies that are stored on your computer for a specified period of time in order to optimise user-friendliness. If you re-visit our website in order to use our services it automatically recognises that you have previously visited our website and which inputs you made and settings you used so you do not have to set these up again.
The data processed by cookies is required for the aforementioned purposes, in order to protect our legitimate interests and those of third parties pursuant to Article 6 (1) (f) GDPR.
Most browsers automatically accept cookies. However, you can configure your browser so that no cookies are stored on your computer or a message always appears before a new cookie is created. However, the complete deactivation of cookies can result in you not being able to use all the functions of our website.
5. Analysis tools
a) Tracking tools
The following tracking measures used by us are used on the basis of Article 6 (1) sentence 1 (f) GDPR. With these tracking measures we want to ensure the needs-based design and continued optimisation of our website. We also use tracking measures to collect statistical data about the use of our website and analyse this in order to optimise our services for you. These interests are considered legitimate within the meaning of the aforementioned provision.
The respective purpose of data processing and data categories are to be taken from the respective tracking tools.
b) Google Analytics
For the purpose of demand-oriented design and continuous optimisation of our pages, we use Google Analytics, a web analysis service provided by Google Inc. https://about.google/?hl=de (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter referred to as “Google”). In this context, pseudonymised user profiles are created and cookies (see section 4) are used. The information generated by the cookie regarding your use of this website, such as
- Browser type/version
- Operating system used
- Referrer URL (the previously visited page)
- Host name of the accessing computer (IP address)
- Time of the server request
is transmitted to Google’s server in the USA and stored there. This information is used to evaluate your usage of the website, to compile reports about website activity and to provide further services associated with website usage and Internet usage for the purposes of market research and to design this website to better suit the requirements of users. This information may also be disclosed to third parties if this is required by law or if third parties process this data on behalf of the company. In no circumstances will your IP address be associated with other data held by Google. IP addresses are anonymised so that assignment is not possible (IP masking).
You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on https://tools.google.com/dlpage/gaoptout?hl=de
As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent Google Analytics from collecting data by clicking on this link. This places an opt-out cookie in your browser which prevents your data from being collected when you visit this website in the future. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete your cookies in this browser, you must set up the opt-out cookie again.
Further information about data protection in relation to Google Analytics can be found in the Google Analytics help section for example https://support.google.com/analytics/answer/6004245?hl=de
c) Google Adwords Conversion Tracking
We use Google conversion tracking to collect statistical data about the use of our website and analyse this in order to optimise our services for you. Google Adwords places a cookie (see section 4) on your computer if you arrived at our website via a Google advert.
These cookies expire after 30 days and are not used for personal identification. If the user visits certain pages of the Adwords customer's website and the cookie has not yet expired, Google and the customer can recognise that the user has clicked on the ad and has been redirected to this page.
Each Adwords customer receives a different cookie. Therefore, cookies cannot be traced via the websites of Adwords customers. The information collected using the conversion cookie is used to generate conversion statistics for Adwords customers who have opted for conversion tracking. Adwords customers see the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However they do not receive any information which could be used to personally identify the user.
6. Social plug-ins
Social plug-ins from the social networks Facebook, Twitter and Instagram are used on our website on the basis of Article 6 (1) (f) GDPR to raise awareness of our website. The underlying marketing purposes is seen as a legitimate interest in terms of the GDPR. The providers of these plug-ins are responsible for ensuring their operation conforms to data protection law. These plug-ins have been integrated into our website using the two click method in order to best protect visitors to our website.
We use social plug-ins from Facebook on our website to personalise your use of the website. We use the Like and the Share buttons. This is a service provided by Facebook.
If you access a page on our website which contains such a plug-in, your browser establishes a direct connection to the Facebook servers. The content of the plug-in is directly sent from Facebook to your browser and incorporated into the website.
Facebook will receive the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook account or are currently not logged in to Facebook. This information (including your IP address) is transmitted from your browser directly to Facebook’s server in the USA and stored there.
If you are logged in to your Facebook account, Facebook can directly associate the visit to our website with your Facebook account. If you interact with the plug-in, for example by using the Like button or the Share button, the corresponding information is likewise directly transferred to Facebook’s server and stored there. The information will also be published by Facebook and shown to your Facebook friends.
Facebook may use this information for the purposes of marketing, market research and to design Facebook to better suit the requirements of users. Facebook will create usage, interests and relationship profiles, for example to evaluate your use of our website with regard to the adverts shown to you on Facebook, to inform other Facebook users about your activities on our website and to provide further services associated with using Facebook.
If you do not wish Facebook to associate the collected information with your Facebook account you must log out of Facebook before visiting our website.
The purpose and scope of the data collection and the further processing and use of the data by Facebook as well as your rights in this regard and the privacy settings available to protect your privacy can be viewed in the Data Policy https://www.facebook.com/about/privacy/previous of Facebook.
Plug-ins from the messaging network Twitter Inc. (Twitter) are integrated into our website. The Twitter plug-ins (tweet button) can be recognised by the Twitter logo on our website. An overview of the tweet button can be found here https://about.twitter.com/de/company/brand-resources.html
If you access a page on our website which contains such a plug-in, your browser establishes a direct connection to the Twitter servers. Twitter thus obtains the information that you, with your IP address, have visited our website. When you click on the Twitter tweet button whilst you are logged into your Twitter account you can link the content of our website to your Twitter profile. This way Twitter can associate the visit to our website with your user account. Please note that as the operator of this website we have no knowledge of the content of the transferred data and its use by Twitter.
If you do not want Twitter to be able to associate your visit to our website then please log out of your Twitter account.
Social plug-ins are used on our website (“plug-ins”) from Instagram which is operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA (“Instagram”).
The plug-ins can be recognised by the Instagram logo, such as the Instagram camera.
If you access a page on our website which contains such a plug-in, your browser establishes a direct connection to the Instagram servers. The content of the plug-in is directly sent from Instagram to your browser and incorporated into the website. Instagram will receive the information that your browser has accessed the corresponding page of our website, even if you do not have an Instagram account or are currently not logged in to Instagram.
This information (including your IP address) is transmitted from your browser directly to Instagram’s server in the USA and stored there. If you are logged in to your Instagram account, Instagram can directly associate the visit to our website with your Instagram account. If you interact with the plug-in, for example by using the Instagram button, the corresponding information is likewise directly transferred to Instagram’s server and stored there.
This information will also be published to your Instagram account and shown to your Instagram contacts.
If you do not wish Instagram to directly associate the collected information with your Instagram account you must log out of Instagram before visiting our website.
More information can be found in the Data Policy https://help.instagram.com/155833707900388 of Instagram.
The controller has integrated components of YouTube into this website. YouTube is an Internet video portal that enables video publishers to upload video clips free of charge and other users to view, evaluate and comment on such video clips likewise free of charge. YouTube permits the publication of all types of videos and both complete films and TV shows as well as music videos, trailers and videos created by users themselves can be accessed via the web portal.
YouTube is operated by YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. YouTube LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
Each time an individual page of this website which is operated by the controller and which YouTube components (YouTube videos) have been integrated is accessed, the web browser on the data subject’s IT system is automatically prompted by the YouTube component to download the representation of the corresponding YouTube component. Further information about YouTube can be found at https://www.youtube.com/intl/de/yt/about/
As part of this technical process YouTube and Google receive the information that the data subject has visited this specific sub-page of our website.
If the data subject is logged in to YouTube at the same time as when the sub-page which contains a YouTube video is accessed, YouTube is informed of the specific sub-page of our website which has been visited by the data subject. This information is collected by YouTube and Google and attributed to the YouTube account of the data subject.
YouTube and Google always receive the information that the data subject has visited our website via the YouTube component if the data subject is logged in to YouTube at the time the data subject visits our website; this occurs regardless of whether the data subject clicks on a YouTube video or not. If the data subject does not want this information to be transmitted to YouTube and Google this can be prevented by logging out of your YouTube account before accessing our website.
8. Rights of the data subject
You have the right:
- To access the personal data processed by us in accordance with Article 15 GDPR. In particular you may obtain information about the purposes of processing, the categories of personal data, the categories of recipient to whom your data has been or will be disclosed, the envisaged period for which the personal data will be stored, the existence of the right to rectification, erasure, restriction of processing or to object to processing, the right to lodge a complaint with a supervisory authority, information as to the source of the data, if it was not collected by us, the existence of automated decision-making, including profiling and, if applicable, meaningful information about the details of this.
- To have your inaccurate personal data which is stored by us rectified or completed in accordance with Article 16 GDPR.
- To have your personal data stored by us erased, to the extent that the processing is not necessary for exercising the right of freedom of expression and information, to comply with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims in accordance with Article 17 GDPR.
- In accordance with Article 18 GDPR to obtain restriction of processing of your personal data, provided that the accuracy of the data is contested by you, the processing is unlawful and you oppose the erasure of the data, we no longer need the data but the data is required by you for the establishment, exercise or defence of legal claims, or you have objected to processing pursuant to Article 21 GDPR.
- To receive the personal data concerning yourself that you have provided to us in a structured, commonly used and machine-readable format or to have this data transmitted to a another controller, in accordance with Article 20 GDPR.
- To withdraw consent you have previously given to us at any time in accordance with Article 7 (3) GDPR. This means that we will no longer be able to continue processing the data for which this consent was given in the future.
- To lodge a complaint with a supervisory authority in accordance with Article 77 GDPR. You would generally contact the supervisory authority responsible for your habitual residence, place of work, or for the location of our registered office.
9. Right of withdrawal
If your personal data is processed on the basis of legitimate interests pursuant to Article 6 (1) sentence 1 (f) GDPR, you have the right pursuant to Article 21 GDPR to object to the processing of your personal data, provided there are reasons for this that result from your particular situation or you are objecting to direct marketing. If you are objecting to marketing you have a general right to object which will be implemented by us without you providing details about your particular situation.
If you wish to exercise your right to withdraw your consent or your right to object it is sufficient to send an email to email@example.com
10. Data security
We use the most common SSL (Secure Socket Layer) method in connection with the highest level of encryption supported by your browser. Usually this is a 256 bit encryption. If your browser does not support 256 bit encryption we fall back to 128 bit v3 technology instead. You can recognise when individual pages of our website are encrypted before being sent by the closed padlock symbol in the bottom status bar of your browser.
Furthermore we use appropriate technical and organisational security measures to protect your data against accidental or deliberate manipulation, partial or complete loss, destruction or access by unauthorised third parties. Our security measures are continuously improved in line with technological developments.