Data Controller:
Magda's Food Programme
Magda Tedla
c/o foodlab
Überseeallee 10
20457 Hamburg
Germany
mail: bestellung@magdasfoodprogramme.com
We are pleased about your interest in our online shop. The protection of your privacy is very important to us. Below, we inform you in detail about the handling of your data.
1. Access Data and Hosting
You can visit our websites without providing any personal information. Each time a webpage is accessed, the web server automatically saves a so-called server log file, which includes, for example, the name of the requested file, your IP address, the date and time of the retrieval, the transferred data volume, and the requesting provider (access data) and documents the retrieval. These access data are evaluated exclusively for the purpose of ensuring the trouble-free operation of the site and improving our offerings. This serves to protect our legitimate interests in a correct presentation of our offerings according to Art. 6 (1) sentence 1 lit. f GDPR. All access data are deleted at the latest one month after your visit to the site.
Hosting
The services for hosting and displaying the website are partly provided by our service providers as part of processing on our behalf. Unless otherwise explained in this privacy policy, all access data and all data collected in the forms provided on this website are processed on their servers. If you have questions about our service providers and the basis of our cooperation with them, please contact the contact information provided in this privacy policy. Data transfer to third countries may occur based on the use of additional functions by our service provider. Adequate data protection is ensured by the conclusion of standard contractual clauses of the European Commission.
2. Data Processing for Contract Execution and Contact
2.1 Data Processing for Contract Execution
For the purpose of contract execution (including inquiries and handling of any warranty and performance claims as well as any statutory update obligations) according to Art. 6 (1) sentence 1 lit. b GDPR, we collect personal data if you voluntarily provide them to us in the context of your order. Mandatory fields are marked as such because we necessarily need these data for contract execution, and we cannot send the order without them. Which data are collected can be seen from the respective input forms. Further information on the processing of your data, particularly the transfer to our service providers for order, payment, and shipping processing, can be found in the following sections of this privacy policy. After the contract has been fully processed, your data will be restricted for further processing and deleted after the expiry of the tax and commercial retention periods unless you have expressly consented to further use of your data according to Art. 6 (1) sentence 1 lit. a GDPR or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this policy.
2.2 Customer Account
If you have given your consent according to Art. 6 (1) sentence 1 lit. a GDPR by deciding to open a customer account, we use your data for the purpose of opening a customer account and storing your data for further future orders on our website. The deletion of your customer account is possible at any time and can be done either by sending a message to the contact option described in this privacy policy or through a designated function in the customer account. After the deletion of your customer account, your data will be deleted unless you have expressly consented to further use of your data according to Art. 6 (1) sentence 1 lit. a GDPR or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this policy.
2.3 Contact
In the context of customer communication, we collect personal data to process your inquiries according to Art. 6 (1) sentence 1 lit. b GDPR if you voluntarily provide them to us when contacting us (e.g., via contact form or email). Mandatory fields are marked as such because we necessarily need these data to process your contact request. Which data are collected can be seen from the respective input forms. After your inquiry has been fully processed, your data will be deleted unless you have expressly consented to further use of your data according to Art. 6 (1) sentence 1 lit. a GDPR or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this policy.
2.4 Data Processing for Appointment Booking
We collect personal data if you voluntarily provide them to us in the context of an appointment booking. Mandatory fields are marked as such because we necessarily need these data for appointment booking, and you cannot send the appointment booking without them. Which data are collected can be seen from the respective input forms. Information in free text fields is voluntary and does not need to be filled out for sending the appointment booking. We ask that you refrain from providing sensitive data (e.g., health-related information such as illnesses) in these free text fields.
We use the data you provide for the purpose of appointment booking according to Art. 6 (1) sentence 1 lit. b GDPR. After the booked appointment has been fully processed, your data will be restricted for further processing and deleted after any tax and commercial retention periods have expired unless you have expressly consented to further use of your data according to Art. 6 (1) sentence 1 lit. a GDPR or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this policy.
Appointment Booking Solution by Calendly
For appointment booking purposes, we use a booking solution from Calendly LLC, 271 17th St NW, Atlanta, GA 30363, USA (address of data importer: 88 N Avondale Road #603, Avondale Estates, GA 30002, USA). The service provider acts on our behalf. Our service provider and/or their sub-service providers are located and/or use servers in the USA. There is no adequacy decision by the European Commission for the USA. Our cooperation with them is based on standard data protection clauses of the European Commission.
Data transfer to third countries may occur based on the use of additional functions by our service provider. Adequate data protection is ensured by the conclusion of standard contractual clauses of the European Commission.
3. Data Processing for Shipping Purposes
To fulfill the contract according to Art. 6 (1) sentence 1 lit. b GDPR, we forward your data to the shipping service provider commissioned, as far as this is necessary for the delivery of ordered goods.
Data Transfer to Shipping Service Providers for Shipping Notification
If you have given us your explicit consent during or after your order, we forward your email address to the selected shipping service provider based on this consent according to Art. 6 (1) sentence 1 lit. a GDPR so that they can contact you for delivery notification or coordination purposes before delivery. The consent can be revoked at any time by sending a message to the contact option described in this privacy policy or directly to the shipping service provider at the contact address provided below. After revoking your consent, we delete the data provided unless you have expressly consented to further use of your data according to Art. 6 (1) sentence 1 lit. a GDPR or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this policy.
DHL Paket GmbH
Sträßchensweg 10
53113 Bonn
Germany
4. Data Processing for Payment Processing
In our online shop, we work with these partners to process payments: technical service providers, credit institutions, payment service providers.
4.1 Data Processing for Transaction Handling
Depending on the selected payment method, we forward the data required for processing the payment transaction to our technical service providers, who act as processors for us, or to the commissioned credit institutions or the selected payment service provider, as far as this is necessary for processing the payment. This serves to fulfill the contract according to Art. 6 (1) sentence 1 lit. b GDPR. The payment service providers may collect the data required for processing the payment themselves, e.g., on their own website or through a technical integration in the order process. The respective privacy policy of the payment service provider applies. If you have questions about our partners for payment processing and the basis of our cooperation with them, please contact the contact information provided in this privacy policy.
4.2 Data Processing for Fraud Prevention and Optimization of Our Payment Processes
We may provide our service providers with additional data, which they use together with the data necessary for processing the payment transaction as our processors for fraud prevention and optimization of our payment processes (e.g., invoicing, handling of contested payments, supporting accounting). This serves to protect our legitimate interests in protecting against fraud or efficient payment management according to Art. 6 (1) sentence 1 lit. f GDPR.
4.3 Identity and Credit Check When Selecting Klarna Payment Services
Klarna Direct Debit, Purchase on Account via Klarna, Klarna Installment Purchase
If you choose the payment services of Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter Klarna), we forward your data to Klarna during the payment and contract processing according to Art. 6 (1) sentence 1 lit. b GDPR. This data transfer is necessary for Klarna to create an invoice for the requested invoice processing and to conduct an identity and credit check. Please understand that we can only offer you the respective Klarna payment method if it is possible based on the results of the credit check. Detailed information on this and the credit agencies used can be found in Klarna’s privacy policy.
4.4 Identity and Credit Check When Selecting Purchase on Account via PayPal and Ratepay
If you choose the payment method Purchase on Account (offered via Ratepay GmbH, Franklinstraße 28-29, 10587 Berlin, Germany (hereinafter Ratepay) and PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg (hereinafter PayPal)), we forward your data to Ratepay during the payment and contract processing according to Art. 6 (1) sentence 1 lit. b GDPR. This data transfer is necessary for Ratepay to create an invoice for the requested invoice processing and to conduct an identity and credit check. Please understand that we can only offer you Purchase on Account via Ratepay if it is possible based on the results of the credit check. Detailed information on this and the credit agencies used can be found in Ratepay’s privacy policy. Additional information on data protection at PayPal can be found here.
4.5 Installment Purchase
When selecting the payment method "Installment Purchase" and granting the necessary data protection consent according to Art. 6 (1) sentence 1 lit. a GDPR, personal data (first name, last name, address, email, phone number, date of birth, IP address, gender) together with the data required for the transaction (item, invoice amount, due dates, total amount, invoice number, taxes, currency, order date, and order time) are transmitted to our partner Klarna Bank AB (publ), Chausseestrasse 117, 10115 Berlin, Germany.
To verify the customer's identity and creditworthiness, our partner conducts inquiries and obtains information from publicly accessible databases and credit agencies. The providers from whom information and, if applicable, creditworthiness information is obtained, and further details on the processing of your data after transmission to our partner Klarna Bank AB (publ) can be found in Klarna’s privacy policy here. The information obtained about the statistical probability of a payment default is used by our partner Klarna Bank AB (publ) to make a balanced decision about the establishment, implementation, or termination of the contractual relationship. You have the option to present your viewpoint and contest the decision by contacting our partner Klarna Bank AB (publ). The consent granted during the ordering process can be revoked at any time, even without giving reasons, with effect for the future.
5. Email Marketing
5.1 Email Newsletter with Subscription and Newsletter Tracking
If you subscribe to our newsletter, we use the necessary or separately provided data to regularly send you our email newsletter based on your consent according to Art. 6 (1) sentence 1 lit. a GDPR. Unsubscribing from the newsletter is possible at any time and can be done either by sending a message to the contact option described in this privacy policy or via a designated link in the newsletter. After unsubscribing, we delete your email address from the recipient list unless you have expressly consented to further use of your data according to Art. 6 (1) sentence 1 lit. a GDPR or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this policy. We would like to point out that we evaluate your user behavior when sending the newsletter. This includes analyzing your interaction with our newsletter by measuring, storing, and evaluating open rates and click-through rates to design future newsletter campaigns ("newsletter tracking"). For this evaluation, the emails sent contain one-pixel technologies (e.g., web beacons, tracking pixels) stored on our website. The data collected in this way are pseudonymized and not linked to your other personal data. If you do not want newsletter tracking, you can unsubscribe from the newsletter as described above. The information is stored as long as you are subscribed to the newsletter.
5.2 Newsletter Delivery
The newsletter and the above-described newsletter tracking may also be carried out by our service providers as part of processing on our behalf. If you have questions about our service providers and the basis of our cooperation with them, please contact the contact information provided in this privacy policy.
6. Cookies and Other Technologies
6.1 General Information
To make visiting our website attractive and enable certain functions, we use technologies, including so-called cookies, on various pages. Cookies are small text files automatically stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e., after you close your browser (so-called session cookies). Other cookies remain on your device and enable us to recognize your browser on your next visit (persistent cookies).
Protecting Privacy on End Devices
When using our online offer, we use essential technologies to provide the explicitly requested telemedia service. Storing information on your device or accessing information already stored on your device does not require your consent.
For non-essential functions, storing information on your device or accessing information already stored on your device requires your consent. We inform you that if you do not grant consent, parts of the website may not be fully usable. Your granted consents remain in effect until you change or reset the respective settings in your device.
Subsequent Data Processing via Cookies and Other Technologies
We use such technologies that are necessary to use certain functions of our website (e.g., shopping cart function). By these technologies, IP address, visit time, device and browser information, and information about your use of our website (e.g., information about the content of the shopping cart) are collected and processed. This serves our legitimate interests in an optimized presentation of our offerings according to Art. 6 (1) sentence 1 lit. f GDPR. Furthermore, we use technologies to fulfill legal obligations, to which we are subject (e.g., to be able to prove consent to the processing of your personal data), as well as for web analysis and online marketing. Further information on this, including the respective legal basis for data processing, can be found in the following sections of this privacy policy.
The cookie settings for your browser can be found at the following links: Microsoft Edge / Safari / Chrome / Firefox / Opera.
If you have consented to the use of the technologies according to Art. 6 (1) sentence 1 lit. a GDPR, you can withdraw your consent at any time by sending a message to the contact option described in this privacy policy. Alternatively, you can follow this link: https://magdasfoodprogramme.com/. If you do not accept cookies, the functionality of our website may be limited.
6.2 Use of Borlabs for Consent Management
We use the Borlabs Cookie Plugin ("Borlabs") on our website to inform you about the cookies and other technologies we use on our website, as well as to obtain, manage, and document your consent to the processing of your personal data by these technologies. This is necessary according to Art. 6 (1) sentence 1 lit. c GDPR to fulfill our legal obligation according to Art. 7 (1) GDPR to be able to prove your consent to the processing of your personal data. Borlabs is an offering from Borlabs – Benjamin A. Bornschein Georg-Wilhelm-Str. 17, 21107 Hamburg, Germany. When you visit our website, the web server of Borlabs saves a so-called Borlabs cookie, which contains information about cookie duration and version, device and browser information, as well as information about your consent behavior. Personal data is not transmitted to Borlabs. Your data will be deleted after one year unless you have expressly consented to further use of your data according to Art. 6 (1) sentence 1 lit. a GDPR or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this policy.
Information on Data Transfer to Third Countries
We use technologies from service providers on our website whose headquarters and/or server locations are in third countries, outside the EU or EEA. If there is no adequacy decision by the European Commission for this country, adequate data protection must be ensured by other suitable guarantees. Suitable guarantees in the form of contractually agreed standard contractual clauses of the European Commission or binding internal data protection regulations (Binding Corporate Rules) are generally possible but require prior verification by the contracting parties to ensure an adequate level of data protection. According to the jurisprudence of the CJEU, it may be necessary to take additional protective measures. We have generally agreed to the standard data protection clauses of the European Commission with the technology providers we use, who process personal data in a third country. If possible, we also agree to additional guarantees to ensure sufficient data protection in third countries without an adequacy decision. Nevertheless, despite all contractual and technical measures, it may happen that the level of data protection in the third country does not correspond to that of the EU. In such cases, we ask you, if necessary, for your consent according to Art. 49 (1) lit. a GDPR to transfer your personal data to a third country. There is a particular risk that local authorities in the third country may not have sufficiently limited access rights to your personal data from a European data protection perspective, that we as data exporters or you as data subjects may not be aware of this, and/or you may not have sufficient legal remedies to prevent or take action against such access. Countries currently considered third countries without an adequacy decision by the European Commission include (example list):
In which third countries data transfers are made by us can be found in the data protection information of the respective tool and/or the consent management platform (CMP) we use.
7. Use of Cookies and Other Technologies
If you have given your consent according to Art. 6 (1) sentence 1 lit. a GDPR, we use the following cookies and other technologies from third-party providers on our website. After the purpose has been fulfilled and the use of the respective technology has ended, the data collected in this context will be deleted. You can withdraw your consent at any time with effect for the future. Further information on withdrawal options can be found in the section "Cookies and Other Technologies." For more information, including the basis of our cooperation with individual providers, please refer to the individual technologies. If you have questions about the providers and the basis of our cooperation with them, please contact the contact information provided in this privacy policy.
7.1 Use of Google Services
We use the technologies described below from Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The information automatically collected by Google technologies about your use of our website is usually transferred to a server of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and stored there. There is no adequacy decision by the European Commission for the USA. Our cooperation with them is based on standard data protection clauses of the European Commission. If your IP address is collected through Google technologies, it will be truncated before being stored on Google's servers by activating IP anonymization. Only in exceptional cases will the full IP address be transferred to a Google server and truncated there. Unless otherwise specified for individual technologies, data processing is based on a contract between joint controllers according to Art. 26 GDPR. Further information on data processing by Google can be found in Google's privacy policy.
Google Analytics
For website analysis, data (IP address, time of visit, device, and browser information as well as information about your use of our website) is automatically collected and stored by Google Analytics, from which user profiles are created using pseudonyms. Cookies may be used for this purpose. Your IP address will not be merged with other data from Google. Data processing is based on an agreement on order processing by Google. To optimize our website's marketing, we use the so-called User ID function. Using this function, we can assign your interaction data from one or more sessions on our online presences to a unique, permanent ID and thus analyze your user behavior across devices and sessions.
Google Maps
For visual representation of geographical information, data about your use of the Maps functions, including the IP address and location data, is collected by Google Maps, transmitted to Google, and processed by Google. We have no influence on this subsequent data processing.
Google Fonts
For a uniform presentation of the content on our website, data (IP address, time of visit, device, and browser information) is collected by the script code "Google Fonts," transmitted to Google, and subsequently processed by Google. We have no influence on this subsequent data processing.
7.2 Use of Facebook Services
Use of Facebook Pixel
We use Facebook Pixel as part of the technologies described below from Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland ("Facebook (by Meta)" or "Meta Platforms Ireland"). With Facebook Pixel, data (IP address, time of visit, device, and browser information as well as information about your use of our website based on predefined events such as visiting a website or subscribing to a newsletter) is automatically collected and stored, from which user profiles are created using pseudonyms. When you visit our website, Facebook Pixel automatically sets a cookie that allows recognizing your browser when visiting other websites using a pseudonymous cookie ID. Facebook (by Meta) will combine this information with other data from your Facebook account and use it to compile reports about website activities and to provide other services related to website usage, especially personalized and group-based advertising. The information automatically collected by Facebook (by Meta) technologies about your use of our website is usually transferred to a server of Meta Platforms, Inc., 1 Hacker Way, Menlo Park, California 94025, USA, and stored there. There is no adequacy decision by the European Commission for the USA. If data transfer to the USA falls under our responsibility, our cooperation is based on standard data protection clauses of the European Commission. Further information on data processing by Facebook can be found in Facebook's privacy policy.
Facebook Ads (Ad Manager)
Through Facebook Ads, we advertise this website on Facebook (by Meta) and other platforms. We determine the parameters of the respective advertising campaign. Facebook (by Meta) is responsible for the precise implementation, particularly the decision on the placement of ads with individual users. Unless otherwise specified for individual technologies, data processing is based on a contract between joint controllers according to Art. 26 GDPR. The joint responsibility is limited to data collection and transmission to Meta Platforms Ireland. The subsequent data processing by Meta Platforms Ireland is not covered by this.
Using the pseudonymous cookie ID set by Facebook Pixel and the data collected about your user behavior on our website, we operate personalized advertising through Facebook Pixel remarketing.
Through Facebook Pixel conversions, we measure your subsequent user behavior for web analysis and event tracking when you have reached our website via a Facebook Ads advertisement. Data processing is based on a contract for order processing by Facebook (by Meta).
7.3 Other Providers of Web Analysis and Online Marketing Services
Use of Hotjar for Web Analysis
For website analysis, data (IP address, time of visit, device, and browser information as well as information about your use of our website) is automatically collected and stored by Hotjar Ltd., Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 3155, Malta ("Hotjar"), from which user profiles are created using pseudonyms. Cookies may be used for this purpose. The pseudonymized user profiles will not be merged with personal data about the bearer of the pseudonym without a separate, explicit consent. Hotjar acts on our behalf.
8. Integration of Trusted Shops Trustbadge/Other Widgets
To display Trusted Shops services (e.g., seal of approval, collected reviews), Trusted Shops widgets are integrated into this website.
This serves to protect our legitimate interests in optimal marketing through a secure shopping experience according to Art. 6 (1) sentence 1 lit. f GDPR. The trust badge and the services advertised with it are an offering from Trusted Shops AG, Subbelrather Str. 15C, 50823 Cologne, Germany ("Trusted Shops"), with whom we are jointly responsible for data protection according to Art. 26 GDPR. We inform you below about the essential content of the agreement according to Art. 26 (2) GDPR.
Within the scope of the joint responsibility between us and Trusted Shops AG, if you have questions about data protection and to assert your rights, please contact Trusted Shops using the contact information provided in their privacy policy. Regardless, you can always contact the responsible party of your choice. Your request will then be forwarded to the other responsible party, if necessary, to be answered.
8.1 Data Processing When Integrating the Trustbadge/Other Widgets
The trust badge is provided by a US content delivery network (CDN) provider. An adequate level of data protection is ensured through standard data protection clauses and additional contractual measures.
When you access the trust badge, the web server automatically saves a server log file, which also contains your IP address, the date and time of the retrieval, the transmitted data volume, and the requesting provider (access data), documenting the retrieval. The IP address is anonymized immediately after collection, so the stored data cannot be assigned to you personally. The anonymized data is used, in particular, for statistical purposes and error analysis.
8.2 Data Processing After Order Completion
After completing an order, order information (order amounts, order number, possibly purchased product) and your email address, hashed using a cryptographic one-way function, are transmitted to Trusted Shops. The legal basis is Art. 6 (1) sentence 1 lit. f GDPR. This serves to verify whether you are already registered for Trusted Shops services and is, therefore, necessary for fulfilling our and Trusted Shops' overriding legitimate interests in providing the transaction-based rating services associated with the specific order according to Art. 6 (1) sentence 1 lit. f GDPR. If a registration exists, further processing is based on the contractual agreement between you and Trusted Shops. If you are not yet registered for the services, you will be given the opportunity to do so. Further processing after registration is also based on the contractual agreement with Trusted Shops. If you are not registered for the services, all transmitted data will be automatically deleted by Trusted Shops, and a personal reference is no longer possible.
Trusted Shops uses service providers in the areas of hosting, monitoring, and logging. The legal basis is Art. 6 (1) lit. f GDPR for ensuring a trouble-free operation. Processing may occur in third countries (USA and Israel). An adequate level of data protection is ensured by standard data protection clauses and additional contractual measures, and in the case of Israel, by an adequacy decision. Further information is available here.
9. Social Media
9.1 Social Plugins from Facebook (by Meta), Instagram (by Meta)
Social buttons from social networks are used on our website. These are only integrated as HTML links so that no connection to the servers of the respective provider is established when you visit our website. When you click one of the buttons, the respective social network's website opens in a new window of your browser. There you can, for example, press the Like or Share button.
9.2 Our Online Presence on Facebook (by Meta), Instagram (by Meta), YouTube, Pinterest
If you have given your consent according to Art. 6 (1) sentence 1 lit. a GDPR to the respective social media operator, your data will be automatically collected and stored for market research and advertising purposes when you visit our online presences on the above-mentioned social media. Using pseudonyms, usage profiles are created from these data. These can be used, for example, to place advertisements within and outside the platforms that presumably correspond to your interests. Cookies are generally used for this purpose. For detailed information on processing and use of data by the respective social media operator and contact details, as well as your rights and settings to protect your privacy, please refer to the privacy policies of the providers linked below. If you need assistance, you can contact us.
Facebook (by Meta) is an offering from Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland ("Meta Platforms Ireland"). The information automatically collected by Meta Platforms Ireland about your use of our online presence on Facebook (by Meta) is generally transferred to a server of Meta Platforms, Inc., 1 Hacker Way, Menlo Park, California 94025, USA, and stored there. There is no adequacy decision by the European Commission for the USA. Our cooperation with them is based on standard data protection clauses of the European Commission. The data processing within the scope of visiting a Facebook (by Meta) fan page is based on an agreement between joint controllers according to Art. 26 GDPR. Further information (information on Insights data) can be found here.
Instagram (by Meta) is an offering from Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland ("Meta Platforms Ireland"). The information automatically collected by Meta Platforms Ireland about your use of our online presence on Instagram is generally transferred to a server of Meta Platforms, Inc., 1 Hacker Way, Menlo Park, California 94025, USA, and stored there. There is no adequacy decision by the European Commission for the USA. Our cooperation with them is based on standard data protection clauses of the European Commission. The data processing within the scope of visiting an Instagram (by Meta) fan page is based on an agreement between joint controllers according to Art. 26 GDPR. Further information (information on Insights data) can be found here.
YouTube is an offering from Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The information automatically collected by Google about your use of our online presence on YouTube is generally transferred to a server of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and stored there. There is no adequacy decision by the European Commission for the USA. Our cooperation with them is based on standard data protection clauses of the European Commission.
Pinterest is an offering from Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland ("Pinterest"). The information automatically collected by Pinterest about your use of our online presence on Pinterest is generally transferred to a server of Pinterest, Inc., 505 Brannan St., San Francisco, CA 94107, USA, and stored there. There is no adequacy decision by the European Commission for the USA. Our cooperation with them is based on standard data protection clauses of the European Commission.
10. Contact Information and Your Rights
10.1 Your Rights
As a data subject, you have the following rights:
- According to Art. 15 GDPR, the right to request information about your personal data processed by us in the scope described there.
- According to Art. 16 GDPR, the right to request the immediate correction of incorrect or completion of your personal data stored by us.
- According to Art. 17 GDPR, the right to request the deletion of your personal data stored by us unless further processing is necessary:
- To exercise the right to freedom of expression and information.
- To fulfill a legal obligation.
- For reasons of public interest, or
- To assert, exercise, or defend legal claims.
- According to Art. 18 GDPR, the right to request the restriction of the processing of your personal data, as far as:
- The accuracy of the data is disputed by you.
- The processing is unlawful, but you refuse to delete it.
- We no longer need the data, but you need it to assert, exercise, or defend legal claims, or
- You have objected to the processing according to Art. 21 GDPR.
- According to Art. 20 GDPR, the right to receive your personal data provided to us in a structured, commonly used, and machine-readable format or to request the transfer to another controller.
- According to Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. In general, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters.
Right to Object
If we process personal data as explained above to protect our legitimate interests, which prevail in a balancing of interests, you can object to this processing with effect for the future. If the processing is for direct marketing purposes, you can exercise this right at any time as described above. If the processing is for other purposes, you have a right to object only on grounds arising from your particular situation. After exercising your right to object, we will not process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms or if the processing is for the establishment, exercise, or defense of legal claims. This does not apply if the processing is for direct marketing purposes. In this case, we will not process your personal data for this purpose.
10.2 Contact Information
If you have questions about the collection, processing, or use of your personal data, for information, correction, restriction, or deletion of data as well as the withdrawal of consents granted or objection to a specific data use, please contact us directly using the contact details provided in our imprint. This privacy policy was created with the Trusted Shops legal text generator.
