Data protection

DATA PROTECTION


1) Information about the collection of personal data and contact details of the person responsible


1.1 We are pleased that you are visiting our website and thank you for your interest. Below we will inform you about how your personal data is handled when you use our website. Personal data is all data with which you can be personally identified.


1.2 The person responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is

Creativ-E, Gostewitzer Straße 7, 01594 Hirschstein, Germany, Tel.: 0162/2743324, Email: creativ-e@web.de.

The person responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.


1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the person responsible), this website uses an SSL or. TLS encryption.

You can recognize an encrypted connection by the string “https://” and the lock symbol in your browser bar.


2) Data collection when you visit our website


If you use our website for informational purposes only, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called “server log files”).

When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

  • Our visited website
  • Date and time at the time of access
  • Amount of data sent in bytesSource/reference from which you came to the page
    •
  • Browser used
    •
  • Operating system used
    •
  • IP address used (if necessary: in anonymized form)
    •

    • Processing is carried out in accordance with Article 6 Paragraph 1 Letter f of the GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of illegal use.


3) Cookies


In order to make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your end device and enable your browser to be recognized the next time you visit (so-called persistent cookies). If cookies are set, they collect and process certain user information such as browser and location data as well as IP address values to an individual extent. Persistent cookies are automatically deleted after a specified period of time, which may vary depending on the cookie. You can find out how long each cookie is stored in the overview of the cookie settings in your web browser. In some cases, cookies are used to simplify the ordering process by storing settings (e.g. remembering the contents of a virtual shopping cart for a later visit to the website). . If personal data is also processed through individual cookies we use, the processing takes place in accordance with Art. 6 Para. 1 lit. b GDPR either to implement the contract, in accordance with Art. 6 Para. 1 lit in accordance with Art. 6 Para. 1 lit. f DSGVO to protect our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the site visit. Please note that you can set your browser so that you are informed about the setting of cookies be informed and can decide individually whether to accept them or exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. These can be found for the respective browsers under the following links:




Please note that if cookies are not accepted, the functionality of our website may be restricted.



4) Contact us


When contacting us (e.g. via contact form or e-mail), personal data is collected. Which data is collected when using a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of answering your request or for establishing contact and the associated technical administration. The legal basis for the processing of this data is our legitimate interest in answering your request in accordance with Article 6 (1) (f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR. Your data will be deleted once your request has been processed. This is the case if it can be inferred from the circumstances that the facts in question have been finally clarified and provided that there are no legal storage obligations to the contrary.


5) Data processing



- when opening a customer account and for contract processing

In accordance with Article 6 Paragraph 1 Letter b of the GDPR, personal data will continue to be collected and processed if you provide it to us to execute a contract or when opening a customer account. Which data is collected can be seen from the respective input forms. Your customer account can be deleted at any time and can be done by sending a message to the above address of the person responsible. We store and use the data you provide to process the contract. After the contract has been fully processed or your customer account has been deleted, your data will be blocked in consideration of tax and commercial law retention periods and deleted after these periods have expired, unless you have expressly consented to further use of your data or reserve the right to further use of your data as permitted by law on our part became.


6) Data processing for order processing


6.1 To process your order, we work with the following service provider(s), who support us in whole or in part in the implementation of concluded contracts. Certain personal data will be transmitted to these service providers in accordance with the following information. The personal data we collect will be passed on to the transport company commissioned with the delivery as part of the contract processing, to the extent that this is necessary to deliver the goods. We pass on your payment data to the commissioned credit institution as part of payment processing, provided this is necessary for payment processing. If payment service providers are used, we will inform you explicitly about this below. The legal basis for passing on the data is Article 6 Paragraph 1 Letter b GDPR.


6.2 Transfer of personal data to shipping service providers


German postal service


If the goods are delivered by Deutsche Post (Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn), we will provide your email address in accordance with Art. 6 Para. 1 lit. a GDPR before delivery of the goods to Deutsche Post for the purpose of agreeing a delivery date or for delivery notification, provided you have given your express consent to this in the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to Deutsche Post for the purpose of delivery in accordance with Article 6 (1) (b) GDPR. The data will only be passed on to the extent that this is necessary for the delivery of the goods. In this case, prior coordination of the delivery date with Deutsche Post or delivery notification is not possible. The consent can be revoked at any time with future effect from the person responsible named above or from Deutsche Post.


DHL


If the goods are delivered by the transport service provider DHL (DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn), we will provide your email address in accordance with Art. 6 Para. 1 lit. a GDPR before delivery of the goods for the purpose of coordination of a delivery date or delivery announcement to DHL, provided you have given your express consent to this in the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to DHL for the purpose of delivery in accordance with Article 6 (1) (b) GDPR. The data will only be passed on to the extent that this is necessary for the delivery of the goods. In this case, prior coordination of the delivery date with DHL or delivery announcement is not possible. The consent can be revoked at any time with future effect to the person responsible named above or to the transport service provider DHL.


6.3 Use of payment service providers (payment services)


Paypal


When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "payment in installments" via PayPal, we pass on your payment data to PayPal (Europe) Sarl et Cie, SCA, 22- as part of the payment processing. 24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”), further. The transfer takes place in accordance with Art. 6 Para. 1 lit. b GDPR and only to the extent that this is necessary for payment processing. PayPal reserves the right to use the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or “Payment in installments” via PayPal requires a credit check to be carried out. For this purpose, your payment data may be passed on to credit agencies in accordance with Article 6 Paragraph 1 Letter f of the GDPR based on PayPal's legitimate interest in determining your ability to pay. PayPal uses the result of the credit check with regard to the statistical probability of non-payment for the purpose of deciding whether to provide the respective payment method. The credit report can contain probability values (so-called score values). To the extent that score values are included in the results of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data. Further data protection information, including information about the credit agencies used, can be found in PayPal's data protection declaration: https://www.paypal.com/de/webapps/mpp/ua/privacy-fullYou can object to this processing of your data at any time by sending a message to Disagree with PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.

7) Web analytics services


Google (Universal) AnalyticsThis website uses Google (Universal) Analytics, a web analysis service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google (Universal) Analytics uses so-called "cookies", which are text files that are stored on your end device and that enable an analysis of your use of the website. The information generated by the cookie about your use of this website (including the abbreviated IP address) is usually transmitted to a Google server and stored there. It can also be transmitted to the servers of Google LLC. in the USA. This website uses Google (Universal) Analytics exclusively with the extension "_anonymizeIp()", which ensures that the IP address is anonymized by shortening it and excludes any direct reference to a person. As a result of the extension, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google LLC server in the USA and shortened there. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide us with other services related to website activity and internet usage. The IP address transmitted by your browser as part of Google (Universal) Analytics is not merged with other data from Google. Google Analytics also enables the creation of statistics with statements using a special function, the so-called “demographic characteristics”. about the age, gender and interests of site visitors based on an evaluation of interest-based advertising and using third-party information. This allows the definition and differentiation of user groups of the website for the purpose of target group-optimized targeting of marketing measures. However, data sets collected via “demographic characteristics” cannot be assigned to a specific person. Details about the processing initiated by Google Analytics and how Google handles data from websites can be found here:


https://policies.google.com/technologies/partner-sites


All processing described above, in particular the setting of Google Analytics cookies to read information on the device used, will only be carried out if you have given us your express consent to this in accordance with Article 6 Paragraph 1 Letter a of the GDPR. Without this consent, Google Analytics will not be used during your visit to the site. You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the “cookie consent tool” provided on the website. We have concluded an order processing agreement with Google for the use of Google Analytics, which obliges Google to protect the data of our site visitors and not to pass it on to third parties. Google relies on this for the transfer of data from the EU to the USA on so-called standard data protection clauses from the European Commission, which are intended to ensure compliance with the European data protection level in the USA. Find further information on Google (Universal) Analytics You here:


https://policies.google.com/privacy?hl=de&gl=de

8) Rights of the data subject


8.1 The applicable data protection law grants you the following data subject rights (rights to information and intervention) vis-à-vis the person responsible with regard to the processing of your personal data, whereby reference is made to the legal basis given for the respective exercise requirements:

  • Right to information according to Art. 15 GDPR;
  • Right to rectification according to Art. 16 GDPR;
  • Right to erasure according to Art. 17 GDPR;
  • Right to restriction of processing in accordance with Art. 18 GDPR;
  • Right to information according to Art. 19 GDPR;
  • Right to data portability according to Art. 20 GDPR;
  • Right to revoke granted consent in accordance with Art. 7 Para. 3 GDPR;
  • Right to complain according to Art. 77 GDPR.

8.2 RIGHT TO OBJECT


IF WE PROCESS YOUR PERSONAL DATA AS PART OF A BALANCE OF INTERESTS BASED ON OUR OVERWHELMING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION EXERCISE YOUR RIGHT TO OBJECT , WE WILL STOP PROCESSING THE AFFECTED DATA. HOWEVER, FURTHER PROCESSING IS RESERVED IF WE CAN PROVE COMPLEX REASONS FOR THE PROCESSING THAT ARE DESIGNED TO BE PROTECTED, WHICH OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FUNDAMENTAL FREEDOMS, OR IF THE PROCESSING SERVES THE ASSERTMENT, EXERCISE OR DEFENSE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU MAY EXERCISE YOUR OPT-OUT AS DESCRIBED ABOVE.

IF YOU USE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE AFFECTED DATA FOR DIRECT ADVERTISING PURPOSES.


9) Duration of storage of personal data


The duration of storage of personal data is determined based on the respective legal basis, the purpose of processing and - if relevant - additionally based on the respective statutory retention period (e.g. commercial and tax retention periods). When processing personal data on the basis of express consent in accordance with Art. 6 Para. 1 lit are processed, these data will be routinely deleted after the retention periods have expired, unless they are no longer required to fulfill or initiate the contract and/or we have no legitimate interest in further storage. When processing personal data on the basis of Art. 6 Para. 1 lit. f GDPR, this data will be stored until the data subject exercises his or her right to object in accordance with Article 21 Para. 1 GDPR, unless we can demonstrate compelling legitimate reasons for the processing that violate the interests, rights and freedoms of the data subject outweigh, or the processing serves to assert, exercise or defend legal claims. When processing personal data for the purpose of direct advertising on the basis of Art in accordance with Art. 21 Para. 2 GDPR. Unless otherwise stated in the other information in this declaration about specific processing situations, stored personal data will otherwise be deleted if they were processed for the purposes for which they were collected or otherwise processed , are no longer necessary.


Share by: