PRIVACY POLICY

With this data protection declaration we would like to inform you about the type, scope and purpose of the processing of personal data on our website. Personal data are all data that are personally related to you, e.g. B. name, address, email address or user behavior.

Who is responsible for data processing at our company :

Sabine Broekmann

broekmann ROOM FOR ART

Ottostr. 29

47803 Krefeld

sabinebroekmann@web.de

Phone +49 1777228988

Web hosting

We use an Internet service provider to maintain our online presence, on whose server the website is stored (hosting) and who makes our website available on the Internet. The internet service provider processes contact data, content data, contract data, usage data, inventory data as well as meta and communication data on our behalf. Legal basis: The legal basis for the processing described above is our legitimate interest in the efficient and secure provision of our online offer, Art. 6 Para. 1 lit. V. m. Art. 28 GDPR (order processing contract).

If you only use our website for information purposes, our Internet service provider only collects the personal data that the browser you are using transmits to its server.

These are the following data:

IP address

the date and time of access to our website

Time zone difference to Greenwich Mean Time (GMT)

Access status (HTTP status)

the amount of data transferred

the internet service provider of the accessing system

the type of browser you are using and its version

the operating system you are using

the website from which you may have accessed our website

the pages or sub-pages that you visit on our website.

The aforementioned data are stored as log files on the servers of our Internet service provider. This is necessary in order to be able to display the website on the device you are using and to ensure stability and security. Our legitimate interest in data processing lies in the above purposes. Legal basis: The legal basis for this is Article 6, Paragraph 1, Sentence 1, Letter f of the GDPR. Duration: The above data for the provision of our website are stored for a period of 7 days and then deleted. Prevention: Since the processing of the above data is absolutely necessary for the provision of our website, there is no right of objection.

Cookies

Our website uses cookies. Cookies are small text files, consisting of a series of numbers and letters, that are stored and saved on the device you are using. Cookies neither transmit viruses nor can they run programs. Rather, they primarily serve to exchange information between the device you are using and our website in order to make our website more user-friendly and effective for you. A distinction must be made between temporary (transient) cookies and persistent cookies. The transient cookies include in particular the session cookies. These save a so-called session ID, with which various requests from your browser can be assigned to the common session. This means that our website recognizes your computer when you return to our website. The session cookies are deleted when you log out or close your browser. Persistent cookies are automatically deleted after a specified period, which can vary depending on the cookie. You have the option of deleting these cookies at any time in the security settings of your browser.

The cookies serve to make our website more user-friendly. Some elements of our website require that the calling browser can also be identified after changing pages. In particular, information on language settings or log-in information can be stored in these cookies.

Our legitimate interest in data processing lies in the above purposes. The legal basis for this is Article 6, Paragraph 1, Sentence 1, Letter f GDPR.

Since the cookies are stored on your computer, you as the user also have full control over the use of cookies. You have the option of using the security settings of your browser to determine whether cookies are stored at all. For example, you can not accept cookies from the outset or only accept cookies on request, or you can specify that cookies are deleted each time you close your browser. If cookies are deactivated for our website, it is possible that not all functions of the website can be used to their full extent.

Storage duration / deletion

We delete or block your personal data as soon as the purpose of storage has been achieved or no longer applies. Any further storage will only take place if we have been instructed to do so by national or European regulations. In this case, the data will be blocked or deleted when the storage period prescribed in the respective regulations has expired, unless we need your data to fulfill a contract concluded between us or if this is necessary to assert, exercise or defend legal claims .

Contact via contact form, email, social media or telephone

If you use the contact form offered on our website or send us an email. Telephone or social media and provide us with personal data, this data is automatically stored and processed in our company to process your request. These data are only processed for correspondence with you. The data transfer via our contact form takes place via an encrypted SSL connection. Your data will not be passed on to third parties. Purpose: We need your name so that we can address you in our answer. We need your email address in order to be able to answer your request. We need your telephone number in order to be able to respond to your callback request. Legal basis: The legal basis for the use of your data as described above is Article 6 (1) (a) GDPR. Deletion: The personal data collected by us will be deleted if they are no longer required. We review the requirement every 2 years. You can also revoke data processing at any time.

Blog

You have the opportunity to comment on the contributions we have posted on our blog. Since we can be held liable for infringing content (insults, defamatory criticism, hatred of the masses, forbidden violence, etc.) in your comment under certain circumstances, we store your IP address for a period of 7 days in order to be able to determine your identity if necessary. Legal basis: The legal basis for the storage of your data is Art. 6 Para. 1 lit. f GDPR. Deletion: The data collected and transmitted by us in this way will be automatically deleted after 14 days. Prevention: You can prevent the storage of the IP address by not leaving any comments.

Online shop

If you use our webshop to place orders with it, we need certain data in order to process your order. This includes in particular your name and your address and electronic contact details, information on processing the payment process and the services used. This data is saved by us. In particular, we use the data transmitted to us by Amazon in particular

Identify you as our customer,

Process, fulfill and fulfill your order,

to get in touch with you,

To invoice you,

to be able to process any liability claims,

to be able to assert contractual claims against you.

We only pass on your personal data to third parties if:

the transfer according to Art. 6 Para. 1 S. 1 lit.f GDPR is necessary to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data,

there is a legal obligation to do so in accordance with Art. 6 Para. 1 S. 1 lit.

this is necessary according to Art. 6 Para. 1 S. 1 lit. b GDPR for the execution of the contract concluded with you

(E.g. forwarding of the data to the logistics company commissioned with the delivery or for the purpose of payment processing.

In addition, your personal data will not be passed on to third parties without your express consent. If we pass on your personal data to third parties, we limit the scope of the transmitted data to the necessary minimum.

You can voluntarily create a user account in which you can view your orders. We save the data you provided when creating the user account upon revocation. If you have terminated your account, your data will be deleted, subject to their retention is necessary for commercial or tax reasons in accordance with Art. 6 Para. 1 lit. c GDPR. Information in the customer account remains until it is deleted with subsequent archiving in the event of a legal obligation. It is up to the users to save their data before the end of the contract if they have canceled. We use transient cookies (for the term see above under cookies) to store the contents of the shopping cart and persistent cookies (for the term see above under cookies) for the storage of the login status.

We can also use the data you have stored to inform you by post or email about other interesting products and / or services.

When you place an order, register for a user account or log in again, we save your IP address and the time of the respective user action. The purpose of the storage is our but also your legitimate interests in protection against misuse and other unauthorized use. The legal basis for this is Article 6 (1) (c) GDPR. This data will not be passed on to third parties unless it is necessary to pursue our claims or there is a legal obligation to do so in accordance with Article 6 (1) (c) GDPR.

Purpose: The processes and interests described above represent the purpose of storing the data. Legal basis:

The processing of your data in the processes described above is based on the following legal basis:

Insofar as we obtain your consent for processing, Article 6 (1) (a) GDPR serves as the legal basis.

For processing that serves to fulfill a contract concluded with you, Article 6 (1) (b) GDPR is the legal basis. This also applies to the processing operations that are required to carry out pre-contractual measures.

Insofar as processing is necessary to fulfill a legal obligation to which we are subject, Article 6 (1) (c) GDPR serves as the legal basis.

In the event that vital interests make processing necessary for you or another natural person, Article 6 (d) of the GDPR serves as the legal basis.

If processing is necessary to safeguard one of our legitimate interests or a third party and your interests, fundamental rights and freedoms do not outweigh the first-mentioned interest, Art. 6 (1) (f) GDPR serves as the legal basis for processing.

Deletion: Due to commercial and tax law requirements, we are obliged to save your address, payment and order data for a period of 10 years. After the statutory warranty rights have expired (2 years), however, we will restrict processing so that your data will only be used to comply with legal obligations.

Newsletter

We send out a newsletter at regular intervals to inform our customers, business partners and interested parties about our offers and related news. You have the option of registering for our newsletter on our website and consenting to receive the newsletter as part of the registration process. When you register for our newsletter, you must provide your email address. We save the email address so that we can send you the newsletter. As soon as you register for our newsletter, you will receive a confirmation e-mail to the e-mail address stored when you registered using the so-called double opt-in procedure. This email contains a link. If you click on this link, you confirm that you want to receive the newsletter. This ensures that your email address has not been misused by a third party when you registered. For the same reason, we save the date and time of registration and the IP address assigned to you when you registered. We do not pass on the aforementioned data to third parties. Purpose: The processes and interests described above represent the purpose of storing the data. Legal basis: The legal basis for processing your data is Article 6 (1) (a) GDPR. Deletion: The email address is deleted either if you have not clicked on the confirmation link 1 month after sending the confirmation email using the double opt-in procedure, or immediately after you have unsubscribed from our newsletter. Revocation: You can revoke your consent to receive the newsletter at any time and unsubscribe from the newsletter.

We offer the following options by which you can declare your revocation:

Click on the link provided for this in the newsletter

by email to: sabinebroekmann@web.de

through the contact details provided in the imprint of our website

Shipping by shipping service provider

We have commissioned the following shipping service provider to send our newsletter: Wix.com Ltd., Namal 40, 6350671 Tel Aviv, Israel. You can view its data protection provisions here: https://de.wix.com/about/privacy. The dispatch service provider can use your data in pseudonymous form, ie without assignment to a user, to optimize or improve its own services, e.g. for the technical optimization of dispatch and the presentation of the newsletter or for statistical purposes. However, the shipping service provider is not authorized to write to you or to pass on your data to third parties. Legal basis: The shipping service provider acts on the basis of our legitimate interests in accordance with Article 6 (1) (f) GDPR and an order processing contract in accordance with Article 28 (3) sentence 1 GDPR.

Your rights as a user of our online presence according to the GDPR

According to the GDPR, you have the following rights, which you can assert at any time from the person responsible named in Section 1 of this data protection declaration:

Right to information: According to Art. 15 GDPR, you can request confirmation as to whether and which personal data we are processing from you. In addition, you can free information from us about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the right to correction, deletion, restriction of processing or objection , the existence of a right to lodge a complaint and the origin of your data, unless we have collected them. You also have the right to information as to whether your personal data has been transmitted to a third country or to an international organization. If this is the case, you have the right to receive information about the appropriate guarantees in connection with the transmission.

Right to correction: According to Art. 16 GDPR, you can request the correction of incorrect or incomplete personal data stored by us and concerning you.

Right to deletion : According to Art. 17 GDPR, you have the right to request the deletion of your personal data stored by us, unless we need their processing for the following purposes:

to fulfill a legal obligation,

to assert, exercise or defend legal claims,

to exercise the right to freedom of expression and information or

for reasons of the cases of public interest mentioned in Art. 17 Para. 3 lit c and d GDPR.

Right to restriction: In accordance with Art. 18 GDPR, you have the right to request that the processing of your personal data be restricted if you dispute the accuracy of the data, for a period that enables us to verify the accuracy of the personal data to check whether the processing of your data is unlawful, but you refuse to delete it and instead request the restriction of the use of the data, we no longer need the personal data for the purposes of processing, but you need the data to assert, exercise or defend legal claims If you have objected to the processing of your data in accordance with Art. 21 GDPR, but it has not yet been determined whether the legitimate reasons that entitle us to further processing despite your objection outweigh your rights.

Right to information: If you have asserted the right to correction, deletion or restriction of processing against us, we are obliged to inform all recipients to whom the personal data concerning you have been disclosed of the correction or deletion of the data requested by you or their To communicate restriction of processing, unless this proves to be impossible or is associated with a disproportionate effort. You have the right to be informed by us about these recipients.

Right to data portability: In accordance with Art. 20 GDPR, you can request that we receive the personal data relating to you that you have provided to us in a structured, common and machine-readable format or request that it be transmitted to another person responsible.

Right to lodge a complaint: According to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority. For this you can contact the supervisory authority of your usual place of residence, your place of work or our company headquarters.

Right of withdrawal

According to Art. 7 Para. 3 GDPR, you have the right to revoke your consent to the processing of your data at any time. The revocation you have declared does not change the lawfulness of the processing of your personal data up to the point of revocation.

Right to object

For reasons that arise from your particular situation, you have the right to object at any time to the processing of your personal data, which is based on a weighing of interests (Art. 6 Para. 1 lit.f GDPR). This is particularly the case if the data processing is not required to fulfill a contract. If you make use of your right of objection, we ask you to explain the reasons. We will then no longer process your personal data unless we can prove to you that there are compelling legitimate reasons for data processing that outweigh your interests and rights.

Regardless of the above, you have the right to object to the processing of your personal data for advertising and data analysis purposes at any time.

Please send your objection to the contact address given above for the person responsible .

YouTube

On this website we use components from YouTube, a service provided by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA.

YouTube is a video portal on which users can watch videos free of charge. YouTube offers website operators the option of embedding videos on their own website. For this purpose, YouTube provides a code excerpt that displays the video in a so-called inline frame. After a page or subpage of our website is called on which such embedding has taken place, the Internet browser you are using is prompted to download video components of the respective embedded video or clip. This process assumes that YouTube reads the IP address assigned to you; otherwise, YouTube would not be able to transmit the video to your browser. YouTube can recognize that you have visited one of our pages on which we have integrated a YouTube video if you are logged into YouTube. This information is also transmitted to YouTube if you do not click on the YouTube video. Both YouTube and Google collect this information and assign it to your YouTube account. Prevention: You can prevent this data transfer at any time by logging out of your YouTube account or using the following link https://adssettings.google.com/authenticated after logging in to your Google account by clicking the logout button and setting an opt-out cookie . Legal basis: The legal basis for the prescribed use of the data is Art. 6 Para. 1 lit. f GDPR.

Third party information:

Headquarters within the EU: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

Data protection declaration: http://www.google.de/intl/de/policies/privacy

Getty Images

On this website we use elements from Getty Images International, 1st Floor, The Herbert Building, The Park, Carrickmines, Dublin 18, Ireland.

As a picture agency, Getty Images provides pictures and image materials. These can be used by various customers by granting a license or free of charge on websites. When you visit our website, your IP address, length and time of access, as well as the language and type of browser used, are transmitted to Getty Images. Information relating to which sub-pages of the website you have accessed or how often and for how long a sub-page was viewed and which interactions you have made can also be recorded and processed accordingly by Getty Images. Getty Images may pass this personal data collected through the technical process on to third parties. Purpose: By using Getty Images, external content such as text, video or image data can be made available and embedded on your own website. The embedding is done using an embedding code, an HTML code. This means that the external content of another website is immediately displayed and loaded on our own website. Our interest in embedding the image material as described above represents the purpose of using Getty Images. Legal basis: The legal basis for the aforementioned use of the data is Article 6 (1) (f) GDPR. Prevention: You can object to the processing of personal data by contacting Getty Images at any time.

Third party information:

Data protection declaration: http://www.gettyimages.de/enterprise/privacy-policy

Getty Images: http://www.gettyimages.de/enterprise/privacy-policy

Google Maps

We use "Google Maps" on our website, a service provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (hereinafter referred to as: "Google").

Geographic information is displayed visually through Google Maps. In doing so, Google collects and processes the visitor's IP address. This is transmitted to Google regardless of whether you are actually using Google Maps or whether you are logged into your Google account. Your IP address will be assigned to your Google account if you are logged into it when you visit our website. This data is transmitted to external Google servers in the USA. Google is a participant of the Privacy Shield Agreement and certified for data processing according to European standards. Google may pass this data collected through the technical process on to third parties. Purpose: The integration of Google Maps serves to simplify visualization and navigation when visiting our location. The data processing by Google takes place for the purpose of advertising, market research, the design of the website and the provision of needs-based advertising. Legal basis: The legal basis for the use of the data described above is Article 6 (1) lit. f GDPR. Prevention: You can prevent the assignment of the data by not using Google Maps on our website and by logging out of your Google account before your visit. You can also deactivate JavaScript in your browser to prevent the map from being displayed.

Third party information:

Headquarters within the EU: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

Data protection provisions: http://www.google.com/intl/de_de/help/terms_maps.html

Social media plugins

Our website uses social media plugins from the providers listed below. You can identify which plug-in belongs to which provider by the respective logo with which the plug-in is identified. If you call up one of our pages on which a plug-in is implemented, a connection is automatically established between your browser and the provider's servers with the respective provider of the plug-in. At this point in time, data will be transmitted to the provider. In addition, data is transferred to the provider as a result of further interactions with the respective social plug-in (eg clicking the "Like me" button on Facebook, re-tweet button on Twitter). If you have an account with the provider, this data can be linked to it. To prevent your data from being linked in this way, you can log out of the provider's service before visiting our website.

The data collected can be stored and evaluated by the provider in order to create user profiles for you for the purposes of advertising and market research. You have a right of withdrawal against the creation of user profiles. In order to exercise this, you must contact the provider of the plugin.

For what purpose and to what extent data is collected by the provider, you can refer to the respective data protection declarations of the providers, which are communicated below.

We ourselves do not collect any personal data using the social media plugins or their use. We have no influence on which data an activated plug-in collects and how this data is used by the provider.

We use social plugins from the following companies on our website:

Google Plus

Google Plus is a service provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043 - USA

Headquarters in the EU: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001

Data protection declaration available at: https://policies.google.com/privacy?hl=de

Instagram

Instagram is a service provided by Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025 - USA

Data protection declaration available at: https://help.instagram.com/155833707900388

Facebook

We also use Facebook plugins on our website. Facebook is a service provided by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304 - USA.

The plugins can be recognized by one of the Facebook logos (white “f” on a blue tile or a “thumbs up” sign) or are marked with the addition “Facebook Social Plugin”. The list and the appearance of the Facebook social plugins can be viewed here: http://developers.facebook.com/plugins .

When you call up a website on our website that contains such a plugin, your browser establishes a direct connection to the Facebook servers. The content of the plug-in is transmitted directly from Facebook to your browser, which integrates it into the website. We therefore have no influence on the amount of data that Facebook collects with the help of this plug-in and can therefore only inform you what we do with it according to our level of knowledge: When you visit our website, Facebook finds out your IP address and saves it itself if you are not a member of the social media provider Facebook. According to its own information, however, Facebook only stores an anonymized IP address in Germany. In addition, Facebook receives information about which page of our website you have accessed. If you are a member of Facebook and logged into your account, Facebook can assign your visit to your Facebook account. If you interact with the plugins, for example press the Like button or leave a comment, the corresponding information is transmitted directly from your browser to Facebook and stored there. If you are not a member of Facebook, there is still the possibility that Facebook will find out your IP address and save it. According to Facebook, only an anonymized IP address is saved in Germany. The purpose and scope of the data collection and the further processing and use of the data by Facebook as well as the related rights and setting options to protect the privacy of users can be found in Facebook's data protection information: http://www.facebook.com/policy.php .

If you are a member of Facebook and do not want Facebook to collect data about you via this offer and link it to your member data stored on Facebook, you must log out of Facebook before visiting our website. You also have the option of blocking Facebook social plugins with add-ons for your browser, for example with the “Facebook Blocker”. Further settings and contradictions to the use of data for advertising purposes are possible within the Facebook profile settings: https://www.facebook.com/settings?tab=ads . Headquarters in the EU: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2 - Ireland

Data protection declaration available at: https://www.facebook.com/about/privacy/

PayPal

On our website, we offer payment processing via the payment service provider PayPal (PayPal (Europe) S.à.rl & amp; Cie. SCA, 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg).

If you have decided to pay via PayPal, the following of your data will be transmitted to PayPal as part of the order: first and last name, address, date of birth, email address, telephone number, IP address as well as those necessary for processing the respective order Data. Purpose: This data is transmitted so that PayPal can carry out an identity check to process your purchase. This enables, among other things, the detection of fraudulent activities and the prevention of misuse of data. In addition, the data is transmitted so that PayPal can, if necessary, assess your creditworthiness or PayPal can pass the data on to credit agencies to assess your creditworthiness in the form of a credit check. PayPal uses the result of the credit check with regard to the statistical probability of default for the purpose of deciding on the provision of the respective payment method. The collected data can also be used by PayPal for analysis purposes, in particular for customer analysis, risk analysis, data analysis for the purpose of developing and improving the services offered by PayPal. Legal basis: The legal basis for the aforementioned use of the data is Art. 6 Para. 1 lit b GDPR. Deletion: The data collected and transmitted by us in this way will be automatically deleted after 26 months. You can find more information on PayPal's terms of use and data protection at https://www.paypal.com/de/webapps/mpp/ua/privacy-full# Revocation: You can revoke your consent to the use of personal data at PayPal. Despite revocation, PayPal may still be entitled to process, use and transmit the personal data that are absolutely necessary for contractual payment processing.

Safety measures

We also take state-of-the-art technical and organizational security measures in order to comply with the provisions of data protection laws and to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties.

Topicality and changes to this data protection declaration

This data protection declaration is currently valid and was last updated in May 2018. Due to changed legal or official requirements, it may be necessary to adapt this data protection declaration.

This data protection declaration was created with the help of the data protection declaration generator from SOS Datenschutz .

SOS data protection is an offer from MMR Müller Müller Rößner Rechtsanwälte Partnerschaft based in Berlin.