- ALISON GEMSTONE -
Data protection
As of: February 22, 2024
1. Data protection as a first insight
Introduction
The use of this website may involve the processing of personal data. To ensure that this processing is understandable for you, we would like to provide you with a simple overview of this processing when you visit our website with the following information in our data protection declaration.
Personal data represents any data that can be used to personally identify you. For detailed information on the subject of data protection, please see the data protection declaration listed below this text.
In order to ensure fair processing, we would also like to inform you about your rights under the European General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG).
Please read the Privacy Policy carefully and make sure you fully understand the practices regarding your information before using the Services. If you have read, fully understood, and do not agree to our policies, you must stop using the Digital Assets and Services. By using the Services, you accept the terms of this Privacy Policy. Continued use of the Services constitutes your acceptance of our Privacy Policy and any changes thereto.
How do I collect your data?
On the one hand, your data is collected when you provide it to us. This can be e.g. This could, for example, be data that you enter into a contact form to contact us.
Other data is collected automatically or with your consent by IT systems when you visit our website. This is primarily technical data (e.g. operating system, internet browser, or time of page access). This data is collected automatically as soon as you enter this website.
Below are the main methods we use to collect data:
• We collect information when you use our Services. This means that when you visit our Digital Assets and use Services, we may collect, record and store usage, sessions and related information.
• We collect data that you provide to us, for example when you contact us directly via a communication channel (e.g. an email with a comment or feedback).
• We may collect information from third-party sources as described below.
• We collect information that you provide to us when you log in to our Services through a third party such as Facebook or Google.
Why do we collect the data?
Below are the main methods we use to collect data:
• We collect information when you use our Services. This means that when you visit my Digital Assets and use Services, I may collect, record and store usage, sessions and related information.
• We collect data that you provide to us, for example when you contact us directly via a communication channel (e.g. an email with a comment or feedback).
• We may collect information from third-party sources as described below.
• We collect information that you provide to us when you log in to our Services through a third party such as Facebook or Google.
Who do we share this data with?
We may share your information with our service providers to operate our services (e.g. storing data through third party hosting services, providing technical support, etc.).
We may also disclose your information in the following circumstances:
(i) to investigate, detect, prevent, or take action against illegal activities or other wrongdoing;
(ii) to establish or exercise our rights of defense;
(iii) to protect our rights, property or personal safety, or the safety of our users or the public;
(iv) in the event of a change of control of us or one of our affiliates (by way of a merger, acquisition or purchase of (substantially) all of the assets, among other things);
(v) to collect, maintain and/or manage your information through authorized third parties (e.g. cloud service providers) as appropriate for business purposes;
(vi) to work with third parties to improve your user experience. To avoid any misunderstandings, we would like to point out that we may transmit, pass on or otherwise use non-personal data to third parties at our own discretion.
Person responsible for data protection
If you have any questions or suggestions about this information, or would like to contact us to assert your rights, please feel free to submit your request contact me using the following contact options:
Telephone number
0176 45779401
Further important contact information can also be found in the legal notice.
Your data protection rights
As a data subject, you have the right to assert your data subject rights against us. In particular, you have the following rights:
• In accordance with Art. 15 GDPR and Section 34 BDSG, you have the right to request information about whether and, if so, to what extent we process personal data about you or not.
• You have the right to request that we correct your data in accordance with Art. 16 GDPR.
• You have the right to request that we delete your personal data in accordance with Article 17 GDPR and Section 35 BDSG.
• You have the right to have the processing of your personal data restricted in accordance with Article 18 GDPR.
If you dispute the accuracy of your personal data stored by us, we will generally need some time to investigate this. For the duration of the review, you have the right to request that the processing of your personal data be restricted.
If the processing of your personal data was/is happening unlawfully, you can also request that I restrict data processing instead of deleting it.
• If you have lodged an objection in accordance with Article 21 Para. 1 GDPR, a balance must be made between your interests and ours. As long as it is not yet clear whose interests prevail, you have the right to request that we restrict the processing of your personal data.
• If I no longer need your personal data, but you need it to exercise, defend or assert legal claims, you have the right to request that we restrict the processing of your personal data instead of deletion.
• You have the right, in accordance with Art. 20 GDPR, to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format and to transmit this data to another person responsible.
• In accordance with Article 21 Paragraph 1 GDPR, you have the right to object to any processing based on the legal basis of Article 6 Paragraph 1 Letter e) or f) GDPR. If we process personal data about you for the purpose of direct advertising, you can object to this processing in accordance with Article 21 Paragraph 2 and Paragraph 3 GDPR.
If you have given us separate consent to data processing, you can revoke this consent at any time in accordance with Article 7 Paragraph 3 GDPR. Such a revocation will not affect the lawfulness of the processing that took place based on consent until the revocation.
If you have restricted the processing of your personal data, this data - apart from its storage - may only be used with your consent, or for the establishment, exercise or defense of legal claims, or to protect the rights of another natural or legal person, or for reasons of an important public interest of the European Union or a Member State.
Please note, however, that these rights are not absolute and may be subject to our own legitimate interests and regulatory requirements. If you have general questions about the personal information we collect and how we use it, please contact us as indicated above.
In the course of providing the Services, we may transfer data across borders to affiliates or other third parties and from your country/jurisdiction to other countries/jurisdictions worldwide. By using the Services, you consent to the transfer of your data outside the EEA.
If you are based in the EEA, your personal data will only be transferred to locations outside the EEA if we are satisfied that an adequate or comparable level of protection of personal data exists. We will take appropriate steps to ensure that we have appropriate contractual arrangements in place with our third parties to ensure that appropriate security measures are in place so that the risk of unlawful use, alteration, deletion, loss or theft of your personal data is minimized and that such third parties will at all times act in accordance with applicable laws.
Rights under the California Consumer Privacy Act
If you use the Services as a California resident, then you may have the right under the California Consumer Privacy Act (“CCPA”) to Request access to and deletion of your data.
To exercise your right to access and delete your data, please read below how to contact us.
Category: The website does not sell any data about its users
We do not sell users' personal information for the purposes of the CCPA.
Complaint to a supervisory authority
If you are of the opinion, or in a case of a violation of the GDPR, that the processing of personal data concerning you violates the provisions of the GDPR, you have the right to lodge a complaint with a supervisory authority in accordance with Article 77 of the GDPR.
The right to lodge a complaint exists without prejudice to any other administrative or judicial remedies.
Analytics and Third Party Tools
When you visit this website, your surfing behavior can be statistically evaluated. This happens primarily with so-called analysis programs, which you can find in this data protection declaration.
2. General mandatory information and instructions
General information on data processing
We take the protection of your personal information on our website very seriously.
When you use this website, various personal data will be collected from you.
Personal data is data that can be used to personally identify you. This data protection declaration explains what data we collect from you and what we use it for. It also explains how and for what purpose this happens.
We process personal data confidentially and in compliance with the relevant data protection regulations, in particular the GDPR and the BDSG.
Data processing by us only takes place on the basis of legal permission. When using this website, I only process personal data with your consent (Art. 6 Para. 1 Letter a) GDPR), to fulfill a contract to which you are a party, or at your request to carry out pre-contractual measures (Art. 6 Para . 1 letter b) GDPR), to fulfill a legal obligation (Article 6 paragraph 1 letter c) GDPR), or if the processing is necessary to protect my legitimate interests or the legitimate interests of a third party, unless yours Interests or fundamental rights and freedoms that require the protection of personal data prevail (Art. 6 Para. 1 Letter f) GDPR).
We would like to point out that data transmission over the Internet (e.g. when communicating via email) can have security gaps. Complete protection of data from access by third parties is not possible and cannot be guaranteed by us.
Duration of storage
Unless a more precise storage period is specified in this data protection declaration, your personal data will remain with us until the purpose for data processing no longer applies or is no longer necessary.
Unless otherwise stated in the following information, we only store the data for as long as is necessary to achieve the processing purpose.
If you make a legitimate request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. tax or commercial law retention periods); In the latter case, the deletion takes place after these reasons no longer apply.
Please note that we retain collected information for as long as necessary to provide our services, comply with our legal and contractual obligations to you, resolve disputes, and enforce our agreements.
We may correct, supplement or delete inaccurate or incomplete data at any time at our sole discretion.
Revocation of your consent to data processing
Many data processing operations are only possible with your express consent. You can revoke any consent you have already given at any time. The lawfulness of the data processing carried out until the revocation remains unaffected by the revocation.
Right to object to data collection in special cases, as well as to direct advertising (Art. 21 GDPR)
If the data processing is based on Art. 6 ABS. 1 lit. E or F GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation. This also applies to profiling based on these provisions.
Please see this data protection declaration for the legal basis on which processing is based. If you object, we will no longer process your affected personal data. Unless we have compelling legitimate reasons for processing prove that your rights, freedoms and interests outweigh them, or the processing serves to assert, exercise or defend legal claims (objection according to ART. 21 ABS 1 GDPR).
If your personal data is processed for the purpose of direct advertising, you have the right to object at any time to the processing of your personal data for the purpose of such advertising. This also applies to profiling, to the extent that it is related to such direct advertising.
If you object, your personal data will no longer be used for direct advertising purposes, see note on objection according to ART. 21 ABS. 2 GDPR).
Right to data portability
You have the right to have data that we process automatically based on your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the data to be transferred directly to another person responsible, this will only be done if this is technically possible.
3. Data collection on the website
Cookies
We use cookies on our website.
Cookies are small text files that are stored by your browser when you visit a website. This identifies the browser used and can be recognized by our web server.
When you visit or access our Services, we authorize third parties to use web beacons, cookies, pixel tags, scripts and other technologies and analytics services (“Tracking Technologies”). These tracking technologies may allow third parties to automatically collect your data to improve the navigation experience on our digital assets, optimize their performance and ensure a tailored user experience, as well as for security and fraud prevention purposes.
To find out more, please read our Cookie Policy.
Category: The user is NOT affiliated with an advertising service
We will not share your email address or other personal information with advertising companies or advertising networks without your consent.
Category: The user is connected to an advertising service, a campaign manager or Facebook Ads
We may provide advertising across our Services and our digital assets (including websites and applications that use our Services), which may also be tailored to you, such as: B. Ads based on your recent browsing behavior across websites, devices or browsers.
To deliver these advertisements to you, we may use cookies and/or JavaScript and/or web beacons (including transparent GIFs) and/or HTML5 local storage and/or other technologies. We may also use third parties, such as network advertisers (i.e. third parties that display advertisements based on your website visits), to serve targeted advertisements. Third-party advertising network providers, advertisers, sponsors and/or website traffic measurement services may also use cookies and/or JavaScript and/or web beacons (including transparent GIFs) and/or Flash cookies and/or other technologies to improve effectiveness measure your ads and tailor advertising content for you. These third-party cookies and other technologies are subject to the specific privacy policy of the relevant third party and not this one.
If personal data is processed through the use of cookies, this is based on the legal basis of Article 6 Paragraph 1 Letter f) GDPR. This processing serves our legitimate interest in making our website more user-friendly, effective and secure. You can delete cookies at any time in your browser's security settings. You can generally object to the use of cookies through your browser settings. You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or generally, and activate the automatic deletion of cookies when closing the browser. However, if cookies are deactivated, the functionality of our website may be restricted.
Numerous cookies are technically necessary because certain website functions would not work without them (e.g. the shopping cart function or the display of videos). Other cookies are used to evaluate user behavior or display advertising.
Cookies that are required to carry out the electronic communication process (necessary cookies), or to provide certain functions you want (functional cookies, e.g. for the shopping cart function) or to optimize the website (e.g. cookies to measure the web audience). are stored on the basis of Art. 6 Para. 1 lit. f GDPR, unless another legal basis is stated.
The website operator has a legitimate interest in storing cookies in order to provide its services in a technically error-free and optimized manner. If consent to the storage of cookies has been requested, the relevant cookies will be stored exclusively on the basis of this consent (Art. 6 Para. 1 lit. a GDPR); consent can be revoked at any time.
Objection to advertising emails
The use of contact details published as part of the imprint obligation to send unsolicited advertising and information materials is hereby objected to. The operators of the pages expressly reserve the right to take legal action in the event of unsolicited advertising information being sent, such as spam emails.
Where do we store the data?
Category: Always
Non-Personal Information
Please note that our companies and our trusted partners and service providers are located around the world. For the purposes explained in this Privacy Policy, we store and process any non-personal data that we collect in different jurisdictions.
Category: User collects personal data
Personal Data
Personal data may be maintained, processed and stored in the United States, Ireland, South Korea, Taiwan, Israel and to the extent required for the proper provision of our Services and/or by law (as further explained below) in other jurisdictions.
Processing of server log files
When you use our website for purely informational purposes, general information is initially stored automatically (i.e. not via registration), which your browser transmits to our server. By default, this includes: browser type/version, operating system used, page accessed, the previously visited page (referrer URL), IP address, operating system used, host name of the accessing computer, date and time of the server request and HTTP status code. The processing is carried out to protect our legitimate interests and is based on the legal basis of Article 6 Paragraph 1 Letter f) GDPR. This processing serves the technical administration and security of the website. The stored data will be deleted unless there is reasonable suspicion of unlawful use based on concrete evidence and further examination and processing of the information is required or necessary for this reason.
The website operator has a legitimate interest in the technically error-free presentation and optimization of his website - for this purpose the server log files must be recorded.
contact form
If you send us inquiries using the contact form, your details from the inquiry form, including the contact details you provided there, will be stored by us in order to process the inquiry and in case of follow-up questions. We will not pass on this data without your consent.
This data is processed on the basis of Art. 6 Para. 1 lit. b GDPR, provided your request is related to the fulfillment of a contract or is necessary to carry out pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the inquiries addressed to us (Art. 6 Para. 1 lit. f GDPR), or on your consent (Art. 6 Para. 1 lit. a GDPR) if this was queried.
The data you enter in the contact form will remain with us until you request us to delete it. Revoke your consent to storage, or the purpose for data storage no longer applies and is no longer necessary (e.g. after your request has been processed). Mandatory legal provisions - in particular retention periods - remain unaffected.
Inquiries by email, telephone
If you contact us by email or telephone, your request, including all resulting personal data (name, request, etc.), will be stored and processed by us for the purpose of processing your request. We will not pass on this data without your consent.
This data is processed on the basis of Art. 6 Para. 1 lit. b GDPR, provided that your request is related to the fulfillment of a contract or is necessary to carry out pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the inquiries addressed to us (Art. 6 Para. 1 lit. f GDPR), or on your consent (Art. 6 Para. 1 lit. a GDPR) if this was queried.
The data you send to us via contact requests will remain with us until you request us to delete it and give your consent to save it You can revoke your consent or the purpose for data storage no longer applies and is no longer necessary (e.g. after your request has been processed).
Mandatory legal provisions - in particular statutory retention periods - remain unaffected by this.
4. Analysis tools
Twipla analysis system
This website uses the Twipla analysis system.
Twipla is a visitor analytics for an easy way to understand website analytics. The software is GDPR compliant and offers a straightforward user experience through statistical dashboards, simple visualizations and performance-based comparisons.
With the help of Twipla we are able to collect and analyze data about the use of our website by website visitors. This allows us, among other things, Find out when which page views were made and from which region they come.
The use of this analysis tool is based on Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in the anonymized analysis of user behavior in order to optimize both its website and its advertising. If appropriate consent has been requested (e.g. consent to the storage of cookies), processing is carried out exclusively on the basis of Art. 6 Para. 1 lit. a GDPR; consent can be revoked at any time.
How do we protect the data?
The hosting service for our digital assets provides us with the online platform through which we can offer our services to you. Your data may be stored through our hosting provider's data storage, databases and general applications. It stores your data on secure servers behind a firewall and it offers secure HTTPS access to most areas of its services.
Category: User accepts payments/eCom
All payment options offered by us and our hosting provider for our digital assets comply with the PCI-DSS (credit card industry data security standard) regulations of the PCI Security Standards Council. This involves collaboration between brands such as Visa, MasterCard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of credit card information (including physical, electronic and procedural measures) by our store and service providers.
Category: Always
Regardless of the measures and efforts taken by us and our hosting provider, we cannot and do not guarantee absolute protection or security of the data that you upload, post or otherwise share with us or others.
For this reason, we would like to ask you to set strong passwords and, if possible, not to provide us or others with any confidential information the disclosure of which you believe could cause significant or lasting harm to you. Additionally, because email and instant messaging are not considered secure forms of communication, we ask that you do not share any confidential information through any of these communication channels.
5. Protection of minors
How do we deal with minors?
Category: User does NOT collect data from minors
The Services are not intended for users who have not yet reached the legal age of majority, although the legal age of majority is determined differently in each country and must therefore also be observed in your own country. The legal basis is that the visitor is of legal age and/or is also native.
Please consider your own legal requirements, even if this website was created according to the European law - Germany.
We will not knowingly collect data from children. If you are under the age of majority, you should not download or use the Services or provide any information to us.
We reserve the right to request proof of age at any time so that we can check whether minors are using our services. If we become aware that a minor is using our Services, we may prohibit or block such user's access to our Services and we may immediately delete any data we hold about that user.
If you have reason to believe that a minor has disclosed information to us, please contact us immediately as explained above.
Category: Always, but only if you are of legal age
We will only use your personal data for the purposes set out in the Privacy Policy and only if we are satisfied that:
• the use of your personal data is necessary to perform or conclude a contract (e.g. to provide you with the services themselves or customer service or technical support to provide);
• the use of your personal data is necessary to comply with relevant legal or regulatory obligations, or
• the use of your personal information is necessary to support our legitimate business interests (provided that at all times this is done in a manner that is proportionate and respects your data protection rights).
6. Updates, Changes and Disclaimer
Category: Always
We may revise this Privacy Policy from time to time in our sole discretion, the version posted on the Site will always be current (see “As of” statement). We encourage you to periodically review this Privacy Policy for any changes. If there are any significant changes, we will post a notice on our website. Your continued use of the Services following notification of changes on our website will constitute your acknowledgment and agreement to the changes to the Privacy Policy and your agreement to be bound by the terms and conditions of such changes.
DISCLAIMER
The information contained herein is not a substitute for legal advice and you should not rely solely on it. Specific requirements regarding legal terms and guidelines may vary from state to state and/or from jurisdiction to jurisdiction. As set out in our Terms of Use, you are responsible for ensuring that your Services are permitted by, and comply with, the law applicable to you.
To ensure that you fully comply with your legal obligations, we strongly recommend that you seek professional advice to better understand which requirements apply specifically to you.