Privacy Policy
The person responsible for data processing is
Celina Berge
Aurelienstr. 49
04177 Leipzig
ghostplanter@t-online.de
Access data and hosting
You can visit my website without providing any personal data. Each time a website is accessed, the web server only automatically saves a so-called server log file, which contains, for example, the name of the requested file, your IP address, the date and time of access, the amount of data transferred and the requesting provider (access data) and documents the access. This access data is analyzed exclusively for the purpose of ensuring trouble-free operation of the site and improving my offer. This serves to safeguard my legitimate interests, which predominate in the context of a balancing of interests, in a correct presentation of our offer in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR. All access data will be deleted no later than seven days after the end of your visit to the site.
Hosting
The services for hosting and displaying the website are provided in part by my service providers as part of processing on our behalf. Unless otherwise stated in this privacy policy, all access data and all data collected in the forms provided on this website will be processed on their servers. If you have any questions about my service providers and the basis of our cooperation with them, please use the contact option described in this privacy policy.
My service providers are located and/or use servers in the following countries for which the European Commission has determined an adequate level of data protection by decision Canada
My service providers are located and/or use servers in the USA and in other countries outside the EU and the EEA. There is no adequacy decision by the European Commission for these countries. My cooperation with them is based on standard data protection clauses of the European Commission.
Data processing for contract processing and for establishing contact
For the purpose of contract processing (including inquiries about and processing of any existing warranty and service disruption claims as well as any statutory updating obligations) in accordance with Art. 6 Para. 1 S. 1 lit. b GDPR, I collect personal data if you voluntarily provide it to me as part of your order. Mandatory fields are marked as such, as in these cases I need the data to process the contract and I cannot send the order without it. Which data is collected can be seen from the respective input forms.
Further information on the processing of your data, in particular on the transfer to my service providers for the purpose of order, payment and shipping processing, can be found in the following sections of this privacy policy. After completion of the contract, your data will be restricted for further processing and deleted after expiry of the retention periods under tax and commercial law in accordance with Art. 6 para. 1 sentence 1 lit. c GDPR, unless you have expressly consented to further use of your data in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR or I reserve the right to use data beyond this, which is permitted by law and about which I inform you in this declaration.
Customer account
If you have given your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR by deciding to open a customer account, I will use your data for the purpose of opening a customer account and storing your data for further future orders on my website. You can delete your customer account at any time, either by sending a message to the contact option described in this privacy policy or by using a function provided for this purpose in the customer account. After deletion of your customer account, your data will be deleted unless you have expressly consented to further use of your data in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR or I reserve the right to use data beyond this, which is permitted by law and about which I inform you in this declaration.
Contact
As part of customer communication, I collect personal data to process your inquiries in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR if you voluntarily provide me with this data when contacting me (e.g. via contact form or e-mail). Mandatory fields are marked as such, as in these cases I need the data to process your contact. Which data is collected can be seen from the respective input forms. After your request has been fully processed, your data will be deleted unless you have expressly consented to further use of your data in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR or I reserve the right to use data beyond this, which is permitted by law and about which I inform you in this declaration.
Data processing for the purpose of shipping processing
In order to fulfill the contract in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR, I will pass on your data to the shipping service provider commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods.
Data processing for payment processing
When processing payments in our online store, I work together with these partners: technical service providers, credit institutions, payment service providers.
Data processing for transaction processing
Depending on the selected payment method, I pass on the data necessary for processing the payment transaction to my technical service providers, who work for me as part of order processing, or to the commissioned credit institutions or to the selected payment service provider, insofar as this is necessary for processing the payment. This serves to fulfill the contract in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR. In some cases, the payment service providers collect the data required for processing the payment themselves, e.g. on their own website or via a technical integration in the ordering process. In this respect, the privacy policy of the respective payment service provider applies.
If you have any questions about our partners for payment processing and the basis of our cooperation with them, please use the contact option described in this privacy policy.
Data processing for the purpose of fraud prevention and optimization of our payment processes
If necessary, I provide my service providers with further data, which they use together with the data necessary for processing the payment as my processors for the purpose of fraud prevention and the optimization of our payment processes (e.g. invoicing, processing of disputed payments, accounting support). In accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, this serves to safeguard my legitimate interests in fraud protection and efficient payment management, which are overriding in the context of a balancing of interests.
Social media
Social plugins from Instagram (by Meta)
Social buttons from social networks are used on my website. These are only integrated into the page as HTML links, so that no connection to the servers of the respective provider is established when this website is accessed. If you click on one of the buttons, the website of the respective social network opens in a new window of your browser. There you can click on the Like or Share button, for example.
Contact options and your rights
Your rights
As a data subject, you have the following rights
in accordance with Art. 15 GDPR, the right to request information about your personal data processed by me to the extent specified therein in accordance with Art. 16 GDPR, the right to demand the immediate rectification of incorrect or incomplete personal data stored by me
in accordance with Art. 17 GDPR, the right to request the erasure of your personal data stored by me, unless further processing is required
in accordance with Art. 18 GDPR, the right to request the restriction of the processing of your personal data, insofar as
in accordance with Art. 20 GDPR, the right to receive your personal data that you have provided to me in a structured, commonly used and machine-readable format or to request transmission to another controller
in accordance with Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or my company headquarters.
Right to object
Insofar as I process personal data as explained above in order to protect my legitimate interests, which are overriding in the context of a balancing of interests, you can object to this processing with effect for the future. If the processing is carried out for direct marketing purposes, you can exercise this right at any time as described above. If the processing is carried out for other purposes, you only have the right to object on grounds relating to your particular situation.
After exercising your right to object, I will no longer process your personal data for these purposes unless I can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves the establishment, exercise or defense of legal claims.
This does not apply if the processing is for direct marketing purposes. In this case, I will no longer process your personal data for this purpose.
Contact options
If you have any questions about the collection, processing or use of your personal data, information, correction, restriction or deletion of data as well as revocation of consent given or objection to a specific use of data, please contact me directly using the contact details in my legal notice.