Data protection notice (Privacy Policy)

11/14/2021

With this information, I (named under item 1) inform the user of the website ("You" or "User") about the collection and processing of personal data in accordance with Art. 13 of the General Data Protection Regulation (DS-GVO).

For the use of websites of other providers, which are referred to e.g. via links, the data protection information there applies.

A General information

1 Person responsible and data protection officer

1.1 The person responsible for this website is: Cordula Pröfrock, Nixenweg 14, 70376 Stuttgart, info@lacebutwhy.de.

1.2 A data protection officer is not to be appointed by us.

1.3 Our website is hosted by ALL-INKL.COM (www.all-inkl.com), i.e. technically provided on web servers of this web hoster. The web hoster is a service provider  instructed by me according to Art. 28 DS-GVO.

2 Data subject rights

If personal data is collected from you by us, you have the following rights as a "data subject":

2.1 Right to information
You can request information in accordance with Art. 15 DS-GVO about your personal data that we process.

2.2 Right of objection
You have the right to object on specific reasons according to Art. 21 (1) DS-GVO. More detailled information you will find under "B".

2.3 Right to correction
If the information concerning you is not (or no longer) accurate, you may request a correction in accordance with Art. 16 DS-GVO. If your data is incomplete, you may request that it be completed.

2.4 Right to deletion
You can demand the deletion of your personal data under the conditions of Art. 17 DS-GVO.

2.5 Right to restriction of processing
You have the right to request restriction of the processing of your personal data ("blocking") under the conditions of Art. 18 DS-GVO.

2.6 Right to complain
If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with a data protection supervisory authority of your choice in accordance with Ar. 77 (1) DS- GVO.

2.7 Right to data portability
In the event that you have provided us with personal data pursuant to Art. 20 (1) DS-GVO, you have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to third parties in a structured, common and machine-readable format. The collection of data for the provision of the website and the storage of log files (section 3.1 below) are absolutely necessary for the operation of the website. They are therefore not based on consent pursuant to Art. 6 (1) (a) DS-GVO or on a contract pursuant to Art. 6 (1) (b) DS-GVO, but are justified pursuant to Art. 6 (1) (f) DS-GVO. Accordingly, the requirements of Art. 20 (1) DS-GVO are not met in this respect.

3 Procedure: Provision of the website and creation of log files

3.1 What data is processed and for what purpose?
Each time the content of the website is accessed, the web server of our web hoster, where our website is stored, temporarily collects and stores information (data) from the Internet browser of the calling computer or end device of the user. This data may enable the user to be identified and is therefore personal data.

3.1.1 The following data is collected and stored by our web hoster:

  • IP address of the user,
  • date and time of the call of the website,
  • the protocol, e.g. HTTP,
  • the request method "Get" or "Post",
  • the content related to the request or the indication of the retrieved file, which was transmitted to the user,
  • the access status (successful transmission, error etc),
  • the amount of data transferred in each case in bytes
  • incoming and outgoing data traffic ("traffic"),
  • a process identification number ("process ID"),
  • the duration until the web server has answered the user's request,
  • the web page from which the user's access was made,
  • the browser used by the user, the operating system, the interface, the language of the browser and the version of the browser software.

3.1.2 The temporary storage of this data of the user is necessary for the course of a website visit to enable the delivery of the website. For this purpose, the user's IP address must necessarily remain stored for the duration of the session (i.e. the website visit).

3.1.3 Further storage of the IP address with the subsequently named data from the above list beyond this purpose takes place in log files (logs). This is done so that our web host can ensure the functionality of the website and the security of the information technology systems.

3.2 On what legal basis is this data processed?
The data from section 3.1 are collected and processed by our web host for the aforementioned temporary storage purpose and also for the further storage purpose according to Art. 6 para. 1 letter f DS-GVO. The legitimate interest in the data processing also lies in these purposes. This legitimate interest is the interest of our web hoster, but also our legitimate interest in a functional website.

3.3 Are there other recipients of the aforementioned data besides the responsible party?
Our web hoster, as our service provider, has technical access to the data mentioned in 3.1.

3.4 How long is the data stored?
The data from 3.1.1 are deleted as soon as they are no longer required to achieve the purpose for which they were collected. In the case of website provision, this is the case when the respective session has ended. The log files are stored for a maximum of 7 days, unless a security event requires longer storage. .

3.5 Is there an obligation to provide data?
You must provide the data from 3.1 to our web hoster. Otherwise, you will not be able to use our website technically and our web hoster cannot guarantee secure technical operation.

4 Procedure: Use of e-mail address and contact form

4.1 Which data is processed for which purpose?
If we provide you with an e-mail address and a contact form with input fields, this serves the purpose of enabling you to contact us. If you provide us with personal data, we will store it and process it for the purpose of contacting you.

4.2 On what legal basis are these data processed?
The data from point 4.1 are processed on the basis of Art. 6 (1) letter f DS-GVO (legitimate interest of us as the controller). If your request is aimed at the conclusion of a contract, then Art. 6 (1) letter b DS-GVO is an additional legal basis (initiation, conclusion and execution of a contract).

4.3 Are there other recipients of the aforementioned data besides the responsible party?
Our web hoster, as our service provider, has technical access to the data mentioned in 4.1.

4.4 How long will the data be stored?
The data from 4.1 will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. For the personal data sent to us by e-mail or the contact form, this is the case when the respective correspondence with the user has ended and the storage is not still necessary for other reasons. The conversation is ended when it is clear from the circumstances that the matter in question has been conclusively clarified.

4.5 Is there an obligation to provide data?
You are not obliged to provide us with data from 4.1. You do not have to communicate with us.

5 Cookies and usage tracking

5.1 Cookies
Cookies are text files that are stored in the internet browser or by the internet browser on the user's computer system. When a user calls up a website, a cookie may be stored on the user's operating system. A cookie contains a characteristic string of characters that enables the user's browser to be uniquely identified when the website is called up again.

5.1.1 Technically necessary cookies are processed by us on the basis of Art. 6 (1) letter f DS-GVO (legitimate interest). Technically necessary cookies help to make a website usable by enabling basic functions such as the use of contact forms or access to secure areas of the website. A website cannot function properly without technically necessary cookies. We do not use cookies that are only set based on your consent pursuant to Art. 6 (1) (a) DS-GVO (e.g. preference cookies, statistics cookies, marketing cookies).

5.1.2 Removal option: The user can prevent or restrict the installation of cookies by setting his browser accordingly. Cookies that have already been stored can also be deleted at any time. The settings for this depend on the respective browser. However, if the user prevents or restricts the installation of cookies, this may mean that not all functions of the website can be fully used.

5.1.3 Technically necessary cookie "wbk_sid": If a login form or contact form is set up on our website, this HTTP cookie is stored on the user's operating system. This cookie contains a long combination of numbers and letters ("ID"). The purpose of this cookie is to enable the user to be recognized as such in the event that login data or contact information is sent, and to distinguish the user from abusive users (e.g. SPAM bots). If the user closes the browser, the cookie is automatically deleted from the user's operating system. It is therefore only valid for the duration of the visit to our websites (session cookie).

5.2 Usage tracking
Analysis programs and other techniques for evaluating usage behavior in the course of your visit to our websites (so-called "tracking") are not used.

6 Technical measures

6.1. For security reasons and to protect the transmission of confidential content, for example by means of requests that you send to us as the site operator, our websites are provided with active SSL or TLS encryption. An encrypted connection can be recognized by the fact that the address line of the browser changes from "http://" to "https://" and a lock symbol can be seen in the browser line. As a result of this encryption, data that you transmit to us cannot be read by third parties.

6.2 If you contact us by means of an e-mail address provided on our websites, the transport of the content of the e-mail to us is not end-to-end encrypted. This means that the e-mails are usually encrypted during transport via the e-mail providers involved, but are not encrypted on the servers there. Contacting us via the contact form provided is therefore technically a secure communication.

6.3 Insofar as you can view videos on our websites, this is done exclusively via the technology of linking to the respective video portal of a third-party provider, on which videos are stored under the data protection responsibility of the operator of the portal. The respective video portal is therefore not directly embedded in our websites. This ensures that user information is not transmitted to the portal as soon as the web page on which the video is integrated is loaded. It is also guaranteed that cookies of the portals or the advertising partners of these portals cannot be set on your end device via the mere linking. Only after your deliberate click on the video preview image is a connection to the portal of the third-party provider established and the associated data processing triggered. However, this and the associated possible data processing of your user data on the linked portal then occurs exclusively as a result of your desire to view the video there. The data processing triggered by this is beyond our control and is subject to the responsibility of these portals, which provide more or less detailed information about their data processing. If you do not agree with the data processing by the third-party provider, please do not click on the video preview image.

B Special information

Special right to object according to Art. 21 (1) DS-GVO.

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data carried out on the basis of Article 6(1)(f) DS-GVO, in accordance with Article 21(1) DS-GVO.

We will then no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the assertion, exercise or defense of legal claims.

C Notes on B

Regarding the procedure under A point 3.1: The collection of data for the provision of the website and the storage of log files are absolutely necessary for the operation of the website. Consequently, there are no interests of a data subject that override our interests.

Regarding the procedure under A number 4.1: You must explain to us in detail any interests you may have (your "special situation") so that we can carry out a renewed weighing of interests. If our interests in further storage do not outweigh your interests, the personal data stored in the course of contacting you will be deleted.