1. Name and Address of the Data Controller
The data controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the Member States as well as other data protection regulations is: Mayra León, Friedhofstraße 22, 67125 Dannstadt-Schauernheim, Germany, email: firstname.lastname@example.org, tel.: (+49) 6231 4030360.
2. Data Processing
2.1. General Information about Data Processing
(1) In the following, I inform you about the collection of personal data when using my website. Personal data are all data that can be related to you as a person, e.g. name, address, email addresses, user behaviour (hereinafter only referred to as “data”).
(2) When you contact me by email or via a contact form or through social media, the data you provide (your email address, possibly your name and your telephone number) will be saved by me to answer your questions. The legal basis for the processing of the data is my legitimate interest in accordance with Art. 6(1)(f) GDPR in responding to your request. If your contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6(1)(b) GDPR.
I erase the data arising in this context after the storage is no longer required, especially after the request has been processed, or restrict the processing if there are statutory storage requirements.
(3) An adequacy decision by the EU Commission exists for data transfers to the USA entitled the EU-US Privacy Shield. In this decision, the Commission has certified that the guarantees for the transfer of data to the USA based on the EU-US Privacy Shield meet the data protection standards in the EU. Insofar as I transfer data to the USA, I have indicated the participation of my service providers in the EU-US Privacy Shield.
(4) If I use contracted service providers for individual functions of my offer or would like to use your data for advertising purposes, I will inform you in detail below about the respective processes. I also state the criteria established for the duration of storage.
2.2. Log File
I log your visit to my website. The following data are processed in this context: Name of the website accessed, date and time of the access, the amount of data transferred, the browser type and version, the operating system you are using, the referrer URL (the website previously visited), your IP address and the requesting provider. This is necessary to ensure the security of the website. I process the data accordingly on the basis of my legitimate interests in accordance with Art. 6(1)(f) GDPR. The log file will be deleted after seven days, unless it is needed to clarify or prove specific violations of the law that have become known within the storage period.
As part of hosting, all data to be processed in connection with the operation of this website are stored. This is necessary to enable the website to operate. I process the data accordingly on the basis of my legitimate interests in accordance with Art. 6(1)(f) GDPR. To provide my online presence, I use services from web hosting providers to whom I transmit the above-mentioned data.
If you contact me, your data (name, contact details, if specified by you) and your message will only be processed for the purpose of processing and handling your request. These data are processed by me on the basis of Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR in order to process your request. Your data will be deleted after the final processing of your request; this is the case if it can be inferred from the circumstances that the matter concerned has been conclusively clarified and provided that there are no statutory storage requirements.
2.5. Ease of Use and Marketing
In order to enable the use of certain functions, I use so-called cookies. These are short data packets that are stored on your device and exchanged with other providers. Some of the cookies I use are deleted immediately after you close your browser (so-called session cookies). Other cookies remain on your device and make it possible to recognise your browser the next time you visit (persistent cookies).
You can delete all cookies stored on your device and adjust the settings of commonly used browsers so that the storage of cookies is prevented. In this case, you may have to make some settings each time you visit this website and accept the impairment of some functions.
2.5.1. Google Fonts
To make visiting my website attractive, I use external fonts from Google Fonts. When visiting the website, these fonts are loaded from servers of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google does not save cookies in your browser. According to the information available to me, however, the IP address of the user’s device is transmitted to Google and stored. This processing takes place due to my prevailing legitimate interest in the optimal marketing of my offer according to Art. 6(1)(f) GDPR.
Google is certified under: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
Further information on data protection can be found at: https://policies.google.com/privacy?hl=en&gl=en.
I use the plugin WPML for the multilingual functionality of my website. WPML is a product of OnTheGoSystems Limited, 22/F 3 Lockhart Road, Wanchai, Hong Kong. WPML cookies are only used to recognise and record the language used or selected by the user.
Further information on data protection compliance can be found here: https://wpml.org/documentation/privacy-policy-and-gdpr-compliance/.
3. Duration of Data Storage
I only store personal data for as long as is necessary for the purposes for which the data are processed or until you have withdrawn your consent. Insofar as statutory storage requirements must be observed, the storage period for certain data can be up to 10 years regardless of the processing purposes.
4. Your Rights as a Data Subject
Upon request, you can obtain access to all personal data that I have stored about you at any time and free of charge.
4.2. Rectification, Erasure, Restriction of Processing (Blocking), Objection
If you no longer consent to the storage of your personal data or if the data have become incorrect, I will arrange for the erasure or blocking of your data or make the necessary corrections (insofar as this is possible under applicable law) upon being instructed to do so. The same applies if I should only process data in a restricted manner in the future.
4.3. Data Portability
Upon request, I will provide you with your data in a commonly used, structured and machine-readable format so that you can transmit the data to another data controller if you wish.
4.4. Right to Lodge a Complaint
You have the right to lodge a complaint with the competent supervisory authority:
4.5. Right to Withdraw a Consent with Future Effect
You can withdraw your consent at any time with future effect. Your withdrawal does not affect the lawfulness of the processing until the time of withdrawal.
Data for which I am unable to identify the data subject, e.g. if they have been anonymised for analysis purposes, are not covered by the above rights. Access, erasure, blocking, correction or transmission to another company may be possible with regard to these data if you provide me with additional information that allows me to identify you.
4.7. Exercising your Rights as a Data Subject
If you have any questions about the processing of your personal data or about access, rectification, blocking, objection or erasure regarding your data or if you would like the data to be transmitted to another company, please contact me at the following email address: email@example.com.