1) Information about the collection of personal data and contact details of the person responsible
1.1 We are pleased that you are visiting our website and thank you for your interest. In the following we will inform you about the handling of your personal data when using our website. Personal data are all data with which you can be personally identified.
1.2 The controller of data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is House of Textile Arts e.K., Bahnhofstrasse 5, 59964 Medebach, Germany, Tel.: +49 2982 930 60 20, Fax: +49 2982 930 60 21, E-Mail: email@example.com. The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the person responsible), this website uses an SSL or SSL protocol. TLS encryption. You can recognize an encrypted connection by the character string “https: //” and the lock symbol in your browser line.
2) Data collection when you visit our website
If you only use our website for informational purposes, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called “server log files”). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:
- Our visited website
- Date and time at the time of access
- Amount of data sent in bytes
- Source / reference from which you came to the page
- Browser used
- Operating system used
- IP address used (if applicable: in anonymous form)
The processing takes place in accordance with Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files retrospectively if there are concrete indications of illegal use.
If personal data is also processed by individual cookies we use, the processing is carried out in accordance with Art. 1 lit. b GDPR either for the execution of the contract, according to Art. 6 Para. 1 lit. a GDPR in the case of consent given or in accordance with Art. 6 Para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.
You can set your browser in such a way that you are informed about the setting of cookies and can decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general.
Please note that if you do not accept cookies, the functionality of our website may be restricted.
When contacting us (e.g. via contact form or e-mail), personal data is processed – exclusively for the purpose of processing and responding to your request and only to the extent necessary for this purpose. The legal basis for processing this data is our legitimate interest in answering your request in accordance with Art. 6 Para. 1 lit. f GDPR. If your contact is aimed at a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted when it is clear from the circumstances that the matter in question has been conclusively clarified and provided that there are no legal obligations to retain the data.
5) Data processing when opening a customer account
According to Art. 6 para. 1 lit. b DSGVO, personal data will continue to be collected and processed to the extent necessary in each case if you provide it to us when opening a customer account. The data required for opening an account can be found in the input mask of the corresponding form on our website. A deletion of your customer account is possible at any time and can be done by sending a message to the above address of the person responsible. After deletion of your customer account, your data will be deleted, provided that all contracts concluded via it have been fully processed, no legal retention periods are opposed and no legitimate interest on our part in the continued storage exists.
6) Use of customer data for direct advertising
6.1 Sending the e-mail newsletter to existing customers
If you have provided us with your e-mail address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services from our range by e-mail. For this we have to according to § 7 Abs. 3 UWG do not obtain separate consent from you. In this respect, data processing takes place solely on the basis of our legitimate interest in personalized direct mail in accordance with Art. 6 Para. 1 lit. f GDPR. If you have initially objected to the use of your e-mail address for this purpose, we will not send you an e-mail. You are entitled to object to the use of your e-mail address for the aforementioned advertising purpose at any time with effect for the future by notifying the person responsible named at the beginning. For this you only have to pay transmission costs according to the basic tariffs. After receipt of your objection, the use of your e-mail address for advertising purposes will be stopped immediately.
6.2 – Newsletter dispatch via rapidmail
Our e-mail newsletters are sent via the technical service provider rapidmail GmbH, Augustinerplatz 2, 79098 Freiburg (“rapidmail”), to whom we pass on the data you provided when you registered for the newsletter. This transfer takes place in accordance with Art. 6 Para. 1 lit. f GDPR and serves our legitimate interest in using an effective, secure and user-friendly newsletter system. The data you enter for the purpose of receiving the newsletter (e.g. e-mail address) will be stored on rapidmail’s servers in Germany.
rapidmail uses this information to send and statistically evaluate the newsletter on our behalf. For the evaluation, the e-mails sent contain so-called web beacons or tracking pixels, which represent one-pixel image files that are stored on our website. In this way it can be determined whether a newsletter message has been opened and which links have been clicked. With the help of so-called conversion tracking, it can also be analyzed whether a previously defined action (e.g. purchase of a product on our website) has taken place after clicking the link in the newsletter. Technical information is also recorded (e.g. time of access, IP address, browser type and operating system). The data is collected exclusively in pseudonymised form and is not linked to your other personal data; direct personal reference is excluded. This data is used exclusively for the statistical analysis of newsletter campaigns. The results of these analyzes can be used to better adapt future newsletters to the interests of the recipients.
If you want to object to the data analysis for statistical evaluation purposes, you have to unsubscribe from the newsletter.
We have concluded an order processing contract with rapidmail in which we oblige rapidmail to protect our customers’ data and not to pass them on to third parties.
7) Data processing for order processing
As far as necessary for the execution of the contract for delivery and payment purposes, the personal data collected by us will be processed in accordance with Art. 6 para. 1 lit. b DSGVO to the contracted transport company and the contracted credit institution.
Insofar as we owe you updates for goods with digital elements or for digital products on the basis of a corresponding contract, we process the contact data (name, address, e-mail address) provided by you when placing the order in order to inform you within the scope of our statutory information obligations pursuant to Art. 6 Para. 1 lit. c DSGVO by appropriate means of communication (e.g. by mail or e-mail) about upcoming updates in person within the period provided for by law. Your contact data will be used strictly for the purpose of notifying you of updates owed by us and will be processed by us for this purpose only insofar as this is necessary for the respective information.
In order to process your order, we also work together with the following service provider(s), who support us in whole or in part in the execution of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.
8) Rights of the data subject
8.1 The applicable data protection law grants you the following data subject rights (rights of access and intervention) vis-à-vis the controller with regard to the processing of your personal data, whereby reference is made to the stated legal basis for the respective exercise prerequisites:
- Right to information according to Art. 15 DSGVO;
- Right to rectification pursuant to Art. 16 DSGVO;
- Right to erasure pursuant to Art. 17 DSGVO;
- Right to restriction of processing pursuant to Art. 18 DSGVO;
- Right to information pursuant to Art. 19 GDPR;
- Right to data portability according to Art. 20 DSGVO;
- Right to revoke consent given in accordance with Art. 7 Para. 3 GDPR;
- Right to lodge a complaint pursuant to Art. 77 GDPR.
8.2 RIGHT OF OBJECTION
IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR MAIN LEGITIMATE INTEREST, YOU HAVE THE EVERY TIME TO PROCESS YOUR PERSONAL DATA ON THE BASIS OF A CONSIDERATION OF YOUR SPECIFIC SITUATION.
IF YOU MAKE USE OF YOUR RIGHT TO OBJECT, WE WILL END THE PROCESSING OF THE DATA AFFECTED. FURTHER PROCESSING IS RESERVED IF WE CAN PROVE COMPULSORY REASONS FOR THE PROCESSING, THAT OUTSIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING OR EXPRESSION OF THE EXPRESSION APPLIES.
IF YOUR PERSONAL DATA ARE PROCESSED BY US FOR DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA FOR THE PURPOSE OF SUCH ADVERTISING. YOU CAN OBJECT AS DESCRIBED ABOVE.
IF YOU MAKE USE OF YOUR RIGHT TO OBJECT, WE WILL END THE PROCESSING OF THE DATA CONCERNED FOR DIRECT ADVERTISING PURPOSES.
9) Duration of the storage of personal data
The duration of the storage of personal data is based on the respective legal basis, the processing purpose and – if relevant – additionally based on the respective statutory retention period (e.g. commercial and tax retention periods).
When processing personal data on the basis of express consent in accordance with Art. 6 Para. 1 lit. a GDPR, this data is stored until the person concerned revokes his consent.
Are there statutory retention periods for data that are required within the framework of legal or similar obligations on the basis of Art. 6 Para. 1 lit. b GDPR are processed, this data is routinely deleted after the retention period has expired, provided that it is no longer required for contract fulfillment or contract initiation and / or we have no legitimate interest in further storage.
When processing personal data on the basis of Art. 6 Para. 1 lit. f GDPR, this data is stored until the person concerned exercises his right of objection in accordance with Art. 21 Para. 1 GDPR, unless we can demonstrate compelling legitimate reasons for the processing that outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.
When processing personal data for the purpose of direct advertising on the basis of Art. 6 Para. 1 lit. f GDPR, this data is stored until the person concerned exercises his right of objection in accordance with Art. 21 Para. 2 GDPR.
Unless otherwise stated in the other information in this declaration about specific processing situations, stored personal data will otherwise be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.