data protection

Data protection

Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide the data has no consequences. This only applies if no other information is provided in the subsequent processing operations.
“Personal data” means any information relating to an identified or identifiable natural person.

Contact

Responsible
Please contact us if you wish. The person responsible for data processing is: Michael Gradenegger, Scheerstrasse 1, 91242 Ottensoos Germany, 017620502260, gradenegger@leinwandbau.info

Customer’s initiative contact via email
If you initiate business contact with us by email, we will only collect your personal data (name, email address, message text) to the extent you provide it. The data processing serves to process and answer your contact request.
If the contact serves to carry out pre-contractual measures (e.g. advice in the event of interest in purchasing, preparation of an offer) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 Para. 1 lit. b GDPR.
If contact is made for other reasons, this data processing is carried out on the basis of Art. 6 (1) (f) GDPR due to our overriding legitimate interest in processing and answering your request. In this case, you have the right to object at any time to the processing of personal data concerning you based on Art. 6 (1) (f) GDPR, for reasons arising from your particular situation.
We only use your email address to process your request. Your data will then be deleted in compliance with statutory retention periods unless you have consented to further processing and use.

Collection and processing when using the contact form
When you use the contact form, we only collect your personal data (name, email address, message text) to the extent you provide it. The data processing serves the purpose of establishing contact.
If the contact serves to carry out pre-contractual measures (e.g. advice in the event of interest in purchasing, preparation of an offer) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 Para. 1 lit. b GDPR.
If contact is made for other reasons, this data processing is carried out on the basis of Art. 6 Para. 1 lit. f GDPR due to our overriding legitimate interest in processing and answering your request. In this case, you have the right to object to this processing of personal data concerning you based on Art. 6 Para. 1 lit. f GDPR at any time for reasons arising from your particular situation.
We only use your email address to process your request. Your data will then be deleted in compliance with statutory retention periods unless you have consented to further processing and use.

Collection and processing when sending images by email
You have the option of sending us pictures by email in connection with ordering a personalized product.
When you send us your pictures, we may collect your personal data (image of an identifiable person) only to the extent you have provided it. The data processing serves the purpose of creating personalized products. The image sent serves as a template for the product and is used for this purpose (e.g. T-shirt printing). The processing is carried out on the basis of Art. 6 Para. 1 lit. b GDPR and is necessary for the fulfillment of a contract with you.
Your data will not be passed on.
We will only use the image you send us to provide the service. Your data will then be deleted in compliance with statutory retention periods unless you have consented to further processing and use.

WhatsApp Business
If you contact us for business purposes via WhatsApp, we use the WhatsApp Business version of WhatsApp Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; “WhatsApp”). If you are located outside the European Economic Area, this service is provided by WhatsApp Inc. (1601 Willow Road, Menlo Park, CA 94025, USA).
The data processing serves to process and answer your contact request. For this purpose, we collect and process your mobile phone number stored with WhatsApp, your name if provided, and other data to the extent provided by you. We use a mobile device for the service, in whose address book only data from users who have contacted us via WhatsApp is stored. Personal data will therefore not be passed on to WhatsApp without you having already consented to this.
Your data will be transferred from WhatsApp to servers Meta Platforms Inc. in the USA.
There is no adequacy decision by the EU Commission for the USA. The data transfer takes place on the basis of standard contractual clauses as appropriate guarantees for the protection of personal data, which can be viewed at: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de .
If the contact serves to carry out pre-contractual measures (e.g. advice in the event of interest in purchasing, preparation of an offer) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 Para. 1 lit. b GDPR.
If contact is made for other reasons, this data processing is carried out on the basis of Art. 6 (1) (f) GDPR due to our overriding legitimate interest in providing a quick and easy way to contact us and in answering your inquiry. In this case, you have the right to object at any time to the processing of personal data concerning you based on Art. 6 (1) (f) GDPR, for reasons arising from your particular situation.
We only use your personal data to process your request. Your data will then be deleted in compliance with statutory retention periods unless you have consented to further processing and use.
For more information on terms of use and data protection when using WhatsApp, please visit https://www.whatsapp.com/legal/#terms-of-service and https://www.whatsapp.com/legal/#privacy-policy .

Customer Account Orders

Customer account
When you open a customer account, we collect your personal data to the extent specified there. The data processing serves the purpose of improving your shopping experience and simplifying order processing. The processing is carried out on the basis of Art. 6 Paragraph 1 Letter a of GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the legality of the processing carried out on the basis of the consent until the revocation. Your customer account will then be deleted.

reviews  Advertising

Buyer Seal Customer Rating
We use the buyer seal customer rating tool from Händlerbund Management AG (Torgauer Straße 233 B, 04347 Leipzig) on ​​our website. After you have placed your order, we would like to ask you to rate and comment on your purchase from us.
For this purpose, we will contact you by email, using the technical system of the provider of the buyer's seal evaluation tool as part of order processing.
Your data will be processed either with your consent or based on our legitimate interest.
The processing is carried out on the basis of Art. 6 Paragraph 1 Letter a of GDPR with your consent, provided that you have expressly agreed to receive the request for a review. You can revoke your consent at any time using the corresponding link in the email, without affecting the legality of the processing carried out on the basis of the consent until the revocation. Your email address will then be removed from the mailing list.
Processing without express consent is carried out on the basis of Art. 6 (1) (f) GDPR due to the legitimate interest in truthful, verified evaluations of our services in the context of direct advertising. For this purpose, we send an electronic request for evaluation for our own goods or services that you have already purchased from us. The email is sent to the email address that we received from you as part of the sale of a product or service. The request for evaluation is sent subject to the proviso that you have not objected to this use of your email address.
You can object at any time by notifying us. You can find the contact details for exercising your objection in the imprint. You can also use the link provided in the request for evaluation. There are no costs for this other than the transmission costs according to the basic rates.
The personal data stored in this context in the technical system of the Buyer Seal evaluation tool will be deleted 3 months after the delivery of the goods recorded for evaluation.

Use of your personal data for sending postal advertising
We use your personal data (name, address) that we received as part of the sale of a product or service to send you advertising by post, unless you have objected to this use. The provision of this data is necessary for the conclusion of the contract. Failure to provide this data means that no contract can be concluded.
The processing is carried out on the basis of Art. 6 (1) (f) GDPR due to our overriding legitimate interest in direct advertising. You can object to this use of your address data at any time by notifying us. The contact details for exercising your right of objection can be found in the imprint.

Use of the email address for sending newsletters
We use your email address, regardless of the contract processing, exclusively for our own advertising purposes to send newsletters, provided that you have expressly consented to this. The processing is carried out on the basis of Art. 6 Paragraph 1 Letter a of GDPR with your consent. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent until the revocation. You can unsubscribe from the newsletter at any time by using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the mailing list.


Shipping service provider  Merchandise management

Passing on the email address to shipping companies to inform them about the shipping status
We will pass on your email address to the transport company as part of the contract processing, provided that you have expressly agreed to this during the ordering process. The purpose of the transfer is to inform you about the shipping status by email. The processing is carried out on the basis of Art. 6 Paragraph 1 Letter a of GDPR with your consent. You can revoke your consent at any time by notifying us or the transport company, without affecting the legality of the processing carried out on the basis of the consent until the revocation.

Use of an external inventory management system
We use a merchandise management system to process the contract as part of order processing. For this purpose, your personal data collected as part of the order will be sent to
Pickware GmbH, Goebelstr. 21, 64293 Darmstadt
transmitted.

Analysis advertising tracking

Use of Google Analytics
We use the web analysis service Google Analytics from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.
The data processing serves the purpose of analyzing this website and its visitors as well as for marketing and advertising purposes. For this purpose, Google will use the information obtained on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activities and to provide the website operator with other services related to website activity and internet usage. The following information may be collected, among others: IP address, date and time of the page visit, click path, information about the browser you use and the device you use, pages visited, referrer URL (website through which you accessed our website), location data, purchasing activities. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
Google Analytics uses technologies such as cookies, web storage in the browser and tracking pixels, which enable an analysis of your use of the website. The information generated in this way about your use of this website is usually transferred to a Google server in the USA and stored there. There is no adequacy decision by the EU Commission for the USA. The data transfer takes place on the basis of standard contractual clauses as suitable guarantees for the protection of personal data, which can be viewed at: https://policies.google.com/privacy/frameworks and https://business.safety.google/adsprocessorterms/. Both Google and US government agencies have access to your data. Google may link your data to other data, such as your search history, your personal accounts, your usage data from other devices, and any other data Google has about you.
IP anonymization is activated on this website. This means that your IP address will be shortened by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.
Your personal data is processed on the basis of Art. 6 (1) (f) GDPR due to our overriding legitimate interest in designing the website in a needs-based and targeted manner. You have the right to object to this processing of personal data concerning you at any time for reasons arising from your particular situation.
You can prevent Google from collecting the data generated by Google Analytics and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de
To prevent data collection and storage by Google Analytics across devices, you can set an opt-out cookie. Opt-out cookies prevent your data from being collected in the future when you visit this website. You must opt ​​out on all systems and devices used for this to have a comprehensive effect. If you delete the opt-out cookie, requests will be sent to Google again. If you click here, the opt-out cookie will be set: Deactivate Google Analytics.
For more information on terms of use and privacy, please visit https://www.google.com/analytics/terms/de.html or under https://www.google.de/intl/de/policies/ and under https://policies.google.com/technologies/cookies?hl=de .

Use of Google AdSense
We use the AdSense function of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website. The data processing serves the purpose of renting advertising space on the website and using it to target website visitors with interest-based advertising. This function enables visitors to the provider's website to be shown personalized, interest-based advertising from the Google Display Network. Google uses cookies that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. There is no adequacy decision by the EU Commission for the USA. The data transfer takes place on the basis of standard contractual clauses as suitable guarantees for the protection of personal data, which can be viewed at: https://policies.google.com/privacy/frameworks and https://business.safety.google/adscontrollerterms/ . Google may transfer this information to third parties where required to do so by law, or where such third parties process the data on Google's behalf. Google will never associate your IP address with any other data held by Google.
The use of cookies or similar technologies takes place with your consent on the basis of Section 25 Paragraph 1 Sentence 1 TTDSG in conjunction with Art. 6 Paragraph 1 Letter a of GDPR. The processing of your personal data takes place with your consent on the basis of Art. 6 Paragraph 1 Letter a of GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent until the revocation.
Further information and Google’s privacy policy can be found at: https://www.google.com/policies/technologies/ads/ and https://www.google.de/policies/privacy/

Use of Microsoft Advertising
We use Microsoft Advertising from Microsoft Corporation (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA; “Microsoft”) on our website.
The data processing serves marketing and advertising purposes and the purpose of measuring the success of the advertising measures (conversion tracking). We learn the total number of users who clicked on one of our ads and were redirected to a page with a conversion tracking tag. However, this does not enable personal identification of these users. Microsoft Advertising uses technologies such as cookies and tracking pixels that enable analysis of your use of the website. When you click on an ad placed by Microsoft Advertising, a cookie for conversion tracking is stored on your computer. This cookie has a limited validity and is not used for personal identification. If you visit certain pages of our website and the cookie has not yet expired, Microsoft and we can recognize that you clicked on the ad and were redirected to this page. The following information may be collected, among others: IP address, identifiers assigned by Microsoft, information about the browser you are using and the device you are using, referrer URL (website through which you accessed our website), URL of our website.
Your data may be transferred to the USA. There is no adequacy decision from the EU Commission for the USA.
The use of cookies or similar technologies takes place with your consent on the basis of Section 25 Paragraph 1 Sentence 1 TTDSG in conjunction with Art. 6 Paragraph 1 Letter a of GDPR. The processing of your personal data takes place with your consent on the basis of Art. 6 Paragraph 1 Letter a of GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent until the revocation.
For more information about data protection and the cookies used by Microsoft Bing, please see here .


Plug-ins and Others

Rights of data subjects and storage period

Duration of storage
After the contract has been fully processed, the data will initially be stored for the duration of the warranty period, then taking into account statutory retention periods, in particular those under tax and commercial law, and then deleted after the deadline has expired, unless you have consented to further processing and use.

Rights of the data subject
If the legal requirements are met, you have the following rights under Art. 15 to 20 GDPR: Right to information, to rectification, to erasure, to restriction of processing, to data portability.
Furthermore, according to Art. 21 Para. 1 GDPR, you have the right to object to processing based on Art. 6 Para. 1 f GDPR and to processing for direct marketing purposes.

Right to complain to the supervisory authority
According to Art. 77 GDPR, you have the right to complain to the supervisory authority if you believe that the processing of your personal data is not lawful.

You can lodge a complaint with the supervisory authority responsible for us, which you can reach using the following contact details:

Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18
91522 Ansbach
Phone: +49 981 1800930
Fax: +49 981 180093800
Email: poststelle@lda.bayern.de

Right to object
If the personal data processing listed here is based on our legitimate interest in accordance with Art. 6 (1) (f) GDPR, you have the right to object to this processing at any time with effect for the future for reasons arising from your particular situation.
Once you have objected, the processing of the data in question will be stopped unless we can demonstrate compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.

If the personal data is processed for direct marketing purposes, you can object to this processing at any time by notifying us. After the objection has been made, we will stop processing the data concerned for direct marketing purposes.

last update: 10.01.2022