Privacy Policy

1. Data protection at a glance

General information

The following information provides a simple overview of what happens to your personal data when you visit my website. Personal data is any data thatcan be used to identifyyou personally.You can finddetailedinformation in the following privacy policy.

Data collection on this website

Data processing on this website is carried out by the website operator. You can find their contact details in the legal notice on this website.

How do I collect your data?

Your data is collected when you provide it to me. This includes, for example, data that you enter in the order comments field. Other data is automatically collected by my IT systems when you visit the website. This is primarily technical data (e.g., Internet browser, operating system, or time of page view). This data is collected automatically as soon as you enter this website.

What do I use your data for?

Some of the data is collected to ensure that the website functions correctly. Other data may be used to analyze your user behavior.

What rights do you have regarding your data?

You have the right to receive information about the origin, recipient, and purpose of your stored data at any time and free of charge. You can also request the correction or deletion of your data and, under certain circumstances, the restriction of its processing. You can revoke any consent you have given at any time with future effect. You also have the right to lodge a complaint with the competent supervisory authority. If you have any questions or would like to exercise your rights, simply contact me at the address in my legal notice.

Analytics tools and third-party tools

When you visit this website, your surfing behavior may be statistically evaluated. This is primarily done using cookies and so-called analysis programs. Detailed information about these analysis programs can be found in the following
Privacy Policy.

2. Hosting and Content Delivery Networks (CDN)

External hosting

My website is hosted by Strato. The personal data collected on this website (e.g., IP addresses, names, contact or contract data) is stored on Strato's servers. This is done for the purpose of fulfilling contracts with my customers (Art. 6 (1) (b) GDPR) and in the interest of providing my online services securely and efficiently (Art. 6 (1) (f) GDPR). Strato processes your data only in accordance with my instructions and to the extent necessary to fulfill its service obligations.

3. General information and mandatory information

data protection

I take the protection of your personal data very seriously. I treat your personal data confidentially and in accordance with legal regulations and this privacy policy. When you use this website, various personal data is collected that can be used to identify you personally. This policy explains what data I collect and what I use it for.

Security notice: I would like to point out that data transmission over the Internet (e.g., when communicating by email) may be subject to security vulnerabilities. It is not possible to completely protect data from access by third parties.

Note on the responsible body

The responsible body for data processing on this website is:
Isabel Reitemeyer
Rinkartstr. 31
12437 Berlin
Phone: +49 30 627 303 79
Email: ir@isabel-reitemeyer.com

Withdrawal of your consent to data processing

Many data processing operations are only possible with your express consent. You can revoke any consent you have already given at any time. To do so, simply send me an informal email. The legality of the data processing carried out up to the point of revocation remains unaffected by the revocation.

Right to object to data collection in specific cases and to direct marketing (Art. 21 GDPR)

If data processing is based on Art. 6 (1) (e) or (f) GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this privacy policy. If you object, I will no longerprocess your personal dataunless I can demonstratecompelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims (objection pursuant to Art. 21(1) GDPR).
If your personal data is processed for direct marketing purposes, you have the right to objectat any time to the processing of personal data concerning you for the purpose ofsuch marketing; this also applies to profilinginsofar as it is related to such direct marketing. If you object, your personal data will no longer be used for direct marketing purposes (objection pursuant to Art. 21 (2) GDPR).

Right to lodge a complaint with the competent supervisory authority

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work, or place of the alleged violation. The right to lodge a complaint exists without prejudice to other administrative or judicial remedies.

Right to data portability

You have the rightto havedata that I process automatically on the basis of your consent or in fulfillment of a contracthanded overto you or to a third party in acommon, machine-readable format. Direct transfer to another controller will only take place if this is technically feasible.

Information, deletion, and correction

Within the framework of the applicable legal provisions, you have the right to receive information free of charge at any time about your stored personal data, its origin, recipients, and the purpose of data processing. You also have the right to correct or delete this data. If you have any questions about this or anything else, you can contact me at any time at the address given in the legal notice.

Right to restriction of processing

You have the right to request that the processing of your data be restricted. This applies if you dispute the accuracy of the data I have stored about you, if the processing is unlawful, if I no longer need the data but you need it to assert legal claims, or if you have lodged an objection pursuant to Art. 21 (1) GDPR. For the duration of the review, you can request that your data be used only to a limited extent. To do so, simply contact the address in the legal notice.

Objection to advertising emails

I hereby object to the use of my contact details published in accordance with the legal notice requirements for the purpose of sending unsolicited advertising. As the operator of this website, I expressly reserve the right to take legal action in the event of unsolicited advertising information being sent (e.g., spam emails).

4. Data collection on this website

cookies

My website uses cookies. These are small text files that are stored on your device. I use necessary cookies to ensure basic functions such as the shopping cart (legal basis: Art. 6 (1) (f) GDPR). In addition, I only use third-party cookies or cookies for analysis purposes if you give your consent via the cookie banner (Art. 6 (1) (a) GDPR). You can revoke this consent at any time. You can delete or deactivate cookies in your browser settings at any time, but this may restrict the functionality of the website.

Real Cookie Banner

I use the consent tool "Real Cookie Banner" to manage the cookies and similar technologies (tracking pixels, web beacons, etc.) used and the relevant consents. Details on how "Real Cookie Banner" works can be found at https://devowl.io/de/rcb/datenverarbeitung/.
The legal basis for the processing of personal data in this context is Art. 6 (1) lit. c GDPR and Art. 6 (1) lit. f GDPR. My legitimate interest is the management of the cookies and similar technologies used and the related consents.
The provision of personal data is neither contractually required nor necessary for the conclusion of a contract. You are not obliged to provide personal data. If you do not provide personal data, I cannot manage your consents.

server log files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to me. These are:
– Browser type and browser version
– Operating system used
– Referrer URL
– Host name of the accessing computer
– Time of the server request
– IP address
This data is not merged with other data sources. This data is collected on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website – for this purpose, the server log files must be collected.

Inquiries and order comments

If you send us inquiries via the order comments field or by email, I will store your details, including your contact information, for the purpose of processing your request. The processing is carried out for the purpose of fulfilling the contract or implementing pre-contractual measures (Art. 6 (1) (b) GDPR) or on the basis of our legitimate interest in the effective processing of your message (Art. 6 (1) (f) GDPR). Your data will remain with me until the purpose for storage no longer applies or you request us to delete it, provided that there are no legal retention periods to the contrary.

Contact by email, phone, or order note

If you contact me by email, phone, or via the order comments field, I will store your request, including all resulting data, for the purpose of processing your request. The legal basis for this is either the fulfillment of the contract or pre-contractual measures (Art. 6 (1) (b) GDPR) or my legitimate interest in processing your request (Art. 6 (1) (f) GDPR). Your data will remain with me until the purpose for storage no longer applies or you request me to delete it, provided that there are no legal retention periods (e.g., from invoices) that prevent this.

5. Newsletter

When you subscribe to our newsletter, we use your email address exclusively for sending the requested information. We use the double opt-in procedure for verification. Processing is based on your consent (Art. 6 (1) (a) GDPR). You can revoke this consent at any time by clicking on the "Unsubscribe" link in the newsletter. Your data will be stored until you unsubscribe and then deleted. To avoid future mailings, your email address may then be stored in a blacklist (legitimate interest pursuant to Art. 6 (1) (f) GDPR).

Mailchimp

This website uses Mailchimp services to send newsletters. The provider is Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA. Mailchimpis certified under the EU-U.S. Data Privacy Framework. The Data Privacy Framework (DPF) is an agreement between the European Union and the USA that aims to ensure compliance with European data protection standards when processing data in the USA. I have concluded a contract with Mailchimp for order processing, in which Mailchimp undertakes to protect my customers' data and not to pass it on to third parties. Further details can be found in Mailchimp's privacy policy at: https://mailchimp.com/legal/privacy/.

7. Plugins and tools

Burst Statistics

This website uses the analysis tool "Burst Statistics." The provider is Burst Statistics B.V., Keizersgracht 424, 1016 GC Amsterdam, Netherlands. Burst Statistics helps me understand how visitors use my website. The data is stored exclusively on my own server and is not transferred to third parties. The IP addresses are anonymized. Processing is based on Art. 6 (1) lit. f GDPR (legitimate interest in analyzing and optimizing my website).

Google Web Fonts

This site uses web fonts provided by Google to ensure uniform font display. When you visit a page, your browser loads the required web fonts into the browser cache to display text and fonts correctly. To do this, the browser you are using must connect to Google's servers. This allows Google to know that this website has been accessed via your IP address. The use of Google web fonts is based on Art. 6 para. 1 lit. f GDPR. I have a legitimate interest in the uniform presentation of the typeface on my website. If corresponding consent has been requested (e.g., consent to the storage of cookies), processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR; Consent can berevoked at any time. If your browser does not support web fonts, a standard font from your computer will beused. Furtherinformation about Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://policies.google.com/privacy?hl=de.

9. Shipping of goods

Transfer of data to shipping service providers

In order to fulfill the contract in accordance with Art. 6 (1) (b) GDPR, I will pass on your data to the shipping company responsible for the delivery. This includes the name and address of the recipient. If necessary or advantageous for smooth delivery, parcel notification, or customs clearance, the recipient's email address and/or telephone number will also be transmitted to the shipping service provider. In all other cases, I will use my own contact details for processing.
Note on third countries: When shipping to countries outside the EU, the necessary data is transferred in accordance with Art. 49 (1) (b) GDPR for the fulfillment of the purchase contract. Please note that in third countries, a level of data protection comparable to that in the EU may not be guaranteed.

10. Payment providers

PayPal

This service is provided by PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. Your data is transferred to PayPal on the basis of Art. 6 (1) (b) GDPR (contract processing). PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or – if offered – "purchase on account" or "installment payment" via PayPal. PayPal uses the result of the credit check in relation to the statistical probability of default for the purpose of deciding whether to provide the respective payment method.

11. Other payment services

Bank transfer / Prepayment

If you choose to pay in advance/by bank transfer, the payment will be processed by the bank you have selected. The data required for this (name, account details, purpose of payment, amount) will be processed for the purpose of processing the payment in accordance with Art. 6 (1) (b) GDPR.