Privacy Policy
1. Data security overview
General notice
We are happy about your interest in our Online Shop. The protection of your privacy is very important for us. The following notices are giving you a simplified overview about what happens with your personal data when visiting this website. Personal Data are all data with which you personally could be identified. Extended information about data security can be found in this data security explanation.
Acquisition of data on this website
Who is responsible for recording data on this website?
The handling of data on this website lies in the responsibility of the website operator. You can find their contact data in the imprint of this website.
How is your data recorded?
On the one hand your data is recorded by you giving them to us. These are such data you use in e.g. contact forms. Other data is recorded automatically or after your permission by our IT systems. This is mostly technical data (e.g. browser, operation software or time of visiting this website). Such data is recorded automatically, as soon as you enter our website.
What for, do we us your data?
Part of your data is recorded to offer you a flawless experience on this website. Other data is analysed to study customer behaviour.
What rights towards your data is given?
At all times you can ask for a statement towards the origin, recipient and use of your data. You’ve also got the right to demand that all of your recorded data with us is to be deleted. Should you have given an agreement that we are allowed to use your data for analysation of customer behaviour and advertisements, you are able to revoke that at any given time. You are also within your right to demand a restricted use of your data. You have the right to put in a complaint to the surveillance authority responsible. Should you have questions concerning this and data security, you can always contact us with the contact information found in the imprint.
Analysing tools and third-party tools
When visiting our website, your surf-behaviour can be recorded in statistics. This is done using cookies and with analysing software. Further information to the analysing software you can find in this data security explanation.
2. Hosting and Content Delivery Networks (CDN)
External hosting
This website is hosted by an external supplier providing a service. The personal data, which is recorded on this website is stored on the servers of this external provider. This is data like: IP-addresses, contact requests, meta- and communication data, contract data, names, website accesses and other data that is recorded using this website. The use of this provider is because of our existing and potential customers (Art. 6 Abs. 1 lit. b DSGVO) and to provide a secure, fast and efficient service with our online presence though a professional provider. (Art. 6 Abs. 1 lit. f DSGVO). Our provider will only use your data if that is required to provide his contractual services and will follow our instructions on such uses.
Formation of a contract through task handling
To ensure the secure handling of your data, we have made a contract about task handling with our provider.
3. General Notices and obligatory information
Data security
The operator of this website is very concerned with the security of your data. We handle your data with the utmost care and according to the law as well as this data security statement. If you use this website, various personal data will be recorded. Personal data is data, with which you personally could be identified. This data security statement explains, what kind of data we record and to what use. We also explain how and to what use this happens. We want to point out, that the transfer of data through the internet (e.g. via e-mail) could contain security flaws. As such, a flawless protection of your data from third parties is not possible.
Notice of the responsible operator
The responsible operator for the handling of your data on this website is:
TONMODEN ∆ GREEN CREATIVE STUDIO
Ivonne Kleine – Niehaeger Str. 5 – 18347 Ostseebad Ahrenshoop
E-Mail: info[at]tonmoden.de
The responsible operator is the natural or legal person, who alone or with a team, decides about the use of the data and tools with which the personal data is handled.
Rescinding your agreement to handle your data
A lot of Data handling processes are only possible with your explicit agreement. You can rescind an already given agreement any time. For that a message to our e-mail suffices. The legality of handling your data until the revocation of your agreement remains unaffected.
Right to revoke the recording of data in special cases and direct advertisements (Art. 21 DSGVO)
IF THE HANDLING OF DATA IS BECAUSE OF ART. 6 ABS. 1 LIT. E OR F DSGVO, YOU HAVE THE RIGHT, IF YOUR REASONS ARISE BECAUSE OF YOUR SPECIAL CIRCUMSTANCES, TO OBJECT THE HANDLING OF YOUR PERSONAL DATA; THIS ALSO APPLIES TO PROFILINGS WHICH ARE BASED ON THESE LAWS. THE APPLYING LAW OF THE PARTICULAR HANDLINGS IS STATED IN THIS DATA SECURITY STATEMENT. IF YOU OBJECT TO THE HANDLING, WE WILL NO LONGER USE YOUR PERSONAL DATA, EXCEPT IF WE CAN PROOF LEGAL CAUSE TO PROTECT YOUR INTERESTS, RIGHTS AND FREEDOM AS WELL AS TO EXERCISE OR DEFEND LEGAL CLAIMS (OBJECTION ACCORDING TO ART. 21 ABS. 1 DSGVO). IF YOUR PERSONAL DATA IS USED FOR DIRECT ADVERTISMENT, YOU HAVE THE RIGHT TO OBJECT TO THE HANDLING OF THIS SPECIFIC PERSONAL DATA FOR ADVERTISEMENT; THIS ALSO APPLIES TO PROFILING WHICH IS USED FOR DIRECT ADVERTISEMENT. IF YOU OBJECT, YOUR PERSONAL DATA WILL NOT BE USED FOR DIRECT ADVERTISEMENT ANYMORE (OBJECTION ACCORDING TO ART. 21 ABS. 2 DSGVO).
Right to appeal to the supervisory body
In case of violation against the DSGVO the concerned parties have the right to send an appeal to the supervisory body , especially in the county of their usual inhabitancy, their workplace or the place of the alleged violation. The right to appeal is not influenced by other administrative or judicial appeals.
Right of transferring data
You have the right to request the transfer of all data that was collected because of your agreement or because of automated processes while handling a contract, to yourself or a third party in a usual, machine-readable form. If you want a direct transfer of the data to another person responsible, it’s only possible if technically possible.
SSL- or TLS-encryption
This website uses an SSL- or TSL-encryption to protect the transfer of confidential contents and other security concerns, eg. orders or questions you send to us. An encrypted connection can be recognized in the address bar of your browser, as the “http://” changes into “https://” and a lock appears in the address bar. When the SSL- or TSL-encryption is active, data that is transferred to us can’t be read by third parties.
Disclosure, deletion and correction
In the frame of current, applying laws you have the right to receive a disclosure of your saved, personal data, their origin, receiver and cause of handling, free of charge. If wished, also the right of correction of data or deletion. Concerning this as well as other question to this topic, you can find a contact in our imprint.
Right of limitation of handling
You have the right to demand the limitation of the usage and handling of your personal data. For that you can always contact us via the contacts in our imprint. The right of limitation of handling applies in the following cases:
• If you deny the correctness of your saved personal data, we usually need time to check this. For the time of this verification, you have the right to demand the limitation of the use of your personal data.
• If the handling of your personal data was/is illegal, you can demand a limitation of use instead of the deletion.
• When we don’t need your personal data anymore, but you need them to protect or enforce legal claims, you have the right to demand the limitation of handling your personal data instead of the deletion of it.
• If you have submitted an objection according to Art. 21 Abs. 1 DSGVO, an assessment of your and our interests has to be made. As long as it isn’t clear whose interests outbalance the other, you have the right to demand the limitation of use of your personal data.
When you have demanded the limitation of using your personal data, it can only be used – not concerning the storage of your data – with your agreement and to enforce or protect legal claims, to protect the legal rights of other natural or legal persons or because of an important, public interest of the European Union or a Member State.
Objection against advertising e-mails
With this statement, we object to the usage of the contact data in our imprint for not wished for advertisements or information. The operators of this website reserve the right to engage in legal measures, should unsolicited advertisement be received, eg. spam-e-mails.
4. The recording of data on this website
Cookies
Our website uses so called “Cookies”. Cookies a small text-files which don’t harm your devices. They are either temporarily (session cookies) for the duration of on session or permanently (permanent cookies) saved on your device. Session cookies are automatically deleted after you leave the website. Permanent cookies remain on your device until you manually delete them or your browser automatically deletes them. Partially, cookies from third parties can be saved on your device while visiting our website (third-part-cookies). These third-party-cookies are necessary to use certain services of third parties, eg. Cookies to enable payment services. Cookies have several functions. Many cookies are essential for certain functions of the website, eg. the shopping cart and videos. Other cookies are used to analyse the usage of our website as well as show advertisements. Cookies, which are used for digital communication (essential cookies), for providing services that are essential for your use of the website (functional cookies) or are important for the optimisation of the website (eg. cookies that are used to measure the web audience) are saved on the basis of Art. 6 Abs. 1 lit. f DSGVO, if no other legal basis is stated. The website operator has a justified interest in the storage of cookies to be able to provide a flawless and optimal service. Should an agreement for the usage of cookies have been demanded, the storage is only according to the basis of this agreement (Art. 6 Abs. 1 lit. a DSGVO); the agreement can be rescinded at any time. You can adjust your browser settings, so that your always informed about cookies being saved and only save them when necessary, you can also put in special cases where cookies are allowed or generally deny your agreement of the use of cookies; also, you can activate the automatic deletion of cookies when closing your browser. In deactivating all cookies, the functionality of the website could be compromised. Should cookies of third parties be used or generally be used for analysing, we will inform you within this data security statement and ask for an agreement, if applicable.
Server-log-files
The website provider automatically records and saves information as so called server-log-files, which your browser automatically sends to us. These are:
• Type and version of browser
• Operation system used
• Refer URL
• Hostname of the accessing device
• Time of server inquiry
• IP-address
There is no consolidation of these files with other sources of data. The record of this data is according to the basis of Art. 6 Abs. 1 lit. f DSGVO. The website operator is invested in the technically flawless presentation of his website and its optimisation – for that server-log-files have to be recorded.
Contact form
If you contact us via the contact form, your details from the inquiry, as well as mentions of contact data, will be recorded and saved for the purpose of answering your inquiry and eventual resulting questions. This data will not be shared without your permission. The usage of this data is based on Art. 6 Abs. 1 lit. b DSGVO, is your inquiry concerns a contract or is important to execute measures that needed pre-contractually. In all other inquiries we are basing the usage on our legitimate interest in the effective handling of the inquiries sent (Art. 6 Abs. 1 lit. f DSGVO) or your agreement (Art. 6 Abs. 1 lit. a DSGVO) if such was asked for. The data provided by you via contact form remains with us until you demand the deletion from us, your agreement for the recording is revoked or the reason for the storage no longer applies (eg. after we have finished handling your inquiry for good). Obligatory legal stipulations – like the obligation to preserve records – remain untouched.
Inquiries via e-Mail, telephone or telefax
If you contact us via e-mail, telephone or telefax, your inquiry including all personal data therein (name, inquiry) will be storaged and used for the purpose of handling your inquiry. This data will not be shared without your permission. The usage of this data is based on Art. 6 Abs. 1 lit. b DSGVO, is your inquiry concerns a contract or is important to execute measures that needed pre-contractually. In all other inquiries we are basing the usage on our legitimate interest in the effective handling of the inquiries sent (Art. 6 Abs. 1 lit. f DSGVO) or your agreement (Art. 6 Abs. 1 lit. a DSGVO) if such was asked for. The data provided by you via contact form remains with us until you demand the deletion from us, your agreement for the recording is revoked or the reason for the storage no longer applies (eg. after we have finished handling your inquiry for good). Obligatory legal stipulations – like the obligation to preserve records – remain untouched.
5. Social Media
Facebook plugins (like & share buttons)
Plugins of the social network Facebook are integrated on this website. Provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Irland. The recorded data is, according to Facebook, also transferred into the US and other countries. You can recognise the Facebook plugins from the Facebook logo or the “like-button” on this website. You can find an overview for the Facebook plugins on this website: https://developers.facebook.com/docs/plugins/?locale=de_DE. When you visit our website, a direct connection between your browser and the Facebook server will be established through the plugin. Through your IP, Facebook gets the information that you have visited this website. If you click on the “like-button” while being logged into your Facebook account, you can link content of this site to your Facebook-profile. Through that Facebook can trace the visit of our website to your account. We want to inform you that we as provider have no knowledge of the content within the transferred data or their usage by Facebook. You can find more information on this topic in the data security statement from Facebook: https://de-de.facebook.com/privacy/explanation. If you don’t want that Facebook can trace the visit on this website to your account, please log out of your Facebook account. The usage of Facebook plugins is based on Art. 6 Abs. 1 lit. f DSGVO. The operator of this website has a justified interest to be widely seen through social media.
If an agreement was asked for, the handling is exclusively based on Art 6 Abs. 1 lit. a DSGVO; the agreement can be rescinded at any time.
Instagram plugin
On this website, plugins of the Instagram service are integrated. Provider of this service is Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. If you click on the Instagram button while being logged into your Instagram account, you can link content of this site to your Instagram-profile. Through that Instagram can trace the visit of our website to your account. We want to inform you that we as provider have no knowledge of the content within the transferred data or their usage by Instagram. The storage and usage of the data is based on Art. 6 Abs. 1 lit. f DSGVO. The operator of this website has a justified interest to be widely seen through social media. If an agreement was asked for, the handling is exclusively based on Art 6 Abs. 1 lit. a DSGVO; the agreement can be rescinded at any time. Further information on this topic can be found in the data security statement of Instagram: https://instagram.com/about/legal/privacy/.
6. Newsletter
Newsletter data
If you want to subscribe to the newsletter offered by this website, we need an e-Mail address, as well as information, which confirms the e-Mail as yours and that you agree with the receival of this newsletter. Further information is not asked for and is voluntary. Your information is only used for that specific purpose and is not given to third parties. The handling of the data entered into the newsletter form is based on your agreement (Art. 6 Abs. 1 lit. a DSGVO). Your agreement to store your data and use your e-mail address for the newsletter can be rescinded at any time, eg. with the link within the newsletter. The legality of usage of your information before the objection remains untouched. The information necessary to provide you with the newsletter is stored with us, respectively the service providing the newsletter and after you unsubscribe from the newsletter your data will be deleted from the distribution list. Information stored because of other uses will remain. After you revoked your subscription your e-mail will be put into a black list to prohibit future mailings. Data within the black list will not be consolidated with other data. This is following your interests as well as our interests to follow the legal parameters set for the distribution of newsletters (justified interest based on Art. 6 Abs. 1lit. f DSGVO). The storage within the black list has no deadline. You can object to the storage, if your interest outweighs our justified interest.
7. Plugins and tools
Google web fonts
This website uses web fonts provided by Google, to provide a uniform presentation of scripts. Google Fonts are locally installed. A connection with Google servers is not taking place. You can find more information about Google web fonts on https://developers.google.com/fonts/faq and in their data security statement: https://policies.google.com/privacy?hl=de.
Source: https://www.e-recht24.de
Translation: Lisa Kleine