General
1. Your personal data within the meaning of Art. 4 No. 1 GDPR (e.g. name, address, email address, payment data) will only be processed by us in accordance with the provisions of German data protection law and taking into account the European General Data Protection Regulation (GDPR). The following regulations inform you about the type, scope and purpose of the collection, processing and use of personal data.
2. The processing within the meaning of Art. 4 No. 2 GDPR of personal data is lawful according to Art. 6 GDPR if one of the following conditions is met:
a) The data subject has given their consent to the processing of their personal data for one or more specific purposes;
b) die Verarbeitung ist für die Erfüllung eines Vertrags, dessen Vertragspartei die betroffene Person ist, oder zur Durchführung vorvertraglicher Maßnahmen erforderlich, die auf Anfrage der betroffenen Person erfolgen;
c) the processing is necessary to fulfill a legal obligation to which the person responsible is subject;
d) the processing is necessary to protect the vital interests of the data subject or another natural person;
e) the processing is necessary for the performance of a task that is in the public interest or is carried out in the exercise of official authority vested in the person responsible;
f) The processing is necessary to safeguard the legitimate interests of the person responsible or a third party, unless the interests or fundamental rights and freedoms of the data subject, which require the protection of personal data, outweigh them, in particular if the data subject is concerned Person is a child.
3. The processing of special personal data (e.g. health data, biometric data, sexual orientation, religion, trade union membership) within the meaning of Art. 9 Para. 1 GDPR is particularly legal in accordance with Art. 9 Para. 2 GDPR if one of the following conditions is met:
- the person has given their express consent;
- the processing is for the establishment, exercise or defense of
Legal claims or in the case of acts of the courts in the context of their judicial activity.
4. There is no automatic decision-making or profiling with regard to personal data within the meaning of Art. 22 GDPR.
5. The operator ensures the security of the data in accordance with Art. 32 GDPR, taking into account the principle of proportionality, through suitable technical measures.
6. If, contrary to expectations, there is a breach of data protection, the responsible supervisory authority will be notified in accordance with Art. 33 GDPR, as well as the person concerned in accordance with Art. 34 GDPR.
Scope
This data protection declaration only applies to our website. If you are forwarded to other pages via links on our pages, please inform yourself there about the respective handling of your data.
Duration of data storage
The duration of the retention of the data transmitted by you is based on the statutory retention requirements. According to commercial and tax laws, invoice data must be retained for up to 10 years.
Disclosure of data to third parties
A transfer of data transmitted in the context of establishing contact to third parties (Art. 4 No. 10 GDPR) only takes place if:
a) You have given your express consent in accordance with Art. 6 Paragraph 1 Clause 1 lit. a GDPR,
b) the disclosure is necessary according to Art. 6 Para. 1 S. 1 lit.f GDPR to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data ,
c) in the event that there is a legal obligation for disclosure in accordance with Art. 6 Paragraph 1 Clause 1 lit. c GDPR, as well as d) this is legally permissible and according to Art b GDPR is required for the processing of contractual relationships with you
Responsible according to the GDPR
The person responsible within the meaning of the General Data Protection Regulation (GDPR), as well as others
Data protection laws applicable in the European Union and other provisions of a data protection nature are:
GetFabulous
Karolina Bobbé
GetFabulous
Rudolf-Diesel-Strasse 17
41569 Rommerskirchen
Phone: +49 (0) 176 612 05195
Email: karolina@get-fabulous.com
Cookies
We use cookies on our website. These are small files that your browser automatically creates and that are stored on your device (PC, laptop, tablet, smartphone, etc.) when you visit our site. Cookies do not cause any damage to your device and do not contain any viruses, Trojans or other malware. Information is stored in the cookie that results in connection with the specific device used. However, this does not mean that we are immediately aware of your identity. The use of cookies serves on the one hand to make the use of our offer more pleasant for you. We use so-called session cookies to recognize that you have already visited individual pages on our website. These are automatically deleted after leaving our site. In addition, we also use temporary
Cookies that are stored on your device for a specific period of time. If you visit our site again to use our services, it is automatically recognized that you have already visited us and what inputs and settings you have made so that you do not have to re-enter them. These cookies enable us to automatically recognize when you visit our site again that you have already visited us. These cookies are automatically deleted after a defined period of time. The data processed by cookies are required for the purposes mentioned to safeguard our legitimate interests and those of third parties in accordance with Art. 6 Para. 1 S. 1 lit.f GDPR. Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a message always appears before a new cookie is created. However, if you completely deactivate cookies, you may not be able to use all the functions of our website.
Server log files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
- Browser type / browser version
- Operating system used
- Referrer URL
- Host name of the accessing computer
- Time of the server request
- IP address
We cannot assign these data to specific persons. This data will not be merged with other data sources. We reserve the right to check this data retrospectively if we become aware of specific indications of illegal use. A contract for order processing has been concluded with our hoster.
Registration
Registration is required for the full use of the functions of our website. The registration data is collected through your corresponding entries and used for the specifically stated purpose in accordance with your consent (Art. 6 I S. 1 a GDPR).
Google Webfonts
External fonts, Google Fonts, are used on this website. Google Fonts is a service provided by Google Inc. (“Google”). These web fonts are integrated through a server call, usually a Google server in the USA. This transmits to the server which of our websites you have visited. The IP address of the browser of the end device of the visitor to this website is also saved by Google.
The legality of the use results from Art. 6 Abs. 1 S. 1 lit. f) GDPR. You can find more information in Google's privacy policy, which you can access here:
https://www.google.com/fonts#AboutPlace:about
https://www.google.com/policies/privacy/
Comment function / evaluation function
Insofar as you use the comment function in the blog or evaluation function in the Shop, in addition to these contributions, the time of creation, your Selected pseudonym and temporarily saved your IP address. This is done so that we can protect our rights in the event of illegal content. If you wish, you can also check your name and the Save e-mail address for future posts. The lawfulness of the processing results from your consent in accordance with Art. 6 para. 1 p. 1 lit. a) GDPR.
We have our own Social Media Pages. By using the links you get to the respective websites of the third party providers (e.g. Facebook, Twitter, Google+) and can view our content also share. There is no data transfer when you visit our website As soon as you have called up the third-party provider, you are in the a> Area of responsibility of the respective third party provider, so that their Data protection declaration and its declarations on the use of data apply. We have no influence on this, but we recommend to avoid an unnecessary Disclosure of data before using a corresponding link yourself with the respective To log out third-party providers so that usage profiles cannot be created by the third-party provider by using the link. . < / p>
When paying via PayPal, credit card via PayPal, direct debit via PayPal or & amp; quot; purchase on invoice & amp; quot; as well as payment in installments via PayPal, we give your payment details to PayPal (Europe) S.à r.l. et Cie, SCA, 22-24 Boulevard Royal, L- 2449 Luxembourg (hereinafter & amp; quot; PayPal & amp; quot; ), Further. PayPal reserves the payment methods credit card via PayPal, direct debit via PayPal or & amp; quot; purchase on account & amp; quot; < / a> via PayPal as well as the installment payment via PayPal before carrying out a credit check. The result of the credit check in relation to the statistical probability of default is used by PayPal for Purpose of the decision about the provision of the respective payment method. The credit report can contain probability values (so-called score values). As far as score values are included in the result of the credit report, they are based on a scientific recognized mathematical-statistical procedures. The calculation of the score values includes address data, among other things.
Further data protection information, including the ones used credit agencies, please refer to PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
Billbee
The order processing takes place via the provider Billbee of Billbee GmbH, Paulinenstrasse 54, 32756 Detmold. Name, address and any other personal data will be passed on to Billbee exclusively for processing the online order in accordance with Article 6 (1) (b) GDPR. Your data will only be passed on if this is actually necessary for processing the order. The legality of the use results from Art. 6 Abs. 1 S. 1 lit. f) GDPR. Details on data protection at Billbee and the data protection declaration from Billbee can be found here:
https://www.billbee.io/datenschutz/
Newsletter
We offer you the option of subscribing to our newsletter on our website. With this newsletter we inform you about our offers at regular intervals. To receive our newsletter, you need a valid email address. We will check the e-mail address you have entered to ensure that you are actually the owner of the specified e-mail address or that the owner is authorized to receive the newsletter. When you register for our newsletter, we will save your IP address and the date and time of your registration. In the event that a third party misuses your email address and subscribes to our newsletter without your knowledge, this serves as a safeguard on our part. We do not collect any further data. The data collected in this way will only be used to receive our newsletter. The legality of the use results from Art. 6 Para. 1 S. 1 lit. f) GDPR. You can cancel your subscription to this newsletter at any time. You can find details on this in the confirmation email and in each individual newsletter. Google Analytics This website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables the website operator to analyze the behavior of website visitors. The website operator receives various usage data, such as page views, length of stay, operating systems used and the origin of the user. This data may be summarized by Google in a profile that is assigned to the respective user or their device. Google Analytics uses technologies that enable the user to be recognized for the purpose of analyzing user behavior (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website is usually transferred to a Google server in the USA and stored there.
This analysis tool is used on the basis of Article 6 (1) (f) GDPR . The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising. If a corresponding consent has been requested (e.g. consent to the storage of cookies), the processing takes place exclusively on the basis of Art. 6 Para. 1 lit. a GDPR; the consent can be revoked at any time. IP anonymization We have activated the IP anonymization function on this website. As a result, your IP address will be shortened by
Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before it is transmitted to the USA. The full IP address will only be sent to a Google server in the USA and shortened there in exceptional cases. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. Browser plug-in You can prevent Google from collecting and processing your data by downloading and installing the browser plug-in available at the following link:
https://tools.google.com/dlpage/gaoptout?hl = de. You can find more information on how Google Analytics handles user data in the Google Privacy Policy :https://support.google.com/analytics/answer/6004245?hl=de.
Order processing We have concluded an order processing contract with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics. Demographic characteristics on Google Analytics
This website uses the “demographic characteristics” function of Google Analytics in order to be able to show website visitors appropriate advertisements within the Google advertising network. This allows reports to be created that contain statements on the age, gender and interests of the site visitors. This data comes from interest-based advertising from Google as well as from visitor data from third-party providers. These data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as described in the point "Objection to data collection".
Google Analytics E-Commerce Tracking
This website uses the "e-commerce tracking" function of Google Analytics. With the help of e-commerce tracking, the website operator can analyze the purchasing behavior of website visitors in order to improve their online marketing campaigns. Information such as the orders placed, average order values, shipping costs and the time from viewing to purchasing a product are recorded. This data can be summarized by Google under a transaction ID that is assigned to the respective user or their device. Storage period Data stored by Google at user and event level that are linked to cookies, user IDs (e.g. UserID) or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) are anonymized after 14 months or deleted. You can find details on this under the following link:
https://support.google.com/analytics/answer/7667196?hl=de
Google Ads The website operator uses Google Ads. Google Ads is an online advertising program from Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. Google Ads enables us to display advertisements in the Google search engine or on third-party websites if the user enters certain search terms on Google (keyword targeting). Furthermore, targeted advertisements can be played out using the user data available on Google (e.g. location data and interests) (target group targeting). As the website operator, we can evaluate this data quantitatively by, for example, analyzing which search terms led to our advertisements being displayed and how many advertisements led to the corresponding clicks. The use of Google Ads is based on Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in marketing his service products as effectively as possible. Facebook Pixel
This website uses Facebook's visitor action pixels to measure conversions. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to Facebook, the collected data
will also be transferred to the USA and other third countries. In this way, the behavior of the page visitors can be tracked after they have been redirected to the provider's website by clicking on a Facebook ad. This allows the
effectiveness of Facebook advertisements to be evaluated for statistical and market research purposes and future advertising measures to be optimized. The data collected is anonymous for us as the operator of this website, we cannot draw any conclusions about the identity of the user. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes,
in accordance with the Facebook data usage guidelines. This enables Facebook to place advertisements on Facebook pages as well as outside of Facebook. This use of the data cannot be influenced by us as the site operator.
The use of Facebook pixels is based on Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in effective advertising measures including social media. If a corresponding consent has been requested (e.g. consent to the storage of cookies), processing takes place exclusively on the basis of Art. 6 Paragraph 1 lit. a GDPR; the consent can be revoked at any time. You can find further information on protecting your privacy in Facebook's data protection information: https://de-de.facebook.com/about/privacy/.
You can also use the “Custom Audiences” remarketing function in the advertising settings area Deactivate at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To do this, you have to be logged in to Facebook. If you do not have a Facebook account, you can deactivate usage-based advertising from Facebook on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/.
SSL connection / data security
In accordance with the legal regulation according to § 13 Abs. 7 TMG, this website uses SSL encryption, recognizable by a lock symbol in the address bar of your browser. Transmitted data cannot be read by third parties with activated SSL encryption.
Usually this is a 256 bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is transmitted in encrypted form by the closed key or lock symbol in the lower status bar of your browser.
We also use suitable technical and organizational security measures (TOM) to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.
User rights
You can request information about the personal data stored about you at any time and free of charge. Your rights also include a confirmation, correction, restriction, blocking and deletion of such data and the provision of a copy of the data in a form suitable for transmission, as well as the revocation of a given consent and the objection. Statutory retention requirements remain unaffected. Your rights arise in particular from the following standards of the GDPR:
Article 7 Paragraph 3 - Right to withdraw consent under data protection law
Article 12 - Transparent information, communication and modalities for the exercise of the rights of the data subject
Article 13 - Duty to provide information when collecting personal data from the data subject
Article 14 - Duty to provide information if the personal data have not been collected from the data subject
Article 15 - Right of access of the data subject, right to confirmation and provision of a copy of personal data
Article 16 - Right to rectification
Article 17 - Right to cancellation ("Right to be forgotten")
Article 18 - Right to restriction of processing
Article 19 - Obligation to notify in connection with the correction or deletion of personal data or the restriction of processing
Article 20 - Right to data portability
Article 21 - Right of objection
Article 22 - Right not to be subject to a decision based solely on automated processing, including profiling
Article 77 - Right to lodge a complaint with the supervisory authority To exercise your rights (with the exception of Article 77), please contact the body named under the point "Responsible within the meaning of the GDPR".
Responsible supervisory authority:
State Commissioner for Data Protection and Freedom of Information NRW Kavalleriestr. 2-4 40213 Düsseldorf
Phone: 0211 / 38424-0
Fax: 0211 / 38424-10
Email: poststelle@ldi.nrw.de
Homepage: https://www.ldi.nrw.de