Privacy Information

——————————-
Privacy Information
——————————-

1) INFORMATION ABOUT THE COLLECTION OF PERSONAL DATA AND CONTACT DETAILS OF THE DATA CONTROLLER
1.1 In the following, we will inform you about the handling of your personal data. In this context, personal data refers to all data through which you can be personally identified.
Please carefully review which personal data you share with us through Facebook. As long as you are logged into your Facebook account and visit our Facebook profile, Facebook can associate this with your Facebook profile. We explicitly point out that Facebook stores the data of its users (e.g., personal information, IP address, etc.) and may also use it for business purposes. You can find more information about data processing by Facebook in Facebook’s privacy policy at https://www.facebook.com/policy.php.
We have no influence on the data collection and further processing by Facebook. Furthermore, it is not discernible to us to what extent, in what location, and for what duration the data is stored, to what extent Facebook complies with existing deletion obligations, what evaluations and connections are made with the data, and to whom the data is disclosed. If you wish to avoid Facebook processing personal data transmitted by you to us, please contact us through alternative means. You can find our complete contact details in our Facebook imprint.
1.2 The data controller for data processing in accordance with the General Data Protection Regulation (GDPR) is Ilka Matthiessen, erbsünde, Karlsbader Str. 8, 80937 Munich, Germany, Telephone 0049 (0)89 600 37 850, Email: info@erbsuende.com, to the extent that we process the data transmitted by you through Facebook exclusively on our own. If the data transmitted by you through Facebook is also or exclusively processed by Facebook, then Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland, is also the data controller for data processing in accordance with the General Data Protection Regulation (GDPR).
The controller for the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

2) Data Protection Officer
You can contact Facebook’s Data Protection Officer through the online contact form provided by Facebook at https://www.facebook.com/help/contact/540977946302970.

3) Processing of the data entered into the contact form
We collect personal data when you contact us, for example, through a contact form or messenger. The data that we collect when you contact us via the contact form can be found in the respective contact form itself. These data are stored and used solely for the purpose of responding to your inquiry or for contacting you and the associated technical administration. The legal basis for processing the data is our legitimate interest in responding to your request according to Art. 6(1)(f) of the General Data Protection Regulation (GDPR). 1 lit. f GDPR. If your contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 1 lit. GDPR Your data will be deleted after the final processing of your inquiry, provided that there are no legal retention obligations. We consider processing to be completed when it can be inferred from the circumstances that the relevant matter has been conclusively resolved.

4) Data processing for contract execution
If your contact through Facebook serves as the basis for a contract for the delivery of goods and/or the provision of services with us, we will process the data transmitted by you in this context in the event of a contract as follows:
4.1 We will share your payment data with the appointed financial institution for payment processing if this is necessary for payment processing. The legal basis for the data transfer is Article 6, para. 1 lit. GDPR
4.2 In the case of contracts for the delivery of goods, we will forward the personal data collected by us to the transport company commissioned with the delivery as part of the contract processing, to the extent necessary for the delivery of the goods.

5) Rights of the Data Subject
5.1 The applicable data protection law grants you comprehensive rights as a data subject (information and intervention rights) with respect to the processing of your personal data by the data controller, which we will inform you about below:
– Right to information according to Article 15 of the GDPR;
– Right to rectification according to Article 16 of the GDPR;
– Right to erasure according to Article 17 of the GDPR;
– Right to restriction of processing according to Article 18 of the GDPR;
– Right to notification according to Article 19 of the GDPR;
– Right to data portability according to Article 20 of the GDPR;
– Right to withdraw consent according to Article 7, para. 3 GDPR;
– Right to lodge a complaint according to Article 77 of the GDPR.
5.2 Right to object
IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR LEGITIMATE INTERESTS IN THE COURSE OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO SUCH PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION. THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE AFFECTED DATA. HOWEVER, FURTHER PROCESSING IS STILL PERMISSIBLE IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES THE ASSERTION, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.
IF YOUR PERSONAL DATA ARE PROCESSED BY US FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING. YOU CAN EXERCISE YOUR OBJECTION AS DESCRIBED ABOVE.
IF YOU MAKE USE OF YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE AFFECTED DATA FOR DIRECT ADVERTISING PURPOSES.

6) THE DURATION OF STORAGE OF PERSONAL DATA
The duration of the storage of personal data is determined by the respective legal retention period (e.g., commercial and tax retention periods). After the expiration of the period, the corresponding data is routinely deleted unless it is no longer required for contract fulfillment or initiation and/or there is no longer a legitimate interest on our part in continuing the storage.