Privacy Policy
1.Data Protection at a Glance
General Information
The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data refers to all data that can be used to personally identify you. Detailed information on data protection can be found in our privacy policy listed below this text.
Data Collection on this Website
Who is responsible for data collection on this website?
The data processing on this website is carried out by the website operator. You can find their contact details in the section ‘Notice on the Responsible Party’ in this privacy policy.
How do we collect your data?
On the one hand, your data is collected when you provide it to us. This can include data you enter into a contact form, for example.
Other data is collected automatically or with your consent when you visit the website by our IT systems. This mainly includes technical data (e.g., internet browser, operating system, or the time of the page access). The collection of this data occurs automatically as soon as you enter this website.
What do we use you data for?
Some of the data is collected to ensure the error-free provision of the website. Other data may be used to analyze your user behavior.
What rights do you have regarding your data?
You have the right to obtain information about the origin, recipients, and purpose of your stored personal data at any time, free of charge. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you can revoke this consent at any time for the future. Additionally, you have the right to request the restriction of the processing of your personal data under certain circumstances. Furthermore, you have the right to file a complaint with the competent supervisory authority.
You can contact us at any time regarding this or other questions on the subject of data protection.
Analysis-Tools and Third Party Tools
When you visit this website, your browsing behavior may be statistically analyzed. This is primarily done using so-called analysis programs.
Detailed information about these analysis programs can be found in the following privacy policy.
2.Hosting
We host the content of our website with the following provider:
Squarespace
The provider is Squarespace Ireland Ltd., Le Pole House, Ship Street Great, Dublin 8, Ireland (hereinafter referred to as Squarespace).
Squarespace is a tool for creating and hosting websites. When you visit our website, your data is processed on Squarespace’s servers. This may also involve the transmission of personal data to Squarespace Inc., 8 Clarkson St, New York, NY 10014, USA, the parent company of Squarespace. Squarespace also stores cookies necessary for the display of the page and for ensuring security (necessary cookies).
The use of Squarespace is based on Article 6(1)(f) GDPR. We have a legitimate interest in ensuring the reliable presentation of our website. If consent has been requested, the processing is based exclusively on Article 6(1)(a) GDPR and Section 25(1) TDDG, insofar as the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) as defined by TDDG. Consent can be revoked at any time.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://support.squarespace.com/hc/de/articles/360000851908-DSGVO-und-Squarespace.
The company is certified under the 'EU-US Data Privacy Framework' (DPF).
The DPF is an agreement between the European Union and the USA designed to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF commits to adhering to these data protection standards. For more information, you can visit the provider's page at the following link: https://www.dataprivacyframework.gov/s/participant-search/participantdetail?contact=true&id=a2zt0000000GnjcAAC&status=Active.
Order Processing
We have concluded a contract for order processing (AVV) for the use of the above-mentioned service. This is a contract required by data protection law, which ensures that the provider processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.
3.General Information and Mandatory Information
Data Protection
The operators of these pages take the protection of your personal data very seriously. We handle your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.
When you use this website, various personal data is collected. Personal data refers to data that can be used to personally identify you. This privacy policy explains which data we collect and how we use it. It also clarifies how and for what purpose this happens.
We would like to point out that data transmission over the internet (e.g., communication via email) can have security gaps. Complete protection of data against access by third parties is not possible.
Notice on the Responsible Party
The responsible party for data processing on this website is:
Lisa Nowak
Gartenbuehlstrasse 3, 74613 Oehringen
Phone: +49 17620201676
Email: wastelandvisions@outlook.com
The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g., names, email addresses, etc.).
Retention Period
Unless a more specific retention period is mentioned within this privacy policy, your personal data will remain with us until the purpose for processing the data no longer applies. If you make a legitimate request for deletion or revoke consent for data processing, your data will be deleted, unless we have other legally permissible reasons for retaining your personal data (e.g., tax or commercial law retention periods); in the latter case, deletion will occur after these reasons no longer apply.
General Information on the Legal Basis for Data Processing on This Website
Unless you have consented to data processing, we process your personal data on the basis of Article 6(1)(a) GDPR, or Article 9(2)(a) GDPR if special categories of data are processed under Article 9(1) GDPR. In the case of explicit consent for the transfer of personal data to third countries, data processing is also carried out on the basis of Article 49(1)(a) GDPR. If you have consented to the storage of cookies or access to information on your device (e.g., via device fingerprinting), data processing is additionally based on Section 25(1) TDDG. Consent can be revoked at any time. If your data is necessary for the performance of a contract or for the implementation of pre-contractual measures, we process your data on the basis of Article 6(1)(b) GDPR. Furthermore, we process your data if it is necessary to fulfill a legal obligation based on Article 6(1)(c) GDPR. Data processing may also occur based on our legitimate interest under Article 6(1)(f) GDPR. The specific legal bases relevant to each case are explained in the following sections of this privacy policy.
Note on Data Transfer to Data Protection-Unsecure Third Countries and to US Companies Not Certified Under the DPF
We use, among other things, tools from companies based in data protection-unsecure third countries as well as US tools whose providers are not certified under the EU-US Data Privacy Framework (DPF). When these tools are active, your personal data may be transferred to and processed in these countries. Please note that in data protection-unsecure third countries, a level of data protection comparable to that of the EU cannot be guaranteed.
It should be noted that the USA, as a third country, generally provides a level of data protection comparable to the EU. Data transfer to the USA is permissible if the recipient has a certification under the 'EU-US Data Privacy Framework' (DPF) or has suitable additional safeguards in place. Information about transfers to third countries, including data recipients, can be found in this privacy policy.
Recipients of Personal Data
In the course of our business activities, we work with various external parties. This sometimes requires the transfer of personal data to these external parties. We only disclose personal data to external parties if this is necessary for the fulfillment of a contract, if we are legally required to do so (e.g., data transfer to tax authorities), if we have a legitimate interest in the transfer under Article 6(1)(f) GDPR, or if another legal basis permits the data transfer. When using processors, we only share our customers' personal data based on a valid data processing agreement. In the case of joint processing, a joint processing agreement is concluded.
Revocation of Your Consent to Data Processing
Many data processing operations are only possible with your explicit consent. You can revoke any consent you have already given at any time. The legality of the data processing that occurred before the revocation remains unaffected by the revocation.
Right to Object to Data Collection in Certain Cases and to Direct Marketing (Article 21 GDPR)
IF DATA PROCESSING IS CARRIED OUT BASED ON ARTICLE 6(1)(e) OR (f) GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO THE PROCESSING OF YOUR PERSONAL DATA; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RELEVANT LEGAL BASIS FOR THE PROCESSING CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR THE PROCESSING IS NECESSARY FOR THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS (OBJECTION UNDER ARTICLE 21(1) GDPR).
IF YOUR PERSONAL DATA IS PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING PURPOSES; THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION UNDER ARTICLE 21(2) GDPR).
Right to Lodge a Complaint with the Competent Supervisory Authority
In the event of violations of the GDPR, affected individuals have the right to lodge a complaint with a supervisory authority, particularly in the member state of their habitual residence, their place of work, or the location of the alleged infringement. This right to complain is without prejudice to any other administrative or judicial remedies available.
Right to Data Portability
You have the right to request that data which we process automatically based on your consent or in the fulfillment of a contract be provided to you or to a third party in a commonly used, machine-readable format. If you request the direct transfer of the data to another data controller, this will only be done to the extent that it is technically feasible.
Access, Correction, and Deletion
You have the right, within the scope of applicable legal provisions, to obtain free information about your stored personal data, its origin, recipients, and the purpose of the data processing, as well as, if applicable, the right to correction or deletion of this data. For this purpose, as well as for any other questions regarding personal data, you can contact us at any time.
Right to Restrict Processing
You have the right to request the restriction of the processing of your personal data. You can contact us at any time for this purpose. The right to restriction of processing exists in the following cases:
If you dispute the accuracy of your personal data stored with us, we usually need time to verify this. During the verification period, you have the right to request the restriction of the processing of your personal data.
If the processing of your personal data was or is unlawful, you may request the restriction of data processing instead of deletion.
If we no longer need your personal data, but you require it to exercise, defend, or assert legal claims, you have the right to request the restriction of processing your personal data instead of deletion.
If you have lodged an objection under Article 21(1) GDPR, a balancing of interests between yours and ours must be carried out. As long as it is not yet determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.
If you have restricted the processing of your personal data, that data—aside from storage—may only be processed with your consent or for the establishment, exercise, or defense of legal claims, or to protect the rights of another natural or legal person, or for reasons of significant public interest of the European Union or a member state.
SSL or TLS Encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from 'http://' to 'https://' and by the lock symbol in your browser's address bar. When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
Objection to Promotional Emails
Objection to the use of contact data published in the context of the legal imprint obligation for sending unsolicited advertising and informational materials. The operators of the site expressly reserve the right to take legal action in the event of unsolicited sending of advertising information, such as spam emails.
4.Data Collection on this Website
Cookies
Our website uses so-called 'cookies.' Cookies are small data packets and do not damage your device. They are either stored temporarily for the duration of a session (session cookies) or permanently (persistent cookies) on your device. Session cookies are automatically deleted after your visit ends. Persistent cookies remain on your device until you delete them yourself or they are automatically deleted by your web browser.
Cookies can come from us (first-party cookies) or from third parties (third-party cookies). Third-party cookies allow the integration of specific third-party services within websites (e.g., cookies for processing payment services).
Cookies serve various functions. Many cookies are technically necessary because certain website functions would not work without them (e.g., shopping cart functionality or video display). Other cookies can be used to analyze user behavior or for advertising purposes.
Cookies that are required for the execution of the electronic communication process, to provide certain functions you desire (e.g., for the shopping cart function), or to optimize the website (e.g., cookies for measuring web traffic) are stored based on Article 6(1)(f) GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies for the technically error-free and optimized provision of their services. If consent for the storage of cookies and similar recognition technologies has been requested, processing occurs solely on the basis of this consent (Article 6(1)(a) GDPR and Section 25(1) TDDDG); the consent can be revoked at any time.
You can configure your browser to be notified about the setting of cookies and allow cookies only on a case-by-case basis, exclude the acceptance of cookies for certain cases or generally, and activate the automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.
You can find out which cookies and services are used on this website in this privacy policy.
Contact Form
If you send us inquiries via the contact form, your details from the inquiry form, including the contact information you provide there, will be stored by us for the purpose of processing the inquiry and for any follow-up questions. We do not share this data without your consent.
The processing of this data is based on Article 6(1)(b) GDPR if your inquiry is related to the fulfillment of a contract or is necessary for the performance of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in effectively handling the inquiries directed to us (Article 6(1)(f) GDPR) or on your consent (Article 6(1)(a) GDPR) if it has been requested; consent can be revoked at any time.
The data you enter in the contact form will remain with us until you request its deletion, revoke your consent to storage, or the purpose for storing the data no longer applies (e.g., after the processing of your inquiry is completed). Mandatory legal provisions—particularly retention periods—remain unaffected.
Inquiries by Email, Phone, or Fax
If you contact us by email, phone, or fax, your inquiry, including all resulting personal data (name, inquiry), will be stored and processed by us for the purpose of handling your request. We do not share this data without your consent.
The processing of this data is based on Article 6(1)(b) GDPR if your inquiry is related to the fulfillment of a contract or is necessary for the performance of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in effectively handling the inquiries directed to us (Article 6(1)(f) GDPR) or on your consent (Article 6(1)(a) GDPR) if it has been requested; consent can be revoked at any time.
The data you send us via contact inquiries will remain with us until you request its deletion, revoke your consent to storage, or the purpose for storing the data no longer applies (e.g., after the processing of your request is completed). Mandatory legal provisions—particularly legal retention periods—remain unaffected.
5.Social Media
On this website, functions of the Instagram service are integrated. These functions are offered by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.
When the social media element is active, a direct connection between your device and the Instagram server is established. This allows Instagram to receive information about your visit to this website.
If you are logged into your Instagram account, you can link the content of this website to your Instagram profile by clicking the Instagram button. This allows Instagram to associate your visit to this website with your user account. Please note that as the provider of these pages, we have no knowledge of the content of the transmitted data or its use by Instagram.
The use of this service is based on your consent under Article 6(1)(a) GDPR and § 25(1) TDDG. Consent can be revoked at any time.
To the extent that personal data is collected on our website using the described tool and forwarded to Facebook or Instagram, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland are jointly responsible for this data processing (Article 26 GDPR). This joint responsibility is limited solely to the collection of data and its forwarding to Facebook or Instagram. The subsequent processing by Facebook or Instagram is not part of the joint responsibility.
The obligations we jointly assume are documented in an agreement on joint processing. The text of the agreement can be found at: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing data protection information when using the Facebook or Instagram tools and for the GDPR-compliant implementation of the tools on our website. Facebook is responsible for the data security of Facebook or Instagram products. You can assert your data subject rights (e.g., access requests) directly with Facebook. If you assert data subject rights with us, we are obligated to forward these to Facebook.
The data transfer to the USA is based on the Standard Contractual Clauses of the EU Commission. For details, you can refer to the following links: EU Data Transfer Addendum, Instagram Privacy Policy, and Facebook Help.
Further information is available in Instagram's privacy policy at Instagram Privacy Policy.
The company is certified under the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA aimed at ensuring compliance with European data protection standards for data processing in the USA. Every company certified under the DPF commits to adhering to these data protection standards. More information can be found here: DPF Certification Information.
On this website, we use elements from the social network Pinterest, which is operated by Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland.
When you visit a page containing such an element, your browser establishes a direct connection to Pinterest's servers. This social media element transmits log data to Pinterest's servers in the USA.
These log data may include your IP address, the addresses of visited websites that also feature Pinterest functions, the type and settings of your browser, the date and time of the request, your usage of Pinterest, and cookies.
The use of this service is based on your consent according to Art. 6 Abs. 1 lit. a DSGVO and § 25 Abs. 1 TDDDG. Consent can be revoked at any time.
For more information on the purpose, scope, and further processing and use of data by Pinterest, as well as your rights and options to protect your privacy, please refer to Pinterest’s privacy policy: Pinterest Privacy Policy.
6.Plugins and Tools
YouTube with Enhanced Privacy
This website integrates videos from YouTube. The operator of the website is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
When you visit a page on this website where YouTube is embedded, a connection to YouTube’s servers is established. The YouTube server is informed about which of our pages you have visited. If you are logged into your YouTube account, YouTube can directly associate your browsing behavior with your personal profile. You can prevent this by logging out of your YouTube account.
We use YouTube in enhanced privacy mode. According to YouTube, videos played in enhanced privacy mode are not used to personalize your YouTube experience. Ads shown in enhanced privacy mode are also not personalized. In enhanced privacy mode, no cookies are set. Instead, local storage elements are saved in the user’s browser, which, like cookies, can contain personal data and be used for recognition. Details about the enhanced privacy mode can be found here: YouTube Enhanced Privacy Mode.
After activating a YouTube video, further data processing operations may be triggered, over which we have no control.
The use of YouTube is in the interest of an appealing presentation of our online offerings. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) DSGVO. If consent was requested, the processing is solely based on Art. 6(1)(a) DSGVO and § 25(1) TDDDG, as far as the consent includes the storage of cookies or access to information on the user's device (e.g., device fingerprinting) in accordance with TDDDG. The consent can be revoked at any time.
Further information on data protection at YouTube can be found in their privacy policy at: YouTube Privacy Policy.
The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA, designed to ensure adherence to European data protection standards for data processing in the USA. Each company certified under the DPF commits to these data protection standards. For more information, visit: DPF Certification.
Google Fonts (local Hosting)
This page uses so-called Google Fonts, provided by Google, to ensure uniform font display. The Google Fonts are installed locally. No connection to Google's servers is established.
For more information on Google Fonts, visit Google Fonts FAQ and Google's privacy policy at Google Privacy Policy.
Google reCAPTCHA
We use "Google reCAPTCHA" (hereinafter "reCAPTCHA") on this website. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
reCAPTCHA is used to verify whether the data input on this website (e.g., in a contact form) is performed by a human or an automated program. To do this, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis starts automatically as soon as the website visitor enters the site. For the analysis, reCAPTCHA evaluates various pieces of information (e.g., IP address, duration of the website visit, or mouse movements made by the user). The data collected during the analysis is forwarded to Google.
The reCAPTCHA analyses run entirely in the background. Website visitors are not informed that an analysis is taking place.
The storage and analysis of the data are based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in protecting their web offerings from abusive automated spying and spam. If consent was requested, the processing is based solely on Article 6(1)(a) GDPR and § 25(1) TDDG, as far as the consent includes the storage of cookies or access to information on the user's device (e.g., device fingerprinting) under TDDG. The consent can be revoked at any time.
For more information about Google reCAPTCHA, see Google's privacy policy and terms of service at the following links: Google Privacy Policy and Google Terms of Service.
The company is certified under the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA, which aims to ensure compliance with European data protection standards for data processing in the USA. Each company certified under the DPF commits to adhering to these data protection standards. For more information, see the provider's link: DPF Certification.
Source:
https://www.e-recht24.de/