Data protection

1. Data protection at a glance
General information
The following information provides a simple overview of what happens to your personal data
happens when you visit this website. Personal data are all data with which you
can be personally identified. You can find detailed information on the subject of data protection
Our data protection declaration listed below this text.

Data collection on this website
Who is responsible for data collection on this website?
The data processing on this website is carried out by the website operator. Its contact details
can be found in the section "Note on the responsible body" in this data protection declaration
remove.

How do we collect your data?
On the one hand, your data is collected when you provide it to us. This can be, for. B. to
Trade data that you enter in a contact form.
Other data are automatically or after your consent when you visit the website by our IT systems
detected. This is mainly technical data (e.g. internet browser, operating system or time
of the page view). This data is collected automatically as soon as you enter this website.

What do we use your data for?
Some of the data is collected in order to ensure that the website is error-free. Other
Data can be used to analyze your user behavior.

What rights do you have with regard to your data?
You always have the right to free information about the origin, recipient and purpose of your

to receive stored personal data. You also have the right to request rectification or
To request deletion of this data. If you have given your consent to data processing,
you can revoke this consent at any time for the future. You also have the right to under
to request the restriction of the processing of your personal data in certain circumstances.
You also have the right to lodge a complaint with the competent supervisory authority.
You can contact us at any time if you have any further questions about data protection.
Analysis tools and third-party tools
When you visit this website, your surfing behavior can be statistically evaluated. That happens before
especially with so-called analysis programs.
Detailed information on these analysis programs can be found in the following
Data protection.

2. Hosting and Content Delivery Networks (CDN)
WIX
We host our website at Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel (hereinafter:
"WIX").
WIX is a website building and hosting tool. When you visit our website, you will
With the help of WIX, the user behavior, the visitor sources, the region of the website visitors and the
Analyzed visitor numbers. WIX stores cookies on your browser that are used to display the website
and are necessary to ensure security (necessary cookies).
The data is stored on the WIX servers in Israel. Israel is considered more secure in terms of data protection law
Third country. This means that Israel has a level of data protection that is equivalent to the level of data protection in the
European Union.

Details can be found in the WIX data protection declaration:
https://de.wix.com/about/privacy.
WIX is used on the basis of Art. 6 Paragraph 1 lit. f GDPR. We have a legitimate one
Interest in the most reliable possible presentation of our website. If a corresponding
If consent has been requested, processing is carried out exclusively on the basis of Article 6 (1) (a)
GDPR; the consent can be revoked at any time.

Conclusion of an order processing contract
We have concluded an order processing contract with WIX. This is one
Contract under data protection law, which guarantees that WIX will process the personal data
of our website visitors are only processed according to our instructions and in compliance with the GDPR.

3. General information and mandatory information
data protection
The operators of this website take the protection of your personal data very seriously. We handle yours
personal data confidentially and in accordance with the legal data protection regulations as well
of this data protection declaration.

When you use this website, various personal data are collected.
Personal data are data with which you can be personally identified. The present
Privacy policy explains what data we collect and what we use it for. She also explains how
and for what purpose it is done.
We would like to point out that data transmission over the Internet (e.g. when communicating by e-mail)
May have security gaps. There is no complete protection of data against access by third parties
possible.

Note on the responsible body
The responsible body for data processing on this website is:
Caroka Art, Carolin Kaltofen-Ngwenya, Schillerstr. 37, 37083 Göttingen
Telephone: 49 (0) 151 23668104
Email: ckaltofen@caroka-art.de
The responsible body is the natural or legal person who alone or jointly with others over
the purposes and means of processing personal data (e.g. names, email addresses, etc.)
decides.

Storage period
Unless a specific storage period has been specified in this data protection declaration, they remain
Your personal data with us until the purpose for the data processing no longer applies. If you have a
make a legitimate request for deletion or revoke your consent to data processing,
Your data will be deleted, unless we have other legally permissible reasons for storing your
have personal data (e.g. retention periods under tax or commercial law); in the
The latter case will be deleted after these reasons no longer apply.

Note on data transfer to the USA and other third countries
Our website includes tools from companies based in the USA or others
Third countries that are not secure under data protection law are involved. With these tools in place, your
personal data are transferred to these third countries and processed there. We point it out
point out that no data protection level comparable to that in the EU can be guaranteed in these countries.
For example, US companies are required to submit personal data to security authorities
to surrender without you as the person concerned being able to take legal action against this. So it can't
It is excluded that US authorities (e.g. secret services) access your data on US servers
Process, evaluate and permanently save for monitoring purposes. We got on this
Processing activities no influence.

Revocation of your consent to data processing
Many data processing operations are only possible with your express consent. You can ... a
revoke consent that has already been given at any time. The legality of the up to the revocation
Data processing remains unaffected by the revocation.

Right to object to data collection in special cases and against
Direct mail (Art. 21 GDPR)
IF THE DATA PROCESSING BASED ON ART. 6 ABS. 1 LIT. E OR F GDPR
DONE, YOU HAVE THE RIGHT AT ANY TIME, FOR REASONS THAT ARE SPECIFIC TO YOURSELF

SITUATION AGAINST THE PROCESSING OF YOUR PERSONAL DATA
TO OBJECT; THIS ALSO APPLIES TO ONE BASED ON THESE PROVISIONS
PROFILING. THE RELEVANT LEGAL BASIS ON WHICH PROCESSING IS BASED,
REFER TO THIS PRIVACY POLICY. IF YOU OBJECT,
WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA, IT
UNLESS WE CAN PROVIDE COMPELLING REASONS FOR PROCESSING
EVIDENCE THAT PREVIOUS YOUR INTERESTS, RIGHTS AND FREEDOMS OR THE
PROCESSING IS FOR THE ASSISTANCE, EXERCISE OR DEFENSE OF
LEGAL CLAIMS (OBJECTION ACCORDING TO ART. 21 PARA. 1 GDPR).
YOUR PERSONAL DATA WILL BE PROCESSED IN ORDER TO OPERATE DIRECT ADVERTISING,
SO YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING YOU
PERSONAL DATA CONCERNED FOR THE PURPOSE OF SUCH ADVERTISING
TO INSERT; THIS ALSO APPLIES TO PROFILING TO THE EXTENT WITH SUCH DIRECT ADVERTISING IN
CONNECTED. IF YOU DISAGREE, YOUR PERSONAL DATA WILL BE RECEIVED
THEREFORE NO LONGER USED FOR THE PURPOSE OF DIRECT ADVERTISING (OBJECTION
IN STYLE OF. 21 para. 2 GDPR).

Right to lodge a complaint with the competent supervisory authority
In the event of violations of the GDPR, those affected have the right to lodge a complaint with a
Supervisory authority, in particular in the member state of your habitual residence, your place of work
or the location of the alleged violation. The right to lodge a complaint exists without prejudice to anything else
administrative or judicial remedies.
Right to data portability
You have the right to data that we provide on the basis of your consent or in fulfillment of a contract
process automatically, either to yourself or to a third party in a common, machine-readable format
to be handed over. Unless you have the direct transfer of the data to another person in charge
request, this will only be done if it is technically feasible.

SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, such as the
For example, orders or inquiries that you send to us as the website operator, an SSL or TLS encryption.
You can recognize an encrypted connection by the fact that the address line of the browser is from
"Http: //" changes to "https: //" and the lock symbol in your browser line.
If the SSL or TLS encryption is activated, the data that you transmit to us cannot
be read by third parties.

Information, deletion and correction
You have the right to free of charge at any time within the framework of the applicable statutory provisions
Information about your stored personal data, their origin and recipient and the
Purpose of data processing and, if applicable, a right to correct or delete this data. For this as well
You can contact us at any time if you have any further questions on the subject of personal data.

Right to restriction of processing
You have the right to request that the processing of your personal data be restricted.
You can contact us at any time for this purpose. The right to restriction of processing consists in
in the following cases:

If you dispute the accuracy of your personal data stored by us, we need it
usually time to check this out. For the duration of the test you have the right to the
To request that the processing of your personal data be restricted.
If the processing of your personal data happened / happens unlawfully, you can
request the restriction of data processing instead of deletion.
If we no longer need your personal data, but you need them to exercise,
If you need to defend or assert legal claims, you have the right instead of the
To request the restriction of the processing of your personal data.
If you have lodged an objection in accordance with Art. 21 Paragraph 1 GDPR, you must weigh up between
Your and our interests are made. As long as it is not clear whose interests
predominate, you have the right to restrict the processing of your personal data
to demand.
If you have restricted the processing of your personal data, this data may - from
apart from their storage - only with your consent or for assertion, exercise or
Defense of legal claims or to protect the rights of another natural or
legal person or for reasons of an important public interest of the European Union or
of a Member State.

4. Data collection on this website
Cookies
Our Internet pages use so-called "cookies". Cookies are small text files and set up
No damage to your device. They are either temporarily for the duration of a session
(Session cookies) or permanently (permanent cookies) stored on your device. Session cookies
are automatically deleted at the end of your visit. Permanent cookies remain on your device
until you delete them yourself or your web browser automatically deletes them.
In some cases, cookies from third-party companies can also be stored on your device if you
enter our site (third-party cookies). These enable us or you to use certain
Third-party services (e.g. cookies for processing payment services).
Cookies have different functions. Numerous cookies are technically necessary because certain
Website functions would not work without them (e.g. the shopping cart function or the display
of videos). Other cookies are used to evaluate user behavior or to display advertising.
Cookies that are used to carry out the electronic communication process (necessary cookies) or for
Provision of certain functions that you want (functional cookies, e.g. for the
Shopping cart function) or to optimize the website (e.g. cookies to measure the web audience)
are required, are stored on the basis of Art. 6 Para. 1 lit. f GDPR, unless otherwise
Legal basis is specified. The website operator has a legitimate interest in the storage
of cookies for the technically error-free and optimized provision of its services. Unless a
Consent to the storage of cookies has been requested, the relevant will be saved
Cookies exclusively on the basis of this consent (Art. 6 Para. 1 lit. a GDPR); the consent is
revocable at any time.
You can set your browser so that you are informed about the setting of cookies and
Allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or in general
and activate the automatic deletion of cookies when you close your browser. In the
Deactivating cookies may restrict the functionality of this website.
If cookies are used by third-party companies or for analysis purposes, we will inform you about this
Inform separately in the context of this data protection declaration and, if necessary, ask for consent.

 

Server log files
The provider of the pages automatically collects and stores information in so-called server log
Files that your browser automatically transmits to us. These are:
Browser type and browser version
operating system used
Referrer URL
Host name of the accessing computer
Time of the server request
IP address
This data will not be merged with other data sources.
This data is recorded on the basis of Article 6 (1) (f) GDPR. The website operator has
a legitimate interest in the technically error-free presentation and optimization of his website -
the server log files must be recorded for this purpose.

contact form
If you send us inquiries using the contact form, your details will be taken from the
Inquiry form including the contact details you provided there for the purpose of processing the request
and stored by us in the event of follow-up questions. We do not give this data without yours
Consent further.
The processing of this data takes place on the basis of Art. 6 Para. 1 lit. b GDPR, provided that your request is with
the performance of a contract or to carry out pre-contractual measures
is required. In all other cases, the processing is based on our legitimate interest in the
effective processing of inquiries sent to us (Art. 6 Para. 1 lit. f GDPR) or on your
Consent (Art. 6 Para. 1 lit. a GDPR) if requested.
The data you enter in the contact form will remain with us until you tell us to delete it
request, revoke your consent to storage or the purpose for data storage no longer applies
(e.g. after your request has been processed). Mandatory legal provisions -
in particular retention periods - remain unaffected.

Inquiries by email, phone or fax
If you contact us by e-mail, phone or fax, your request will be inclusive of all of it
resulting personal data (name, request) for the purpose of processing your request
stored and processed by us. We do not pass on this data without your consent.
The processing of this data takes place on the basis of Art. 6 Para. 1 lit. b GDPR, provided that your request is with
the performance of a contract or to carry out pre-contractual measures
is required. In all other cases, the processing is based on our legitimate interest in the
effective processing of inquiries sent to us (Art. 6 Para. 1 lit. f GDPR) or on your
Consent (Art. 6 Para. 1 lit. a GDPR) if requested.
The data you send to us via contact inquiries will remain with us until you ask us to delete them
request, revoke your consent to storage or the purpose for data storage no longer applies
(e.g. after your request has been processed). Mandatory legal provisions -
in particular statutory retention periods - remain unaffected.

Comment function on this website

For the comment function on this page, in addition to your comment, information on the point in time is also required
the creation of the comment, your e-mail address and, if you do not post anonymously, that of you
selected username saved.

Storage of the IP address
Our comment function saves the IP addresses of the users who write comments. Since we
Comments on this website do not check before activation, we need this data in order to
to be able to take action against the author of violations of the law such as insults or propaganda.

Storage duration of the comments
The comments and the associated data are saved and remain on this website,
until the commented content has been completely deleted or the comments for legal reasons
need to be deleted (e.g. offensive comments).

Legal basis
The comments are saved on the basis of your consent (Art. 6 Para. 1 lit. a GDPR). they
can revoke your consent at any time. An informal message by email is sufficient
to us. The legality of the data processing operations that have already taken place remains from the withdrawal
untouched.

5. Social media
Social media plugins with Shariff
This website uses plugins from social media (e.g. Facebook, Twitter, Instagram,
Pinterest, XING, LinkedIn, Tumblr).
You can usually recognize the plugins by their respective social media logos. To the
To ensure data protection on this website, we only use these plugins in conjunction with the
so-called "Shariff" solution. This application prevents the integrated on this website
Plugins transfer data to the respective provider when you first enter the site.
Only when you activate the respective plug-in by clicking the associated button will a
direct connection to the provider's server established (consent). As soon as you activate the plugin,
the respective provider receives the information that you have visited this website with your IP address.
If you are logged into your respective social media account (e.g. Facebook) at the same time, the
Assign the respective provider the visit to this website to your user account.
Activating the plug-in constitutes consent within the meaning of Article 6 (1) (a) GDPR
You can revoke your consent at any time with effect for the future.

Facebook plugins (like & share button)
Plugins of the social network Facebook are integrated on this website. The provider of this service is
Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. The data collected is according to testimony
However, it is also transferred from Facebook to the USA and other third countries.
You can recognize the Facebook plugins by the Facebook logo or the “Like” button on it
Website. You can find an overview of the Facebook plugins here:
https://developers.facebook.com/docs/plugins/?locale=de_DE.

 

When you visit this website, the plugin creates a direct connection between your browser
and the Facebook server. As a result, Facebook receives the information that you are using your IP address
have visited this website. If you click the Facebook “Like” button while you are in
If you are logged into your Facebook account, you can view the content of this website on your Facebook profile
to link. This enables Facebook to assign your visit to this website to your user account. We show
point out that we as the provider of the pages have no knowledge of the content of the transmitted data or their
Use by Facebook received. Further information can be found in the data protection declaration
from Facebook at:
https://de-de.facebook.com/privacy/explanation.
If you do not want Facebook to visit this website, your Facebook user account
can assign, please log out of your Facebook user account.
The Facebook plugins are used on the basis of Art. 6 Para. 1 lit.f GDPR. Of the
The website operator has a legitimate interest in the widest possible visibility in the
Social media. If a corresponding consent has been requested, the processing takes place
exclusively on the basis of Article 6 (1) (a) GDPR; the consent can be revoked at any time.
Insofar as personal data is collected and sent on our website with the help of the tool described here
Facebook, we are and Facebook Ireland Limited, 4 Grand Canal Square, Grand
Canal Harbor, Dublin 2, Ireland jointly responsible for this data processing (Art. 26 GDPR).
The joint responsibility is limited exclusively to the collection of the data and
their transfer to Facebook. The processing carried out by Facebook after the forwarding is
not part of the shared responsibility. The obligations that we have together were in
a joint processing agreement. You can find the wording of the agreement
under:
https://www.facebook.com/legal/controller_addendum. According to this agreement, we are in favor of the grant
the data protection information when using the Facebook tool and for the data protection-legally secure
Responsible for implementing the tool on our website. For the data security of the Facebook
Products is responsible for Facebook. Rights of data subjects (e.g. requests for information) with regard to the
You can claim data processed by Facebook directly on Facebook. If you have the
If you assert the rights of data subjects against us, we are obliged to forward them to Facebook.
The data transfer to the USA is based on the standard contractual clauses of the EU Commission.
Details can be found here:
https://www.facebook.com/legal/EU_data_transfer_addendum,
https://de-de.facebook.com/help/566994660333381 and
https://www.facebook.com/policy.php.

Instagram plugin
Functions of the Instagram service are integrated on this website. These functions are
offered by Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland
integrated.
If you are logged into your Instagram account, you can click the Instagram button
link the content of this website to your Instagram profile. This allows Instagram to visit this
Assign the website to your user account. We point out that we as the provider of the pages do not
Obtain knowledge of the content of the transmitted data and their use by Instagram.
The storage and analysis of the data takes place on the basis of Art. 6 Para. 1 lit. f GDPR. Of the
The website operator has a legitimate interest in the widest possible visibility in the
Social media. If a corresponding consent has been requested, the processing takes place
exclusively on the basis of Article 6 (1) (a) GDPR; the consent can be revoked at any time.

 

Insofar as personal data is collected and sent on our website with the help of the tool described here
Facebook or Instagram are forwarded, we are and Facebook Ireland Limited, 4 Grand Canal
Square, Grand Canal Harbor, Dublin 2, Ireland jointly responsible for this data processing (Art.
26 GDPR). The joint responsibility is limited exclusively to the recording of the
Data and its transfer to Facebook or Instagram. The one that takes place after the forwarding
Processing by Facebook or Instagram is not part of the shared responsibility. The us
common obligations were set out in a joint processing agreement
held. The wording of the agreement can be found at:
https://www.facebook.com/legal/controller_addendum. According to this agreement, we are in favor of the grant
the data protection information when using the Facebook or Instagram tool and for the
Responsible for the implementation of the tool on our website in accordance with data protection law. For the
Facebook is responsible for the data security of Facebook and Instagram products. Affected Rights
You can (e.g. request for information) with regard to the data processed on Facebook or Instagram
claim directly on Facebook. If you assert your rights with us, we are
obliged to forward this to Facebook.
The data transfer to the USA is based on the standard contractual clauses of the EU Commission.
Details can be found here:
https://www.facebook.com/legal/EU_data_transfer_addendum,
https://help.instagram.com/519522125107875 and
https://de-de.facebook.com/help/566994660333381.
You can find more information on this in Instagram's privacy policy:
https://instagram.com/about/legal/privacy/.

Pinterest plugin
On this website we use social plugins from the social network Pinterest, operated by Pinterest
Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland.
When you call up a page that contains such a plug-in, your browser provides a direct connection
the servers from Pinterest. The plugin transmits log data to the Pinterest server in
the USA. This log data may contain your IP address, the address of the visited
Websites that also contain Pinterest functions, browser type and settings, date and time
Time of the request, how you use Pinterest and cookies.
The storage and analysis of the data takes place on the basis of Art. 6 Para. 1 lit. f GDPR. Of the
The website operator has a legitimate interest in the widest possible visibility in the
Social media. If a corresponding consent has been requested, the processing takes place
exclusively on the basis of Article 6 (1) (a) GDPR; the consent can be revoked at any time.
Further information on the purpose, scope and further processing and use of the data by
Pinterest and your related rights and options for protecting your privacy can be found in
the data protection information from Pinterest:
https://policy.pinterest.com/de/privacy-policy.

6. Newsletter
Newsletter data
If you would like to receive the newsletter offered on the website, we need an email from you
Address and information that allows us to verify that you are the owner of the
given e-mail address and agree to receive the newsletter. Further
Data is not collected or is only collected on a voluntary basis. We use this data exclusively for

sending the requested information and not passing it on to third parties.
The processing of the data entered in the newsletter registration form takes place exclusively on
Basis of your consent (Art. 6 Para. 1 lit. a GDPR). The consent given to the storage of the
You can access data, your email address and how it is used to send the newsletter at any time
revoked, for example via the "Unsubscribe" link in the newsletter. The legality of what has already been done
Data processing operations remain unaffected by the revocation.
The data you have stored with us for the purpose of subscribing to the newsletter will be used by us until your
Deregistration from the newsletter is saved by us or the newsletter service provider and after the
Cancellation of the newsletter or deleted from the newsletter distribution list after the purpose no longer applies. We
reserve the right to use e-mail addresses from our newsletter distribution list at our own discretion
to delete or block our legitimate interest in accordance with Art. 6 Para. 1 lit.f GDPR.
After you have been removed from the newsletter distribution list, your email address will be sent to us or the
Newsletter service provider may be stored in a blacklist to prevent future mailings. The data
from the blacklist will only be used for this purpose and will not be merged with other data.
This serves both your interest and our interest in compliance with the legal requirements
when sending newsletters (legitimate interest within the meaning of Art. 6 Para. 1 lit. f GDPR). The
Storage in the blacklist is not limited in time. You can object to the storage, provided that
Your interests outweigh our legitimate interests.

7. Plugins and Tools
YouTube with extended data protection
This website integrates videos from YouTube. The operator of the website is Google Ireland Limited ("Google"),
Gordon House, Barrow Street, Dublin 4, Ireland.
We use YouTube in the extended data protection mode. According to YouTube, this mode causes
YouTube does not store any information about visitors to this website before they view the video
look at. The transfer of data to YouTube partners is made possible by the extended data protection mode
however, not necessarily excluded. So represents YouTube - regardless of whether you are watching a video
view - connect to the Google DoubleClick network.
As soon as you start a YouTube video on this website, a connection to the servers of
YouTube made. The YouTube server is informed which of our pages you have visited.
If you are logged into your YouTube account, you enable YouTube to direct your surfing behavior
To be assigned to your personal profile. You can prevent this by logging out of your YouTube
Log out of your account.
Furthermore, YouTube can save various cookies on your device after starting a video
or use comparable recognition technologies (e.g. device fingerprinting). In this way
YouTube can receive information about visitors to this website. This information is among others
used to collect video statistics, improve usability and
Prevent attempted fraud.
If necessary, further data processing operations can be carried out after the start of a YouTube video
that we have no control over.
YouTube is used in the interest of an appealing presentation of our online offers.
This represents a legitimate interest within the meaning of Article 6 (1) (f) GDPR
If consent has been requested, processing is carried out exclusively on the basis of Article 6 (1) (a)
GDPR; the consent can be revoked at any time.

 

You can find more information about data protection at YouTube in their data protection declaration at:
https://policies.google.com/privacy?hl=de.
Source:
e-recht24.de