Privacy

Data protection

Unless otherwise stated below, the provision of your personal data is not required by law or contract, nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide it has no consequences. This only applies if no other information is given in the subsequent processing operations.
"Personal data" means any information relating to an identified or identifiable natural person.

Your data may be transferred to third countries outside the European Union for which the EU Commission has issued an adequacy decision. If there is no adequacy decision by the EU Commission, such as for transfers to the USA, the data transfers are based, among other things, on standard contractual clauses as suitable guarantees for the protection of personal data, which can be viewed at: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de

Contact

Responsible
Contact us if you wish. The person responsible for data processing is: Christian Rauch, An der Winterleite 2, 90530 Wendelstein Germany, 01743754041, info@chris-design.eu

Customer contact via e-mail
If you initiate business contact with us by e-mail, we will only collect your personal data (name, e-mail address, message text) to the extent you have made them available. The data processing serves to process and answer your contact request.
If the establishment of contact serves to carry out pre-contractual measures (e.g. advice on purchase interest, preparation of an offer) or concerns a contract already concluded between you and us, this data processing takes place on the basis of Article 6 Paragraph 1 lit. b GDPR.
If contact is made for other reasons, this data processing takes place on the basis of Article 6 (1) (f) GDPR from our overriding legitimate interest in processing and answering your request. In this case, you have the right, for reasons arising from your particular situation, to object to the processing of your personal data based on Article 6 (1) (f) GDPR at any time.
We only use your e-mail address to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
 

Collection and processing when using the contact form
When you use the contact form, we collect your personal data (name, email address, message text) only to the extent you have provided. The data processing serves the purpose of establishing contact.
If the establishment of contact serves to carry out pre-contractual measures (e.g. advice on purchase interest, preparation of an offer) or concerns a contract already concluded between you and us, this data processing takes place on the basis of Article 6 Paragraph 1 lit. b GDPR.
If contact is made for other reasons, this data processing takes place on the basis of Article 6 (1) (f) GDPR from our overriding legitimate interest in processing and answering your request. In this case, you have the right, for reasons arising from your particular situation, to object to the processing of your personal data based on Article 6 (1) (f) GDPR at any time.
We only use your e-mail address to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.


Customer Account Orders      

customer account
When you open a customer account, we collect your personal data to the extent specified there. The purpose of data processing is to improve your shopping experience and to simplify order processing. The processing takes place on the basis of Article 6 (1) (a) GDPR with your consent. You can revoke your consent at any time by notifying us without affecting the legality of the processing carried out on the basis of the consent up to the revocation. Your customer account will then be deleted.

Your data may be transmitted to third countries outside the European Union for which the EU Commission has issued an adequacy decision. If there is no adequacy decision by the EU Commission, such as for transfers to the USA, the data transfers are based, among other things, on standard contractual clauses as suitable guarantees for the protection of personal data, which can be viewed at: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de


reviews       advertising      

Data collection when writing a comment or rating 
When commenting/evaluating an article or a contribution, we collect your personal data (name, e-mail address, comment text) only to the extent provided by you. The purpose of the processing is to enable comments/evaluations and to display comments/evaluations. 
By submitting the comment/evaluation, you agree to the processing of the transmitted data. The processing takes place on the basis of Article 6 (1) (a) GDPR with your consent. You can revoke your consent at any time by notifying us without affecting the legality of the processing carried out on the basis of the consent up to the revocation. Your personal data will then be deleted.

When your comment is published, only the name you provide will be published.

In addition, when you submit a comment, your IP address will be saved for the purpose of preventing misuse of the comment function and ensuring the security of our information technology systems. By submitting the comment, you agree to the processing of the transmitted data. The processing takes place on the basis of Article 6 (1) (a) GDPR with your consent. You can revoke your consent at any time by notifying us without affecting the legality of the processing carried out on the basis of the consent up to the revocation. Your IP address will then be deleted.

Use of your personal data for sending postal advertising
We use your personal data (name, address) that we received as part of the sale of goods or services to send you postal advertising, provided you have not objected to this use. The provision of this data is necessary for the conclusion of the contract. Non-provision means that no contract can be concluded.
The processing takes place on the basis of Art. 6 Para. 1 lit. f GDPR from our overriding legitimate interest in direct advertising. You can object to this use of your address data at any time by notifying us. The contact details for exercising the objection can be found in the imprint.

Use of the e-mail address for sending newsletters
Irrespective of contract processing, we use your e-mail address exclusively for our own advertising purposes for sending newsletters, provided you have expressly consented to this. The processing takes place on the basis of Article 6 (1) (a) GDPR with your consent. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent up to the revocation. You can unsubscribe from the newsletter at any time using the corresponding link in the newsletter or by notifying us. Your e-mail address will then be removed from the mailing list. 


payment service provider      

Use of the Shopware Cookie Consent Manager
We use the Cookie Consent Manager from shopware AG (Ebbinghoff 10, 48624 Schöppingen; "Shopware") on our website.
The tool enables you to give consent to data processing via the website, in particular the setting of cookies, and to make use of your right of withdrawal for consent that has already been given. Data processing serves the purpose of obtaining and documenting the necessary consent to data processing and thus complying with legal obligations. Cookies can be used. User information, including your IP address, is collected and transmitted to Shopware. This data will not be passed on to other third parties.
The data is processed to fulfill a legal obligation on the basis of Article 6 (1) (c) GDPR.
You can find more information on data protection at Shopware at: https://www.shopware.com/de/datenschutz/.


Plugins and Miscellaneous

Use of YouTube
We use the function for embedding YouTube videos from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "YouTube") on our website. YouTube is a Google LLC (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; “Google”) affiliated company.
The function displays videos stored on YouTube in an iFrame on the website. The option "Extended data protection mode" is activated. As a result, YouTube does not store any information about visitors to the website. Only when you watch a video is information about it sent to YouTube and stored there. Your data may be transmitted to the USA. There is no adequacy decision by the EU Commission for the USA. The data transfer takes place, among other things, on the basis of standard contractual clauses as suitable guarantees for the protection of personal data, which can be viewed at: https://policies.google.com/privacy/frameworks.
The processing of your personal data takes place on the basis of Article 6 Paragraph 1 Letter f GDPR from our overriding legitimate interest in the needs-based and targeted design of the website. The use of cookies or comparable technologies is based on Section 25 (2) TTDSG. Your personal data is processed on the basis of Article 6 Paragraph 1 Letter f GDPR from our overriding legitimate interest in ensuring the optimal functionality of the website and a user-friendly and effective design of our offer.
You can find more information about the collection and use of data by YouTube and Google, your rights in this regard and options for protecting your privacy in YouTube's data protection information at https://www.youtube.com/t/privacy.


Data subject rights and storage period

Duration of storage
After completion of the contract, the data will initially be stored for the duration of the warranty period, then taking into account statutory retention periods, in particular tax and commercial law, and then deleted after the period has expired, unless you have consented to further processing and use.

rights of the data subject
If the legal requirements are met, you have the following rights under Art. 15 to 20 GDPR: Right to information, to correction, to deletion, to restriction of processing, to data portability.
In addition, according to Art. 21 Para. 1 GDPR, you have the right to object to the processing based on Art. 6 Para. 1 f GDPR and to processing for the purpose of direct advertising.

Right of appeal to the supervisory authority
According to Art. 77 GDPR, you have the right to complain to the supervisory authority if you believe that your personal data is not being processed lawfully.

You can lodge a complaint, among other things, with the supervisory authority responsible for us, which you can reach under the following contact details:

Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18
91522 Ansbach
Tel.: +49 981 1800930
Fax: +49 981 180093800
E-Mail: poststelle@lda.bayern.de

Right to object
If the personal data processing listed here is based on our legitimate interest in accordance with Article 6 Paragraph 1 lit. f GDPR, you have the right to object to this processing at any time for reasons that arise from your particular situation with effect for the future.
If personal data is processed for direct marketing purposes, you can object to this processing at any time by notifying us. After the objection has been raised, we will stop processing the data concerned for the purpose of direct advertising.

If personal data is processed for direct marketing purposes, you can object to this processing at any time by notifying us. After the objection has been raised, we will stop processing the data concerned for the purpose of direct advertising.

last update: 01/10/2022