Privacy policy
The use of this website may involve the processing of personal data. In order to make this processing traceable, we would like to provide the data subject with an overview of the data processing policy with the following information. In order to ensure fair processing, we would also like to inform the data subject of their rights under the European Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG).
The data processor is Lesley di Lesley Sharon Venditti (hereinafter "we" or "Lesley").
1.Contacts
If you have any questions or comments relating to this information, or if you wish to contact us to assert your rights, please direct your request to:
Lesley Luxury Vintage,
Via Lombardia 38c
00187 Rome
Phone: +30 06 42020 265
Email: info@lesleyluxuryvintage.com
2. Lesley's business purpose and mode of operation
Lesley by Lesley Sharon Venditti runs an international online boutique under the Lesley brand for the sale of second-hand luxury clothing and accessories, through which private and commercial users can buy and sell products.
For sellers, Lesley takes care of all aspects of online selling, from item descriptions and item photographs, to secure warehousing and payment processing, packing and shipping via logistics partners, to marketing through a variety of channels. of marketing. An important aspect of online sales (in the case of sales through a concierge) is information and advice to potential buyers regarding the items on offer.
Buyers can count on the authenticity check and quality control that Lesley's experts carry out for each product sold.
The performance of these services presupposes the processing of sensitive contact data such as name, address, e-mail address and telephone number. This information is, for example, necessary for the dispatch of the ordered goods or for notification in the case of article reservations.
Lesley wants to actively support both buyers and sellers and to this end we specifically offer the following non-commercial email services for registered users:
emails in the presence of payment problems or payment interruptions;
information on how Lesley works to support newly registered users;
notifying sellers of questions from prospective buyers;
indications to sellers for the improvement of sales opportunities.
Sending communications regarding filters or search agents used
Lesley wants to actively support both buyers and sellers and to this end offers the following telephone services for registered users:
support for payment problems
answering questions about shipping and ordering
3. General indications for data processing
By using this website, personal data may be processed. The concept of "personal data", related to data protection legislation, defines all information that relates to identified or identifiable data subjects. The IP address can therefore also be personal data. An IP address is assigned by the Internet provider to each device connected to the Internet, in order to send and receive data. By using the website, we collect information that the data subject provides himself. Furthermore, during the visit of the interested party to the website, we automatically collect certain information relating to the use of the website by the interested party.
to. Legal basis of data processing
We process personal data in compliance with the relevant data protection regulations, in particular the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG). We proceed with the processing of data only on the basis of an authorization pursuant to the law. When using this website, we process personal data only with the consent of the data subject (Article 6(1)(1)(a) of the GDPR), for the purpose of fulfilling a contract, of which the data subject is the contracting party, or at the request of the same to implement pre-contractual measures (Article 6 paragraph 1, first sentence, letter b GDPR), to fulfill a legal obligation (Article 6 paragraph 1, first sentence, letter c of the GDPR), if the data processing is necessary for the protection of our legitimate interests or the legitimate interests of third parties, unless the data subject demonstrates the existence of legitimate reasons which prevail over his interests, fundamental rights or freedoms , which require the protection of personal data (art. 6, paragraph 1, first sentence, lett. f GDPR). The processing of applicant data takes place solely for the purpose of establishing the employment relationship in accordance with § 26(1) BDSG.
b. Withdrawal of authorization
If the interested party has given explicit consent to the processing of data, the same may revoke the previously expressed consent at any time, pursuant to art. 7, paragraph 3 of the GDPR. This revocation does not affect the lawfulness of the data processing based on the consent given until the revocation of the same.
c. Storage duration
Unless otherwise specified in the instructions below, we only store data for as long as this is necessary to achieve the purpose of the processing or to fulfill our contractual or legal obligations. These statutory retention obligations are also specified in particular in the commercial and tax law regulations.
d. Technical service providers
Unless otherwise specified in the following information, data processing takes place on the servers of technical service providers commissioned by us for this purpose. These providers only process data on express instruction and are contractually obligated to ensure sufficient technical and organizational measures for data protection.
4. Handling of server log files
The purely informational use of our website primarily involves the automatic storage (i.e. regardless of registration) of general information that the browser of the data subject transmits to our servers. Typically this information includes: browser type and version, operating system used, site accessed, previously visited site (referrer URL), IP address, date and time of request to the server and HTTP status code.
The processing takes place to protect our legitimate interests and is based on the legal basis of Art. 6, paragraph 1m first sentence, lett. f of the GDPR. This processing serves the technical management and security of the website. Archived data is deleted after seven days, unless there are reasonable grounds to suspect that unlawful use has occurred, which would then require further verification and processing of the information.
5. Contact form
Our website contains a contact form via which the data subject can contact us. In this case, the transfer of the data of the interested party takes place in encrypted form.
The legal basis for the data processing is Art. 6, paragraph 1, first sentence, lett. b of the GDPR. All data fields marked as mandatory fields are necessary for the processing of the request of the data subject. Failure to provide the data will make it impossible for us to process the request of the data subject. The provision of other data is discretionary. Alternatively, you can also send us a message via the contact email.
6. Registration and login
In order to use certain functions of the website, registration on the website is required. The necessary data can be found in the input mask for registration. Providing the information marked as mandatory data is absolutely necessary for the success of the registration. The data provided is processed for the purpose of providing the service. The legal basis for the data processing is Art. 6, paragraph 1, first sentence, lett. b of the GDPR.
7. Services for registered users
In order to be able to make the e-mail and telephony services specified in section 2 available to registered users, we process your personal data such as customer name, e-mail address, telephone number, if applicable, and data relating to the desired service. . The data provided is processed for the purpose of providing the service. The legal basis for the processing is Art. 6, para. 1, first sentence, lett. b) of the GDPR".
8. Inserting comments
On our website we offer the possibility to comment on the listed articles. As a user, the data subject has the opportunity to ask the respective seller a question. Registration is required to use this service. By entering a comment, the username is displayed and the comment is attributed to the article. All other data provided by the interested party (e.g. within a comment) are optional.
The legal basis for the storage of the e-mail address of the data subject is Art. 6, paragraph 1, first sentence, lett. f of the GDPR. We only use the personal data of the interested party in the event that a third party reports a comment to us as illegal and therefore we are obliged to investigate the case. We store the data of the interested party until his comment is publicly visible.
As a rule, we do not check comments left before they are published. However, we expressly reserve the right to delete the comments of the interested party, if they are disputed as illegal by third parties. The interested party can oppose the storage of the aforementioned data at any time. However, in such a case we would be forced to remove such comments from our website.
9. Data processing in the context of the purchase process
If the data subject orders a product on our website, we process personal data exclusively for contract processing, i.e. to be able to provide the ordered product. In the context of the booking and ordering process, we only process the data that the data subject has personally entered into the input mask. If you opt for an advance payment, we will not collect any further data.
In order to be able to deliver the ordered products, we transmit the data necessary for the delivery to one of our forwarders as indicated in the order.
The legal basis for the processing is Art. 6, paragraph 1, first sentence, lett. b) of the GDPR. All data fields marked as mandatory fields are necessary for the processing of the reservation or order. Failure to provide the data means that we will be unable to process your booking or order. The provision of other data is optional.
10. Payments
We use various payment service providers for the purchase process, about which we would like to provide all the necessary clarifications below.
to. Credit card
We offer the possibility to pay by credit card. We point out that the respective payment information of the relevant payment service providers is collected and processed under their direct responsibility.
b. PayPal
You can also pay with Paypal. We point out that the payment information of PayPal (Europe) S.à r.l. et Cie, S.C.A. based in Luxembourg are collected and processed under their responsibility.
For this purpose, Paypal transmits to us the address data which the data subject entered on Paypal and which we use exclusively for contract processing. The legal basis is the art. 6, paragraph 1, first sentence, lett. b of the GDPR.
Further information on Paypal's data protection can be found at: https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#r5.
11. Newsletters
Below we provide information regarding our newsletter and other types of commercial emails and electronic mail, as well as the rights of opposition pertaining to the interested party. By subscribing to our newsletter, the interested party expresses his consent to the receipt and to the procedure described. The legal basis is your express consent pursuant to art. 6, paragraph 1, first sentence, lett. a of the GDPR.
The registration for our newsletter takes place with the aid of the double opt-in procedure, which serves to confirm the e-mail address. This confirmation is necessary to prevent anyone from signing up with someone else's email address. Subscriptions to the newsletter are logged, in order to be able to document the registration process in accordance with the legal requirements. This activity also includes the registration of the moment of registration, of the registration confirmation and also of the IP address. In addition, changes to the data subject's data stored with the dispatch service provider are logged.
Emails with closely related buying and selling transactions, e.g. the order confirmation is sent to dalesleyshop@gmail.com.
Please note that we analyze your use when sending the newsletter and transactional e-mails.
The newsletter is analyzed on the basis of Art. 6, para. 1, lit. f) of the GDPR. We have a legitimate interest in anonymously analyzing usage in order to optimize both your network offering and your advertising.
With the data collected by emarsys we create a pseudonymized user profile in order to be able to make the newsletter available to you according to your interests. The following data is collected:
Have you opened the newsletter? And what did he click on in the newsletter?
When and for how long do you browse our site? What products and categories do you watch?
When did you shop and what did you buy? In which category and for what amount? E: did you possibly interrupt the order?
We associate this data with your user account, provided you have created it in our shop.
The interested party can decide to interrupt the sending of our newsletter at any time with effect for the future. You can easily rely on the help of the link found at the bottom of each of our e-mails or contact the e-mail address listed under 'Contact'. Unfortunately, there is no possibility of a separate revocation of the dispatch by the provider of the dispatch service or of the statistical analysis; in this case, the entire subscription must be cancelled.
12. Cookies
We use so-called cookies on our website. Cookies are small text files that the data subject's computer stores when the data subject visits a website. This identifies the browser used, which can be recognized by our web servers. Insofar as cookies are used for the processing of personal data, the legal basis for this is Art. 6, paragraph 1, first sentence f of the GDPR. This processing serves our legitimate interest in making our website more user-friendly, more efficient and more secure.
Most of the cookies we use are so-called 'session cookies'. These cookies are automatically deleted at the end of the visit. Other cookies ('persistent cookies') are automatically deleted after a prescribed period of time, which may vary according to the cookie. The interested party can delete the cookies at any time in the security settings of his browser. You can usually object to the use of cookies via your browser settings.
13. Analysis of our website
-Google Analytics
We use the Google Analytics service of Google LLC (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; "Google") to evaluate visitors to our website. Google uses cookies. The information generated by the cookie about the use of the online offer by the data subject is usually transmitted to a Google server in the USA and stored there. On our behalf, Google will use this information to evaluate the use of our online offer by the users, to compile reports on the activities within the online offer and to provide us with other services associated with the use of the online offer and related services. to using the Internet. In this case, usage profiles of pseudonymised users can be created from the processed data.
We only use Google Analytics with activated IP anonymization. This means that the IP address of the users is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there.
The IP address transmitted by the browser of the data subject is not merged with other Google data. Users can prevent the storage of cookies by setting their browser software accordingly. Furthermore, the data subject can prevent the collection of the information generated by the cookie by downloading and installing the browser plug-ins available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de. If the data subject visits our website using a mobile device, he or she can deactivate Google Analytics by clicking on this link.
The legal basis for the use of this service is Art. 6, paragraph 1, first sentence, lett. f of the GDPR and serves to protect our legitimate interest in the analysis of user behavior on our website and thus in the possible design of the website according to user needs.
Google is certified under the Privacy Shield Agreement and therefore ensures compliance with European Data Protection Law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
14. Linked Services and Third Party Content
We use services and content offered by third-party providers on our website (hereinafter referred to as "content"). For such a connection, processing of the user's IP address is technically necessary in order for the contents to be sent to your browser. Your IP address is therefore passed on to the third-party providers.
This data processing takes place to protect our legitimate interests in the optimization and economic operation of our website and is based on the legal basis of Art. 6, paragraph 1, first sentence f of the GDPR.
The Java programming language is regularly used for linking content. The user can notify his opposition to the processing of data by deactivating the execution of Java in his browser.
We have integrated the following content from third-party providers on our website:
- Google
"Google-Maps" for viewing geographical maps;
"Google Translate", which allows texts on our website to be translated into another language.
Google is certified under the Privacy Shield Agreement and therefore ensures compliance with European Data Protection Law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
15. Rights of the interested party
With regard to the processing of your personal data during your visit to our website, you, as an "interested party" can, in particular, exercise the following rights:
pursuant to the article 15 of the GDPR and § 34 of the BDSG, the data subject has the right to request information regarding the methods and possibly to what extent we process or not the sensitive data relating to his person;
pursuant to the provisions of article 16 of the GDPR, the interested party has the right to request the rectification of their personal data;
pursuant to the provisions of article 17 of the GDPR and § 35 of the BDSG, the interested party has the right to request the deletion of his personal data;
pursuant to the provisions of article 18 of the GDPR, the interested party has the right to limit the processing of their personal data;
pursuant to the provisions of article 20 of the GDPR, the interested party has the right to receive the personal data made available by him, in a structured format, commonly used and readable by an automatic device and to obtain its transfer without obstacles to a other holder.
16. Right to object
Pursuant to the provisions of art. 21 of the RGPD, the interested party has the right to present an opposition against any treatment, based on the legal basis of the art. 6, paragraph 1, first sentence, lett. and or lit. f GDPR.
17. Data Protection Officer
Our data protection officer can be contacted at the following email address: lesleysho@gmail.com
18. Complaints to the personal data protection supervisory authority
If the interested party believes that the processing of his personal data violates the provisions of the GDPR Regulation, pursuant to art. 77 of the GDPR, you have the right to lodge a complaint with the competent supervisory authority.
Update: 05/2020
The data processor is Lesley di Lesley Sharon Venditti (hereinafter "we" or "Lesley").
1.Contacts
If you have any questions or comments relating to this information, or if you wish to contact us to assert your rights, please direct your request to:
Lesley Luxury Vintage,
Via Lombardia 38c
00187 Rome
Phone: +30 06 42020 265
Email: info@lesleyluxuryvintage.com
2. Lesley's business purpose and mode of operation
Lesley by Lesley Sharon Venditti runs an international online boutique under the Lesley brand for the sale of second-hand luxury clothing and accessories, through which private and commercial users can buy and sell products.
For sellers, Lesley takes care of all aspects of online selling, from item descriptions and item photographs, to secure warehousing and payment processing, packing and shipping via logistics partners, to marketing through a variety of channels. of marketing. An important aspect of online sales (in the case of sales through a concierge) is information and advice to potential buyers regarding the items on offer.
Buyers can count on the authenticity check and quality control that Lesley's experts carry out for each product sold.
The performance of these services presupposes the processing of sensitive contact data such as name, address, e-mail address and telephone number. This information is, for example, necessary for the dispatch of the ordered goods or for notification in the case of article reservations.
Lesley wants to actively support both buyers and sellers and to this end we specifically offer the following non-commercial email services for registered users:
emails in the presence of payment problems or payment interruptions;
information on how Lesley works to support newly registered users;
notifying sellers of questions from prospective buyers;
indications to sellers for the improvement of sales opportunities.
Sending communications regarding filters or search agents used
Lesley wants to actively support both buyers and sellers and to this end offers the following telephone services for registered users:
support for payment problems
answering questions about shipping and ordering
3. General indications for data processing
By using this website, personal data may be processed. The concept of "personal data", related to data protection legislation, defines all information that relates to identified or identifiable data subjects. The IP address can therefore also be personal data. An IP address is assigned by the Internet provider to each device connected to the Internet, in order to send and receive data. By using the website, we collect information that the data subject provides himself. Furthermore, during the visit of the interested party to the website, we automatically collect certain information relating to the use of the website by the interested party.
to. Legal basis of data processing
We process personal data in compliance with the relevant data protection regulations, in particular the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG). We proceed with the processing of data only on the basis of an authorization pursuant to the law. When using this website, we process personal data only with the consent of the data subject (Article 6(1)(1)(a) of the GDPR), for the purpose of fulfilling a contract, of which the data subject is the contracting party, or at the request of the same to implement pre-contractual measures (Article 6 paragraph 1, first sentence, letter b GDPR), to fulfill a legal obligation (Article 6 paragraph 1, first sentence, letter c of the GDPR), if the data processing is necessary for the protection of our legitimate interests or the legitimate interests of third parties, unless the data subject demonstrates the existence of legitimate reasons which prevail over his interests, fundamental rights or freedoms , which require the protection of personal data (art. 6, paragraph 1, first sentence, lett. f GDPR). The processing of applicant data takes place solely for the purpose of establishing the employment relationship in accordance with § 26(1) BDSG.
b. Withdrawal of authorization
If the interested party has given explicit consent to the processing of data, the same may revoke the previously expressed consent at any time, pursuant to art. 7, paragraph 3 of the GDPR. This revocation does not affect the lawfulness of the data processing based on the consent given until the revocation of the same.
c. Storage duration
Unless otherwise specified in the instructions below, we only store data for as long as this is necessary to achieve the purpose of the processing or to fulfill our contractual or legal obligations. These statutory retention obligations are also specified in particular in the commercial and tax law regulations.
d. Technical service providers
Unless otherwise specified in the following information, data processing takes place on the servers of technical service providers commissioned by us for this purpose. These providers only process data on express instruction and are contractually obligated to ensure sufficient technical and organizational measures for data protection.
4. Handling of server log files
The purely informational use of our website primarily involves the automatic storage (i.e. regardless of registration) of general information that the browser of the data subject transmits to our servers. Typically this information includes: browser type and version, operating system used, site accessed, previously visited site (referrer URL), IP address, date and time of request to the server and HTTP status code.
The processing takes place to protect our legitimate interests and is based on the legal basis of Art. 6, paragraph 1m first sentence, lett. f of the GDPR. This processing serves the technical management and security of the website. Archived data is deleted after seven days, unless there are reasonable grounds to suspect that unlawful use has occurred, which would then require further verification and processing of the information.
5. Contact form
Our website contains a contact form via which the data subject can contact us. In this case, the transfer of the data of the interested party takes place in encrypted form.
The legal basis for the data processing is Art. 6, paragraph 1, first sentence, lett. b of the GDPR. All data fields marked as mandatory fields are necessary for the processing of the request of the data subject. Failure to provide the data will make it impossible for us to process the request of the data subject. The provision of other data is discretionary. Alternatively, you can also send us a message via the contact email.
6. Registration and login
In order to use certain functions of the website, registration on the website is required. The necessary data can be found in the input mask for registration. Providing the information marked as mandatory data is absolutely necessary for the success of the registration. The data provided is processed for the purpose of providing the service. The legal basis for the data processing is Art. 6, paragraph 1, first sentence, lett. b of the GDPR.
7. Services for registered users
In order to be able to make the e-mail and telephony services specified in section 2 available to registered users, we process your personal data such as customer name, e-mail address, telephone number, if applicable, and data relating to the desired service. . The data provided is processed for the purpose of providing the service. The legal basis for the processing is Art. 6, para. 1, first sentence, lett. b) of the GDPR".
8. Inserting comments
On our website we offer the possibility to comment on the listed articles. As a user, the data subject has the opportunity to ask the respective seller a question. Registration is required to use this service. By entering a comment, the username is displayed and the comment is attributed to the article. All other data provided by the interested party (e.g. within a comment) are optional.
The legal basis for the storage of the e-mail address of the data subject is Art. 6, paragraph 1, first sentence, lett. f of the GDPR. We only use the personal data of the interested party in the event that a third party reports a comment to us as illegal and therefore we are obliged to investigate the case. We store the data of the interested party until his comment is publicly visible.
As a rule, we do not check comments left before they are published. However, we expressly reserve the right to delete the comments of the interested party, if they are disputed as illegal by third parties. The interested party can oppose the storage of the aforementioned data at any time. However, in such a case we would be forced to remove such comments from our website.
9. Data processing in the context of the purchase process
If the data subject orders a product on our website, we process personal data exclusively for contract processing, i.e. to be able to provide the ordered product. In the context of the booking and ordering process, we only process the data that the data subject has personally entered into the input mask. If you opt for an advance payment, we will not collect any further data.
In order to be able to deliver the ordered products, we transmit the data necessary for the delivery to one of our forwarders as indicated in the order.
The legal basis for the processing is Art. 6, paragraph 1, first sentence, lett. b) of the GDPR. All data fields marked as mandatory fields are necessary for the processing of the reservation or order. Failure to provide the data means that we will be unable to process your booking or order. The provision of other data is optional.
10. Payments
We use various payment service providers for the purchase process, about which we would like to provide all the necessary clarifications below.
to. Credit card
We offer the possibility to pay by credit card. We point out that the respective payment information of the relevant payment service providers is collected and processed under their direct responsibility.
b. PayPal
You can also pay with Paypal. We point out that the payment information of PayPal (Europe) S.à r.l. et Cie, S.C.A. based in Luxembourg are collected and processed under their responsibility.
For this purpose, Paypal transmits to us the address data which the data subject entered on Paypal and which we use exclusively for contract processing. The legal basis is the art. 6, paragraph 1, first sentence, lett. b of the GDPR.
Further information on Paypal's data protection can be found at: https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#r5.
11. Newsletters
Below we provide information regarding our newsletter and other types of commercial emails and electronic mail, as well as the rights of opposition pertaining to the interested party. By subscribing to our newsletter, the interested party expresses his consent to the receipt and to the procedure described. The legal basis is your express consent pursuant to art. 6, paragraph 1, first sentence, lett. a of the GDPR.
The registration for our newsletter takes place with the aid of the double opt-in procedure, which serves to confirm the e-mail address. This confirmation is necessary to prevent anyone from signing up with someone else's email address. Subscriptions to the newsletter are logged, in order to be able to document the registration process in accordance with the legal requirements. This activity also includes the registration of the moment of registration, of the registration confirmation and also of the IP address. In addition, changes to the data subject's data stored with the dispatch service provider are logged.
Emails with closely related buying and selling transactions, e.g. the order confirmation is sent to dalesleyshop@gmail.com.
Please note that we analyze your use when sending the newsletter and transactional e-mails.
The newsletter is analyzed on the basis of Art. 6, para. 1, lit. f) of the GDPR. We have a legitimate interest in anonymously analyzing usage in order to optimize both your network offering and your advertising.
With the data collected by emarsys we create a pseudonymized user profile in order to be able to make the newsletter available to you according to your interests. The following data is collected:
Have you opened the newsletter? And what did he click on in the newsletter?
When and for how long do you browse our site? What products and categories do you watch?
When did you shop and what did you buy? In which category and for what amount? E: did you possibly interrupt the order?
We associate this data with your user account, provided you have created it in our shop.
The interested party can decide to interrupt the sending of our newsletter at any time with effect for the future. You can easily rely on the help of the link found at the bottom of each of our e-mails or contact the e-mail address listed under 'Contact'. Unfortunately, there is no possibility of a separate revocation of the dispatch by the provider of the dispatch service or of the statistical analysis; in this case, the entire subscription must be cancelled.
12. Cookies
We use so-called cookies on our website. Cookies are small text files that the data subject's computer stores when the data subject visits a website. This identifies the browser used, which can be recognized by our web servers. Insofar as cookies are used for the processing of personal data, the legal basis for this is Art. 6, paragraph 1, first sentence f of the GDPR. This processing serves our legitimate interest in making our website more user-friendly, more efficient and more secure.
Most of the cookies we use are so-called 'session cookies'. These cookies are automatically deleted at the end of the visit. Other cookies ('persistent cookies') are automatically deleted after a prescribed period of time, which may vary according to the cookie. The interested party can delete the cookies at any time in the security settings of his browser. You can usually object to the use of cookies via your browser settings.
13. Analysis of our website
-Google Analytics
We use the Google Analytics service of Google LLC (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; "Google") to evaluate visitors to our website. Google uses cookies. The information generated by the cookie about the use of the online offer by the data subject is usually transmitted to a Google server in the USA and stored there. On our behalf, Google will use this information to evaluate the use of our online offer by the users, to compile reports on the activities within the online offer and to provide us with other services associated with the use of the online offer and related services. to using the Internet. In this case, usage profiles of pseudonymised users can be created from the processed data.
We only use Google Analytics with activated IP anonymization. This means that the IP address of the users is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there.
The IP address transmitted by the browser of the data subject is not merged with other Google data. Users can prevent the storage of cookies by setting their browser software accordingly. Furthermore, the data subject can prevent the collection of the information generated by the cookie by downloading and installing the browser plug-ins available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de. If the data subject visits our website using a mobile device, he or she can deactivate Google Analytics by clicking on this link.
The legal basis for the use of this service is Art. 6, paragraph 1, first sentence, lett. f of the GDPR and serves to protect our legitimate interest in the analysis of user behavior on our website and thus in the possible design of the website according to user needs.
Google is certified under the Privacy Shield Agreement and therefore ensures compliance with European Data Protection Law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
14. Linked Services and Third Party Content
We use services and content offered by third-party providers on our website (hereinafter referred to as "content"). For such a connection, processing of the user's IP address is technically necessary in order for the contents to be sent to your browser. Your IP address is therefore passed on to the third-party providers.
This data processing takes place to protect our legitimate interests in the optimization and economic operation of our website and is based on the legal basis of Art. 6, paragraph 1, first sentence f of the GDPR.
The Java programming language is regularly used for linking content. The user can notify his opposition to the processing of data by deactivating the execution of Java in his browser.
We have integrated the following content from third-party providers on our website:
"Google-Maps" for viewing geographical maps;
"Google Translate", which allows texts on our website to be translated into another language.
Google is certified under the Privacy Shield Agreement and therefore ensures compliance with European Data Protection Law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
15. Rights of the interested party
With regard to the processing of your personal data during your visit to our website, you, as an "interested party" can, in particular, exercise the following rights:
pursuant to the article 15 of the GDPR and § 34 of the BDSG, the data subject has the right to request information regarding the methods and possibly to what extent we process or not the sensitive data relating to his person;
pursuant to the provisions of article 16 of the GDPR, the interested party has the right to request the rectification of their personal data;
pursuant to the provisions of article 17 of the GDPR and § 35 of the BDSG, the interested party has the right to request the deletion of his personal data;
pursuant to the provisions of article 18 of the GDPR, the interested party has the right to limit the processing of their personal data;
pursuant to the provisions of article 20 of the GDPR, the interested party has the right to receive the personal data made available by him, in a structured format, commonly used and readable by an automatic device and to obtain its transfer without obstacles to a other holder.
16. Right to object
Pursuant to the provisions of art. 21 of the RGPD, the interested party has the right to present an opposition against any treatment, based on the legal basis of the art. 6, paragraph 1, first sentence, lett. and or lit. f GDPR.
17. Data Protection Officer
Our data protection officer can be contacted at the following email address: lesleysho@gmail.com
18. Complaints to the personal data protection supervisory authority
If the interested party believes that the processing of his personal data violates the provisions of the GDPR Regulation, pursuant to art. 77 of the GDPR, you have the right to lodge a complaint with the competent supervisory authority.
Update: 05/2020