Data protection | artlia - Online Art Galeria

You have the right to receive information free of charge at any time about the origin, recipient and purpose of your stored personal data. You also have the right to request the correction, blocking or deletion of this data. You can contact us at any time at the address given in the imprint for this purpose and for further questions on the subject of data protection. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

Analysis tools and third-party tools

When you visit our website, your surfing behaviour may be statistically analysed. This is done primarily with cookies and with so-called analysis programs. The analysis of your surfing behaviour is usually anonymous; the surfing behaviour cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. You will find detailed information on this in the following data protection declaration.

You can object to this analysis. We will inform you about the possibilities of objection in this data protection declaration.

2. General notes and mandatory information

Data protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations as well as this data protection declaration.

When you use this website, various personal data are collected. Personal data is data by which you can be personally identified. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

We would like to point out that data transmission on the Internet (e.g. when communicating by e-mail) can have security gaps. Complete protection of data against access by third parties is not possible.

We would like to point out that data transmission via the Internet (e.g. communication by e-mail) can have security gaps.

Note on the responsible body

The responsible party for the collection and processing of personal data is:

Am Planetarium 38
07743 Jena
Phone: +49 (0)170 114 7613
Email: support@artlia.de

You can reach our data protection officer at datenschutz@artlia.de

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, e-mail addresses or similar).

Revoking your consent to data processing

Many data processing operations are only possible with your explicit consent. You can revoke consent you have already given at any time. For this purpose, an informal communication by e-mail to us is sufficient. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible.

SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Information, blocking, deletion

You have the right, within the framework of the applicable legal provisions, to obtain information free of charge at any time about your stored personal data, its origin and recipients and the purpose of the data processing and, if applicable, the right to correct, block or delete this data. For this purpose, as well as for further questions on the subject of personal data, you can contact us at any time at the address given in the imprint.

3. Data collection on our website

Cookies

Some of the Internet pages use so-called cookies. Cookies do not cause any damage to your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so-called "session cookies". They are automatically deleted after the end of your visit. Other cookies remain stored on your terminal device until you delete them. These cookies enable us to recognise your browser the next time you visit.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or generally and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be limited.

Cookies that are required to carry out the electronic communication process or to provide certain functions you have requested (e.g. shopping cart function) are stored on the basis of Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in storing cookies for the technically error-free and optimised provision of its services. Insofar as other cookies (e.g. cookies to analyse your surfing behaviour) are stored, these are dealt with separately in this privacy policy.

Server log files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

• Browser type and browser version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Time of the server request
• IP address

This data is not merged with other data sources.

The basis for data processing is Art. 6 para. 1 lit. f DSGVO, which permits the processing of data for the performance of a contract or pre-contractual measures.

Contact form

If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you have provided there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. We do not pass on this data without your consent.

The processing of the data entered in the contact form is thus exclusively based on your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke this consent at any time. For this purpose, an informal communication by e-mail to us is sufficient. The lawfulness of the data processing operations carried out until the revocation remains unaffected by the revocation.

The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies (e.g. after we have completed processing your enquiry). Mandatory legal provisions - in particular retention periods - remain unaffected.

Rating reminder by Trusted Shops

If you have given us your express consent to do so during or after your order by activating a corresponding checkbox or clicking a button provided for this purpose, we will transmit your e-mail address to Trusted Shops GmbH, Subbelrather Str. 15c, 50823 Cologne (www.trustedshops.de) for the purpose of reminding you by e-mail of the opportunity to submit a rating of your order. This consent can be revoked at any time by sending a message to the contact option described below or directly to Trusted Shops.

Duration of data storage

We store your data only as long as this is necessary for the complete fulfilment of the stated purpose. If there is a legal obligation to retain data, we will store the data until the end of the applicable period.

Receivables management

We reserve the right to have the collection of receivables carried out by service providers who collect them as so-called order processors. We also have a legitimate interest in selling receivables to third parties and in this context to provide the respective buyer of the receivable with the data required for the collection of the receivable. When collecting receivables, buyers of receivables act in their own name and process the transmitted data on their own responsibility. In this respect, the data protection provisions of the respective buyer of receivables shall apply.

Application

The data controller collects and processes the personal data of applicants for the purpose of handling the application procedure. The processing may also be carried out by electronic means. This is in particular the case when an applicant submits relevant application documents to the controller by electronic means, for example by e-mail. If the controller concludes an employment contract with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If the controller does not conclude an employment contract with the applicant, the application documents are automatically deleted six months after the notification of the rejection decision, provided that no other legitimate interests of the controller conflict with such deletion. Other legitimate interest in this sense is, for example, a duty to provide evidence in proceedings under the General Equal Treatment Act (AGG).

Requesting information folders, postage paid envelopes and catalogues by post

We collect address data (legal basis: Art. 6 (1) (a) DS-GVO) in order to send you the material you have requested (information folders, postage paid envelopes, catalogues) by post. The address data is required to carry out the mailing and for a friendly personalised approach. The provision of the e-mail address is voluntary.

In addition, we use your data for direct advertising - i.e. to send you information about our products, services and promotions by post (legal basis: Art. 6 (1) (f) DS-GVO) in order to win you as a customer for this purpose (information pursuant to Art. 13 (1) (d) DS-GVO).

You can object to the use of your data for advertising purposes at any time using the contact details provided. 

Registration in the online shop

In addition, we use your data for direct advertising - i.e. to send you information about our products, services and promotions (legal basis: Art. 6 (1) (f) DS-GVO) in order to win you as a customer for this purpose (information according to Art. 13 (1) (d) DS-GVO). You can object to the use of your data for the purpose of advertising at any time, for example, using the contact details above.

Your registration details will be processed by us as long as you do not request their deletion, unless contractual or legal reasons for storage prevent this.

Use of website

When our website is called up, our web server records the domain name or the IP address of your computer, the file name and the URL that was requested, as well as the http response code and, if applicable, the URL referring to our website (legal basis: Art. 6 (1) (b) DS-GVO). This procedure is common for technical reasons and is necessary to enable the use of our website. We are supported in this by our technical service providers, which we use as processors. The above-mentioned data is logged and used for the purpose of defending against unlawful use or attempted attacks on our web server (legal basis: Art. 6 (1) (f) DS-GVO). This data is not used to create user profiles. A combination of this data with other data sources does not take place. However, we reserve the right to statistically evaluate anonymised data records. The data will be deleted after 6 months.

Shipping service provider

We transmit the data required for delivery to the respective shipping service provider (legal basis: Art. 6 (1) (b) DS-GVO). Without transmitting data to them, delivery of your ordered goods is not possible.

If the delivery is made by DHL, we will pass on your e-mail address to DHL (legal basis: Art. 6 (1) (f) DS-GVO) in order to give you the opportunity, in addition to tracking the shipment, to influence the time and place of delivery of your package even if it is already on its way to you. We do this in the interest of offering you the usual market convenience in order processing and thus maintaining our competitiveness. (Information pursuant to Art. 13 (1) (d) DS-GVO) You can object to the use of your e-mail for the purpose of delivery of parcel notification information by DHL at any time, for example by clicking on the unsubscribe link at the end of the e-mail or by informing us at the above contact details that you wish to unsubscribe

Use of email address

If you provide us with your email address, we will use it for communication in the context of contract performance (Art.6 para.1 lit. b DS-GVO). We will only use your e-mail address for advertising purposes without your consent if we have received it in the context of a purchase, and then in accordance with § 7 (3) UWG and on the basis of Art.6 para.1 lit. f DS-GVO with the interest of informing you about offers that are attractive to you and to win you over as a customer for this or in order to receive information about your buying experience with us (Art.6 para.1 lit. f DS-GVO) with the interest of making our offers even more attractive to you in the future.

If the delivery is made by DHL, we also pass on your e-mail address to DHL (Art.6 para.1 lit. f DS-GVO) in order to give you the opportunity to influence the time and place of delivery of your parcel even if it is already on its way to you. We do this out of an interest in providing you with the usual market convenience in order processing and thus maintaining our competitiveness.

Email use

4. Analytics tools and advertising

Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses so-called "cookies". These are text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there.

The storage of cookies by Google Analytics is not permitted.

The storage of Google Analytics cookies is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its web offering and its advertising.

The storage of Google Analytics cookies is based on Art. 6 para. 1 lit. f DSGVO.

IP anonymisation

We have activated the IP anonymisation function on this website. This means that your IP address will be shortened by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with any other data held by Google.

Browser Plugin

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. Furthermore, you can prevent the collection of the data generated by the cookie and related to your use of the website (incl. your IP address) by Google as well as the processing of this data by Google by downloading and installing the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

Objection to data collection

You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie will be set which will prevent the collection of your data on future visits to this website: Disable Google Analytics.

For more information on how Google Analytics handles user data, please see Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

Commissioned data processing

We have concluded an order data processing contract with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

5. Newsletter

Newsletter data

If you would like to receive the newsletter offered on the website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. No further data is collected or only on a voluntary basis. We use this data exclusively for sending the requested information and do not pass it on to third parties.

The processing of the data entered in the newsletter registration form is based exclusively on your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke your consent to the storage of the data, the e-mail address and their use for sending the newsletter at any time, for example via the "unsubscribe" link in the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.

The data you provide us with for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted after you unsubscribe from the newsletter. Data stored by us for other purposes (e.g. email addresses for the members' area) remain unaffected by this.

6. Plugins and tools

Youtube

Our website uses plugins from YouTube, a site operated by Google. The operator of the pages is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA.

When you visit one of our pages equipped with a YouTube plugin, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited.

If you click on the YouTube plugin in your browser, the YouTube server will be informed.

If you are logged into your YouTube account, you enable YouTube to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.

The use of YouTube is not permitted.

The use of YouTube is in the interest of an appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 Para. 1 lit. f DSGVO.

The use of YouTube is in the interest of an appealing presentation of our online offers.

For more information on the handling of user data, please see YouTube's privacy policy at: https://www.google.de/intl/de/policies/privacy.

Use of social plugins

of Facebook, Twitter, Google+, Instagram using the Shariff solution

Social plugins ("plugins") from social networks are used on our website. In order to increase the protection of your data when visiting our website, the plugins are not integrated into the page without restrictions, but only using an HTML link (so-called "Shariff solution" by c't). This integration ensures that when you call up a page of our website that contains such plugins, no connection is yet established with the servers of the provider of the respective social network. If you click on one of the buttons, a new window of your browser opens and calls up the page of the respective service provider, on which you can (if necessary after entering your login data) e.g. click on the Like or Share button. The purpose and scope of the data collection and the further processing and use of the data by the providers on their pages, as well as your rights in this regard and setting options for protecting your privacy, can be found in the providers' data protection notices.

http://www.facebook.com/policy.php
https://twitter.com/privacy
http://www.google.com/intl/de/+/policy/+1button.html
https://help.instagram.com/155833707900388

Google Web Fonts

This site uses so-called web fonts provided by Google for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly.

For this purpose, the browser you use must connect to Google's servers. This informs Google that our website has been accessed via your IP address. Google Web Fonts are used in the interest of a uniform and appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 (1) lit. f DSGVO.

If your browser does not support web fonts, a standard font from your computer will be used.

For more information on Google Web Fonts, see https://developers.google.com/fonts/faq and Google's privacy policy: https://www.google.com/policies/privacy/.

Google Maps

This site uses the mapping service Google Maps via an API. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer.

The use of Google Maps is in the interest of an appealing presentation of our online offers and an easy location of the places indicated by us on the website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO.

More information on the handling of user data can be found in Google's privacy policy: https://www.google.de/intl/de/policies/privacy/.

7. Payment providers

Paypal

On our website we offer, among other things, payment via PayPal. The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). If you select payment via PayPal, the payment data you enter will be transmitted to PayPal. The transmission of your data to PayPal is based on Art. 6 para. 1 lit. a DSGVO (consent) and Art. 6 para. 1 lit. b DSGVO (processing for the performance of a contract). You have the option to revoke your consent to data processing at any time. A revocation does not affect the validity of past data processing operations.

Instant bank transfer

On our website we offer, among other things, payment by "Sofortüberweisung". The provider of this payment service is Sofort GmbH, Theresienhöhe 12, 80339 Munich (hereinafter "Sofort GmbH"). With the help of the "Sofortüberweisung" procedure, we receive a payment confirmation from Sofort GmbH in real time and can immediately begin to fulfil our obligations. If you have chosen the payment method "Sofortüberweisung", you transmit the PIN and a valid TAN to Sofort GmbH, which can then log into your online banking account. After logging in, Sofort GmbH automatically checks your account balance and carries out the transfer to us using the TAN you have transmitted. It then immediately sends us a transaction confirmation. After logging in, it also automatically checks your turnover, the credit line of the overdraft facility and the existence of other accounts and their balances. In addition to the PIN and the TAN, the payment data you have entered as well as your personal data are transmitted to Sofort GmbH. Your personal data includes your first and last name, address, telephone number(s), email address, IP address and, if applicable, other data required for payment processing. The transmission of this data is necessary to establish your identity beyond doubt and to prevent fraud attempts. The transmission of your data to Sofort GmbH is based on Art. 6 para. 1 lit. a DSGVO (consent) and Art. 6 para. 1 lit. b DSGVO (processing for the performance of a contract). You have the option to revoke your consent to data processing at any time. A revocation does not affect the validity of past data processing operations. For details on paying with Sofortüberweisung, please refer to the following links: https://www.sofort.de/datenschutz.html and https://www.klarna.com/sofort/.

Stripe

On our website we offer, among other things, payment via Stripe. The provider of this payment service is Stripe, Lukmann Consulting GmbH Packerstraße 183, 8561 Söding Austria (hereinafter "Stripe"). If you select payment via credit card, the payment data you enter will be transmitted to Stripe. The transmission of your data to Stripe is based on Art. 6 (1) a DSGVO (consent) and Art. 6 (1) b DSGVO (processing for the performance of a contract). You have the option to revoke your consent to data processing at any time. A revocation does not affect the validity of data processing operations that took place in the past.

Amazon Pay

When using the payment method "Amazon Payments", the payment is processed via the payment service provider Amazon Payments Europe s.c.a., 5 Rue Plaetis, L-2338 Luxembourg (hereinafter: "Amazon"), subject to the Amazon Payments Europe User Agreement, which can be viewed at https://payments.amazon.de/help/201751590. If the customer selects "Amazon Payments" as the payment method during the ordering process, he also issues a payment order to Amazon by clicking the button that concludes the ordering process. In this case, the seller already declares acceptance of the customer's offer at the time when the customer triggers the payment process by clicking the button that concludes the ordering process.