Data protection
Responsible in terms of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:
Edelhoff Kreativkaufhaus GmbH & Co KG
Rudolf-Seiffert-Str. 3
10369 Berlin
Telefon: +49 30 994 990 61
E-Mail: info@edelhoff-kreativkaufhaus.de
Your rights as a data subject
You can exercise the following rights at any time using the contact details provided by our data protection officer:
Information about your data stored by us and their processing (Art. 15 GDPR), Correction of incorrect personal data (Art. 16 GDPR), Deletion of your data stored by us (Art. 17 GDPR), Restriction of data processing if we are not yet allowed to delete your data due to legal obligations (Art. 18 GDPR), Objection to the processing of your data by us (Art. 21 GDPR) and Data portability if you have consented to data processing or have concluded a contract with us (Art. 20 GDPR).
If you have given us your consent, you can revoke it at any time with future effect.
You can contact a supervisory authority at any time with a complaint, e.g. B. to the responsible supervisory authority of the state of your residence or to the authority responsible for us as the responsible body.
A list of the supervisory authorities (for the non-public area) with address can befound at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Collection of general information when visiting our websiteType and purpose of processing:
If you access our website, i.e. if you do not register or otherwise provide information, information of a general nature is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your Internet service provider, your IP address and the like.
They are processed in particular for the following purposes:
Ensuring a problem-free connection to the website, Ensuring smooth use of our website, Evaluation of system security and stability as well for further administrative purposes.
We do not use your data to draw conclusions about you personally. Information of this type may be statistically evaluated by us in order to optimize our website andthe technology behind it.
Legal basis:
Processing takes place in accordance with Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website.
Receiver:
The recipients of the data may be technical service providers who act as processorsfor the operation and maintenance of our website.
Storage period:
The data will be deleted as soon as it is no longer required for the purpose of thecollection. This is generally the case for the data used to provide the website when the respective session has ended.
Provision required or required:
The provision of the aforementioned personal data is neither legally nor contractually required. Without the IP address, however, the service and functionality of our website is not guaranteed. In addition, individual services and services may not be available or restricted. For this reason, an objection is excluded.
Newsletter
Type and purpose of processing:
Your data will only be used to send you the subscribed newsletter by email. Your name is given so that you can address you personally in the newsletter and, if necessary, identify it if you want to exercise your rights as a data subject.
To receive the newsletter, it is sufficient to enter your email address. When you register to receive our newsletter, the data you provide will only be used for thispurpose. Subscribers can also be informed via email about circumstances that are relevant to the service or registration (e.g. changes to the newsletter offer or technical conditions).
For an effective registration, we need a valid email address. In order to check that a registration is actually made by the owner of an e-mail address, we use the “double opt-in” procedure. For this purpose, we log the order of the newsletter, the sending of a confirmation email and the receipt of the response requested. Further data is not collected. The data will only be used for sending the newsletter and will not be passed on to third parties.
Legal basis:
On the basis of your expressly granted consent (Art. 6 Para. 1 lit. a GDPR), we will regularly send you our newsletter or comparable information by email to your specified email address.
You can revoke your consent to the storage of your personal data and their use for sending the newsletter at any time with future effect. There is a corresponding link in every newsletter. You can also unsubscribe directly from this website at any time or inform us of your revocation using the contact option at the end of this data protection notice.
Receiver:
The recipients of the data may be processors.If you would like to receive the newsletter offered on the website, we need an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter.
We use the so-called double opt-in procedure to ensure that the newsletter is sent out in an agreed manner. In the course of this, the potential recipient can be included in a distribution list. The user then receives a confirmation email to confirm the registration in a legally secure manner. The address is only actively included in the distribution list if the confirmation is given.
We only use this data to send the requested information and offers.
Newsletter2Go is used as newsletter software. Your data will be transmitted to Newsletter2Go GmbH. Newsletter2Go is prohibited from selling your data and using itfor purposes other than sending newsletters. Newsletter2Go is a German, certified provider, which was selected according to the requirements of the General Data Protection Regulation and the Federal Data Protection Act.
You can find more information here: https://www.newsletter2go.de/informationen-newsletter-empfaenger/
You can revoke your consent to the storage of the data, the email address and its use for sending the newsletter at any time, for example via the “unsubscribe” link in the newsletter.
The data protection measures are always subject to technical updates, for this reason we ask you to inform yourself about our data protection measures at regular intervals by inspecting our data protection declaration.
Storage period:
In this context, the data will only be processed as long as the corresponding consent is available. Then they will be deleted.
Provision required or required:
The provision of your personal data is voluntary, solely on the basis of your consent. Unfortunately, we cannot send you our newsletter without existing consent.
Contact Form
Type and purpose of processing:
The data you have entered will be stored for the purpose of individual communication with you. To do this, you must provide a valid email address and yourname. This is used to assign the request and then answer it. The specification of further data is optional.
Legal basis:
The data entered in the contact form is processed on the basis of a legitimate interest (Article 6 (1) (f) GDPR).
By providing the contact form, we would like to make it easy for you to contact us.The information you provide will be stored for the purpose of processing the request and for possible follow-up questions.
If you contact us to request an offer, the data entered in the contact form will beprocessed to carry out pre-contractual measures (Art. 6 Para. 1 b GDPR).
Receiver:
The recipients of the data may be processors.
Storage period:
Data will be deleted no later than 6 months after processing the request.If there is a contractual relationship, we are subject to the statutory retention periods according to HGB and delete your data after these periods.Provision required or required:
The provision of your personal data is voluntary. However, we can only process yourrequest if you provide us with your name, your email address and the reason for therequest.
Embedded YouTube videos
Type and purpose of processing:
We embed YouTube videos on some of our websites. The operator of the corresponding plugins is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (hereinafter “YouTube”). When you visit a page with the YouTube plugin, a connection to YouTube servers is established. YouTube is informed which pages you visit. If you are logged into your YouTube account, YouTube can assign your surfing behavior to you personally. You can prevent this by logging out of your YouTube account beforehand.
If a YouTube video is started, the provider uses cookies that collect information about user behavior.
For more information on the purpose and scope of data collection and processing by YouTube, please refer to the provider’s data protection declaration, where you willalso find further information on your rights and setting options to protect your privacy (https://policies.google.com/privacy) . Google processes your data in the USA and has submitted to the EU-US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.
Legal basis:
The legal basis for the integration of YouTube and the associated data transfer to Google is your consent (Art. 6 Para. 1 lit. a GDPR).Receiver:Calling YouTube automatically triggers a connection to Google.
Duration of storage and withdrawal of consent:
If you have deactivated the storage of cookies for the Google ad program, you will not have to expect such cookies when watching YouTube videos. YouTube also stores non-personal usage information in other cookies. If you want to prevent this, you must block the storage of cookies in the browser.Further information on data protection at “YouTube” can be found in the provider’s data protection declaration at: https://www.google.de/intl/de/policies/privacy/
Third country transfer:
Google processes your data in the USA and has submitted to the EU_US Privacy Shieldhttps://www.privacyshield.gov/EU-US-Framework.
Provision required or required:
The provision of your personal data is voluntary, solely on the basis of your consent. If you prevent access, this may result in functional restrictions on the website.
SSL encryption
To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) via HTTPS.
Processors used
The following organizations, companies and individuals have been commissioned by the operator of this website to process data:
Newsletter2Go GmbH
Koepenicker Str. 126
10179 Berlin
Changes to our privacy policy:
We reserve the right to adapt this data protection declaration so that it always corresponds to the current legal requirements or to implement changes to our services in the data protection declaration, e.g. when introducing new services. The new data protection declaration then applies to your next visit.Questions to the data protection officerIf you have any questions about data protection, please send us an email or contactthe person responsible for data protection in our organization directly:max.sachs@edelhoff-kreativkaufhaus.de
The data protection declaration was created with the help of activeMind AG, the experts for external data protection officers (version # 2019-04-10).
