Illia
Mstibovskyi
Privacy Policy
We attach great importance to the protection of information.
The collection and processing of your personal data is carried out in accordance with applicable data protection regulations, in particular the General Data Protection Regulation (GDPR) adopted in the European Union.
1. Responsible person
The person responsible for the collection, processing and use of your personal data within the meaning of paragraph 7 of Article 4 GDPR is:
Illia Mstibovskyi
Schlierbacher Landstr.15
69118 Heidelberg
Germany
Tel:
+491779174378
Email:illia.mstibovskyi@gmail.com
If you have any objections to the collection, processing or use of your data by us in accordance with this privacy policy in general or in relation to its individual provisions, you can direct your objections to the person responsible.
You can save and print this privacy policy at any time.
2. General purposes of data processing
We use personal data to operate the website and to the extent necessary to fulfill the contract.
3. What data do we use and why
3.1 Hosting
The hosting service we use is used to provide the following services: infrastructure and platform services, storage space, storage and database services, security and maintenance services that we use to operate the site. In doing so, we or our hosting provider process inventory data, contact data, content data, contract data, site usage data, meta and communication data of customers, interested parties and visitors on this website, based on our legitimate interest in the effective and the secure provision of our website to users in accordance with paragraph 1f of Article 6 GDPR in conjunction with Article 28 GDPR.
3.2 Access data
When you use this site, we collect information about you. We automatically collect information about your user behavior and your interactions with us, as well as log information about your computer or mobile device. We collect, store and use data about each visit to our website (so-called server log files). The access data includes: Name and URL of the requested file Date and time of the search Amount of data transferred Successful fetch message (HTTP response code) Browser type and browser version Operating system Referrer URL (i.e. the page from which the user arrived at the site) Web - sites accessed by the user's system through our website User's Internet Service Provider IP address and requesting provider We use log data, without identifying you personally and without creating any profile, for statistical evaluations for management purposes, security and optimization of our website, as well as to anonymously record the number of visitors to our website (traffic), as well as the extent and nature of the use of our website and services, as well as for financial reporting, to measure the number of clicks on links made by partners for cooperation. Based on this information, we can provide location-based, personalized content, analyze traffic, fix errors, and improve our services. This also contains our legitimate interest in accordance with paragraph 1f of Article 6 GDPR. We reserve the right to analyze log data retrospectively if, based on concrete evidence, there is a reasonable suspicion of illegal use of the site. We store IP addresses in log files for a limited time if it is necessary for security purposes or for the provision of services or billing for a service, for example, if you use one of our commercial offers. Upon completion of the order process or upon receipt of payment, we delete the IP address if it is no longer required for security purposes. We also store IP addresses in cases where we have a specific suspicion of illegal acts in connection with the use of our website. In addition, as part of your account, we store the date of your last visit (for example, when registering, logging in, following links, etc.).
3.3 Information files (cookies)
To optimize our website, we use so-called session cookies. Session cookies are small text files that are sent from respective servers when you visit a website and are temporarily stored on your hard drive. These cookies contain a so-called session ID, with which different requests from your browser can be linked to a common session. This will allow your computer to be recognized when you re-enter our website. These cookies are deleted after you close your browser. With their help, you can, for example, use the shopping cart function by visiting several pages. We also use a small amount of persistent cookies (also small text files stored on your device) that remain on your device and allow us to recognize your browser the next time you visit. These cookies are stored on your hard drive and are deleted after a given time. Their shelf life is from 1 month to 10 years. With the help of cookies, we can present our offer to you in a more convenient, efficient and secure way, for example by showing you information on the page that is relevant to your interests. Our legitimate interest in using cookies in accordance with Article 6, paragraph 1f GDPR, is to make our website more user-friendly, efficient and secure. The following data and information are stored in cookies: User name information Language settings Entered search terms Information about the number of visits to our website and the use of individual functions of our website. When a cookie is activated, it is assigned an identification number without any link to your personal data. Your name, surname, IP address or similar data that could be used to establish a link between you and the cookies are not included in the cookie. With the help of cookie technology, we receive only pseudonymized data, such as which pages of our store you visited, which products you were interested in, etc. You can set your browser in such a way that you will be notified in advance of the upcoming placement of cookies on your device and decide on a case-by-case basis whether to exclude cookies in certain cases or in general, or to completely block the service of cookies. As a result of such actions, the functionality of the website may be limited.
3.4. Data required to fulfill our contractual obligations
We process personal data that we need to fulfill our contractual obligations, such as name, surname, address, e-mail address, products ordered, payment details. The collection of this data is necessary for the conclusion of the contract. This data will be deleted after the warranty periods and statutory retention periods have expired. Any data associated with a user account (see below) will in any case be retained for the duration of that account. The legal basis for the processing of this data is Art. 6(1b) GDPR, insofar as this data is necessary for us to fulfill our contractual obligations to you.
3.5 User account
You can create a user account on our website. If you wish to do so, we will need your personal data, which will be requested during registration. Subsequently, all you need to log in to the system is your email address or username and password of your choice. When registering a new user, we collect basic data (eg first name, surname, address), contact data (eg email address) and payment (banking) details, as well as access data (user name and password). In order to ensure proper registration and prevent unauthorized registration by third parties, after registration you will be sent an activation link by e-mail, with which you can activate your account. Only after the registration is completed, we will permanently store the data you have submitted in our system. At your direction, we may terminate your account at any time at no cost other than the data transfer fee in accordance with the base rates. To do this, it is enough to send a text message to the postal details specified in paragraph 1 (for example, by e-mail, fax, letter). We will then delete your personal data that we have stored, unless we need to retain it to process orders or due to legal retention requirements. The legal basis for the processing of this data is your consent in accordance with paragraph 1a of Article 6 GDPR.
3.6 Email communication
When you contact us (for example, via a contact form or by e-mail), we use your data to process your request and if you have further questions. If the data processing is carried out for the performance of pre-contractual activities carried out at your request, or - if you are already our customer - for the performance of a contract, the legal basis for such data processing is Art. 6 para. 1b GDPR. We process additional personal data only if you consent to this (Article 6 point 1a GDPR) or if we have a legitimate interest in processing your data (Article 6 point 1f GDPR). The legitimate interest lies, for example, in responding to your e-mails.
3.7 Third party services:
We use third party services on our websites: google ads www.googleadservices.com, facebook.net google
Where the following information about the user can be obtained: Browser Website visited by the user User's operating system, User's screen resolution User's IP address Browser language settings Cursor position and mouse clicks
4. Google Analytics
We use Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses so-called cookies, which are text files that are stored on your computer and that enable an analysis of your use of our website. The information generated by the cookie about the use of this website by visitors to its pages is usually transferred to a Google server in the USA and stored there. This also contains our legitimate interest pursuant to paragraph 1f of Article 6 GDPR. Google is subject to the European Union-US Privacy Shield and has been certified. Google therefore undertakes to comply with the standards and provisions of European data protection law.
As a result, your IP address will be truncated by Google while still within member states of the European Union or in other signatory countries to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there. Google will use this information on our behalf to evaluate your use of the website, compile reports on website activity, and provide us with other services related to website activity and internet usage. The IP address transmitted from your browser to Google Analytics will not be merged with other Google data. You can prevent the storage of cookies by making the appropriate settings on your browser software; however, please note that if you do so, you may not be able to use the full functionality of this website to the fullest extent possible. In addition, you can prevent the transmission of the data generated by the cookie related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in from the following link: http ://tools.google.com/dlpage/gaoptout?hl=de. As an alternative to the browser plug-in or settings within the browser on mobile devices, you can click on the following link to set the "Opt-Out-cookie" feature to prevent Google Analytics from collecting data on this site in future (this opt-out cookie only works in this browser and only for this domain. After deleting the cookies in your browser, you must click on this link again): [deactivate Google Analytics]
5. Duration of data storage
Unless otherwise agreed, we only store personal data for as long as it is necessary to fulfill our purposes. In some cases, for example in the field of tax or commercial law, the law provides for longer storage of personal data. In these cases, the data will only be stored by us for these legal purposes, but will not be processed in any other way and will be deleted after the statutory retention period has expired.
6. Your rights as a subject of personal data processing
Under applicable law, you have various rights regarding your personal information. If you would like to assert these rights, please send your request, with your exact identification, by e-mail or by post to the address indicated in section 1.
Below is a list of your rights.
6.1 Right to confirmation and reference information
You have the right to receive clear reference information about the processing of your personal data. In particular: You have the right to obtain confirmation from us at any time whether your personal data is being processed. If so, you have the right to ask us for free information about your personal data stored together with a copy of this data. In addition, you have the right to the following information: the purposes of data processing; categories of processed personal data; recipients or categories of recipients to whom personal data has already been or will be disclosed, in particular recipients in third countries or international organisations; if possible, the planned duration of the storage of personal data or, if this is not possible, the criteria for determining this duration; the existence of the right to correct or delete your personal data or the restriction of processing by the person responsible or the right to object to such processing; the right to appeal to the supervisory authority; if the personal information was not obtained from you, then all available information about the source of the data; whether an automated decision-making process, including profiling, is applied in accordance with paragraphs 1 and 4 of Article 22 GDPR and, at least in these cases, meaningful information about the logic involved, as well as the consequences and desired results of such processing for you . If personal data is transferred to a third country or to an international organisation, you have the right to be informed about the relevant safeguards pursuant to Art. 46 GDPR in connection with the transfer.
6.2 Right to rectification
You have the right to request that we correct and, if necessary, complete your personal data. In particular: You have the right to demand the immediate correction of incorrect personal data concerning you. Taking into account the purposes of the processing, you have the right to demand that incomplete personal data be completed, including by means of a supplementary statement.
6.3 Right to erasure
In some cases, we are required to delete your personal information. In particular: Pursuant to paragraph 1 of Article 17 of the GDPR, you have the right to demand that we delete your personal data immediately, and we are obliged to immediately delete your personal data if there is one of the following reasons: Personal data is no longer needed for the purposes for which they are have been collected or otherwise processed. You withdraw your consent, on the basis of which the processing was carried out in accordance with paragraph 1a of Article 6 GDPR or paragraph 2a of Article 9 GDPR, and there is no other legal basis for processing. In accordance with paragraph 1 of Article 21 GDPR, you object to processing and there are no overriding legitimate reasons for processing, or you object to processing in accordance with paragraph 2 of Article 21 GDPR. Personal data was processed unlawfully. The deletion of personal data is required to comply with a legal obligation under European Union law or national law in which we have jurisdiction. Personal data was collected in connection with the provision of services for information companies in accordance with paragraph 1 of Article 8, GDPR. If we make personal data publicly available and are required to delete them in accordance with paragraph 1 of Article 17 of the GDPR, we will take appropriate measures, including technical ones, taking into account available technologies and implementation costs, in order to inform the persons responsible for processing personal data that you have requested that all references to that personal information or copies or replications of that personal information be removed.
6.4 Right to limited processing
In some cases, you may request that we restrict the processing of your personal information. In particular: You have the right to demand from us restrictions on processing if one of the following conditions is met: the accuracy of your personal information is disputed by you, for a period of time allowing us to verify the accuracy of your personal information, the processing is unlawful, but you objected to the deletion of personal data , and instead demanded to limit the use of personal data; we no longer need your personal data for the purposes of the processing, but you need the data to establish, exercise or defend your legal claims or you have objected to the processing in accordance with paragraph 1 of Article 21 GDPR for a period until it is established that the legal basis of our company outweigh your legal grounds.
6.5 Right to data portability You have the right to receive, transfer or allow us to transfer any personal data relating to you in a machine-readable form. In particular: You have the right to receive the personal information you have provided to us in a structured, standard and machine-readable format and have the right to transfer this information freely to another responsible person, provided that: the processing is based on consent in accordance with paragraph 1a Article 6 GDPR or point 2a Article 9 GDPR, or on the basis of a contract in accordance with point 1b Article 6 GDPR, and the processing is carried out using automated procedures. By exercising your right to data portability in accordance with paragraph 1, you have the right to have personal data transferred by us directly to another person responsible, as far as technically possible.
6.6 Right to protest
You have the right to object to the lawful processing of your personal data by us if it depends on your particular situation and if our interests in the processing are not overridden. In particular: You have the right to object at any time to the processing of your personal data carried out in accordance with paragraph 1e or 1f of Article 6 GDPR, for reasons arising from your particular situation; this also applies to profiling based on these provisions. We stop processing personal information unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or the processing is for the purposes of establishing, exercising or defending legal claims. If personal data is processed by us for the purpose of direct advertising, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct advertising. You have the right to object to the processing of your personal data for scientific or historical research or statistical purposes, carried out in accordance with paragraph 1 of Article 89, GDPR, for reasons related to your particular situation, unless this processing is necessary for the performance of tasks associated with the public interest.
6.7 Automated decision making, including profiling
You have the right not to be subject to decisions based solely on automated processing, including profiling, which will have legal effect against you or similarly cause you significant harm. There is no automated decision-making based on the collected personal data. 6.8 Right to withdraw consent to the processing of personal data You have the right to withdraw your consent to the processing of personal data at any time. 6.9 Right to lodge a complaint with a supervisory authority You have the right to lodge a complaint with a supervisory authority, in particular in the Member State, your place of residence, your place of work or the place of the alleged infringement, if you consider that the processing of your personal data is illegal.
7. Data security
We make every effort to ensure the security of your data within the limits of applicable data protection laws and our technical capabilities. Your personal data will be transmitted in encrypted form. This applies to your orders as well as your customer login. We use the SSL (Secure Socket Layer) encryption system, but please note that data transmission over the Internet (for example, when communicating by e-mail) may be vulnerable in terms of security. Complete protection of data from access by third parties is not possible. To protect your data, we maintain technical and organizational security measures in accordance with Article 32 GDPR, which we always adapt to the latest technologies. We also do not guarantee that our offer will remain available during certain periods of time: interference, interruptions or failures cannot be ruled out. The servers we use are regularly backed up.
8. Disclosure of data to third parties, no transfer of data to foreign countries outside the EU
We only use your personal data primarily within our company. In cases where third parties are involved in the performance of contracts (for example, logistics service providers), they will only receive personal data to the extent necessary for the provision of the relevant service. In the event that we outsource some parts of the data processing to contractors (“order processing”), we oblige the contractors to use personal data only in accordance with the requirements of data protection law and to protect the rights of the data subject. The transfer of data to agencies or persons outside the EU, with the exception of the case referred to in point 4, does not take place and is not planned.