Privacy notice

The protection of your data is very important to us. With this privacy notice, we inform you about the nature, scope and purpose of the processing of your personal data (in short “data”) on our website sharokina.com and on our social media presences.

Definitions of terms

The following definitions are based on the definitions of Art. 4 of the General Data Protection Regulation (GDPR).
 
“Personal data” means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
 
“Controller” means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.
 
“Processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
 
“Consent” of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;

1. Controller

Responsible for the data processing:
SHAROKINA
Sharokina Eshaghi Golpashin
Gneisenaustraße 7
40477 Düsseldorf, Germany
Email: service@sharokina.com
www.sharokina.com

2. Server log files and hosting

When you visit our website, our hosting provider automatically saves usage data in the so-called server log files. These are: IP address of the requesting device, name of file or page visited, date and time of the server request, data volume transferred, referrer URL (the previously visited website), operating system, browser type, browser version, browser language, browser interface, access status (successful submission, errors, etc.).
In accordance with Art. 6(1)(1)(f) GDPR, this serves to safeguard our legitimate interests in the failure-free operation of our website, which predominate in the context of a balancing of interests. The server log files will be deleted within seven days after the end of your page visit.
 
The hosting and display services for our website are partly provided by our hosting provider as part of processing on our behalf. Unless otherwise stated in this privacy notice, all access data and all data collected via the forms on this website are processed on the servers of our hosting provider in Germany.

3. Cookies

We use technologies, including cookies, to make your visit to our website appealing and to enable the use of certain functions. Cookies are small text files that are stored on your device (desktop, notebook, or mobile device) while visiting our website. The cookies contain specific settings and data.  We use temporary and permanent cookies. The temporary cookies (also called session cookies or transient cookies) are stored only for the duration of your session, which means they will be deleted automatically as soon as you close your browser.  The permanent cookies (also called persistent cookies) remain on your device even after closing your browser, and allow us to recognize your browser the next time you visit our website.
 
Some of the cookies we use are absolutely necessary (essential cookies) for the use of certain website functions (e.g. to provide the expressly requested telemedia service or the shopping cart function). The use of essential cookies serves to safeguard our legitimate interests in the unrestricted operation of our website, which predominate in the context of a balancing of interests, in accordance with Art. 6(1)(1)(f) GDPR. The storage of information on your end device or access to information already stored on your end device does not require consent in this case.
 
For functions that are not absolutely necessary, your consent is required to store information on your device or to access information that has already been stored. These are, for example, cookies that are used to optimize our website and your user experience, for web analysis and marketing purposes and, if necessary, to comply with legal obligations (e.g. to be able to prove your consent to the processing of your personal data). Detailed information on this, including the respective legal basis for data processing, can be found in the following sections of this privacy notice. Please note that certain functions of the website may only be usable to a limited extent if you do not give your consent. Your consent will remain in place until you change or reset the corresponding settings on your end device.
 
If you have consented to the use of the respective cookies in accordance with Art. 6(1)(1)(a) GDPR, you can revoke your consent with effect for the future by contacting us using the contact details given in section 1 of this privacy notice.
Alternatively, you can find an overview of all cookies we use under the following link and adjust your cookie settings individually:

You can also set your browser so that cookies are only accepted if you agree to this or you can exclude the acceptance of cookies for certain cases or in general, as well as activate the automatic deletion of all cookies when closing the browser. You can find instructions under the help option of your browser about how to control these settings. However, please note that the functionality of our website may be restricted if you prohibit certain cookies.
For more information on the individual services used and your options to withdraw and object, please refer to the privacy information for the respective service described below.

4. Consent Management Tool

We use the Borlabs Cookie Plugin (“Borlabs”) on our website to inform you about the cookies and other technologies used on our website and, if necessary, to obtain, manage and document your consent to the processing of your personal data by these technologies. This is necessary pursuant to Art. 6(1)(1)(c) GDPR in order to fulfill our legal obligation pursuant to Art. 7(1) GDPR and to be able to prove your consent to the processing of your personal data. Borlabs is an offer of Borlabs GmbH, Hamburger Str. 11, 22083 Hamburg, Germany. When you visit our website, the Borlabs web server stores a so-called Borlabs cookie, which contains information about the respective cookie runtime and version, device and browser information as well as information about your consent behavior. There is no transfer of personal data to Borlabs. Your data will be deleted after one year, unless you have consented to further use in accordance with Art. 6(1)(1)(a) GDPR or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this privacy notice.

5. Third country transfer

On our website, we sometimes use technologies from service providers whose registered office or server locations are located in third countries, i.e. outside the EU or the EEA.   If there is no adequacy decision by the EU Commission for this country, an adequate level of data protection must be ensured by means of other suitable guarantees. Suitable guarantees in the form of contractually agreed standard contractual clauses of the EU Commission or binding internal data protection regulations (Binding Corporate Rules) are generally possible, but require prior review by the contracting parties to ensure that an adequate level of protection can be guaranteed.
According to the case law of the European Court of Justice, it may be necessary to take additional protective measures.

We have generally agreed the standard data protection clauses issued by the EU Commission with the providers we use who process personal data in a third country. Where possible, we also agree additional guarantees to ensure that sufficient data protection is guaranteed in third countries without an adequacy decision. Notwithstanding this, it is possible that, despite all contractual and technical measures, the level of data protection in the third country does not correspond to that of the EU. In these cases, if necessary, we will ask you for your consent to transfer your personal data to a third country in accordance with Art. 49(1)(a) GDPR as part of the cookie consent.
In particular, there is a risk that local authorities in the third country may not have sufficiently restricted access rights to your personal data from a European data protection perspective, that we as the data exporter or you as the data subject may not be aware of this or that you may not have sufficient legal remedies to prevent this or to take action against such access. You can find out which third countries we transfer data to in this privacy notice or in our Consent Management Tool.

6. Reach measurement through Matomo

We use the software Matomo, a service provided by InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand, www.matomo.org, (“Matomo”). In accordance with Art. 6(1)(1)(f) GDPR, this serves to safeguard our legitimate interests, which predominate in the context of a balancing of interests, in optimising our offer by measuring reach. Matomo is configured in such a way that no personal data is collected. Among other things, we do not use cookies and anonymise your IP address. These settings do not allow any conclusions to be drawn about your person. We only receive anonymised information, such as e.g. which browser and device types were used to visit our website, how many website visits our website records and which pages are visited. All data processing by Matomo takes place on the servers of our hosting provider in Germany.
 
You can use the following button to activate range measurement or deactivate it with effect for the future. Please note: Since your setting is stored in the Borlabs cookie (see section 4 of this privacy notice: Consent Management Tool), you must repeat it after deleting your cookies:

7. Meta Business Tools (Meta Pixel, Meta Ads Manager)

We use Meta Business Tools (Meta Pixel, Meta Ads Manager) from Meta Platforms Ireland Ltd, Block J, Serpentine Avenue, Dublin 4, Ireland (“Meta”). Data processing is only carried out with your express consent in accordance with Art. 6(1)(1)(a) GDPR and serves to analyze and optimize our online offer.
The data is usually transferred to a server of Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA and stored there.
Meta sitzt und/ oder verwendet sowohl Server in Ländern, für die die Europäische Kommission durch Beschluss ein angemessenes Datenschutzniveau festgestellt hat (USA, Kanada, Japan, Südkorea, Neuseeland, Vereinigtes Königreich, Argentinien), als auch in Ländern, für die kein Angemessenheitsbeschluss der Europäischen Kommission vorliegt (Australien, Hongkong, Indien, Indonesien, Malaysia, Singapur, Thailand, Taiwan, Brasilien, Mexiko). The adequacy decision for the USA is the basis for third country transfers. For countries without an adequacy decision by the European Commission, the data transfer continues to be based on the standard data protection clauses of the European Commission.
Detailed information on data processing can be found in Meta’s privacy policy: www.facebook.com/about/privacy.
 
Meta Pixel
The meta pixel processes data (IP address, time of visit, device and browser information, information about your use of our website) through the use of cookies (see section 3 of this privacy notice: Cookies) and creates pseudonymized user profiles from this data. The meta pixel enables your browser to be recognized when you visit other websites with the help of a pseudonymous cookie ID. Diese Informationen können von Meta mit weiteren Daten aus Ihrem Facebook-Konto zusammengeführt und dazu benutzt werden, Auswertungen über die Webseitenaktiviäten zusammenzustellen sowie um weitere mit der Webseitennutzung verbundene Dienstleistungen (insbesondere personalisierte und gruppenbasierte Werbung) zu erbringen.
The data collected with the help of the meta pixel about your activities on our website are processed into statistics about visitor activities and help us to optimize our website and our advertisements. We use conversion tracking technology to measure your usage behavior on our website for analysis and event tracking. Data processing for the analysis and creation of statistics and for conversion tracking is based on an order processing agreement with Meta.
 
Meta Ads Manager
We use the Meta Ads Manager to advertise this website on Facebook, Instagram and possibly other platforms. We define the parameters for each advertising campaign. We use the statistics generated by the meta pixel about visitor activity on our website to place targeted group advertising by defining the characteristics of the target groups (custom audience). We also use remarketing functions to show you personalized advertising. Meta decides which ads are displayed to individual users. Unless otherwise stated, data processing is based on a joint controllership agreement in accordance with Art. 26 GDPR. This joint responsibility is limited to the collection of data and its transmission to Meta. Further data processing by Meta is not covered by this.
 
You can use the following button to consent to data processing by the Meta Business Tools or revoke your consent at any time with effect for the future:

8. Contacting

If you contact us (e.g. via contact form, email), we process your voluntarily provided data in accordance with Art. 6(1)(1)(b) GDPR to process the contact request. Required fields are marked as such in the contact form, as in these cases we require the data to process your contact. If you have given your consent to data processing (e.g. by ticking a corresponding checkbox), Art. 6(1)(1)(c) GDPR additionally applies as the legal basis for data processing when contacting us.
The data will be deleted after your request has been fully processed, unless you have consented to further use in accordance with Art. 6(1)(1)(a) GDPR or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this privacy notice.

9. Contract processing and shipment processing

When you place an order with us, we process the personal data that you voluntarily provide to us as part of the ordering process for the purpose of contract processing (including inquiries about and processing of warranty and service disruption claims as well as statutory updating obligations) in accordance with Art. 6(1)(1)(b) GDPR. Required fields are marked as such, as in these cases we require the data for contract processing. You can find detailed information on the processing of your data, in particular on the transfer to our service providers for order, payment and shipping processing, in the relevant sections of this privacy notice.
We are required by law to keep the confirmation of receipt of your order for a period of six years. We keep the invoice associated with the order for a period of ten years.
After the contract has been processed, your data will be restricted for further processing and deleted in accordance with the retention periods under tax and commercial law pursuant to Art. 6(1)(1)(c) GDPR, unless you have consented to further use in accordance with Art. 6(1)(1)(a) GDPR or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this privacy notice.
 
For the purpose of contract fulfillment in accordance with Art. 6(1)(1)(b) GDPR, we pass on your delivery address to the shipping service provider commissioned with the delivery, insofar as this is necessary for the delivery of your order.

10. Payment processing

As part of the ordering process on our website, we offer various payment methods. In addition to banks and credit institutions, we also use payment service providers for this purpose.
Depending on the selected payment method, we transmit the data required for payment processing to our technical service providers, who work for us as part of order processing, or to the commissioned credit institutions or the selected payment service provider, insofar as this is necessary for payment processing, for the purpose of fulfilling the contract in accordance with Art. 6(1)(1)(b) GDPR. In some cases, the payment service providers collect the required data themselves, e.g. on their own website or through a technical integration in the ordering process. In such cases, the privacy policy of the respective payment service provider applies.
 
Among others, the external payment service provider Mollie, Mollie B.V., Keizersgracht 313, 1016 EE Amsterdam, Netherlands (“Mollie”) – privacy policy: www.mollie.com/privacy, is used for payment processing on the website. In accordance with Art. 6(1)(1)(f) GDPR, this serves to safeguard our legitimate interests, which predominate in the context of a balancing of interests, in being able to offer you an attractive selection of efficient and secure payment options.
When making the payment, the data you enter will be transmitted both to Mollie and to your chosen payment service provider. The following payment methods are offered via Mollie:

  • Klarna Pay later/ Klarna Slice it – privacy policy: www.klarna.com/international/privacy-policy
    If you use the payment services of Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter referred to as Klarna), we transmit your data to Klarna for the purpose of payment and contract processing in accordance with Art. 6(1)(1)(b) GDPR. This data transfer enables Klarna to create an invoice for the payment method you have selected and to carry out an identity and credit check. Please understand that we can only offer you the respective Klarna payment method if it is approved on the basis of the credit check. Detailed information on this and on the credit agencies used can be found in Klarna’s privacy policy above.
  • Credit card
    If you use credit card payment, we transmit your data to your credit card company and to the banks and financial institutions involved in the transaction for the purpose of payment and contract processing in accordance with Art. 6(1)(1)(b) GDPR.
    Detailed information on this can be found in the privacy policy of your credit card company, e.g. Visa: www.visa.co.uk/legal/global-privacy-notice.html or Mastercard: www.mastercard.com/global/en/vision/corp-responsibility/commitment-to-privacy/privacy.html.

 
If necessary, we transmit additional data to our service providers, which they use in combination with the information required for payment processing as our processors for fraud prevention and to optimize our payment processes (e.g. billing, processing of disputed payments, accounting support). This is done in accordance with Art. 6(1)(1)(f) GDPR to safeguard our legitimate interests in fraud protection and efficient payment management, which are overriding in the context of a balancing of interests.

11. Customer account

You have the choice between ordering as a guest (without a customer account) or creating a customer account. When opening a customer account, the data processing is based on your consent in accordance with Art. 6(1)(1)(a) GDPR and serves the purpose of opening a customer account and storing your data for future orders. The deletion of your customer account is possible at any time and can be achieved by contacting us through the contact details provided in section 1 of this privacy notice. After deletion of your customer account, your data will be restricted for further processing and deleted in accordance with the retention periods under tax and commercial law pursuant to Art. 6(1)(1)(c) GDPR, unless you have consented to further use in accordance with Art. 6(1)(1)(a) GDPR or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this privacy notice.

12. Availability notification

If products are temporarily sold out on our website, we offer you the option to sign up for our availability notification on the respective product page. If you do so, we will send you an email once the approriate product is available again.
 
The only required field for this notification service is your email address. After submitting the registration form, you will receive an email with a button to confirm your registration for the availability notification (double opt-in process). Only after clicking on the confirmation button, you will be registered for the availability notification. This process ensures that the email address provided during the registration process is not misused by a third party. Unconfirmed submissions will be automatically deleted after seven days. After successful confirmation, you will receive a confirmation email of your registration. This email will also contain a “Cancel notification” link, which you can use to cancel the availability notification at any time. Your email address, the date, and the time of the registration are processed as part of the registration process and stored on the servers of our hosting provider in Germany. We will use this data exclusively to inform you about the availability of the appropriate product. If you have created a customer account, you can also manage your availability notifications via the “Notifications” menu item in your customer account.
 
After receiving the one-time availability notification from us, your registration for the availability notification will be automatically canceled for the appropriate product. This also means: If the product is sold out again after our notification, and you want to be notified about the availability again, you also have to register for the availability notification again.
 
The data processing is based on your consent in accordance with Art. 6(1)(1)(a) GDPR. You can revoke your consent in the data processing at any time with effect for the future by cancelling the notification service. To do so, please use the “Cancel notification” link in the confirmation email we sent you after your successful registration for the availability notification. If you have created a customer account, you can also cancel your availability notifications via the menu item “Notifications” in your customer account. Alternatively, you can contact us through the contact details provided in section 1 of this privacy notice.
After unsubscribing, we will delete your email address from the recipient list for the availability notification, unless you have consented to further use in accordance with Art. 6(1)(1)(a) GDPR or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this privacy notice.

13. Review invitations

As part of the ordering process, you have the option of agreeing to receive a one-off review invitation for the current order by ticking the corresponding checkbox. After you have placed your order, you will receive an email with a confirmation link (double opt-in process). You will only be registered for the review invitation after clicking on this confirmation link. This process ensures that the email address provided during the registration process is not misused by a third party. If you do not confirm the review invitation, your data will not be processed for this purpose. After successful registration, you will receive a confirmation email that also contains an “Unsubscribe” link, which you can use to unsubscribe from the review invitation at any time. To send the review invitation, we only use the data collected during the ordering process, which is stored on the servers of our hosting provider in Germany.
 
The data processing as part of the registration for the review invitation is based on your consent in accordance with Art. 6 (1)(1)(a) GDPR. You can revoke your consent to data processing at any time with effect for the future by unsubscribing from the review invitation. Please use the “Unsubscribe” link in the confirmation email or contact us directly using the contact details provided in section 1 of this privacy notice. If you unsubscribe from the review invitation, this will be noted immediately in our system and the time of unsubscription recorded.
 
Review form
If you have consented to the review invitation, we will send you an review invitation by email. The review invitation contains one or more links (one link per product ordered) to a review form. The review form can only be submitted if you agree to the publication of some personal data (your first name, the first letter of your last name and optionally uploaded photos) on our website by ticking the corresponding checkbox. The publication is permanent until you revoke your consent. The exact conditions and information on publication will be provided in the review form.
 
This data processing is based on your consent in accordance with Art. 6 (1)(1)(a) GDPR. You can withdraw your consent at any time with effect for the future by informing us using the contact details provided in section 1 of this privacy notice. In the event of a revocation, we will remove your rating from our website within seven days and delete the associated data, unless you have consented to further use in accordance with Art. 6(1)(1)(a) GDPR or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this privacy notice.

14. Email-Newsletter

When you register for our newsletter, we use the email address you provide when registering for the newsletter to send you our email newsletter on the basis of your consent in accordance with Art. 6(1)(1)(a) GDPR. The newsletter (including the newsletter tracking described below) is sent as part of processing on our behalf by the service provider MailerLite Limited, 38 Mount Street Upper, Dublin 2, D02 PR89 Ireland (“MailerLite”). MailerLite’s servers are located in Germany and Belgium.
Our newsletter informs you a maximum of 1-2 times per month about the following topics: SHAROKINA products (bags, accessories, jewelry, leather care), insider knowledge about sustainable leather, special events and insights behind the scenes at SHAROKINA, event announcements, exclusive offers, special promotions and sweepstakes.
 
After you have sent the subscription form, you will receive an email with a confirmation button to confirm the newsletter subscription (double opt-in process). Only after clicking on the confirmation button, you will be added to the newsletter recipients list. This process ensures that the email address provided during the registration process is not misused by a third party. We are legally obligated to keep a log of the subscriptions in order to prove a proper subscription. In this respect, your email address, the time of registration and confirmation as well as your IP address are transmitted to MailerLite’s servers in Germany and Belgium and stored there. For more information, please see the privacy policy of MailerLite: www.mailerlite.com/legal/privacy-policy.
 
We would like to point out that we analyze your user behavior when sending the newsletter by measuring, storing and evaluating the opening and click rates for the purpose of technical and content optimization of future newsletters (“newsletter tracking”). This analysis is made possible by the use of so-called “web beacons” or “tracking pixels”. These are one-pixel files that are integrated into the newsletter email and, in particular, transmit the following newsletter data when the newsletter is opened, assign it to the recipient profiles and store it in their profiles until it is deleted: Your email address, the date and time of newsletter registration and confirmation as well as newsletter opening, the IP address of the device used for newsletter registration and confirmation, information on the web browser used, the referrer URL (page from which you registered for the newsletter) and which links in the newsletter you clicked on. If you do not wish to receive newsletter tracking, you can unsubscribe from the newsletter at any time.
 
You can revoke your consent in the dispatch of the newsletter, the analysis, and the related data processing at any time with effect for the future by unsubscribing from the newsletter. There is an unsubscribe option at the end of every newsletter. Alternatively, you can contact us through the contact details provided in section 1 of this privacy notice.
After unsubscribing, we will delete your email address from the recipient list and your recipient profile, including the data stored therein, unless you have consented to further use in accordance with Art. 6(1)(1)(a) GDPR or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this privacy notice.

15. Order attribution

If you have consented to data processing, we use cookies on the basis of your consent in accordance with Art. 6(1)(1)(a) GDPR when you visit our website (see section 3 of this privacy notice: Cookies), which store the following information on your end device: The number of page views in this session and the current page path, IP address, browser, device type, from which page or source you first came to our site, incl. date, time and entry page (only possible if you leave our site and return before the end of the session), from which page or source you came to our site for the current session, including date, time and entry page, technical data to support migration between different versions of the tracking function.
The cookie with the information on the number of page views in the current session and the current page path remains on your end device for 30 minutes; all other cookies are automatically deleted at the end of the session.
When you complete an order, the following information is stored in your order data on the servers of our hosting provider in Germany on the basis of your consent in accordance with Art. 6(1)(1)(a) GDPR: From which page or source you came to our site before completing the order, including any available UTM parameters, which device type you used when completing the order and the number of page views in the session before completing the order.
This information helps us to analyze and optimize our marketing strategies.
You can use the following button to consent to data processing or withdraw your consent at any time with effect for the future:

16. Our social media profiles on Facebook, Instagram, Pinterest and LinkedIn

To communicate with our customers and interested parties and provide information on products, offers, events, special promotions and competitions, we have social media presences on the social networks Facebook (www.facebook.com/SHAROKINAcom), Instagram (www.instagram.com/SHAROKINA), Pinterest (www.pinterest.de/sharokina) and LinkedIn (www.linkedin.com/company/sharokina).
If you have given your consent to the respective social media operator in accordance with Art. 6(1)(1)(a) GDPR, your data will be automatically collected and stored for market research and advertising purposes when you visit our social media presences on the aforementioned networks. Usage profiles are created using pseudonyms. These profiles can be used e.g. to place advertisements inside and outside the platforms that are likely to match your interests. Cookies are generally used for this purpose (see section 3 of this privacy notice: Cookies). Detailed information on data processing by the respective social media operator as well as contact options, your rights and setting options to protect your privacy can be found in the providers’ privacy policy linked below.
 
Facebook
Facebook is a service provided by Meta Platforms Ireland Ltd, Block J, Serpentine Avenue, Dublin 4, Ireland (“Meta”). The information automatically collected by Meta about your use of our social media presence on Facebook is usually transmitted to a server of Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA and stored there. transmitted and stored there. Data processing in the context of a visit to a social media presence on Facebook is carried out on the basis of an agreement between jointly responsible parties in accordance with Art. 26 GDPR.
Weitere Informationen finden Sie auf der Informationsseite für Page Insights-Daten (www.facebook.com/legal/terms/information_about_page_insights_data) und in der Datenschutzrichtlinie von Facebook: www.facebook.com/about/privacy.
Meta sitzt und/ oder verwendet sowohl Server in Ländern, für die die Europäische Kommission durch Beschluss ein angemessenes Datenschutzniveau festgestellt hat (USA, Kanada, Japan, Südkorea, Neuseeland, Vereinigtes Königreich, Argentinien), als auch in Ländern, für die kein Angemessenheitsbeschluss der Europäischen Kommission vorliegt (Australien, Hongkong, Indien, Indonesien, Malaysia, Singapur, Thailand, Taiwan, Brasilien, Mexiko). The adequacy decision for the USA is the basis for third country transfers. For countries without an adequacy decision by the European Commission, the data transfer continues to be based on the standard data protection clauses of the European Commission.
 
Instagram
Instagram is a service provided by Meta Platforms Ireland Ltd, Block J, Serpentine Avenue, Dublin 4, Ireland (“Meta”). The information automatically collected by Meta about your use of our social media presence on Instagram is usually transmitted to a server of Meta Platforms, Inc, 1601 Willow Road, Menlo Park, California 94025, USA and stored there. transmitted and stored there. Data processing in the context of a visit to a social media presence on Instagram is based on an agreement between jointly responsible parties in accordance with Art. 26 GDPR.
Further information can be found on the information page for Page Insights data (www.facebook.com/legal/terms/information_about_page_insights_data) and in Instagram’s privacy policy: privacycenter.instagram.com/policy.
Meta sitzt und/ oder verwendet sowohl Server in Ländern, für die die Europäische Kommission durch Beschluss ein angemessenes Datenschutzniveau festgestellt hat (USA, Kanada, Japan, Südkorea, Neuseeland, Vereinigtes Königreich, Argentinien), als auch in Ländern, für die kein Angemessenheitsbeschluss der Europäischen Kommission vorliegt (Australien, Hongkong, Indien, Indonesien, Malaysia, Singapur, Thailand, Taiwan, Brasilien, Mexiko). The adequacy decision for the USA is the basis for third country transfers. For countries without an adequacy decision by the European Commission, the data transfer continues to be based on the standard data protection clauses of the European Commission.
 
Pinterest
Pinterest is an offer of Pinterest Europe Ltd, Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland, (“Pinterest”). The information automatically collected by Pinterest about your use of our social media presence on Pinterest is usually transferred to a server of Pinterest, Inc, 505 Brannan St., San Francisco, CA 94107, USA and stored there. Data processing in the context of a visit to a Pinterest social media site is carried out on the basis of an agreement between jointly responsible parties in accordance with Art. 26 GDPR.
Further information can be found in Pinterest’s privacy policy: policy.pinterest.com/en/privacy-policy.
Pinterest is located and/or uses servers in countries for which the European Commission has determined an adequate level of data protection by decision, as well as in countries for which there is no adequacy decision by the European Commission. For countries without an adequacy decision by the European Commission, the data transfer continues to be based on the standard data protection clauses of the European Commission.
 
LinkedIn
LinkedIn ist ein Angebot der LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Irland („LinkedIn“). The information automatically collected by LinkedIn about your use of our social media presence on LinkedIn is usually transferred to a server of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA and stored there. Data processing in the context of a visit to a social media presence on LinkedIn is carried out on the basis of an agreement between jointly responsible parties in accordance with Art. 26 GDPR.
LinkedIn is located and/or uses servers in the USA, for which the European Commission has determined an adequate level of data protection. The adequacy decision for the USA applies as the basis for third country transfers, provided that the respective service provider is certified. Until certification by our service providers, data transmission will continue to be based on the standard data protection clauses of the European Commission.

17. Your rights

The processing of your personal data gives you the following rights:
 

  • Right of access (Art. 15 GDPR)
    You have the right to obtain information about your personal data which we process, within the scope described therein.
  • Right to rectification (Art. 16 GDPR)
    You have the right to immediately demand rectification of incorrect or completion of your personal data stored by us.
  • Right to erasure (“Right to be forgotten”, Art. 17 GDPR)
    You have the right to request erasure of your personal data stored with us, unless further processing is required to exercise the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for establishing, exercising or defending legal claims.
  • Right to restriction of processing (Art. 18 GDPR)
    You have the right to request restriction of processing of your personal data, insofar as the accuracy of the data is contested by you or as the processing is unlawful, but you refuse their erasure, or as we no longer need the data, but you need it to establish, exercise or defend legal claims or as you have lodged an objection to the processing in accordance with Art. 21 GDPR.
  • Right to data portability (Art. 20 GDPR)
    You have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request its transmission to another controller where the processing is based on consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR or on a contract pursuant to Art. 6(1)(b) GDPR GDPR and where the processing is carried out by automated means.
  • Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
    You have the right to complain to a supervisory authority. You can contact the supervisory authority at your habitual place of residence, place of work, or place of the alleged infringement.
  • Right to object (Art. 21 GDPR)
    You have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data which is based on Art. 6 (1)(e) or (f) GDPR, including profiling based on those provisions. We will then no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims.
    Where personal data are processed for direct marketing purposes, you have the right to object at any time to processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing. Where you object to processing for direct marketing purposes, your personal data will no longer be processed for such purposes.

 
If you have any questions about the collection, processing or use of your personal data, if you request information, correction, erasure, or restriction of the processing of data, or to exercise your right to object or withdraw, please contact us using the contact info given under section 1 of this privacy notice.