Privacy Policy
Table of Contents
1. Access Data and Hosting
Hosting
2. Data Processing for Contract Fulfilment and Contact
2.1 Data Processing for Contract Fulfilment
2.2 Customer Account
Contact
3. Data Processing for Shipping Purposes
Data Transfer to Shipping Providers for the Purpose of Shipping Notifications
4. Data Processing for Payment Processing
4.1 Data Processing for Transaction Processing
4.2 Data Processing for the Purpose of Fraud Prevention and Optimization of Our Payment Processes
5. Advertising via Email and Mail
5.1 Email Newsletters with Subscription
5.2 Newsletter Distribution
5.3 Direct Mail Advertising and Your Right to Object
6. Cookies and other technologies
6.1 General information
6.2 Use of Borlabs for consent management
7. Use of cookies and other technologies
Other providers of web analytics and online marketing services
8. Social media
Our online presence on Facebook (by Meta), Instagram (by Meta), LinkedIn
9. Contact Information and Your Rights
9.1 Your Rights
9.2 Contact Information
The data controller is:
Anja Nolte Stargarder Strasse 17 10437 Berlin Email: info@anjanolte.art
Phone: 03068813569
Thank you for your interest in our website. Protecting your privacy is very important to us. Below, we provide detailed information about how we handle your data.
1. Access Data and Hosting
You can visit our website without providing any personal information. Each time a webpage is accessed, the web server automatically stores a so-called server log file containing, for example, the name of the requested file, your IP address, the date and time of access, the amount of data transferred, and the requesting provider (access data), thereby documenting the access. This access data is evaluated exclusively for the purpose of ensuring the smooth operation of the site and improving our offerings. This serves to safeguard our legitimate interests, which prevail following a balancing of interests, in the proper presentation of our offerings in accordance with Article 6(1)(f) of the GDPR.
All access data is deleted no later than seven days after the end of your visit to the site.
All access data is processed only for as long as is necessary to achieve the aforementioned processing purposes.
Hosting
Some of the services related to hosting and displaying the website are provided by our service providers as part of processing carried out on our behalf. Unless otherwise specified in this Privacy Policy, all access data and all data collected via the forms provided on this website are processed on their servers. If you have any questions about our service providers and the basis of our cooperation with them, please use the contact information provided in this Privacy Policy.
2. Data Processing for Contract Fulfilment and Contact
2.1 Data Processing for Contract Fulfilment
For the purpose of contract fulfillment (including inquiries regarding and the handling of any existing claims arising from warranty, breach of contract, and right of withdrawal, as well as any statutory update obligations) pursuant to Art. 6(1)(b) GDPR, we collect personal data if you voluntarily provide it to us as part of your order. Mandatory fields are marked as such, as we require this data for contract fulfillment and cannot ship the order without it. The data collected is indicated in the respective input forms. Further information regarding the processing of your data, in particular regarding its transfer to our service providers for the purposes of order, payment, and shipping processing, can be found in the following sections of this Privacy Policy. After the contract has been fully processed, your data will be restricted for further processing and deleted upon expiration of the retention periods under tax and commercial law in accordance with Art. 6(1)(c) GDPR, unless you have expressly consented to further use of your data in accordance with Art. 6(1)(a) GDPR or we reserve the right to use your data beyond this scope, which is permitted by law and about which we inform you in this policy.
2.2 Kundenkonto
Soweit Sie hierzu Ihre Einwilligung nach Art. 6 Abs. 1 S. 1 lit. a DSGVO erteilt haben, indem Sie sich für die Eröffnung eines Kundenkontos entscheiden, verwenden wir Ihre Daten zum Zwecke der Kundenkontoeröffnung sowie zur Speicherung Ihrer Daten für weitere zukünftige Bestellungen auf unserer Webseite. Die Löschung Ihres Kundenkontos ist jederzeit möglich und kann entweder durch eine Nachricht an die in dieser Datenschutzerklärung beschriebene Kontaktmöglichkeit oder über eine dafür vorgesehene Funktion im Kundenkonto erfolgen. Nach Löschung Ihres Kundenkontos werden Ihre Daten gelöscht, sofern Sie nicht ausdrücklich in eine weitere Nutzung Ihrer Daten gemäß Art. 6 Abs. 1 S. 1 lit. a DSGVO eingewilligt haben oder wir uns eine darüber hinausgehende Datenverwendung vorbehalten, die gesetzlich erlaubt ist und über die wir Sie in dieser Erklärung informieren.
2.2 Customer Account
If you have given your consent pursuant to Article 6(1)(a) of the GDPR by choosing to open a customer account, we will use your data for the purpose of opening the customer account and for storing your data for future orders on our website. You may delete your customer account at any time by either sending a message to the contact address provided in this Privacy Policy or using the function provided for this purpose in your customer account. After your customer account is deleted, your data will be deleted unless you have expressly consented to further use of your data in accordance with Article 6(1)(a) of the GDPR or we reserve the right to use your data beyond this scope, which is permitted by law and about which we inform you in this policy.
3. Data Processing for the Purpose of Shipping
To fulfill the contract in accordance with Article 6(1)(b) of the GDPR, we share your data with the shipping provider responsible for delivery, to the extent necessary to deliver the ordered goods. If you have any questions about our service providers and the basis of our cooperation with them, please use the contact information provided in this Privacy Policy.
Data transfer to shipping service providers for the purpose of shipment notification
If you have given us your express consent to this during or after your order, we will, on this basis pursuant to Art. 6(1)(a) GDPR, share your email address with the selected shipping service provider so that they can contact you prior to delivery for the purpose of delivery notification or coordination. You may revoke your consent at any time by sending a message to the contact information provided in this Privacy Policy. Upon revocation, we will delete the data you provided for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this scope, which is permitted by law and about which we inform you in this policy. If you have any questions about our service providers and the basis of our cooperation with them, please contact us using the contact information provided in this Privacy Policy.
4. Data Processing for Payment Processing
When processing payments in our online store, we work with the following partners: technical service providers, financial institutions, and payment service providers.
4.1 Data Processing for Transaction Processing
Depending on the selected payment method, we transfer the data necessary for processing the payment transaction to our technical service providers, the designated credit institutions, or the selected payment service provider, to the extent necessary for processing the payment. This serves the purpose of contract performance pursuant to Art. 6(1)(b) GDPR. In some cases, the payment service providers collect the data required for processing the payment themselves, e.g., on their own website or via a technical integration into the ordering process. In this regard, the privacy policy of the respective payment service provider applies. Depending on the selected payment method, data may be transferred to third countries outside the EU/EEA for which the European Commission has determined an adequate level of data protection by means of a decision. To the extent that data is transferred to third countries outside the EU/EEA for which the European Commission has not issued a decision on an adequate level of data protection, the cooperation is based on the European Commission’s Standard Data Protection Clauses. If you have any questions about our payment processing partners or the basis of our collaboration with them, please contact us using the contact information provided in this Privacy Policy.
4.2 Data Processing for the Purpose of Fraud Prevention and Optimizing Our Payment Processes
Where necessary, we provide the aforementioned service providers with additional data, which they use in conjunction with the data required to process the payment for the purpose of fraud prevention and optimizing our payment processes (e.g., invoicing, handling disputed payments, and supporting accounting). This serves, in accordance with Art. 6(1)(f) GDPR, to safeguard our legitimate interests—which prevail following a balancing of interests—in protecting ourselves against fraud and in ensuring efficient payment management.
5. Advertising via Email and Mail
5.1 Email Newsletter with Subscription
When you subscribe to our newsletter, we use the data required for this purpose or separately provided by you to send you our email newsletter on a regular basis based on your consent pursuant to Article 6(1)(a) of the GDPR.
You can unsubscribe from the newsletter at any time by either sending a message to the contact address provided below or by clicking the link provided for this purpose in the newsletter.
After you unsubscribe, we will remove your email address from the recipient list, unless you have expressly consented to the continued use of your data in accordance with Article 6(1)(a) of the GDPR, or we reserve the right to use your data for other purposes that are permitted by law and about which we inform you in this statement.
5.2 Newsletter Distribution
The newsletter may also be sent by our service providers as part of processing carried out on our behalf. If you have any questions about our service providers or the basis of our collaboration with them, please contact us using the contact information provided in this Privacy Policy.
Our service providers are located in and/or use servers in the following countries, for which the European Commission and the Swiss Federal Council have determined an adequate level of data protection by decision: the United States, Canada. The adequacy decision for the United States serves as the basis for transfers to third countries, provided that the respective service provider is certified. Until our service providers are certified, data transfers will continue to be based on the following: the European Commission’s Standard Data Protection Clauses. Our service providers are located in and/or use servers in the following countries: India. No adequacy decision has been issued by the European Commission or the Swiss Federal Council for these countries. Our cooperation with them is based on the following safeguards: the European Commission’s Standard Data Protection Clauses.
5.3 Direct Mail and Your Right to Object
In addition, we reserve the right to use your first and last name as well as your mailing address for our own advertising purposes, e.g., to send you interesting offers and information about our products by mail. This serves to safeguard our legitimate interests, which prevail following a balancing of interests, in addressing our customers for advertising purposes in accordance with Article 6(1)(f) of the GDPR. You may object to the storage and use of your data for these purposes at any time by sending a message to the contact information provided in this Privacy Policy. Once you have revoked your consent, we will delete your address from the recipient list, unless you have expressly consented to further use of your data in accordance with Article 6(1)(a) of the GDPR or we reserve the right to use your data for other purposes that are permitted by law and about which we inform you in this policy.
6. Cookies and Other Technologies
6.1 General Information
To make your visit to our website more engaging and to enable the use of certain features, we use various technologies on different pages, including so-called cookies. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted at the end of the browser session, i.e., after you close your browser (so-called session cookies). Other cookies remain on your device and allow us to recognize your browser on your next visit (persistent cookies). You can find the storage duration in the overview in your web browser’s cookie settings. Privacy Protection on End Devices When using our online services, we employ technologies that are strictly necessary to provide the explicitly requested digital service. The storage of information on your end device or access to information already stored on your end device does not require consent in this regard.
For features that are not strictly necessary, the storage of information on your device or access to information already stored on your device requires your consent. Please note that if you do not provide your consent, certain parts of the website may not be fully accessible. Any consent you have provided remains in effect until you adjust or reset the relevant settings on your device.
Any subsequent data processing via cookies and other technologies We use technologies that are strictly necessary for the use of certain functions on our website. These technologies collect and process your IP address, the time of your visit, device and browser information, as well as information regarding your use of our website. This serves our overriding legitimate interests in optimizing the presentation of our website, pursuant to Article 6(1)(f) of the GDPR, following a balancing of interests.
We also use technologies to comply with the legal obligations to which we are subject (e.g., to be able to demonstrate consent to the processing of your personal data) as well as for web analytics and online marketing. Further information on this, including the respective legal basis for data processing, can be found in the following sections of this Privacy Policy.
Cookie Settings You can find the cookie settings for your browser at the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™
If you have consented to the use of these technologies pursuant to Article 6(1)(a) of the GDPR, you may revoke your consent at any time by sending a message to the contact address provided in the Privacy Policy.
Alternatively, you can also access your cookie settings via the link in the footer.
6.2 Use of Borlabs for Consent Management
On our website, we use the Borlabs cookie plugin (“Borlabs”) to inform you about the cookies and other technologies we use on our website, as well as to obtain, manage, and document your consent—where required—to the processing of your personal data by these technologies. This is necessary pursuant to Art. 6(1)(c) GDPR to fulfill our legal obligation under Art. 7(1) GDPR to be able to demonstrate your consent to the processing of your personal data, to which we are subject. Borlabs is a service provided by Borlabs GmbH, Hamburger Str. 11, 22083 Hamburg, Germany. When you visit our website, the Borlabs web server stores a so-called Borlabs cookie, which contains information about the cookie’s duration and version, device and browser information, as well as information regarding your consent behavior. No personal data is transferred to Borlabs in this process. Your data will be deleted after one year, unless you have expressly consented to further use of your data in accordance with Art. 6(1)(a) GDPR or we reserve the right to use your data beyond this period, which is permitted by law and about which we inform you in this statement.
7. Use of Cookies and Other Technologies
We use the following cookies and other third-party technologies on our website. Unless otherwise specified for individual technologies, this is based on your consent pursuant to Article 6(1)(a) of the GDPR. Once the purpose has been fulfilled and we have ceased using the respective technology, the data collected in this context will be deleted. You may revoke your consent at any time with future effect. Further information regarding your options for revocation can be found in the section “Cookies and Other Technologies.” Further information, including the basis for our cooperation with the individual providers, can be found under the respective technologies. If you have any questions regarding the providers and the basis for our cooperation with them, please contact us using the contact details provided in this Privacy Policy.
Other providers of web analytics and online marketing services
Use of the Vimeo Video Plugin to Embed Third-Party Content
To embed third-party content, data (IP address, time of visit, device and browser information) is collected via the video plugin from Vimeo Inc., 330 West 34th Street, 5th Floor, New York 10011, USA (“Vimeo”), transmitted to Vimeo, and subsequently processed by Vimeo. Data processing is carried out on the basis of an agreement between joint controllers pursuant to Art. 26 GDPR. Google Analytics is automatically integrated into the Vimeo video plugin. For the purpose of website analysis, Google Analytics automatically collects and stores data (IP address, time of visit, device and browser information, as well as information regarding your use of our website), from which usage profiles are created using pseudonyms. Cookies may be used for this purpose. Google Analytics is a service provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The information automatically collected by Google regarding your use of our website is generally transmitted to a server operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and stored there. If you visit our website from within the EU, your IP address is stored on a server located in the EU to derive location data and is then immediately deleted before the traffic is forwarded to other Google servers for processing.
We have no influence over or access to the data processing carried out by Vimeo, including the settings and results of Google Analytics. Our service providers are located in and/or use servers in countries outside Switzerland, the EU, and the EEA for which the European Commission and the Swiss Federal Council have determined, by decision, that an adequate level of data protection exists. Our service providers are located in and/or use servers in countries outside Switzerland, the EU, and the EEA. No adequacy decision has been issued by the European Commission and the Swiss Federal Council for these countries. Our cooperation with them is based on the European Commission’s Standard Data Protection Clauses.
8. Social Media
Our online presence on Facebook (by Meta), Instagram (by Meta), and LinkedIn
To the extent that you have given your consent pursuant to Art. 6(1)(a) GDPR to the respective social media operator, your data will be automatically collected and stored for market research and advertising purposes when you visit our online presence on the aforementioned social media platforms, from which usage profiles are created using pseudonyms. These can be used, for example, to display advertisements within and outside the platforms that are presumed to correspond to your interests. Cookies are generally used for this purpose. For detailed information on the processing and use of data by the respective social media operator, as well as contact information, your rights in this regard, and settings to protect your privacy, please refer to the providers’ privacy policies linked below. If you still need assistance with this, please contact us.
Facebook (by Meta) is a service provided by Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland (“Meta Platforms Ireland”). The information automatically collected by Meta Platforms Ireland regarding your use of our online presence on Facebook (by Meta) is generally transmitted to a server operated by Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA, and stored there. Data processing in connection with a visit to a Facebook (by Meta) fan page is based on an agreement between joint controllers pursuant to Art. 26 GDPR. Further information (information on Insights data) can be found here. Our service providers are located in and/or use servers in the following countries for which the European Commission and the Swiss Federal Council have determined, by decision, that an adequate level of data protection exists: the United States, Canada, Japan, South Korea, New Zealand, the United Kingdom, and Argentina. The adequacy decision for the United States serves as the basis for transfers to third countries, provided that the respective service provider is certified. Certification is in place. Our service providers are located in and/or use servers in the following countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, and Mexico. There is no adequacy decision from the European Commission or the Swiss Federal Council for these countries. Our cooperation with them is based on the following safeguards: the European Commission’s Standard Data Protection Clauses.
Our service providers are located in and/or use servers in the following countries, for which the European Commission has determined, by decision, that an adequate level of data protection exists: Brazil. There is no adequacy decision by the Swiss Federal Council for these countries. Our cooperation with them is based on the following safeguards: the European Commission’s Standard Data Protection Clauses.
Instagram (by Meta) is a service provided by Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland (“Meta Platforms Ireland”). The information automatically collected by Meta Platforms Ireland regarding your use of our online presence on Instagram is generally transmitted to a server operated by Meta Platforms, Inc., 1601 Willow Road, Menlo Park, CA 94025, USA, Menlo Park, California 94025, USA, and stored there. Data processing in connection with a visit to an Instagram (by Meta) fan page is based on an agreement between joint controllers pursuant to Art. 26 GDPR. Further information (information on Insights data) can be found here. Our service providers are located in and/or use servers in the following countries for which the European Commission and the Swiss Federal Council have determined, by decision, that an adequate level of data protection exists: the United States, Canada, Japan, South Korea, New Zealand, the United Kingdom, and Argentina. The adequacy decision for the United States serves as the basis for transfers to third countries, provided that the respective service provider is certified.
Certification is in place. Our service providers are located in and/or use servers in the following countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, and Mexico. There is no adequacy decision from the European Commission or the Swiss Federal Council for these countries. Our collaboration with them is based on the following safeguards: the European Commission’s Standard Data Protection Clauses. Our service providers are located in and/or use servers in the following countries, for which the European Commission has determined, by decision, that an adequate level of data protection exists: Brazil. There is no adequacy decision by the Swiss Federal Council for these countries. Our cooperation with them is based on the following safeguards: the European Commission’s Standard Data Protection Clauses.
LinkedIn is a service provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”). The information automatically collected by LinkedIn regarding your use of our online presence on LinkedIn is generally transmitted to and stored on a server operated by LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA. Our service providers are located in and/or use servers in the following countries, for which the European Commission and the Swiss Federal Council have determined, by decision, that an adequate level of data protection exists: the United States. The adequacy decision for the United States serves as the basis for transfers to third countries, provided that the respective service provider is certified. Certification is in place.
9. Contact Information and Your Rights
9.1 Your Rights
As a data subject, you have the following rights: pursuant to Article 15 of the GDPR, the right to request information about the personal data we process regarding you, to the extent specified therein; pursuant to Article 16 of the GDPR, the right to request the immediate rectification of inaccurate personal data or the completion of incomplete personal data stored by us; pursuant to Art. 17 GDPR, the right to request the erasure of your personal data stored by us, unless further processing is necessary for the exercise of the right to freedom of expression and information; to fulfill a legal obligation; for reasons of public interest; or to assert, exercise, or defend legal claims; pursuant to Art. 18 GDPR, the right to request the restriction of the processing of your personal data, provided that you contest the accuracy of the data; the processing is unlawful, but you oppose its erasure; we no longer need the data, but you need it to assert, exercise, or defend legal claims, or you have objected to the processing pursuant to Article 21 of the GDPR;Under Article 20 of the GDPR, you have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, or to request that it be transmitted to another controller; under Article 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority. As a rule, you may contact the supervisory authority at your usual place of residence or workplace, or at our company headquarters.
Right to Object
To the extent that we process personal data as described above to protect our legitimate interests, which have been determined to prevail following a balancing of interests, you may object to such processing with effect for the future. If the processing is carried out for direct marketing purposes, you may exercise this right at any time as described above. If the processing is carried out for other purposes, you have a right to object only if there are grounds arising from your particular situation. After you exercise your right to object, we will no longer process your personal data for these purposes, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing is necessary for the establishment, exercise, or defense of legal claims. This does not apply if the processing is carried out for direct marketing purposes. In that case, we will no longer process your personal data for this purpose.
9.2 Contact Information
If you have any questions regarding the collection, processing, or use of your personal data, or if you wish to request information, correct, restrict, or delete data, revoke your consent, or object to a specific use of your data, please contact us directly using the contact information provided in our Legal Notice.