1) Information about the collection of personal data and contact details of the responsible person

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following we will inform you about the handling of your personal data when using our website. Personal data are all data with which you can be personally identified.

1.2 The person responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Tanja Brock, Tanja Brock, Jakob-Klar-Str. 11, 80796 Munich, Germany, phone: 01787172537, email: tanjabrock8@gmail.com. The person responsible for the processing of personal data is the natural or legal person who alone or jointly with others decides on the purposes and means of the processing of personal data.

1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the person responsible), this website uses an SSL or. TLS encryption. You can recognize an encrypted connection by the character string "https: //" and the lock symbol in your browser line.

2) Data collection when visiting our website

In the case of merely informative use of our website, ie if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following information that is technically necessary for us to display the website:

  • Our visited website
  • Date and time at the time of access
  • Amount of transmitted data in bytes
  • Source/reference from which you accessed the site
  • Used browser
  • Operating system used
  • Used IP address (possibly in anonymous form)

The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. A transfer or other use of the data does not take place. However, we reserve the right to retrospectively check the server logfiles should concrete evidence point to unlawful use.

3) Cookies

In order to make visiting our website attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your device. Some of these cookies are automatically deleted when the browser is closed (so-called "session cookies"), some of these cookies remain longer on your device and allow you to save page settings (so-called "persistent cookies"). In the latter case, you can see the storage duration in the overview of the cookie settings in your web browser.
If personal data is also processed by individual cookies we use, the processing takes place in accordance with Art. 6 Paragraph 1 lit. b GDPR either for the execution of the contract, in accordance with Art. 6 Paragraph 1 lit. According to Art. 6 Para. 1 lit.f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.
You can set your browser so that you are informed about the setting of cookies and individually decide whether to accept them or to exclude the acceptance of cookies for certain cases or in general.
Please note that if you do not accept cookies, the functionality of our website may be limited.

4) contact us

4.1 Acuity Scheduling
This website uses the software "Acuity Schedluing" Squarespace Ireland Limited, Le Pole House, Ship Street Great, Dublin 8, Ireland to provide an online appointment booking function
(hereinafter "Acuity Scheduling"). For the purpose of scheduling appointments, first and last name and e-mail address (and possibly the telephone number if a telephone appointment is desired) are collected in accordance with Art. 6 Para. 1 lit. b DSGVO and in accordance with Art. 6 Paragraph 1 lit. f GDPR on the basis of our legitimate interest in effective customer management and efficient appointment management to Acuity Scheduling and stored there for the appointment organization.After the appointment has been held or after the agreed appointment period has expired, your data will be deleted by Acuity Scheduling.We have concluded an order processing contract with Acuity Scheduling, in which we oblige Squarespace Ireland Limited to protect the data of our customers in accordance with legal requirements. which are intended to ensure compliance with European data protection standards.
Details of Acuity Scheduling's privacy policy can be found here https://www.squarespace.com/ privacy

4.2 When contacting us (e.g. via contact form or email), personal data is processed – exclusively for the purpose of processing and answering your request and only to the extent required for this. The legal basis for the processing of this data is our legitimate interest in answering your request in accordance with Article 6 (1) (f) GDPR. If your contact is aimed at a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR. Your data will be deleted if it can be inferred from the circumstances that the facts in question have been finally clarified and provided that there are no legal storage obligations to the contrary.

5) Data processing when opening a customer account

In accordance with Art. 6 Para. 1 lit. b GDPR, personal data will continue to be collected and processed to the extent required in each case if you provide us with this when you open a customer account. The data required to open an account can be found in the input mask of the relevant form on our website. A deletion of your customer account is possible at any time and can be done by sending a message to the above address of the person responsible. After deleting your customer account, your data will be deleted provided that all contracts concluded about it have been fully processed, there are no legal retention periods to the contrary and we have no legitimate interest in further storage.

6) comment function

As part of the comment function on this website, in addition to your comment, information on the time the comment was created and the name of the commentator you have chosen will be stored and published on this website. Furthermore, your IP address will be saved for security reasons in order to enable attribution to the author in the event of illegal comments. Your e-mail address will be saved so that you can be contacted if a third party should complain that your published content is illegal.

7) Use of customer data for direct advertising

7.1 Registration for our e-mail newsletter

If you register for our e-mail newsletter, we will send you regular information about our offers. The only mandatory information for sending the newsletter is your email address. The provision of further data is voluntary and is used in order to be able to address you personally. We use the so-called double opt-in procedure for sending the newsletter, which ensures that you will only receive the newsletter if you have expressly confirmed your consent to receive the newsletter by clicking on a verification link sent to the specified email address

By activating the confirmation link, you give us your consent for the use of your personal data in accordance with Article 6 (1) (a) GDPR. We save your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your e-mail address at a later point in time. The data collected by us when registering for the newsletter are used strictly for the specific purpose. You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending a message to the person responsible mentioned above. After you have unsubscribed, your e-mail address will be immediately deleted from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.

7.2 – Newsletter dispatch via Flodesk
Our e-mail newsletters are sent via the technical service provider Flodesk, Inc, 861 Sutter St. #509, San Francisco, CA 94109, USA ("Flodesk"), to whom we pass on the data you provided when registering for the newsletter. This transfer takes place in accordance with Article 6 (1) (f) GDPR and serves our legitimate interest in using an effective, secure and user-friendly newsletter system. The data you enter for the purpose of subscribing to the newsletter (e.g. e-mail address) will be stored on Flodesk's servers in the USA.
Flodesk uses this information to send and statistically evaluate the newsletter on our behalf. For the evaluation, the e-mails sent contain so-called web beacons or tracking pixels, which represent one-pixel image files that are stored on our website. In this way it can be determined whether a newsletter message has been opened and which links have been clicked on. With the help of so-called conversion tracking, it can also be analyzed whether a previously defined action (e.g. purchase of a product on our website) took place after clicking on the link in the newsletter. Technical information is also recorded (e.g. time of retrieval, IP address, browser type and operating system). The data is collected exclusively in pseudonymised form and is not linked to your other personal data; direct personal reference is excluded. This data is used exclusively for the statistical analysis of newsletter campaigns. The results of these analyzes can be used to better adapt future newsletters to the interests of the recipients.
If you want to object to the data analysis for statistical evaluation purposes, you must unsubscribe from the newsletter.
We have concluded a data processing agreement with Flodesk, with which we oblige Flodesk to protect our customers' data and not to pass it on to third parties. This contract can be viewed here: https://help.flodesk.com/in/articles/3390453-data-processing-addendum
Further information on data processing by Flodesk can be found in the data protection declaration of the service provider: https://www.privacypolicies.com/ privacy/ view/bb9c8c7ecbee39b15f2f5be574def422

8) Data processing for order processing

Insofar as it is necessary for the execution of the contract for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Article 6 (1) (b) GDPR.

If we owe you updates for goods with digital elements or for digital products on the basis of a corresponding contract, we process the contact details you provided when ordering (name, address, e-mail address) in order to meet our statutory information requirements in accordance with Art. 6 Para . 1 lit. c GDPR personally using a suitable means of communication (e.g. by post or email) about upcoming updates in the legally stipulated period. Your contact details will be used strictly for the purpose of notifications about updates we owe and will only be processed by us for this purpose to the extent necessary for the respective information.

In order to process your order, we also work together with the following service provider (s) who support us in whole or in part in the execution of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.

9) Online Marketing

Facebook pixel for the creation of custom audiences with extended data synchronization (with cookie consent tool)
Within our online offer, the so-called "Facebook Pixel" of the social network Facebook is used in the mode of extended data comparison, which is operated by Meta Platforms Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland ("Facebook").
On the basis of his express consent, when a user clicks on an advertisement played on Facebook and placed by us, an add-on is added to the URL of our linked page by Facebook Pixel. This URL parameter is then written into the user's browser after being forwarded via a cookie, which sets our linked page itself. In addition, this cookie collects specific customer data, such as the email address that we collect on our website linked to the Facebook ad during processes such as purchase transactions, account registrations or registrations (extended data comparison). The cookie is then read out by Facebook Pixel and enables the data, including the specific customer data, to be forwarded to Facebook.
With the help of the Facebook pixel with extended data comparison, Facebook is able, on the one hand, to precisely determine the visitors of our online offer as a target group for the display of advertisements (so-called "Facebook ads"). Accordingly, we use the Facebook pixel with extended data comparison in order to only display the Facebook ads placed by us to those Facebook users who have shown an interest in our online offer or who have certain characteristics (e.g. interests in certain topics or products that determined on the basis of the visited websites), which we transmit to Facebook (so-called "Custom Audiences"). With the help of the Facebook pixel with extended data comparison, we would also like to ensure that our Facebook ads correspond to the potential interest of the users and do not have a nuisance. In this way, we can further evaluate the effectiveness of Facebook ads for statistical and market research purposes by understanding whether users were redirected to our website after clicking on a Facebook ad (so-called "conversion"). Compared to the standard version of Facebook Pixel, the function of the extended data comparison helps us to better measure the effectiveness of our advertising campaigns by recording more assigned conversions.
All transmitted data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook uses the data for its own advertising purposes, in accordance with the Facebook data usage guidelines (https://www.facebook.com/ about/ privacy/) can use. The data can enable Facebook and its partners to place advertisements on and outside of Facebook.
These processing operations take place only with the express consent according to Art. 6 Para. 1 lit. a GDPR.
The information generated by Facebook is usually transmitted to a Facebook server and stored there. This can also result in transmission to the servers of Meta Platforms Inc. in the USA. You can revoke your consent at any time with effect for the future by deactivating this service in the “Cookie Consent Tool” provided on the website.

10) web analytics services

Google (Universal) Analytics
This website uses Google (Universal) Analytics, a web analysis service from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google (Universal) Analytics uses so-called "cookies", which are text files that are stored on your device and that enable your use of the website to be analyzed. The information generated by the cookie about your use of this website (including the abbreviated IP address) is usually transferred to a Google server and stored there; it can also be transferred to the Google LLC server. come in the US.
This website uses Google (Universal) Analytics exclusively with the extension "_anonymizeIp ()", which ensures anonymization of the IP address by shortening it and excludes direct personal reference. As a result of the extension, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google LLC. Server in the USA and shortened there.
On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide us with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google (Universal) Analytics is not merged with other Google data.
With a special function, the so-called "demographic characteristics", Google Analytics also enables the creation of statistics with statements about the age, gender and interests of the site visitors on the basis of an evaluation of interest-related advertising and with the help of third-party information. This allows the definition and differentiation of user groups of the website for the purpose of target group-optimized alignment of marketing measures. However, data records recorded via the “demographic characteristics” cannot be assigned to a specific person.
Details on the processing initiated by Google Analytics and how Google handles data from websites can be found here: https://policies.google.com/technologies/partner-sites
All processing described above, in particular the setting of Google Analytics cookies for reading out information on the device used, will only be carried out if you have given us a message in accordance with Art. 6 Para. 1 lit. a GDPR have given your express consent to this. Without this consent, Google Analytics will not be used during your website visit.
You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "Cookie Consent Tool" provided on the website. We have concluded an order processing agreement with Google for the use of Google Analytics, with which Google is obliged to protect the data of our website visitors and not to pass them on to third parties. For the transmission of data from the EU to the USA, Google relies on so-called standard data protection clauses of the European Commission, which are intended to ensure compliance with the European level of data protection in the USA.
Further information on Google (Universal) Analytics can be found here: https://policies.google.com/ privacy?hl=de&gl=de
In connection with this website, the "UserIDs" function is also used as an extension of Google Analytics. By assigning individual UserIDs, we can have cross-device reports created by Google (so-called "Cross Device Tracking"). This means that if you have given your consent to the use of Google Analytics in accordance with Art. 6 Paragraph 1 lit. The relevant login data are logged into your personal account on various end devices. The data collected in this way shows, among other things, on which device you clicked on an ad for the first time and on which device the relevant conversion took place.

11) Page functionalities

- Google Web Fonts
This site uses so-called web fonts provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google") for consistent presentation of fonts. When you access a page, your browser loads the required web fonts into its browser cache to correctly display texts and fonts.
For this purpose, the browser you are using must connect to the Google servers. This can also result in the transmission of personal data to the servers of Google LLC. come in the US. In this way, Google becomes aware that our website has been accessed via your IP address. The processing of personal data in the course of establishing a connection with the provider of the fonts will only be carried out if you have given us your express consent in accordance with Article 6 (1) (a) GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the “Cookie Consent Tool” provided on the website. If your browser does not support web fonts, a standard font will be used by your computer.
Further information about handling user data, can be found at https://developers.google.com/fonts/faqs and in Google's privacy policy at https://www.google.com/policies/ privacy/

12) rights of the person concerned

12.1 The applicable data protection law grants you the following rights of data subjects (information and intervention rights) vis-à-vis the person responsible with regard to the processing of your personal data, whereby reference is made to the stated legal basis for the respective exercise requirements:

  • Right to information in accordance with Art. 15 GDPR;
  • Right to rectification in accordance with Art. 16 GDPR;
  • Right to deletion in accordance with Art. 17 GDPR;
  • Right to restriction of processing in accordance with Art. 18 GDPR;
  • Right to information in accordance with Art. 19 GDPR;
  • Right to data portability in accordance with Art. 20 GDPR;
  • Right to revoke consent given in accordance with Art. 7 Para. 3 GDPR;
  • Right to lodge a complaint in accordance with Art. 77 GDPR.

12.2 RIGHT TO OBJECT

IF, IN THE CONTEXT OF INTEREST ACCOUNTABILITY, WE PROCESS OUR PERSONAL DATA BASED ON OUR MAJOR LEGITIMATE INTEREST, YOU HAVE ANY PRESENT RIGHT TO SUBMIT AGAINST THIS PROCESSING FOR CONSEQUENCES WITH EFFECT ON THE FUTURE FOR REASONS OBTAINED FROM YOUR SPECIFIC SITUATION.
MAKE USE OF YOUR OPPOSITION RIGHT, WE FINISH THE PROCESSING OF THE AFFECTED DATA. FURTHER PROCESSING REMAINS SUBJECT TO EXERCISE WHEN WE MAY PROVIDE IMPERATIVE REASONABLE REASONS FOR PROCESSING WHICH EXCEED ITS INTERESTS, FUNDAMENTAL RIGHTS AND FUNDAMENTAL FREEDOMS, OR IF THE PROCESSING SERVES THE PRESENTATION, EXERCISE OR DEFENSE OF LEGAL CHARGES.

IF YOUR PERSONAL DATA IS PROCESSED BY US TO OPERATE DIRECT ADVERTISING, YOU HAVE THE RIGHT TO INTRODUCE ANY CONTESTING AGAINST THE PROCESSING OF YOU OF PERSONAL DATA FOR THE PURPOSE OF SUCH ADVERTISING. YOU MAY EXERCISE THE OPPOSITE AS DESCRIBED ABOVE.

MAKE USE OF YOUR CONTINGENCY RIGHT, WE FINISH THE PROCESSING OF THE DATA CONCERNED FOR DIRECT ACCEPTANCE.

13) Duration of storage of personal data

The duration of the storage of personal data is based on the respective legal basis, the purpose of processing and - if applicable - additionally based on the respective legal retention period (eg commercial and tax retention periods).

In the processing of personal data based on an explicit consent in accordance with Art. 6 para. 1 lit. a DSGVO, these data are stored until the person withdraws his consent.

There are statutory retention periods for data which, in the context of legal or similar obligations, are based on Art. 6 para. 1 lit. b DSGVO are processed, these data are routinely deleted after expiry of the retention periods, if they are no longer required for fulfillment of the contract or for initiating a contract and / or if there is no legitimate interest in the re-storage on our part.

In the processing of personal data on the basis of Art. 6 para. 1 lit. f DSGVO, these data will be stored until the person concerned exercises his right of objection under Art. 21 para. 1 DSGVO, unless we can prove compelling legitimate reasons for the processing that outweigh the interests, rights and freedoms of the person concerned, or the processing serves the assertion, exercise or defense of legal claims.

In the processing of personal data for the purpose of direct advertising on the basis of Art. 6 para. 1 lit. f DSGVO these data will be stored until the person concerned exercises his right of objection under Art. 21 para. 2 DSGVO.

Unless otherwise stated in the other information in this Declaration on Specific Processing Situations, stored personal data will be erased if they are no longer necessary for the purposes for which they were collected or otherwise processed.