Effective Date: June 2018
1. General Information
Data Controller Contact Information
Sylvie Gagelmann, Goodfeelography
Dolziger Straße 25
You can visit my website without providing any personal data. As far as personal data (e.g. name, address, telephone number or e-mail address) is collected on my site, this is, as far as possible, on a voluntary basis. These data will not be passed on to third parties without your explicit consent.
I must point out to you that data transmission on the Internet (e.g. communication by e-mail) has security gaps and cannot be completely protected against access by third parties.
Order and purchasing process
As soon as a contractual relationship arises between you and me (e.g. by booking/rebooking a workshop, buying a voucher) or if you send me an inquiry, I collect and use your personal data (see purpose of processing). I process your data within the ordering process of my website to enable you to select and order the chosen products and services, as well as their payment and delivery or realization.
Types of data processed
- Inventory data (e.g., first and last name, address)
- Contact details (e.g., e-mail, telephone numbers)
- Content data (e.g., text input, photographs, videos)
- Usage data (e.g., visited websites, interest in content, access times)
- Payment data (e.g. account data, invoice data)
- Meta/communication data (e.g., device information, IP addresses)
Purpose of processing
- Availability of the online offer, its functions and contents
- Answering queries and communicating with users
- safety precautions
- Range measurement/marketing
All personal data will only be saved as long as it is necessary for the specified purpose (e.g. to process your inquiry or to handle a contract).
External payment service providers
Within the scope of the fulfillment of contracts, I use payment service providers on the basis of Art. 6 para. 1 lit. b. DSGVO to offer you effective and secure payment options. If you have selected a payment service provider for the payment method, a direct link to the website of the respective payment service provider takes place as part of the payment process. The data processed by the payment service provider includes inventory data such as name and address, bank data such as account numbers or credit card numbers, passwords, TANs and checksums as well as contract, totals and recipient information. This information is required to execute the transactions. However, the data entered will only be processed and stored by the payment service providers. This means that I do not receive any information relating to your account or credit card, but only information with confirmation or negative information about your payment. The data may be transferred by the payment service providers to credit agencies. The purpose of this transmission is to verify identity and creditworthiness. For this I refer to the terms and conditions and data protection information of the payment service providers. For payment transactions, the terms and conditions and the data protection information of the respective payment service providers, which can be accessed within the respective websites or transaction applications, are applicable. I refer to these also for the purpose of further information and assertion of rights of revocation, information and other concerned rights.
I use external payment service providers through whose platforms you and I can make payment transactions:
Encryption by SSL
For security reasons, this website uses SSL encryption ('Secure Sockets Layer'). This protects transmitted data and cannot be read by third parties. You can recognize a successful encryption by the fact that the protocol name in the browser's status bar changes from "http://" to "https://" and that a closed lock symbol is visible there.
Encrypted payment transactions on this website
After concluding a contract with a fee (e.g. booking a workshop, purchasing a voucher), you have to provide your payment data (e.g. account number for direct debit authorization). This data is required for payment processing.
Payment transactions via the usual methods of payment (Visa/MasterCard, direct debit) are made exclusively via an encrypted SSL or TLS connection. You can recognize an encrypted connection by the change of the address line of the browser from "http://" to "https://" and by the lock symbol in your browser line. In the case of encrypted communication, your payment data cannot be read by third parties.
2. Data collection on my website
If you do not want this, you can set your browser so that it informs you about the setting of cookies and you only allow this in individual cases. When cookies are deactivated, the functionality of this website may be limited.
This is how you change your cookie settings for each browser:
The provider of the site automatically collects and stores information in so-called server log files, which your browser automatically transmits to me. These are:
- browser type and browser version
- operating system used
- referrer URL
- host name of the accessing computer
- time of the server request
- IP address
These data are not combined with other data sources. The basis for data processing is Art. 6 para. 1 lit. f DSGVO, which permits the processing of data for the fulfillment of a contract or pre-contractual measures.
Data transmission upon conclusion of contract for services
Personal data will only be passed on to third parties, if this is necessary within the framework of contract fulfillment, for example to the credit institution commissioned with the payment fulfillment.
A far-reaching transmission of your data will not take place, only if you have expressly consented to the transmission. Your data will not be passed on to third parties without your expressed consent, for example for advertising purposes.
The basis for data processing is Art. 6 para. 1 lit. b DSGVO, which permits the processing of data for the fulfillment of a contract or pre-contractual measures.
3. Social Media
I have online presences within social networks and platforms to communicate and inform about my services. When accessing the respective networks and platforms, the terms and conditions and the data processing guidelines of the corresponding operators apply.
Social Media Icons in the footer
On my website are social plugins, like those of the social network facebook.com, which is operated by Facebook Inc, 1 Hacker Way, Menlo Park, California 94025, USA.
On my website you will also find the Instagram Social Plugins, which is operated by Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA ("Instagram").
If you click on the social media icons on my page, you will get to the social media channels of Goodfeelography (Instagram & Facebook). Facebook and Instagram receive the information that you have visited my page with your IP address. If you do not want Facebook & Instagram to collect information about you on my site, you must log out of Facebook and Instagram before visiting my site. I would like to point out that, as the provider of the site, I am not aware of the content of the data transmitted or how it is used by Facebook.
The purpose and scope of the data collection and the further processing and use of the data by Facebook as well as your rights and setting options for the protection of your privacy can be found in the data protection information of Facebook under:
4. Analysis tools and advertising
This website uses Squarespace Metrics, a web analytics service provided by Squarespace, Inc. "("Squarespace"), 459 Broadway, New York, NY 10013, USA.
Squarespace will probably not associate your personal data with other data of Squarespace. You can prevent the installation of cookies by adjusting your browser software accordingly. In this case you may not be able to use all functions of my website to their full extent. By using my website you agree to the processing of the data collected about you by Squarespace in the manner and for the purpose described above.
Squarespace is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with European data protection law.
Facebook Conversion Tracking
On my website I use the "Facebook visitor action pixel", Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook").
It allows me to track users' actions after they see or click a Facebook ad. This allows me to measure the effectiveness of Facebook ads for statistical and market research purposes. The data collected in this way is anonymous to me, which means that I cannot see the personal data of individual users. However, these data are stored and processed by Facebook. Facebook may link this information to your Facebook account and use it for its own promotional purposes in accordance with Facebook's Privacy Usage Policy. See here: https://www.facebook.com/about/privacy/.
I would like to point out that, as the site provider, I am not aware of the content and storage of the data transmitted or how they are used by Facebook.
You can enable Facebook and its partners to show ads both on and off Facebook. A cookie may also be stored on your computer for these purposes.
This consent can only be given by users older than 13 years of age. If you're younger, ask a parent for advice.
5. Services of Third Parties
If I disclose data to other persons and companies (contract processors or third parties) within the scope of data processing, transfer the data to them or otherwise grant them access to the data, this is only on the basis of a legal permission (e.g. if a transfer of the data to third parties, such as payment service providers, pursuant to Art. 6 para. 1 lit. b DSGVO is required for contract fulfillment), or if you have consented, or if a legal obligation provides this or on the basis of my legitimate interests (e.g. when using agents, web hosts, etc.).
If I commission third parties with the processing of data on the basis of a so-called "order processing contract", this is done on the basis of Art. 28 DSGVO.
Web hosting via United Domains
YouTube - Integration of videos
I use videos on this website. Videos are a good way to make content easier to transport and understand. Since local hosting of videos is not possible, I use the possibility of external video providers. For my own videos I use YouTube: Operator: YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA, represented by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Due to the integration of the videos, the servers of the providers are called up for technical reasons. When you visit my site, a connection to YouTube's servers is established. The Youtube server will know which page you have visited. Once you are logged into your YouTube account, you give YouTube the ability to associate your user behavior directly with your personal YouTube profile. By logging out of your YouTube account, you avoid this. I have no knowledge of and no influence on the possible collection and use of your data by YouTube.
Use of Web Fonts
Use of Google Maps
On my website I use Google Maps (API) from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").
Google Maps is a web service for displaying interactive (country) maps in order to display geographical information visually. By using this service, the location of the Goodfeelography Studio will be displayed and your journey will be easier.
Information about your use of my website (such as your IP address) is transmitted to and stored by Google on servers in the USA as soon as you access the sub-pages into which the Google Maps map is integrated. This happens regardless of whether Google provides a user account that you are logged in with or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish to be associated with your profile on Google, you must log out before activating the button. Google saves your data (even for users who are not logged in) as usage profiles and evaluates them. Such an evaluation takes place in particular according to art. 6 para. 1 lit.f DSGVO on the basis of the legitimate interests of Google in the insertion of personalised advertising, market research and/or demand-oriented design of its website. You have the right to object to the creation of these user profiles, and you must contact Google to exercise this right.
Google LLC, based in the USA, is certified for the US-European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU.
In order to distribute the services on my website, I use the ticketing system of bookingkit GmbH, Sonnenallee 233, 12059 Berlin ("bookingkit") and have concluded a contract with bookingkit GmbH for order processing according to Art. 28 DSGVO.
If you place a reservation/purchase on my site, you agree to the storage and processing of your personal data by bookingkit. Your personal data will be forwarded to bookingkit and processed. This storage and processing of data is for the purpose of supporting and processing your orders, your authentication, processing payment transactions and improving the services of bookingkit.
On my website I offer payment via PayPal. The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal").
If you choose to pay via PayPal, your payment details will be sent to PayPal. Your data will be transmitted to PayPal on the basis of Art. 6 para. 1 lit. a DSGVO (consent) and Art. 6 para. 1 lit. b DSGVO (processing to fulfil a contract). You have the possibility to revoke your consent to data processing at any time. A revocation has no effect on the effectiveness of data processing operations in the past.
Pictures and videos starting from a size of approx. 10 MB are sent to you by the service "WeTransfer" of WeTransfer BV, Oostelijke Handelskade 751, AMSTERDAM 1019 BW NL.
Pictures & videos and your e-mail address will be sent to WeTransfer to handle the transmission process.
The WeTransfer function is used exclusively for the secure transmission of data if this is necessary and this has been previously agreed with the receiver or sender of the data. The data is usually transmitted to servers in the EU in encrypted form and stored in encrypted form.
You can find detailed information on data protection at WeTransfer here: https://wetransfer.com/legal/privacy.
6. Privacy Notice of my Facebook page www.facebook.com/goodfeelography
Name and address of those responsible:
The persons jointly responsible for the operation of this Facebook page are in the sense of the EU Data Protection Basic Regulation and other data protection regulations:
Facebook Ireland Ltd. (hereinafter "Facebook")
4 Grand Canal Square
Grand Canal Harbour
Dublin 2 / Ireland
Sylvie Gagelmann, Goodfeelography
Dolziger road 25
10247 Berlin / Germany
Information about my Facebook page:
I am running this page to draw attention to my workshops (service) and to get in contact with you as visitor and user of this Facebook page as well as my website. For further information about me and my activities etc. please visit my website: https://www.goodfeelography.de.
I, as the operator of the Facebook page, have no interest in the collection and further processing of your individual personal data for analysis or marketing purposes. You can find further information about my handling of personal data in my data protection declaration of my website at: www.goodfeelography.de/Datenschutz.
The operation of this Facebook page, including the processing of users' personal data, is based on my legitimate interests in a modern and supportive information and interaction opportunity for and with my users and visitors pursuant to Art. 6 para. 1 lit. f. DSGVO.
Processing of Personal Data by Facebook
The European Court of Justice (ECJ) ruled on 5 June 2018 (here link to: http://curia.europa.eu/juris/document/document.jsf?text=&docid=202543&pageIndex=0&docl
ang=DE&mode=req&dir=&occ=first&part=1&cid=298398) that the operator of a Facebook page is responsible for the processing of personal data together with Facebook.
I understand that Facebook processes user data for the following purposes:
- Advertising (analysis, creation of personalized advertising)
- Creation of user profiles
- Market research
Facebook Inc. the US parent company of Facebook Ireland Ltd. is certified under the EU-U.S. Privacy Shield and thus promises to comply with European data protection guidelines. Further information about the privacy shield status of Facebook can be found here: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.
The transfer and further processing of personal data of users in third countries, e.g. the USA, as well as the associated possible risks for the users cannot be excluded by me as operator of the site.
Via the so-called "Insights" of the Facebook page, I can call up statistical data of different categories. These statistics are generated and provided by Facebook. As the operator of this site, I have no influence on its generation and presentation. I cannot disable this function or prevent the generation and processing of data. For a selectable period of time and for the categories fans, subscribers, reached persons and interacting persons, the following data is provided by Facebook in relation to my Facebook page:
Since only Facebook has full access to the user data, I recommend that you contact Facebook directly if you wish to request information or ask other questions about your rights as a user (e.g. right of deletion). If you need support or have any other questions, please contact me by e-mail: firstname.lastname@example.org. If you no longer wish to receive the data processing described here, please remove the connection of your user profile to my page by using the function "I no longer like this page".
Status of information: 14.06.2018 | © 2018 Lawyer Sabrina Keese-Haufs
7. Your Rights on information, removal and blocking
You can object to the future processing of the data concerning you in accordance with Art. 21 DSGVO (General Data Protection Regulation) at any time.