Privacy Policy
Thank you for your interest in our website. Below we inform you about how we use and process your personal data on this website. Personal data means any information relating to an identified or identifiable natural person ('data subject'), e.g: Name, address, e-mail addresses, user behavior, etc.
We attach great importance to the protection of your personal information and collect only information that is necessary to enable our services and functions. We collect, use, disclosure and protect your personal data confidentially and in accordance with legal regulations (including the Federal Data Protection Act (FDPA), the Telemedia Act (TMA), General Data Protection Regulation (GDPR), and other applicable local laws). By visiting our website you consent to our collection, transfer, processing, storage, disclosure and protection of your information as described in this Privacy Policy.
If you don't agree with our Privacy Policy or have any questions, please contact us at: info@ExtractArt.eu
1. Responsible for data processing
Responsible for the collection, processing and use of your personal data according to GDPR is
Tim van den Oudenhoven
Weserstr. 17
10247 Berlin
E-Mail: info@ExtractArt.eu
Tel. +491781479478
If you wish to object to the collection, processing or use of your data by us in accordance with this data protection declaration as a whole or for individual measures, you can send your objection by e-mail or letter to the following contact data:
Tim van den Oudenhoven
Weserstr. 17
10247 Berlin
E-Mail: info@ExtractArt.eu
Additionally, you can also receive information about the data stored by us free of charge at any time (see point 10).
2. Collection, processing, sharing and use of personal data
You can visit our webpage for viewing purposes without providing any personal information. In this case, we only collect the data that your browser transmits to our server. This is technically necessary to enable you the visit of our website technically and to guarantee stability and security (legal basis is Art. 6 Par. 1 S. 1 lit. f GDPR). This includes the IP address, date and time of the request, time zone difference to Greenwich Mean Time (GMT), the page from which you are visiting us or the name of the requested file, access status/HTTP status code, browser, operating system and its interface, language and version of the software. These data are evaluated exclusively for the improvement of our offer.
In addition to the purely informative use of our website, you can also order goods, open a customer account, contact us or subscribe to our newsletter. For this purpose, you must generally provide further personal data which we use to provide the respective service and to which the aforementioned data processing principles apply. In order to process your order, we require your name, address and payment details. Your valid e-mail address is required for the confirmation of your order and for customer login. We can also contact you by e-mail if this is necessary for order processing. This processing is carried out to fulfil our contractual obligations and services in accordance with Art. 6 Par. 1 S. 1 lit. b GDPR.
Additionally, you can voluntarily create a customer account through which we can store your data for future purchases. When you create an account, the data you provide will be stored revocably. All other data, including your user account, can always be overwritten in the customer area. If you wish to delete your customer account, you can contact us at any time by e-mail at info@ExtractArt.eu and request the deletion. For security reasons, the deletion can only be carried out by our team.
Also you can subscribe to our newsletter. If you consent to receive our newsletter via our website, we will collect and use your e-mail address to send you a newsletter. Your consent can be revoked at any time. You can unsubscribe from the newsletter at any time and free of charge by clicking on the link „unsubscribe“ . The aforementioned data is collected, processed and used exclusively for sending the newsletter. We store this information until you revoke your consent.
The registration to our newsletter takes place in a so-called Double-Opt-In procedure. This means that you will receive an e-mail after registration in which you will be asked to confirm your registration. This confirmation is necessary so that nobody can register with external e-mail addresses. The registrations for the newsletter are logged in order to be able to prove the registration process according to the legal requirements. This includes the storage of the registration and confirmation time, as well as the IP address. The newsletter will be sent on the basis of your consent in accordance with Art. 6 Par.1 lit. a GDPR.
For the operation of our online shop we use Prestashop.
The hosting services used by us serve the provision of the following services: Infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services which we use for the purpose of operating this online service. For these purposes, we or our hosting provider process your data on the basis of our legitimate interests in the efficient and secure provision of this online service in accordance with Art. 6 Par.1 lit. f GDPR and Art. 28 GDPR. We, or our hosting provider, collect and store data on the basis of our legitimate interests within the meaning of Art. 6 Par.1 lit. f GDPR data about each access to the server on which this service is located (so-called server log files).
We are obliged by commercial and tax law to store your address, payment and order data for a period of 10 years. However, after 2 years we will restrict the processing, i.e. your data will only be used to comply with legal obligations.
Your personal data will not be transmitted to third parties for purposes other than those listed below. We will only share your personal data with third parties in the following limited circumstances:
you have given your express consent as per Art. 6 Par. 1 S. 1 lit. a GDPR
the transfer of your data is necessary for asserting, exercising or defending legal claims or other legal processes
pursuant to Art. 6 Par. 1 S. 1 lit. f GDPR
data transfer is necessary for compliance with a legal obligation according to Art. 6 Par. 1 S. 1 lit. c GDPR
this is necessary for the performance of a contract with you as per Art. 6 Par. 1 S. 1 lit. b GDPR
A transfer of your data takes place to the dispatch enterprise assigned with the supply, as far as this is necessary for the supply of the goods. Our service providers may only use this data to process your order. Also we use the data provided by you without your separate consent exclusively for the fulfilment and completion of your order. The legal basis for this is Art. 6 Par. 1 S. 1 lit. a GDPR.
Furthermore, your payment data will be passed on to the credit institution or payment service provider carefully selected and commissioned by us as part of the processing of payments. The extent of the data transfer depends on the payment institution through which the payment is made. The data protection declarations of the respective payment institutions apply.
In the case of payment with "PayPal via PayPal Plus", "Direct debit via PayPal Plus", "Credit card via PayPal Plus" or "PayPal Plus invoice", your payment data will be forwarded to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as "PayPal"). In the case of payment methods "credit card via PayPal", "direct debit via PayPal" or "PayPal invoice", a credit check is carried out by PayPal. Mathematical-statistical methods are used to calculate a rating with regard to the probability of default (so-called calculation of a scoring value).
PayPal uses the result of the credit assessment in relation to the statistical probability of non-payment for the purpose of deciding whether to provide the respective payment method. If score values are included in the result of the credit rating information, these have their basis in a scientifically recognized mathematical-statistical procedure. Address data, among other things, is included in the calculation of the score values. Please refer to PayPal's privacy policy for further information on data protection, including the information used:https://www.paypal.com/de/webapps/mpp/ua/privacy-full
The collected data will be forwarded to your selected service provider (American Express, VISA, MasterCard) and used by them for payment processing.
You can obtain the relevant data privacy policy at the following links:
American Express
https://www.americanexpress.com/de/legal/online-datenschutzerklarung.html
MasterCard
https://www.mastercard.us/en-us/about-mastercard/what-we-do/privacy.html
VISA
https://www.visa.de/nutzungsbedingungen/visa-privacy-center.html
3. Cookies
We use cookies on our webpage to make your visit attractive and to enable the use of certain functions. The legal basis for this is Art. 6 Par. 1 S. 1 lit. f GDPR.
Cookies are small text files that are stored on your computer. Most of the cookies we use will be deleted from your hard disk at the end of the browser session (so-called session cookies). Other cookies remain on your computer and enable us to recognize your computer on your next visit (so-called persistent cookies). On our webpage we use the following types of cookies: functionality, analytical, social and advertising.
4. How can I refuse the use of cookies?
You can set your browser to accept cookies only if you agree to this. In the menu bar of your web browser, the help function shows you how to reject new cookies and deactivate cookies already received. You can disable or delete Flash cookies that are used by browser add-ons by changing the settings of the browser add-on or via the manufacturer's website of the browser add-on.
5. Google Analytics
This website uses Google Analytics, a web analysis service of Google Inc. "("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website to analyze how users use the site. The information generated by cookies about your use of this website is usually transferred to a Google server in the USA and stored there. However, if IP anonymization is activated on this website, Google will reduce your IP address within Member States of the European Union or in other states party to the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website and Internet use.
We use Google Analytics with the extension "_anonymizeIp()". This shortens the processing of IP addresses. A personalization can thus be ruled out. As far as there is a personal reference to the data collected about you, this will be excluded immediately and the personal data will be deleted immediately.
The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data. You may refuse the use of cookies by selecting the appropriate settings on your browser, however, please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link.
http://tools.google.com/dlpage/gaoptout?hl=de
We use Google Analytics to analyze and regularly improve the use of our website. We can improve our offer and make it more interesting for you as a user. For exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, link.
https://www.privacyshield.gov/EU-US-Framework
Third Party Information: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of use are available at: http://www.google.com/analytics/terms/de.html
Privacy policy overview available at:
http://www.google.com/intl/de/analytics/learn/privacy.html
As well as the data protection declaration: http://www.google.de/intl/de/policies/privacy
We also use Google Analytics to analyze visitor flows across devices using a user ID. You can deactivate the cross-device analysis of your usage in your customer account under "My data", "Personal data".
By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above.
Without your express consent (opt-in procedure), we will not use the above procedures to collect your personal data (name, address, etc.) and to merge the personal data with non-personal data (e.g. user profiles).
Instead of a browser plug-in or for browsers on mobile devices, please click the following link to set an opt-out cookie that prevents tracking by Google Analytics within this website (the opt-out cookie only works in this browser and only for this domain, delete your cookies in the browser, you must click the link again): Disable Google Analytics
6. Google Adwords
We use the "Google Adwords" offer to draw attention to our content with the help of advertising materials (so-called Google Adwords) on external websites. This is to show you the advertising that could be interesting for you and to make our offer on the website more interesting for you.
These advertising media are delivered by Google via so-called "Ad Servers". If you access our website via a Google advert, Google Adwords stores a cookie on your PC. These cookies usually expire after 30 days and are not intended to identify you personally. For this cookie, the unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (mark that the user no longer wishes to be addressed) are usually stored as analysis values. These cookies enable Google to recognize your Internet browser. We only receive statistical evaluations from Google. We do not receive any further data from the use of advertising material; in particular, we cannot identify users on the basis of this information.
You can refuse the use of tracking tools in various ways:
by adjusting your browser software, in particular, the suppression of third-party cookies means that you will not receive any ads from third-party providers;
by disabling cookies for conversion tracking by setting your browser to block cookies from the "www.googleadservices.com" domain, https://www.google.de/settings/ads, which will be deleted when you delete your cookies;
by deactivating the interest-based ads of the providers that are part of the "About Ads" self-regulation campaign via the link, this setting being deleted if you delete your cookies;
by permanent deactivation in your browsers Firefox, Internet Explorer or Google Chrome under the link. Please note that in this case, you may not be able to use all functions of this offer in full.
The legal basis for the processing of your data is Art. 6 Par. 1 S. 1 lit. f GDPR. For more information about Google's privacy policy, click here and here. Alternatively, you can visit the website of the Network Advertising Initiative (NAI) at http://www.networkadvertising.org Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
7. Use of Social-Media-Plug-ins
We currently use the following social media plug-ins: Facebook, Instagram, Pinterest, Twitter. You can recognize the provider of the plug-in by the marking on the box above its initial letter or the logo. By clicking on the logo-button you will be redirected to our webpage at the respective network.
The connection to the respective network is implemented by the so-called 2-Click-Social-Media-Buttons. This means that when you visit our site, no personal data is initially passed on to the providers of the plug-ins. However, you can use the corresponding button with the respective logo to communicate directly with the provider of the plug-in. Only if you click on the marked field and thereby activate it, the plug-in provider receives the information that you have accessed the corresponding website of our online offer.
Additionally, the log-files mentioned under point 2 of this privacy policy will be transmitted. In the case of Facebook, the IP address is anonymized immediately after collection, according to the respective provider in Germany. By activating the plug-in, personal data is transferred from you to the respective plug-in provider and stored there (for US providers in the USA). Since the plug-in provider collects data mainly via cookies, we recommend that you delete all cookies before clicking on the grayed-out box using your browser's security settings.
The data collected about you will be stored by the plug-in provider as user profiles and used for advertising and market research purposes. The data is transferred regardless of whether you have an account with the plug-in provider and are logged in there.
You have a right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right. Through the plug-ins we offer you the possibility to get to know our offer and the corresponding content in the respective social networks, so that we can improve our offer and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Art. 6 Par. 1 S. 1 lit. f GDPR.
We also recommend you inform yourself about the data protection regulations of the respective plug-in provider, available at:
Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php; http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applicationsas well as http://www.facebook.com/about/privacy/your-info#everyoneinfo. Facebook has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
Instagram LLC, 1601 Willow Road, Menlo Park CA 94025, USA: https://help.instagram.com/155833707900388. Instagram is part of the Facebook company. Facebook has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
Pinterest: Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA,
Pinterest Europe Ltd., Palmerston House, 2nd Floor Fenian Street, Dublin 2, Irland,: policy.pinterest.com/de/privacy-policy. Pinterest has submitted to the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework.
Twitter, Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA; twitter.com/privacy. Twitter has submitted to EU-US-Privacy-Shield, www.privacyshield.gov/EU-US-Framework.
8. Data security
We protect our website and by technical and organizational measures against loss, destruction, access, modification or distribution of your data by unauthorized persons. When you contact us, your personal data is encrypted using the SSL coding system. You should close the browser window when you have finished communicating with us, especially if you share your computer with others.
9. Your rights and choices
You have the right to launch a claim to a data protection supervisory authority about our processing of your personal data in the EU country in which you live or work where you think we have infringed data protection laws.
Additionally, according to the EU- General Data Protection Regulation, you have the right to obtain information free of charge about the personal data stored about you, as well as
- The right to be informed
- The right of access to the personal data
- The right to rectification
- The right to erasure („right to be forgotten“)
- The right to the restriction of processing
- The right to data portability
- The right to object to the processing
To exercise these rights or if you have any further questions regarding data protection, you can contact us at any time:
Tim van den Oudenhoven
Weserstr. 17
10247 Berlin
E-Mail: info@ExtractArt.eu
Tel. +491781479478
10. Updates to this Policy
This Privacy Policy is currently valid and dated August 2019. Due to the further development of our website and offers above or due to changings in legal or official requirements, we may also change this policy correspondingly in the future. In case of significant changes, we will notify you by posting a notice on our website.