Privacy Policy
General notice and mandatory information
Identification of the responsible party
The responsible party for data processing on this website is:
prosa.interior
Sarah Profanter
c/o IP-Management #14504, Ludwig-Erhard-Str. 18
20459 Hamburg
The responsible party alone or jointly with others decides on the purposes and means of processing personal data (e.g. names, contact details, etc.).
Revocation of your consent to data processing
Some data processing operations are only possible with your express consent. A revocation of your already given consent is possible at any time. For the revocation, an informal notification by e-mail is sufficient. The legality of the data processing carried out up to the revocation remains unaffected by the revocation.
Right to complain to the supervisory authority
In the event of a breach of data protection law, as a data subject, you have the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority for data protection issues is the data protection officer of the federal state in which our company is based. The following link provides a list of data protection officers and their contact details: https://www.bfdi.bund.de/EN/Infothek/Anschriften_Links/anschriften_links-node.html.
Right to data portability
You have the right to have data, which we process automatically on the basis of your consent or in fulfilment of a contract, handed over to you or to third parties. The data will be provided in a machine-readable format. If you request direct transfer of the data to another responsible party, this will only be done to the extent that it is technically feasible.
Right to Information, Correction, Blocking, Deletion
At any time, within the framework of the applicable legal provisions, you have the right to obtain free information about your stored personal data, the origin of the data, their recipients, and the purpose of the data processing, as well as a right to correct, block, or delete this data. You can contact us at any time using the contact options listed in the imprint for this purpose and for any further questions regarding personal data.
SSL or TLS Encryption
For security reasons and to protect the transmission of confidential content that you send to us as the site operator, our website uses SSL or TLS encryption. This means that data that you transmit via this website cannot be read by third parties. You can recognize an encrypted connection by the “https://” address line of your browser and by the lock symbol in the browser line.
Server Log Files
The provider of the website automatically collects and stores information in server log files that your browser automatically transmits to us. This information includes:
Visited page on our domain
Date and time of the server request
Browser type and browser version
Operating system used
Referrer URL
Host name of the accessing computer
IP address
These data will not be merged with other data sources. The basis for data processing is Art. 6 para. 1 lit. b GDPR, which allows the processing of data for the fulfillment of a contract or pre-contractual measures.
Google Analytics
Nature and extent of processing
We use Google Analytics from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as an analysis service for the statistical evaluation of our online offerings. This includes, for example, the number of views of our online offerings, visited sub-pages, and the length of visitors’ stays. Google Analytics uses cookies and other browser technologies to evaluate user behavior and to recognize users. This information is used, among other things, to compile reports on website activity.
Purpose and legal basis
The use of Google Analytics is based on your consent in accordance with Art. 6 Para. 1 lit. a. GDPR and § 25 Para. 1 TTDSG.
We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. In cases where there is no adequacy decision by the European Commission (e.g. in the USA), we have agreed other appropriate safeguards with the recipients of the data within the meaning of Art. 44 ff. GDPR. These are – unless otherwise stated – standard contractual clauses of the EU Commission in accordance with Implementing Decision (EU) 2021/914 of 4 June 2021. You can view a copy of these standard contractual clauses at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE.
In addition, we obtain your consent in accordance with Art. 49 Para. 1 sentence 1 lit. a. GDPR before such a transfer to a third country, which you give via the consent manager (or other forms, registrations, etc.). We would like to point out that for third-country transfers, unknown risks may exist in detail (e.g. data processing by security authorities of the third country, the exact scope of which and their consequences for you, we do not know, over which we have no influence, and which you may not become aware of under certain circumstances).
Storage duration
The specific storage duration of the processed data is not influenced by us, but determined by Google Ireland Limited. For more information, please refer to the Privacy Policy for Google Analytics: https://policies.google.com/privacy.PayPal
Our website facilitates payment via PayPal. The provider of the payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.
When you make a payment via PayPal, your payment data entered by you will be transmitted to PayPal.
The transmission of your data to PayPal is based on Art. 6 para. 1 lit. a DSGVO (consent) and Art. 6 para. 1 lit. b DSGVO (processing for the performance of a contract). You have the option to withdraw your consent at any time. However, any data processing that occurred in the past remains effective even after you withdraw your consent.
Source: Privacy configurator from Mein-Datenschutzbeauftragter.de