PRIVACY POLICY

​

​

​

​

The data controller within the meaning of the General Data Protection Regulation and other national data protection laws as well as other data protection regulations is:

​

I. Name and address of the data controller

​

Susan Kraus

Mühlenkamp 50 

22303 Hamburg

e-mail: info@susankraus.de
internet: www.susankraus.de

fon:        +49 (0) 40 88297825

mobil:    +49 (0) 179 4789339

Managing Director authorised to represent the company: Susan Kraus

​

II. General information on data processing

 

1. Legal basis for processing personal data

Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 (a) of the EU Data Protection Ordinance (GDPR) serves as the legal basis for the processing of personal data.

In the processing of personal data required for the performance of a contract to which the data subject is a party, Art. 6 para. 1 (b) GDPR serves as the legal basis. This also applies to processing operations that are necessary for carrying out pre-contractual measures. Insofar as the processing of personal data is required to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 (c) GDPR serves as the legal basis. In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 (d) GDPR applies as the legal basis.

If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 para. 1 (f) GDPR serves as the legal basis for processing.

 

2. Data deletion and storage duration

The data subject's personal data will be deleted or blocked as soon as the reason for storage ceases to apply. Furthermore, data may be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the data controller is subject. Blocking or erasure of data will be carried out even if a storage deadline prescribed by the above-mentioned standards expires, unless data storage is a necessity for concluding or performing a contract.

 

IV. Provision of the website and creation of log files

 

1. Description and scope of data processing

Every time you visit our website, our system automatically collects data and information from the computer system of the accessing computer.

The following data is collected:
(1) Information regarding the used browser type and version
(2) The user’s operating system
(3) The user's IP address
(4) Date and time of access
(5) Websites from which the user's system accesses our website

The data is also stored in our system's log files. This data is not stored together with other personal user data. The data you provide helps us to design and continuously improve your shopping experience in our online shop. For this purpose, user profiles are created using a pseudonym. When this purpose is achieved, log data is deleted.

 

2. Legal basis for data processing

The legal basis for the temporary storage of data and log files is Art. 6 para. 1 (f) GDPR.

 

3. Purpose of the data processing

Temporary storage of IP address by the system is necessary to enable delivery of the website to the user's computer. To this end, the user's IP address must remain stored for the duration of the session.

The data is stored in log files to ensure the website's functionality. The data is also used to optimise the website and to ensure the security of our information technology systems. No evaluation of the data for marketing purposes is undertaken in this context.

For these purposes, our legitimate interest in the processing of data according to Art. 6 para. 1 (f) GDPR.

 

4. Duration of storage

The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In the case of data collection for providing the website, this will be undertaken once the respective session has ended.

Any data is to be stored in log files will be stored for seven days at most. Further storage is possible. In this case, the user's IP addresses will be deleted or distorted, so that identification of the accessing client is no longer possible.

 

5. Objection and removal option

The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website and to protect our legitimate interests. Consequently, there the user inherently has no option to object.

​

​

​

​

​

​