Privacy Policy

1) Introduction and contact of the controller

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we will inform you about how we handle your personal data when you use our website. Personal data is all data with which you can be personally identified.

1.2 The controller in charge of data processing on this website, within the meaning of the General Data Protection Regulation (GDPR), is Kristina Flegler, Kaeffe Art, Ratiborstraße 18, 10999 Berlin, Deutschland, Tel.: 015146473585, E-Mail: info@kristinaflegler.com. The controller of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

2) Data collection when visiting or website

2.1 When you use our website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the data that your browser transmits to the site server (so-called “server log files”). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:

  • Our visited website

  • Date and time at the time of access

  • Amount of data sent in bytes

  • Source/reference from which you reached the page

  • Browser used

  • Operating system used

  • IP address used (if applicable: in anonymized form)

The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files retrospectively if there are concrete indications of unlawful use.

2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the controller). You can recognize an encrypted connection by the character string “https://” and the lock symbol in your browser line.

3) Hosting & Content-Delivery-Network

For hosting our website and displaying its content, we use the services of the following provider:

ALL-INKL.COM – Neue Medien Münnich
Owner: René Münnich
Hauptstraße 68
02742 Friedersdorf
Germany
https://all-inkl.com

All data collected on our website is processed on the provider’s servers. The use of this hosting provider is based on a data processing agreement (DPA) in accordance with Art. 28 GDPR. We have concluded a corresponding contract with the provider, which ensures that personal data of our website visitors is processed strictly according to our instructions and is not disclosed to third parties.

All-Inkl.com operates its servers exclusively in data centers located within Germany. Therefore, no personal data is transferred to third countries.

A Content Delivery Network (CDN) is currently not used.

4) Cookies and similar technologies

Um den Besuch unserer Website nutzerfreundlich zu gestalten, bestimmte Funktionen To make your visit to our website user-friendly, to provide certain functionalities, and to analyze the performance of our content, we use cookies and similar technologies (e.g. scripts, web beacons). These are small text files stored on your device.

We distinguish between:

  • Technically necessary cookies (e.g. for language settings, security, shopping cart),

  • Preference cookies (e.g. to save your settings),

  • Statistics cookies (to analyze website usage anonymously),

  • Marketing and tracking cookies (e.g. to display personalized content or advertising).

Some cookies are session cookies, which are automatically deleted when you close your browser. Others are persistent cookies that remain on your device until you delete them or they expire after a set period.

The legal basis for the use of cookies is:

  • Art. 6(1)(b) GDPR when cookies are necessary for contract performance,

  • Art. 6(1)(a) GDPR where you have given your explicit consent,

  • Art. 6(1)(f) GDPR to safeguard our legitimate interests (e.g. functional security of the website or user-friendly design).

Cookies requiring consent are only set after you have actively agreed via our cookie banner (Consent Management Tool, e.g. Complianz).

You can manage or withdraw your cookie consent at any time via the “Cookie Settings” link in the footer of our website. Additionally, you can control or disable cookies through your browser settings.

Please note that disabling essential cookies may limit the functionality of our website.

5) Contacting

When you contact us (e.g. via contact form or email), personal data is processed exclusively for the purpose of processing and responding to your request and only to the extent necessary for this purpose.
The legal basis for the processing of this data is our legitimate interest in responding to your request in accordance with Art. 6 para. 1 lit. f GDPR. If your contact is aimed at a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted if it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.

6) Comment function

As part of the comment function on this website, in addition to your comment, details of when the comment was created and the commentator name you have chosen will be saved and published on this website. Your IP address will also be logged and stored. The IP address is stored for security reasons and in the event that the person concerned violates the rights of third parties or posts illegal content by posting a comment. We need your e-mail address in order to contact you if a third party objects to your published content as unlawful.
The legal basis for the storage of your data is Art. 6 para. 1 lit. b and f GDPR.

7) Rights of the data subject

7.1 The applicable data protection law grants you the following data subject rights (rights of access and intervention) vis-à-vis the controller with regard to the processing of your personal data, whereby reference is made to the legal basis cited for the respective exercise requirements:

  • Right of access pursuant to Art. 15 GDPR;

  • Right to rectification pursuant to Art. 16 GDPR;

  • Right to erasure pursuant to Art. 17 GDPR;

  • Right to restriction of processing pursuant to Art. 18 GDPR;

  • Right to information pursuant to Art. 19 GDPR;

  • Right to data portability pursuant to Art. 20 GDPR;

  • Right to withdraw consent granted pursuant to Art. 7 para. 3 GDPR;

  • Right to lodge a complaint pursuant to Art. 77 GDPR.

7.2 RIGHT TO OBJECT
IF, IN THE CONTEXT OF A BALANCING OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME WITH EFFECT FOR THE FUTURE ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENSE OF LEGAL CLAIMS.
IF YOUR PERSONAL DATA ARE PROCESSED BY US FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING. YOU CAN EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

8) Duration of the storage of personal data

The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing and – if relevant – additionally by the respective statutory retention period (e.g. retention periods under commercial and tax law).
When processing personal data on the basis of express consent in accordance with Art. 6 para. 1 lit. a GDPR, the data concerned will be stored until you withdraw your consent.
If there are statutory retention periods for data that is processed within the framework of legal or similar obligations on the basis of Art. 6 para. 1 lit. b GDPR, this data will be routinely deleted after the retention periods have expired, provided that it is no longer required for contract fulfillment or contract initiation and/or we no longer have a legitimate interest in further storage.

When processing personal data on the basis of Art. 6 para. 1 lit. f GDPR, this data is stored until you exercise your right to object in accordance with Art. 21 para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.
When processing personal data for the purpose of direct marketing on the basis of Art. 6 para. 1 lit. f GDPR, this data will be stored until you exercise your right to object in accordance with Art. 21 para. 2 GDPR.
Unless otherwise stated in the other information in this declaration on specific processing situations, stored personal data will be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

Scroll to Top