Data Privacy Policy for Facebook Pages
to homepage
Information on data protection for our Facebook presence
1) Information on the collection of personal data and contact details of the controller
1.1 In the following, we inform you about the handling of your personal data. Personal data is all data with which you can be personally identified.
Please check carefully which personal data you share with us via Facebook. As long as you are logged into your Facebook account and visit our Facebook profile, Facebook can associate this with your Facebook profile. We expressly point out that Facebook stores the data of its users (e.g. personal information, IP address, etc.) and may also use it for business purposes. Further information on Facebook's data processing can be found in Facebook's data policy at https://de-de.facebook.com/policy.php.
We have no influence on the data collection and further processing by Facebook. Furthermore, it is not apparent to us to what extent, where and for how long the data is stored, to what extent Facebook complies with existing deletion obligations, which evaluations and links are made with the data and to whom the data is passed on. If you wish to prevent Facebook from processing personal data transmitted by you to us, please contact us by other means. Our full contact details can be found in our imprint on Facebook.
1.2 The controller for data processing within the meaning of the General Data Protection Regulation (GDPR) is Mirko Haban & Kathrin Scheuerlein GbR, An der Industriebahn 12-16 | Gebäude 409a, 13088 Berlin, Germany, Tel.: +49(0) 30 20 9532 93, E-Mail: info@kitzenart.com, insofar as we process the data transmitted to us by you via Facebook solely ourselves. Insofar as the data transmitted to us by you via Facebook is also or exclusively processed by Facebook, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland, is also the controller for data processing within the meaning of the General Data Protection Regulation (GDPR) in addition to us.
The controller for the processing of personal data is the natural or legal person who alone or jointly with others decides on the purposes and means of the processing of personal data.
2) Data Protection Officer
You can contact Facebook's data protection officer via the online contact form provided by Facebook at https://www.facebook.com/help/contact/540977946302970.
3) Data processing when contacting us
We ourselves collect personal data when you contact us, for example, via a contact form or messenger. Which data we collect when you contact us via a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of answering your request or for contacting you and the associated technical administration. The legal basis for the processing of the data is our legitimate interest in answering your request in accordance with Art. 6 Para. 1 lit. f GDPR. If your contact aims at concluding a contract, the additional legal basis for the processing is Art. 6 Para. 1 lit. b GDPR. Your data will be deleted after final processing of your request, provided that there are no legal retention obligations to the contrary. We assume that processing is complete if it can be inferred from the circumstances that the matter concerned has been finally clarified.
4) Data processing for contract execution
If your contact via Facebook serves as the basis for a contract for the delivery of goods and/or the provision of services with us, we will additionally process the data transmitted to us by you in this context as follows in the event of a contract conclusion:
4.1 We pass on your payment data to the commissioned credit institution as part of payment processing, insofar as this is necessary for payment processing. The legal basis for the transfer of data is Art. 6 Para. 1 lit. b GDPR.
4.2 For contracts for the delivery of goods, we pass on the personal data collected by us to the transport company commissioned with the delivery as part of the contract execution, insofar as this is necessary for the delivery of the goods.
5) Rights of the data subject
5.1 The applicable data protection law grants you comprehensive data subject rights (rights of access and intervention) vis-à-vis the controller with regard to the processing of your personal data, about which we inform you below:
- Right of access in accordance with Art. 15 GDPR;
- Right to rectification in accordance with Art. 16 GDPR;
- Right to erasure in accordance with Art. 17 GDPR;
- Right to restriction of processing in accordance with Art. 18 GDPR;
- Right to notification in accordance with Art. 19 GDPR;
- Right to data portability in accordance with Art. 20 GDPR;
- Right to withdraw granted consents in accordance with Art. 7 Para. 3 GDPR;
- Right to lodge a complaint in accordance with Art. 77 GDPR.
5.2 RIGHT TO OBJECT
IF, WITHIN THE FRAMEWORK OF A BALANCING OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING REMAINS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ASSERTION, EXERCISE OR DEFENSE OF LEGAL CLAIMS.
IF YOUR PERSONAL DATA IS PROCESSED BY US FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING. YOU CAN EXERCISE THE RIGHT TO OBJECT AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.
6) Duration of storage of personal data
The duration of the storage of personal data is determined by the respective statutory retention period (e.g. commercial and tax law retention periods). After the expiry of the period, the corresponding data will be routinely deleted, provided that they are no longer required for contract fulfillment or contract initiation and/or we no longer have a legitimate interest in further storage.