The following privacy policy applies to the use of the online service https://glueckskristall.de (hereinafter referred to as "Website"). Protecting your privacy is very important. The collection and processing of your personal data is done in accordance with applicable data protection regulations, particularly the General Data Protection Regulation (GDPR).
1. Controller The controller for the collection, processing, and use of your personal data within the meaning of Article 4(7) GDPR is: Paweena Pelzl, Am Strasserfeld 14, 40627 Düsseldorf Email: service@glueckskristall.de Phone: 0049 (0) 179 5095533 If you wish to object to the collection, processing, or use of your data in accordance with these privacy policies either in total or for individual measures, you may direct your objection to the controller.
2. General Purposes of Processing Personal data is used for the purpose of operating the Website.
3. Which Data is Used and Why 3.1 Hosting The hosting services used by Glueckskristall (owner Paweena Pelzl) are for providing the following services: infrastructure and platform services, computing capacity, storage space, database services, security services, and technical maintenance services, which we use for operating the Website. In this context, Glueckskristall (owner Paweena Pelzl) or the hosting provider processes inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, prospects, and visitors to this Website based on legitimate interests in the efficient and secure provision of the Website according to Article 6(1)(f) GDPR in conjunction with Article 28 GDPR.
3.2 Access Data Glueckskristall (owner Paweena Pelzl) collects information about you when you use this Website. Glueckskristall (owner Paweena Pelzl) automatically collects information about your usage behavior and interactions with the Website and records data about your computer or mobile device. Glueckskristall (owner Paweena Pelzl) collects, stores, and uses data about each access to the Website (so-called server log files). Access data includes:
Name and URL of the retrieved file
Date and time of retrieval
Transferred amount of data
Message about successful retrieval (HTTP response code)
Browser type and browser version
Operating system
Referrer URL (i.e., the previously visited page)
Websites accessed by the user's system via the Website
Internet Service Provider of the user
IP address and the requesting provider
Glueckskristall (owner Paweena Pelzl) uses this log data without assigning it to your person or any other profiling for statistical evaluations for the purpose of operating, securing, and optimizing the Website, but also for the anonymous collection of the number of visitors to the Website (traffic) as well as the extent and nature of the use of the Website and services. Based on this information, Glueckskristall (owner Paweena Pelzl) can provide personalized and location-based content and analyze traffic, search for and fix errors, and improve services. This also constitutes a legitimate interest according to Article 6(1)(f) GDPR. Glueckskristall (owner Paweena Pelzl) reserves the right to review the log data subsequently if there are specific indications of a legitimate suspicion of illegal use. IP addresses are stored by Glueckskristall (owner Paweena Pelzl) for a limited period in the log files if this is necessary for security purposes or for the provision or billing of a service, e.g., when you use one of the offers. After the termination of the order process or after payment, Glueckskristall (owner Paweena Pelzl) deletes the IP address if it is no longer required for security purposes. Additionally, Glueckskristall (owner Paweena Pelzl) stores the date of your last visit as part of your account (e.g., during registration, login, clicking links, etc.).
3.3 Cookies Glueckskristall (owner Paweena Pelzl) uses so-called session cookies to optimize the Website. A session cookie is a small text file that is sent by the respective servers when visiting a website and temporarily stored on your hard drive. This file contains a so-called session ID, which allows different requests from your browser to be assigned to the same session. This means your computer can be recognized when you return to the Website. These cookies are deleted after you close your browser. They serve, for example, to enable you to use the shopping cart function across multiple pages. Glueckskristall (owner Paweena Pelzl) also uses a small number of persistent cookies (also small text files placed on your device) that remain on your device and allow Glueckskristall (owner Paweena Pelzl) to recognize your browser during your next visit. These cookies are stored on your hard drive and delete themselves after the specified time. Their lifespan is between 1 month and 10 years. This allows Glueckskristall (owner Paweena Pelzl) to present the offer in a more user-friendly, effective, and secure manner, and for example, display information tailored to your interests on the page. The legitimate interest in the use of cookies according to Article 6(1)(f) GDPR lies in making the Website more user-friendly, effective, and secure. The cookies store information such as:
Log-in information
Language settings
Entered search terms
Information about the number of visits to the Website and the use of individual functions.
When activating the cookie, it is assigned an identification number and there is no allocation of your personal data to this identification number. Your name, IP address, or similar data that would allow allocation of the cookie to you is not stored in the cookie. Based on cookie technology, Glueckskristall (owner Paweena Pelzl) only receives pseudonymized information, such as which pages of the shop were visited, which products were viewed, etc. You can configure your browser to inform you in advance about the setting of cookies and decide on a case-by-case basis whether to accept cookies for specific cases or generally exclude them, or to prevent cookies altogether. This may limit the functionality of the Website.
3.4 Data for Fulfillment of Contractual Obligations Glueckskristall (owner Paweena Pelzl) processes personal data required to fulfill contractual obligations, such as name, address, email address, ordered products, billing, delivery, and payment data. The collection of this data is necessary for the conclusion of the contract. Data is deleted after the expiration of warranty periods and legal retention periods. Data linked to a user account (see below) remains in any case for the duration of the maintenance of this account. The legal basis for processing this data is Article 6(1)(b) GDPR, as this data is necessary to fulfill the contractual obligations towards you.
3.5 User Account You can create a user account on the Website. If you wish to do so, Glueckskristall (owner Paweena Pelzl) requires the personal data requested during login. When logging in later, only your email and the password you chose are needed. For new registration, Glueckskristall (owner Paweena Pelzl) collects master data (e.g., name, address), communication data (e.g., email address), and access data (password). You can have an account created by Glueckskristall (owner Paweena Pelzl) deleted at any time without incurring any costs other than the transmission costs according to the basic tariffs. A notification in text form to the contact details mentioned in section 1 (e.g., email, letter) is sufficient. Glueckskristall (owner Paweena Pelzl) will then delete your stored personal data unless it still needs to be stored for the processing of orders or due to legal retention requirements. The legal basis for processing this data is your consent according to Article 6(1)(a) GDPR.
3.6 Newsletter When creating a user account, there is a checkbox for the newsletter. Currently, Glueckskristall (owner Paweena Pelzl) does not send newsletters.
3.7 Email Contact If you contact Glueckskristall (owner Paweena Pelzl) (e.g., via contact form or email), Glueckskristall (owner Paweena Pelzl) processes your information to handle the request and in case follow-up questions arise. If data processing is carried out to perform pre-contractual measures based on your request, or if you are already a customer, to fulfill the contract, the legal basis for this data processing is Article 6(1)(b) GDPR. Further personal data is processed only if you consent (Article 6(1)(a) GDPR) or if we have a legitimate interest in processing your data (Article 6(1)(f) GDPR). A legitimate interest exists, for example, in responding to your email.
4. Storage Duration Unless specifically stated otherwise, Glueckskristall (Owner: Paweena Pelzl) retains personal data only as long as necessary to fulfill the intended purposes. In some cases, the legislator requires the retention of personal data, such as in tax or commercial law. In such cases, Glueckskristall (Owner: Paweena Pelzl) will only keep the data for these legal purposes, without further processing, and delete it after the statutory retention period has expired.
5. Your Rights as a Data Subject Under applicable laws, you have various rights regarding your personal data. If you wish to exercise these rights, please send your request via email or mail to the address specified in Section 1, with clear identification of yourself. Below is an overview of your rights:
5.1 Right to Confirmation and Information You have the right to receive clear information about the processing of your personal data. Specifically: You have the right to obtain from Glueckskristall (Owner: Paweena Pelzl) a confirmation as to whether personal data concerning you is being processed. If this is the case, you have the right to request a free copy of the personal data stored about you, along with information on the following:
The purposes of processing;
The categories of personal data being processed;
The recipients or categories of recipients to whom the personal data have been or will be disclosed, particularly in third countries or international organizations;
Where possible, the planned duration for which the personal data will be stored, or if that is not possible, the criteria used to determine that duration;
The existence of a right to rectification or deletion of your personal data or restriction of processing by the controller, or a right to object to such processing;
The existence of a right to lodge a complaint with a supervisory authority;
If the personal data was not collected from you, all available information about the source of the data;
The existence of automated decision-making, including profiling, according to Art. 22(1) and (4) GDPR, and – at least in these cases – meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you.
5.2 Right to Rectification You have the right to request that Glueckskristall (Owner: Paweena Pelzl) correct and, if necessary, complete your personal data. Specifically: You have the right to obtain from Glueckskristall (Owner: Paweena Pelzl) the immediate correction of inaccurate personal data concerning you. Considering the purposes of processing, you also have the right to request the completion of incomplete personal data – including by means of a supplementary statement.
5.3 Right to Erasure ("Right to be Forgotten") In a number of cases, Glueckskristall (Owner: Paweena Pelzl) is obliged to erase personal data concerning you. Specifically: Under Art. 17(1) GDPR, you have the right to request from Glueckskristall (Owner: Paweena Pelzl) the immediate erasure of personal data concerning you, and Glueckskristall (Owner: Paweena Pelzl) is obliged to erase personal data immediately if one of the following reasons applies:
The personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
You withdraw your consent on which the processing is based according to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR, and there is no other legal basis for the processing;
You object to the processing according to Art. 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing according to Art. 21(2) GDPR;
The personal data have been unlawfully processed;
Erasure of the personal data is necessary for compliance with a legal obligation under Union or Member State law to which we are subject;
The personal data were collected in relation to the offer of information society services according to Art. 8(1) GDPR.
5.4 Right to Restriction of Processing In a number of cases, you have the right to request from Glueckskristall (Owner: Paweena Pelzl) a restriction of the processing of your personal data. Specifically: You have the right to obtain from Glueckskristall (Owner: Paweena Pelzl) the restriction of processing if one of the following conditions is met:
The accuracy of the personal data is contested by you, for a period enabling Glueckskristall (Owner: Paweena Pelzl) to verify the accuracy of the personal data;
The processing is unlawful and you oppose the erasure of the personal data and instead request the restriction of their use;
Glueckskristall (Owner: Paweena Pelzl) no longer needs the personal data for processing purposes, but you require the data for the establishment, exercise, or defense of legal claims;
You have objected to processing according to Art. 21(1) GDPR, as long as it has not yet been determined whether the legitimate grounds of Glueckskristall (Owner: Paweena Pelzl) override your interests.
5.5 Right to Data Portability You have the right to receive personal data concerning you in a machine-readable format, transmit it, or have it transmitted by Glueckskristall (Owner: Paweena Pelzl). Specifically: You have the right to receive the personal data concerning you that you have provided to Glueckskristall (Owner: Paweena Pelzl) in a structured, commonly
used, and machine-readable format, and you have the right to transmit those data to another controller without hindrance from Glueckskristall (Owner: Paweena Pelzl), provided that
the processing is based on consent according to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR or on a contract according to Art. 6(1)(b) GDPR, and
the processing is carried out by automated means. In exercising your right to data portability according to the preceding paragraph, you have the right to have the personal data transmitted directly from Glueckskristall (Owner: Paweena Pelzl) to another controller, where technically feasible.
5.6 Right to Object You have the right to object to the lawful processing of your personal data by Glueckskristall (Owner: Paweena Pelzl) if this is based on your particular situation and the interests of Glueckskristall (Owner: Paweena Pelzl) in the processing do not outweigh your interests. Specifically: You have the right to object at any time, for reasons related to your particular situation, to the processing of personal data concerning you based on Art. 6(1)(e) or (f) GDPR; this also applies to profiling based on these provisions. Glueckskristall (Owner: Paweena Pelzl) will no longer process the personal data unless Glueckskristall (Owner: Paweena Pelzl) can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims. If personal data are processed by Glueckskristall (Owner: Paweena Pelzl) for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing purposes; this also applies to profiling to the extent that it is related to such direct marketing. You have the right to object, for reasons related to your particular situation, to the processing of personal data concerning you for scientific or historical research purposes or statistical purposes according to Art. 89(1) GDPR, unless the processing is necessary for the performance of a task carried out in the public interest.
5.7 Automated Decisions, Including Profiling You have the right not to be subject to a decision based solely on automated processing – including profiling – that produces legal effects concerning you or similarly significantly affects you. There is no automated decision-making based on the collected personal data.
5.8 Right to Withdraw Consent You have the right to withdraw your consent to the processing of personal data at any time.
5.9 Right to Lodge a Complaint with a Supervisory Authority You have the right to lodge a complaint with a supervisory authority, particularly in the Member State of your residence, place of work, or the place of the alleged infringement, if you believe that the processing of personal data concerning you is unlawful.
6. Data Security Glueckskristall (Owner: Paweena Pelzl) is committed to ensuring the security of your data within the framework of applicable data protection laws and technical possibilities. Your personal data are transmitted encrypted at Glueckskristall (Owner: Paweena Pelzl). This applies to your orders and also to customer logins. Glueckskristall (Owner: Paweena Pelzl) uses the SSL (Secure Socket Layer) encryption system but notes that data transmission over the Internet (e.g., communication via email) can have security vulnerabilities. Complete protection of data from third-party access is not possible. To secure your data, Glueckskristall (Owner: Paweena Pelzl) maintains technical and organizational security measures in accordance with Art. 32 GDPR, which Glueckskristall (Owner: Paweena Pelzl) continuously adapts to the state of the art. We also do not guarantee that the Glueckskristall (Owner: Paweena Pelzl) service is available at all times; disruptions, interruptions, or failures cannot be excluded. The servers used by Glueckskristall (Owner: Paweena Pelzl) are regularly and carefully secured.
7. Disclosure of Data to Third Parties In principle, Glueckskristall (Owner: Paweena Pelzl) uses your personal data only within the company. If and to the extent that we involve third parties in the fulfillment of contracts (e.g., logistics service providers), they receive personal data only to the extent necessary for the respective service. In cases where we outsource certain parts of data processing (“contract processing”), we contractually obligate processors to use personal data only in accordance with data protection laws and to ensure the protection of the rights of the data subject.
