A. General data privacy information
Core information
This data privacy statement informs customers and users of this website of the nature, scope and purpose of the processing of personal data through the website operator Katharina Plaaß (Leeswig 95 a, 21635 Jork, Germany). Personal data are data that relate to you personally, e.g. your name, address, email address or user behaviour.
Definitions of the terms used (e.g. ‘personal data’ or ‘processing’) can be found in Article 4 of the European General Data Protection Regulation (GDPR).
Controller according to Article 4, number 7, of the GDPR
The controller, according to Article 4, number 7, of the GDPR, is Katharina Plaaß; Leeswig 95 a, 21635 Jork, Germany; info@three-dots.de (see legal information).
Katharina Plaaß has not designated a data protection officer, because the prerequisites determined in Article 37, paragraph 1, points b and c, of the GDPR, in combination with section 38, paragraph 1, of the German Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG), do not apply. Please contact Katharina Plaaß if you have any questions regarding the processing of your personal data or regarding this data privacy statement via the following contact details.
Leeswig 95 a
21635 Jork
Tel.: +49 (0)4161 966 96 09
Email: info@three-dots.de
Your rights as the data subject
In regard to the processing of your personal data, you may assert the following rights against Katharina Plaaß (hereafter ‘I’):
- right of access (Article 15, GDPR);O
- right to rectification (Article 16, GDPR);
- right to erasure/‘right to be forgotten’ (Article 17, GDPR);
- right to restriction of processing (Article 18, GDPR);
- right to data portability (Article 20, GDPR);
- right to lodge a complaint with a supervisory authority (Article 77, GDPR).
Insofar as I process your personal data on the legal basis of Article 6, paragraph 1, point f, of the GDPR, you can object to this processing, effective for the future. After you have exercised your right to object, I will not continue to process your personal data for these purposes unless I can prove the existence of compelling legitimate grounds for the processing which outweigh your interests, rights and liberties, or unless the processing serves the assertion, exercise or defence of legal claims.
If the processing is for direct marketing purposes, you may exercise this right at any time. In that case, I will not continue to process your data for the purposes of direct marketing.
If you would like to exercise your rights as the data subject, you may contact me at any time.
Erasure of data
Data saved by me will be erased if they are no longer necessary for their intended purpose and if there are no legal retention periods. If the erasure cannot be performed because the data are necessary for valid legal purposes, data processing will be restricted. In this case, the data will be blocked and will not be processed for any other purposes. The applicable obligations to produce proof and to retain data result from the German Commercial Code (Handelsgesetzbuch, HGB) and the Fiscal Code of Germany (Abgabenordnung, AO). The designated periods for retention and documentation are six years according to commercial law requirements (section 257, HGB) and up to ten years according to fiscal law requirements (section 147, AO).
B. Special data privacy information for website users
The collection of personal data when visiting my website
I collect data regarding website access and save them as server log files on the website’s server. The purpose of processing this data is to guarantee the stability and security of the website. In addition, data processing is technically necessary in order to display the website. In that way, the following data are collected:
- web pages visited;
- the date and time the pages were accessed;
- time zone difference regarding Greenwich Mean Time (GMT);
- amount of sent data in bytes;
- the source/link that referred you to the website;
- the browser used;
- the language and version of browser software;
- the operating system used and its interface;
- the IP address used;
- the content of the request (specific page);
- the access status/HTTP status code.
The legal basis for processing the above-mentioned data is Article 6, paragraph 1, point f, of the GDPR. My legitimate interest is to guarantee the stability and security of the website.
I have commissioned STRATO AG as a processor to host my website.
Google Fonts
On my website, I use Google Fonts to display fonts and present content on my website in a correct and visually appealing manner. For this purpose, the data defined in the paragraph ‘The collection of personal data when visiting my website’ are transferred to Google because an automatic connection to fonts by Google is made when my website is called up.
The legal basis for the incorporation of Google Fonts as well as for the corresponding data transfer to Google is Article 6, paragraph 1, sentence 1, point f, of the GDPR. My legitimate economic interest lies in the appealing design of my website.
Google has submitted to the EU-US Privacy Shield. Please find further information at www.privacyshield.gov.
For more information, please visit Google’s data privacy statement at www.google.com.
Handling contact data
If you contact me via the contact details provided, your contact data are saved so that they can be used to process your enquiry and respond to it. The legal basis for processing personal data as part of your contact enquiry is Article 6, paragraph 1, point f, of the GDPR. I process the personal data extracted from the contact form solely to respond to your contact enquiry. The legal basis is Article 6, paragraph 1, sentence 1, point f, of the GDPR. I have a legitimate economic interest in establishing contact with (potential) customers. I would like to offer an excellent service. Contact enquiries often result in the initiation of contractual relationships. You are not obligated, neither from a contractual nor from a legal point of view, to provide your data in the context of the contact enquiry. Nevertheless, I can only contact you on your request if you provide the necessary data.
C. Data privacy information for customers and employees of customers
To initiate and process contracts, especially for order processing and billing, I process your personal master data and your contact data on the basis of Article 6, paragraph 1, sentence 1, point b, of the GDPR. In addition, I process your contractual master data, data from contract billing and payment details. As long as the processing is necessary for protecting my legitimate interests, the data processing is based on Article 6, paragraph 1, sentence 1, point f, of the GDPR. Providing your data is neither contractually nor legally mandatory. However, order processing is not possible without the necessary data.