This data protection declaration applies to the website www.stephaniebalih.com. Individual pages may contain links to other providers within and outside of the places listed below, to which the data protection declaration does not extend, ie we cannot assume any liability for this content.
Responsible bodies within the meaning of the data protection laws are:
Alex Dolphin (Alexander Kerschner), Manker Straße 56, A-3380 Pöchlarn, shop (at) stephaniebalih (dot) com
Stephanie Balih, Manker Straße 56, A-3388 Pöchlarn, shop (at) stephaniebalih (dot) com
Gathering of General Information
When you access our website, information of a general nature is automatically recorded. This information (server log files) includes the type of web browser, the operating system used, the domain name of your internet service provider and similar. This is exclusively information that does not allow any conclusions to be drawn about your person. This information is technically necessary in order to correctly deliver the content you have requested from websites and is mandatory when using the Internet. Anonymous information of this type is statistically evaluated by us in order to optimize our website and the technology behind it.
Use of the contact form on our websites
When using our contact form, some personal data is collected, such as name, address, contact and communication data such as telephone number and e-mail address. Of course, we will also provide you with information about the personal data we have stored about you at any time. We will also be happy to correct or delete them at your request, provided there are no legal storage requirements to the contrary. To contact us in this context, please use the contact details given at the end of this data protection declaration.
Provision of paid services
In order to provide services that are subject to a charge, we will ask for additional data, such as payment details.
In order to protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) via HTTPS.
When registering to receive our newsletter, the data you provide will be used exclusively for this purpose. Subscribers can also be informed by e-mail about circumstances that are relevant to the service or the registration (e.g. changes to the newsletter offer or technical conditions).
For an effective registration we need a valid e-mail address. In order to check that the owner of an e-mail address is actually registering, we use the "double opt-in" procedure. To do this, we log the subscription to the newsletter, the sending of a confirmation email and the receipt of the response requested here. Further data is not collected. The data is used exclusively for sending the newsletter and is protected against data theft and stored in encrypted form by our newsletter service provider "MailerLite" (https://www.mailerlite.com).
You can revoke your consent to the storage of your personal data and its use for sending the newsletter at any time. There is a corresponding link in every newsletter. You can also unsubscribe directly on this website at any time or inform us of your request via the contact option given at the end of this data protection notice.
Data processing takes place on the basis of the legal provisions of § 96 Paragraph 3 TKG and Art 6 Paragraph 1 lit a (consent) and/or lit b (necessary for the fulfillment of the contract) of the DSGVO.
Legal basis Consent
You have voluntarily provided us with contact details about yourself and we process this data on the basis of your consent for the following purposes:
- Product Information
- product promotion
- event information
- company information
You can revoke this consent at any time. A revocation means that we will no longer process your data for the above-mentioned purposes from this point in time. For a revocation please contact: shop (at) stephaniebalih (dot) com
Legal basis for performance of contract
We would like to point out that for the purpose of simplifying the purchasing process and for later contract processing, the web shop operator stores the IP data of the connection owner in the context of cookies, as well as the name, address, e-mail address, telephone number and payment data of the buyer.
The data you provide is required to fulfill the contract or to carry out pre-contractual measures. Without this data we cannot conclude the contract with you. There is no data transfer to third parties, with the exception of the transfer of payment data to the processing bank / payment service provider for the purpose of debiting the purchase price to the transport company / shipping company commissioned by us to deliver the goods, as well as to our tax consultant to fulfill our tax obligations.
If a contract is concluded, all data from the contractual relationship will be stored until the end of the tax retention period (7 years). The data name, address, purchased goods and date of purchase are also stored until the end of product liability (10 years).
Data for direct marketing will be stored until you revoke your consent.
Deletion or blocking of the data
We adhere to the principles of data avoidance and data economy. We therefore only store your personal data for as long as is necessary to achieve the purposes stated here or as provided for by the various storage periods provided for by the legislature. After the respective purpose has expired or these periods have expired, the corresponding data will be blocked or deleted as a matter of routine and in accordance with the statutory provisions.
Cooperation with processors and third parties
If, as part of our processing, we disclose data to other people and companies (contract processors or third parties), transmit it to them or otherwise grant them access to the data, this is only done on the basis of legal permission (e.g. if the data is transmitted to third parties, as to payment service providers, pursuant to Art. 6 Para. 1 lit. b GDPR is required for the fulfillment of the contract), you have consented, a legal obligation provides for this or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.). If we commission third parties to process data on the basis of a so-called "order processing contract", this is done on the basis of Art. 28 DSGVO.
We pass on your data to the following recipients or categories of recipients:
- Printing house for the production of our art prints and art objects.
- Marketing platform for newsletter administration and dispatch
- Banking institutions / payment service providers for payment processing
- Transport company/shipping company to deliver the goods
To the extent required by law, we pass on the data to tax authorities, banks, debt collection agencies, legal representatives and courts.
Alex Dolphin (Alexander Kerschner), Manker Straße 56, A-3380 Pöchlarn, shop (at) stephaniebalih (dot) com
Stephanie Balih, Manker Strasse 56, A-3380 Pöchlarn, shop (at) stephaniebalih (dot) com
With the following information we inform you about the contents of our newsletter as well as the registration, dispatch and statistical evaluation procedures as well as your right of objection. By subscribing to our newsletter, you agree to receive it and the procedures described. Content of the newsletter: We send newsletters, e-mails and other electronic notifications with advertising information (hereinafter "newsletter") only with the consent of the recipient or legal permission. If the contents of the newsletter are specifically described when registering for the newsletter, they are decisive for the consent of the user. Our newsletter also contains information about our services and us. Double opt-in and logging: Registration for our newsletter takes place in a so-called double opt-in procedure. This means that after registration you will receive an e-mail in which you will be asked to confirm your registration. This confirmation is necessary so that nobody can register with someone else's e-mail address. The registrations for the newsletter are logged in order to be able to prove the registration process in accordance with the legal requirements. This includes storing the time of registration and confirmation as well as the IP address. Changes to your data stored by the shipping service provider are also logged. Registration data: In order to register for the newsletter, it is sufficient if you enter your e-mail address. Optionally, we ask you to enter a name so that we can address you personally in the newsletter. The dispatch of the newsletter and the success measurement associated with it are based on the consent of the recipient in accordance with Article 6 Paragraph 1 lit. 107 paragraphs 2 and 3 TKG. The registration process is logged on the basis of our legitimate interests in accordance with Article 6 (1) (f) GDPR. Our interest is focused on the use of a user-friendly and secure newsletter system that serves our business interests as well as meets user expectations and also allows us to prove consent.
Termination/Revocation - You can cancel the receipt of our newsletter at any time, ie revoke your consent. You will find a link to cancel the newsletter at the end of each newsletter. We can store the unsubscribed e-mail addresses for up to three years on the basis of our legitimate interests before we delete them for the purpose of sending the newsletter in order to be able to prove a previously given consent. The processing of this data is limited to the purpose of a possible defense against claims. An individual request for deletion is possible at any time, provided that the previous existence of consent is confirmed at the same time.
Newsletter - shipping service provider
The newsletter is sent using the GDPR-compliant shipping service provider MailerLite Limited, a company registered in Ireland, Ground Floor, 71 Lower Baggot Street, Dublin 2, D02 P593, Ireland. You can view the data protection provisions of the shipping service provider here: https://www. mailerlite.com/legal/privacy-policy. The shipping service provider is used on the basis of our legitimate interests in accordance with Article 6 Paragraph 1 Letter f GDPR and an order processing contract in accordance with Article 28 Paragraph 3 Clause 1 GDPR. The shipping service provider can use the data of the recipients in pseudonymous form, ie without assignment to a user, to optimize or improve their own services, e.g. for technical optimization of the dispatch and the presentation of the newsletter or for statistical purposes. However, the shipping service provider does not use the data of our newsletter recipients to write to them themselves or to pass the data on to third parties.
Newsletter - measurement of success
The newsletters contain a so-called "web beacon", ie a pixel-sized file that is retrieved from our server when the newsletter is opened or, if we use a shipping service provider, from their server. As part of this retrieval, technical information, such as information about the browser and your system, as well as your IP address and time of retrieval, are initially collected. This information is used to technically improve the services based on the technical data or the target groups and their reading behavior based on their retrieval locations (which can be determined using the IP address) or the access times. The statistical surveys also include determining whether the newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to the individual newsletter recipients. However, it is neither our aim nor, if used, that of the shipping service provider to monitor individual users. The evaluations serve us much more to recognize the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.
Embedded YouTube videos
We embed YouTube videos on some of our websites. The operator of the corresponding plugins is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When you visit a page with the YouTube plugin, a connection to the YouTube servers is established. YouTube is informed which pages you are visiting. If you are logged into your YouTube account, YouTube can assign your surfing behavior to you personally. You can prevent this by logging out of your YouTube account beforehand.
Anyone who has deactivated the storage of cookies for the Google Ad program will not have to reckon with such cookies when watching YouTube videos. However, YouTube also stores non-personal usage information in other cookies. If you want to prevent this, you must block the storage of cookies in the browser.
Further information on data protection at "Youtube" can be found in the provider's data protection declaration at: https://www.google.de/intl/de/policies/privacy/
Your rights to information, correction, blocking, deletion and objection
You have the right to receive information about your personal data stored by us at any time. You also have the right to correction, blocking or, apart from the prescribed data storage for business transactions, deletion of your personal data. Please contact our data protection officer at: shop (at) stephaniebalih (dot) com.
We reserve the right to occasionally adapt this data protection declaration so that it always corresponds to the current legal requirements or to implement changes to our services in the data protection declaration, e.g. B. when introducing new services. The new data protection declaration will then apply to your next visit.
Questions to the data protection officer
If you have any questions about data protection, please send us an email or contact our data protection officer directly at: shop (at) stephaniebalih (dot) com.
Since we (also) process the data for direct advertising, you can object to this processing for direct advertising purposes at any time
In principle, you have the right to information, correction, deletion, restriction, data portability and objection. For this, please contact us.