Privacy policy

Privacy Policy

Unless otherwise stated below, the provision of your personal data is neither required by law nor by contract, nor is it necessary for concluding a contract. You are not obliged to provide the data. Failure to provide it will have no consequences. This applies only insofar as no other statement is made for the processing operations described below.“Personal data” means any information relating to an identified or identifiable natural person.

Server Log Files

You may visit our website without providing any personal information. Each time our website is accessed, usage data is transmitted to us or our web host / IT service provider by your internet browser and stored in log data (so-called server log files). This stored data includes, for example, the name of the page accessed, date and time of retrieval, the IP address, the amount of data transferred and the requesting provider. Processing is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in ensuring the smooth operation of our website and improving our offering. Your data may be transferred to and processed in third countries outside the EU, in particular Canada and the USA. For Canada, an adequacy decision by the EU Commission exists. For the USA, an adequacy decision by the EU Commission exists (Trans-Atlantic Data Privacy Framework, “TADPF”). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to the EU Commission’s Standard Contractual Clauses.

Contact

Controller

If you wish to contact us, you can do so at any time. The controller responsible for data processing is:

Philipp Hehmann
Johann-Dahlem-Str. 54
63814 Mainaschaff
Germany

+49 6021 704-559
hehmann@casa-farniente.com

Customer-Initiated Contact by Email

If you contact us by email on your own initiative, we collect your personal data (name, email address, message content) only to the extent provided by you. The data processing serves the purpose of handling and responding to your inquiry. If the contact serves the implementation of pre-contractual measures (e.g., consultation in the event of purchase interest, preparation of an offer) or concerns a contract already concluded between you and us, the data processing is based on Art. 6(1)(b) GDPR. If the contact is made for other reasons, the data processing is based on Art. 6(1)(f) GDPR due to our overriding legitimate interest in processing and responding to your inquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to processing of your personal data based on Art. 6(1)(f) GDPR. We use your email address solely to process your inquiry. Your data will subsequently be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Collection and Processing When Using the Contact Form

When using the contact form, we collect your personal data (name, email address, message content) only to the extent provided by you. The data processing serves the purpose of contacting you. If the contact serves the implementation of pre-contractual measures (e.g., consultation in the event of purchase interest, preparation of an offer) or concerns a contract already concluded between you and us, the data processing is based on Art. 6(1)(b) GDPR. If the contact is made for other reasons, the data processing is based on Art. 6(1)(f) GDPR due to our overriding legitimate interest in processing and responding to your inquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to processing of your personal data based on Art. 6(1)(f) GDPR. We use your email address solely to process your inquiry. Your data will subsequently be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

WhatsApp Business

If you contact us via WhatsApp, we use WhatsApp Business provided by WhatsApp Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; “WhatsApp”). If you are located outside the European Economic Area, this service is provided by WhatsApp Inc. (1601 Willow Road, Menlo Park, CA 94025, USA). The data processing serves the purpose of processing and responding to your inquiry. For this purpose, we collect and process the mobile phone number stored with WhatsApp and—if provided—your name, as well as any other data you provide to us via WhatsApp. We use a mobile device for this service whose address book exclusively contains the data of users who have contacted us via WhatsApp. We do not disclose personal data to WhatsApp unless you have already consented to this vis-à-vis WhatsApp. Your data is transmitted by WhatsApp to servers of Meta Platforms Inc. in the USA. For the USA, an adequacy decision by the EU Commission exists (TADPF). Meta Platforms Inc. is certified under the TADPF and has thus committed to complying with European data protection principles. If the contact serves pre-contractual measures or a contract already concluded between you and us, the data processing is based on Art. 6(1)(b) GDPR. If the contact is made for other reasons, the data processing is based on Art. 6(1)(f) GDPR due to our overriding legitimate interest in providing fast and easy contact options and in responding to your inquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to processing of your personal data based on Art. 6(1)(f) GDPR. We use your personal data solely to process your inquiry. Your data will subsequently be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

More information on WhatsApp’s terms of service and privacy policy can be found at:
https://www.whatsapp.com/legal/#terms-of-service
https://www.whatsapp.com/legal/#privacy-policy

Customer Account & Orders

Customer Account

When creating a customer account, we collect your personal data to the extent specified there. The data processing serves the purpose of improving your shopping experience and simplifying order processing. Processing is based on Art. 6(1)(a) GDPR (your consent). You may revoke your consent at any time by notifying us; this does not affect the lawfulness of processing carried out on the basis of your consent prior to revocation. Your customer account will then be deleted.

Collection, Processing and Disclosure of Personal Data When Placing Orders

When you place an order, we collect and process your personal data only to the extent necessary to fulfil and process your order and to handle your inquiries. Providing the data is necessary for concluding the contract. Failure to provide it means that no contract can be concluded. Processing is based on Art. 6(1)(b) GDPR and is necessary for the performance of a contract with you. Your data may be shared, for example, with shipping companies, dropshipping/fulfilment providers, payment service providers, service providers for order processing and IT service providers. In all cases, we strictly comply with legal requirements. The scope of data transfer is limited to a minimum. Your data may be transferred to and processed in third countries outside the EU, in particular Canada and the USA. For Canada, an adequacy decision by the EU Commission exists. For the USA, an adequacy decision exists (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to the EU Commission’s Standard Contractual Clauses.

Reviews & Advertising

Review Reminder

After your order, we may ask you to review your purchase with us. For this purpose, we use your personal data (name, email address, order information) independently of contract processing to send you a review reminder by email after an order has been placed, provided you have expressly consented to this. Processing is based on Art. 6(1)(a) GDPR (your consent). You may revoke your consent at any time via the link provided in the email or by notifying us; this does not affect the lawfulness of processing prior to revocation.

Use of Email Address for Sending Newsletters

We use your email address independently of contract processing exclusively for our own advertising purposes for sending newsletters, provided you have expressly consented to this. Processing is based on Art. 6(1)(a) GDPR (your consent). You may revoke your consent at any time; this does not affect the lawfulness of processing prior to revocation. You can unsubscribe at any time via the link in the newsletter or by notifying us. Your email address will then be removed from the distribution list.

Use of Klaviyo

We use Klaviyo Inc. (125 Summer St Floor 7, Boston, MA 02111, USA; “Klaviyo”) as a processor for newsletter distribution. We transmit the information provided when subscribing to the newsletter (email address and, if applicable, first and last name) to Klaviyo. Processing serves the purpose of sending newsletters and statistically analysing them. For evaluation, newsletters contain a 1×1 pixel graphic (tracking pixel) or a tracking link. This allows us to determine whether you opened the newsletter and whether you clicked embedded links. In this context, we process personal data such as IP address, browser type/device and the time of access. Based on this data, usage profiles may be created under a pseudonym. The collected data is not used to personally identify you and is used solely for statistical evaluation and to improve newsletter campaigns. Your data is generally transmitted to and stored on Klaviyo servers in the USA. For the USA, an adequacy decision exists (TADPF). Klaviyo is certified under the TADPF and is thus committed to complying with European data protection principles. Processing is based on Art. 6(1)(f) GDPR due to our overriding legitimate interest in a targeted, effective and user-friendly newsletter system. You have the right to object at any time, on grounds relating to your particular situation, to processing of your personal data based on Art. 6(1)(f) GDPR.

More information on data protection at Klaviyo:
https://www.klaviyo.com/legal/privacy-notice
https://www.klaviyo.com/legal/data-processing-agreement

Use of Mobile Number for SMS Marketing

We use your mobile number independently of contract processing exclusively for our own advertising purposes for SMS marketing, provided you have expressly consented to this. Processing is based on Art. 6(1)(a) GDPR (your consent). You may revoke your consent at any time by notifying us; this does not affect the lawfulness of processing prior to revocation. Your mobile number will then be removed from the distribution list.

Cookies

Our website uses cookies. Cookies are small text files stored on your computer system by the internet browser. When a user accesses a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string that enables unique identification of the browser when the website is accessed again. Cookies are stored on your device. You therefore have full control over the use of cookies. By selecting appropriate technical settings in your internet browser, you can be notified before cookies are set and decide individually whether to accept them, and you can prevent the storage of cookies and the transmission of the data contained. Cookies already stored can be deleted at any time. However, please note that you may then not be able to use all functions of this website in full. You can find information on how to manage cookies in the most common browsers (including disabling them) at:

Chrome: https://support.google.com/accounts/answer/61416?hl=de
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-2a946a29ae09
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Technically Necessary Cookies

Unless otherwise stated in this privacy policy, we use only technically necessary cookies in order to make our offering more user-friendly, effective and secure. Cookies also enable our systems to recognize your browser after a page change and to offer services. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser can be recognized again after a page change. The use of cookies or comparable technologies is based on § 25(2) TDDDG. The processing of your personal data is based on Art. 6(1)(f) GDPR due to our overriding legitimate interest in ensuring optimal website functionality and a user-friendly and effective design of our offering. You have the right to object at any time, on grounds relating to your particular situation, to processing of your personal data based on Art. 6(1)(f) GDPR.

Shopify Consent Tool (Shopify Privacy & Compliance)

We use the consent tool “Shopify Privacy & Compliance” provided by Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; “Shopify”). Shopify is affiliated with Shopify Inc. (151 O’Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada). The tool enables you to give consent to data processing via the website, in particular the setting of cookies, and to exercise your right to withdraw consent already given. Processing serves the purpose of obtaining and documenting required consents and thereby fulfilling legal obligations. Cookies may be used for this purpose. User information, including your IP address, may be collected and transmitted to Shopify. Your data may be transferred to and processed in third countries outside the EU, in particular Canada and the USA. For Canada, an adequacy decision exists. For the USA, an adequacy decision exists (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to the EU Commission’s Standard Contractual Clauses. Processing is carried out to fulfil a legal obligation on the basis of Art. 6(1)(c) GDPR.

More information:
https://www.shopify.com/de/legal/datenschutz
https://www.shopify.com/de/legal/cookies

Advertising Tracking

Meta Pixel

We use the Meta Pixel provided by Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; “Meta”). Meta and we are joint controllers for the collection of your data and the transfer of this data to Meta when the service is integrated. This is based on an agreement between us and Meta on the joint processing of personal data, which defines the respective responsibilities. The agreement is available at:

https://de-de.facebook.com/legal/terms/businesstools

Under this agreement, we are responsible in particular for fulfilling the information obligations under Arts. 13 and 14 GDPR, for compliance with Art. 32 GDPR security requirements regarding the correct technical implementation and configuration of the service, and for compliance with Arts. 33 and 34 GDPR obligations insofar as a personal data breach affects our obligations under the joint processing agreement. Meta is responsible for enabling data subject rights under Arts. 15–20 GDPR, ensuring Art. 32 GDPR security requirements for the service, and complying with Arts. 33 and 34 GDPR insofar as a personal data breach affects Meta’s obligations under the joint processing agreement. The application serves the purpose of addressing website visitors with interest-based advertising on the social networks Facebook and Instagram. For this purpose, Meta’s remarketing tag has been implemented on the website. When you visit our website, this tag establishes a direct connection to Meta’s servers, transmitting which pages you have visited. Meta assigns this information to your personal Facebook and/or Instagram user account. When you visit Facebook or Instagram, you will then be shown personalized, interest-based ads. The application also serves the purpose of creating conversion statistics. We learn the total number of users who clicked on one of our ads and were redirected to a page tagged for conversion tracking, and which actions were taken after the redirect. However, we do not receive any information that personally identifies users. Your data may be transferred to the USA. For the USA, an adequacy decision exists (TADPF). Meta is certified under the TADPF and has thus committed to complying with European data protection principles. Processing is carried out on the basis of your consent under Art. 6(1)(a) GDPR. You may withdraw your consent at any time; this does not affect the lawfulness of processing prior to withdrawal. You can deactivate the remarketing function “Custom Audiences” here. Further information about data collection and use by Meta and your rights/options can be found in Meta’s privacy policy:

https://www.facebook.com/about/privacy/

Google Ads Conversion Tracking

We use the online advertising program “Google Ads” and, in this context, conversion tracking (visit action evaluation). Google conversion tracking is an analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”). If you click on a Google ad, a conversion tracking cookie is stored on your computer. These cookies are valid for a limited period, do not contain personal data, and therefore do not serve personal identification. If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognize that you clicked the ad and were redirected to that page. Each Google Ads customer receives a different cookie, meaning that cookies cannot be tracked across different advertisers’ websites. The information collected via the conversion cookie serves the purpose of creating conversion statistics. We learn the total number of users who clicked on one of our ads and were redirected to a conversion tracking page. However, we do not receive information that personally identifies users. Your data may be transmitted to Google LLC servers in the USA. For the USA, an adequacy decision exists (TADPF). Google is certified under the TADPF. The use of cookies or comparable technologies is based on your consent pursuant to § 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is based on your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time.

More information and Google’s privacy policy:
https://www.google.de/policies/privacy/

Google AdSense

We use the AdSense function provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”). Processing serves the purpose of renting advertising space on the website and addressing visitors with interest-based advertising. Google uses cookies that enable an analysis of your use of the website. The information generated by the cookie is generally transferred to and stored on a Google server in the USA. For the USA, an adequacy decision exists (TADPF). Google is certified under the TADPF. Google may transfer this information to third parties if required by law or if third parties process this data on Google’s behalf. Google will not associate your IP address with other Google data. The use of cookies or comparable technologies is based on your consent pursuant to § 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. Processing is based on your consent under Art. 6(1)(a) GDPR. You may withdraw your consent at any time.

More information:
https://www.google.com/policies/technologies/ads/
https://www.google.de/policies/privacy/

LinkedIn Insight Tag

We use the LinkedIn Insight Tag of LinkedIn Ireland Unlimited Company (Wilton Place, Dublin 2, Ireland; “LinkedIn”) for conversion tracking and retargeting (displaying personalized ads). The LinkedIn Insight Tag places a unique LinkedIn browser cookie (conversion cookie) in your browser and allows the collection of metadata such as IP address, timestamp and page events (e.g., page views). These cookies have a limited validity. If you visit certain pages of our website and the cookie has not yet expired, LinkedIn and we can recognize that you clicked the ad and were redirected to that page. The tag also allows LinkedIn to collect data about visits to our website, including URL, referrer URL, IP address, device and browser properties (user agent), and timestamps. This data is transmitted to LinkedIn, encrypted, IP addresses are shortened, and direct IDs of LinkedIn members are removed within seven days to pseudonymize the data. Remaining pseudonymized data is then deleted by LinkedIn within 90 days. LinkedIn does not share personal data with us; it only provides aggregated reports about website audience and ad performance. LinkedIn members can control the use of their personal data for advertising purposes in their account settings. Your data may be transferred to the USA. For the USA, an adequacy decision exists (TADPF). LinkedIn is certified under the TADPF. The use of cookies or comparable technologies is based on your consent pursuant to § 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. Processing is based on your consent under Art. 6(1)(a) GDPR. You may withdraw your consent at any time.

More information:
https://www.linkedin.com/legal/cookie-policy
https://www.linkedin.com/legal/privacy-policy

Pinterest Tag

We use the Pinterest Tag of Pinterest Europe Limited (Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland; “Pinterest”). Processing serves the purpose of addressing website visitors with interest-based ads on Pinterest. When you visit our website, a direct connection to Pinterest’s servers is established and Pinterest is informed which pages you visited. If you are logged in to Pinterest, Pinterest assigns this information to your account. You will then be shown personalized, interest-based Pinterest ads. If you access our website via a pin on Pinterest, a conversion tracking cookie is stored on your computer. These cookies are valid for a limited period, do not contain personal data, and therefore do not serve personal identification. If you visit certain pages and the cookie has not yet expired, Pinterest and we can recognize that you clicked the pin and were redirected to that page. The information collected serves the purpose of creating conversion statistics and optimizing our website. In this context, information may be processed such as: number of users who clicked on a pin and were redirected to our website, subpages visited (e.g. category/product pages), searches on our website, cart contents, and completed transactions. Your data may be transferred to the USA. For the USA, an adequacy decision exists (TADPF). Pinterest is not certified under the TADPF. Data transfer is based on Standard Contractual Clauses as appropriate safeguards, available at: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de

The use of cookies or comparable technologies is based on your consent pursuant to § 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. Processing is based on your consent under Art. 6(1)(a) GDPR. You may withdraw your consent at any time.

More information:
https://policy.pinterest.com/de/privacy-policy

TikTok Pixel

We use the TikTok Pixel provided by TikTok Technology Limited (10 Earlsfort Terrace, Dublin, D02 T380, Ireland; “TikTok Ireland”) and TikTok Information Technologies UK Limited (6th Floor, One London Wall, London, EC2Y 5EB, United Kingdom; “TikTok UK”). Both companies are joint controllers for the data processing (collectively “TikTok”). Processing serves the purpose of identifying and analysing website traffic, improving customer targeting through advertising on TikTok, and measuring the effectiveness of ads. TikTok uses technologies such as cookies and pixels that enable recognition of your browser. Information may be collected and transmitted to TikTok such as: date and time of visit, browser/device information, screen resolution, IP address. TikTok may associate this information with your TikTok account. Pseudonymous usage profiles may be created; personal identification is not possible. Your data may be transferred to third countries such as the USA. For the USA, an adequacy decision exists (TADPF). TikTok is not certified under the TADPF. Transfers to the USA and other third countries without an adequacy decision are based on Standard Contractual Clauses as safeguards:

https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de

More information:
https://www.tiktok.com/legal/page/eea/privacy-policy/de
https://ads.tiktok.com/i18n/official/policy/controller-to-controller

Plug-ins and Other Tools

Google Tag Manager

We use Google Tag Manager provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”). This application manages JavaScript and HTML tags used to implement tracking and analytics tools. Google Tag Manager itself does not store cookies and does not process personal data, but it can trigger other tags that may collect and process personal data.

Further information on terms of use and data protection is available from Google.

Google reCAPTCHA / Invisible reCAPTCHA

We use reCAPTCHA and invisible reCAPTCHA services provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) to distinguish human input from automated/machine input. Your input is transmitted to Google and used there. In addition, the IP address and other data required for the service may be transmitted to Google. Data is processed within the EU and may be transferred to servers of Google LLC in the USA. For the USA, an adequacy decision exists (TADPF). Google is certified under the TADPF. The use of cookies or comparable technologies is based on your consent pursuant to § 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. Processing is based on your consent under Art. 6(1)(a) GDPR. You may withdraw your consent at any time.

More information:
https://www.google.com/recaptcha/intro/android.html
https://www.google.com/privacy

Google Maps

We use Google Maps provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) to display maps and geographical information. Google may collect, process and use visitor data when accessing pages that embed Google Maps. Your data may be transferred to the USA. For the USA, an adequacy decision exists (TADPF). Google is certified under the TADPF. The use of cookies or comparable technologies is based on your consent pursuant to § 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. Processing is based on your consent under Art. 6(1)(a) GDPR. You may withdraw your consent at any time.

More information:
https://www.google.com/privacypolicy.html

YouTube

We embed YouTube videos provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “YouTube”), an affiliate of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). Videos are embedded in “enhanced privacy mode”. This means YouTube does not store information about visitors to the website unless they watch the video. If you watch a video, information is transmitted to YouTube and stored there. Your data may be transferred to the USA. For the USA, an adequacy decision exists (TADPF). YouTube is certified under the TADPF. The use of cookies or comparable technologies is based on your consent pursuant to § 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. Processing is based on your consent under Art. 6(1)(a) GDPR. You may withdraw your consent at any time.

More information:
https://www.youtube.com/t/privacy

Vimeo

We use plugins from Vimeo Inc. (555 West 18th Street, New York, NY 10011, USA; “Vimeo”) to embed videos. When you access pages with such a plugin, a connection to Vimeo servers is established and Vimeo is informed which pages you visited. If you are logged in to Vimeo, Vimeo assigns this information to your user account. When using plugin functions (e.g. starting a video), this information is also assigned to your Vimeo account. Your data may be transferred to the USA. For the USA, an adequacy decision exists (TADPF). Vimeo is certified under the TADPF. The use of cookies or comparable technologies is based on your consent pursuant to § 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. Processing is based on your consent under Art. 6(1)(a) GDPR. You may withdraw your consent at any time.

More information:
https://vimeo.com/privacy

Google Fonts

We use Google Fonts provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) for consistent font display. To load fonts, a connection to Google servers is established when a page is accessed. Cookies may be used. Your IP address and information about your browser may be processed and transmitted to Google. This data is not linked to your Google account. Your data may be transferred to the USA. For the USA, an adequacy decision exists (TADPF). Google is certified under the TADPF. The use of cookies or comparable technologies is based on your consent pursuant to § 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. Processing is based on your consent under Art. 6(1)(a) GDPR. You may withdraw your consent at any time.

More information:
https://www.google.de/intl/de/policies/
https://developers.google.com/fonts/faq

Adobe Fonts

We use Adobe Fonts provided by Adobe Systems Software Ireland Limited (4–6 Riverwalk Citywest Business Campus, Dublin 24, Ireland; “Adobe”) for consistent font display. To load fonts, a connection to Adobe servers is established when pages are accessed. Cookies may be used. Your IP address and information about your browser and operating system may be processed and transmitted to Adobe. Your data may be transferred to third countries such as the USA and India. For India, no adequacy decision by the EU Commission exists. For the USA, an adequacy decision exists (TADPF). Adobe is certified under the TADPF. The use of cookies or comparable technologies is based on your consent pursuant to § 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. Processing is based on your consent under Art. 6(1)(a) GDPR. You may withdraw your consent at any time.

More information:
https://www.adobe.com/de/privacy/policy.html
https://www.adobe.com/de/privacy/policies/adobe-fonts.html

Data Subject Rights & Storage Duration

Storage Duration

After complete contract processing, data will initially be stored for the duration of the warranty period and then, taking into account statutory retention periods—especially under tax and commercial law—will be deleted after expiry of these periods, unless you have consented to further processing and use.

Rights of Data Subjects

If the legal requirements are met, you have the following rights under Arts. 15 to 20 GDPR: right of access, rectification, erasure, restriction of processing, and data portability. You also have the right to object under Art. 21(1) GDPR to processing based on Art. 6(1)(f) GDPR, as well as to processing for the purposes of direct marketing.

Right to Lodge a Complaint with a Supervisory Authority

Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data is not lawful. You can lodge a complaint, among others, with the supervisory authority responsible for us: Bavarian State Office for Data Protection Supervision (BayLDA)

Promenade 18
91522 Ansbach
Germany

Tel.: +49 981 1800930
Fax: +49 981 180093800
Email: poststelle@lda.bayern.de

Right to Object

If the personal data processing listed here is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR, you have the right, on grounds relating to your particular situation, to object to such processing at any time with effect for the future. After an objection, processing of the data concerned will be discontinued unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or if processing serves the establishment, exercise or defence of legal claims.

Last updated: 22 October 2024