Privacy Policy

We attach great importance to data protection. The collection and processing of your personal data takes place in compliance with the applicable data protection regulations, in particular the EU General Data Protection Regulation (GDPR). We collect and process your personal data in order to be able to offer you our website and our services. In accordance with Art. 13 GDPR, we describe in this declaration which data we use, in what way, for what purpose and scope, and what options and rights you have in connection with the use of your personal data.

1. Responsible person

For compliance with data protection on our side, Eliana Fe, Hiltenspergerstr. 29, 80798 Munich, responsible. We have not appointed a data protection officer.
We are at your disposal for data protection inquiries. You have the following contact options for this:

T +49 (0)89 273 12 515
Fax +49 (0)89 48956874
E-Mail: contact@elianafe.com

2. Data collection on our website

a) Server log files

Insofar as you access our website, information is automatically transmitted by your browser to the server on our website. This information is only stored briefly in a so-called log file and is automatically deleted.

This includes the following data:

  • your IP address,
  • date and time of the call,
  • Name and URL of the file you called up,
  • Website from which the call was made (referrer URL),
  • Information about the browser and operating system you are using,
  • Name of your access provider.

These data are used for the purpose of ensuring a smooth connection establishment and comfortable use of our website as well as for evaluating system security and stability.
The legal basis for data processing results from Art. 6 Para. 1 S. 1 lit. f GDPR., because we have a legitimate interest in collecting data for the aforementioned purposes. In addition, a legal basis results from Art. 6 Para. 1 lit. b GDPR for processing data to fulfill a contract or pre-contractual measures. The data is not used to draw conclusions about you personally.

b) Contact form / communication by email

You will find a contact form on our website. We would like to give our customers the opportunity to contact us in an uncomplicated manner. You can also write to us directly by email. If you would like to use our contact form, you must provide your name and a valid email address. If you send a cover letter by e-mail, we will at least receive your e-mail address. All other specified data are optional. The data is collected for the purpose of initiating or implementing contractual relationships in accordance with. Art. 6 para. 1 lit. b GDPR Insofar as your request is not directed towards the initiation or implementation of a contract, you still have a legitimate interest in processing and answering your request. In this respect, the use of personal data for this purpose is based on Art. 6 Para. 1 lit. f GDPR.

We only use the data you provide to process your request. Insofar as your request is aimed at initiating or carrying out business, we will delete your data according to our internal deletion deadlines.

If your request is related to a different purpose, we will delete your data after processing, provided that there is no other legal basis for data storage.

c) Evaluation and comment function

We give visitors to our site the opportunity to rate and comment on our contributions. The IP addresses of the users who write comments are saved here. This is necessary in order to be able to proceed against the author in the event of legal violations such as insults or propaganda. In addition to your comment, information about the time the comment was created and, if you do not post anonymously, the username you have chosen will be saved.

The processing takes place on the basis of your consent acc. Art. 6 para. 1 lit. a GDPR.

The ratings and comments as well as the data you provide will be stored until the commented content has been completely deleted or the ratings or comments have to be deleted for legal reasons.

d) Processing of customer and contract data

When initiating business, concluding and fulfilling contracts, we use your personal data required for this purpose in accordance with. Art. 6 para. 1 lit. b GDPR.

Data will only be transmitted to third parties if and to the extent that this is necessary for the contractual fulfillment, e.g. if a company for production or transport services or a credit institution has been commissioned to process payments.

This personal data is deleted after the statutory warranty periods have expired or after the statutory retention periods have expired.

e) Processing by payment service providers

In the case of chargeable services and donations, we process your personal data, in particular payment data (account, credit card, and other bank data) on the basis of Art. 6 Para. 1 lit. b GDPR. This is done for the purpose of executing the contract (payment processing / accounting). If necessary, your payment data will be transmitted to service providers (credit institutions, payment providers, accounting service providers) or processed directly by them for the payment transaction and for billing.

Your payment data will be stored for the duration of the contractual relationship and will be deleted after the contractual relationship has been completely terminated (until all mutual contractual obligations have been concluded), provided that there is no other legal basis for data storage.

We use the following payment providers:

PayPal
PayPal’s privacy policy: https://www.paypal.com/de/smarthelp/article/datenschutz-und-sicherheit-faq3712

>f) Newsletter

On our website there is the possibility to subscribe to a free newsletter for the purpose of direct advertising. When you register for the newsletter, your name and email address from the input mask will be transmitted to us. Your IP address and the date and time of registration are also used. The collection of other personal data during the registration process serves to prevent misuse of the services or the e-mail address used.

Your consent is obtained for the processing of the data during the registration process and reference is made to this data protection declaration. The legal basis for the processing of the data after the user has registered for the newsletter is Article 6 (1) lit. a GDPR.

The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. The user’s email address is therefore stored as long as the subscription to the newsletter is active.

If you purchase goods or services on our website and enter your e-mail address, this can then be used by us to send a newsletter for the purpose of direct advertising. In such a case, only direct advertising for our own similar goods or services will be sent via the newsletter. The legal basis for sending the newsletter as a result of the sale of goods or services is Section 7 (3) UWG.

We use rapidmail to send our newsletter. Your data will therefore be transmitted to rapidmail GmbH. Rapidmail GmbH is prohibited from using your data for purposes other than sending the newsletter. Rapidmail GmbH is not permitted to pass on or sell your data. rapidmail is a German, certified newsletter software provider, which was carefully selected according to the requirements of the GDPR and the BDSG (Bundesdatenschutzgesetz).

Further information on data protection in connection with rapidmail can be found here: : https://www.rapidmail.de/newsletter-marketing-dsgvo-und-datenschutz-konform

The user concerned can cancel the subscription to the newsletter at any time. There is a corresponding link in every newsletter for this purpose.

g) Cookies

Our website contains cookies. Cookies are small text files that are stored on your device. They help us to make it easier for you to navigate through our offer and enable the website to be displayed correctly. They should support the user-friendliness of the website and are of course completely harmless to your device. As a result, information is temporarily collected in connection with the device you are using and the software you are using. No conclusions about your identity are drawn from this.

Wir setzen zum Beispiel sogenannte „Session-Cookies“ ein. Diese Cookies werden nach Ihrem Besuch automatisch gelöscht. Auch setzen wir Cookies ein, die auf Ihrem Endgerät gespeichert werden, um Ihnen zum Beispiel bei einem weiteren Besuch die Anwendung unserer Seite zu erleichtern und Ihren Browser beim nächsten Besuch wiederzuerkennen („Permanent-Cookies“). Diese Cookies können natürlich jederzeit von Ihnen manuell gelöscht werden.

For example, we use so-called “session cookies”. These cookies are automatically deleted after your visit. We also use cookies that are stored on your device, for example to make it easier for you to use our site when you visit us again and to recognize your browser the next time you visit (“permanent cookies”). You can of course delete these cookies manually at any time. The cookies that are absolutely necessary for the operation of our website, i.e. without which our website cannot be displayed, are used for this purpose to safeguard our legitimate interests according to Art. 6 Para. 1 S. 1 lit. f GDPR. These are automatically deleted after a defined period of time.

Of course, you can also view our website without cookies. To do this, you must prevent cookies from being saved on your hard drive by selecting “do not accept cookies” in your browser settings. For a more detailed description, please refer to the instructions from your browser manufacturer. You can also use the deactivation page of the network advertising initiative (http://optout.networkadvertising.org/) und zusätzlich die US-amerikanische Webseite (http://www.aboutads.info/choices) and also the US website (http://www.aboutads.info/choices) or the European website (http://www. youronlinechoices.com/uk/your-ad-choices/) to deactivate cookies. If you do not accept cookies, this can lead to functional restrictions on our website.

h) Google Ajax & jQuery libraries, Google Webfonts

On the basis of Art. 6 Para. 1 S. 1 lit. f GDPR, we use Google Ajax & jQuery libraries, Google Webfonts from Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043 USA, hereinafter referred to as “Google”, for the purpose of a customer-friendly and appealing presentation of our website. Here, program libraries and fonts are retrieved from Google by your browser and loaded into the browser cache in order to display content, texts and fonts correctly. Information about your provider, operating system, browser and your IP address can be transmitted to Google.

The Google data protection regulations apply here:

https://www.google.com/policies/privacy/

Google complies with European data protection law and is certified under the Privacy Shield Agreement: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI

i) Facebook

Based on your consent (within the meaning of Art. 6 Para. 1 lit. a. GDPR), we use the plug-in of the social network Facebook (address: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2 , Ireland). You can recognize the plug-ins by the Facebook logo or the Like button – you can find an overview here: http://developers.facebook.com/docs/Plug-ins/

Facebook complies with European data protection law and is certified under the Privacy Shield Agreement: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active

If you have given your consent, the plug-in creates a direct connection between your browser and the Facebook servers. We have no influence on the nature and scope of the data that the plug-in transmits to the Meta Platforms Inc. server. You can find information on this here: https://www.facebook.com/help/186325668085084

The plug-in informs Meta Platforms Inc. that you as a user have visited this website. There is the possibility that your IP address will be saved. If you are logged into your Facebook account while visiting this website, the information mentioned will be linked to it.

If you use the functions of the plug-in – for example by sharing or “liking” a post – the corresponding information is also transmitted to Meta Platforms Inc.

Would you like to prevent the Meta Platforms Inc. links this data with your Facebook account, please log out of Facebook before visiting this website and delete the stored cookies. You can use your Facebook profile to make further settings for data processing for advertising purposes or to object to the use of your data for advertising purposes. You can access the settings here:

Profile settings on Facebook: https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen

Your consent can be revoked at any time for the future.

j) Twitter

Based on your consent (within the meaning of Art. 6 Para. 1 lit. a. GDPR), we include plug-ins from the social network Twitter (address: Twitter, Inc. 1355 Market Street, Suite 900, San Francisco, CA 94103) on our website ) one. You can recognize the plug-ins by the Twitter logo, you can find an overview here: https://about.twitter.com/resources/buttons

If you have given your consent, the plug-in establishes a direct connection between your browser and the Twitter servers. We have no influence whatsoever on the nature and extent of the data that the plug-in transmits to the Twitter servers. You can find information on this here: https://twitter.com/de/privacy

The plug-in informs Twitter that you as a user have visited this website. There is the possibility that your IP address will be saved. If you are logged into your Twitter account while visiting this website, the information mentioned will be linked to it.

Use the functions of the plug-in – for example, by using the tweet button, the corresponding information is also transmitted to Twitter.

If you would like to prevent Twitter from linking this data to your Twitter account, please log out of Twitter before visiting this website and delete the stored cookies.

k) Instagram

Based on your consent (within the meaning of Art. 6 Para. 1 lit. a. GDPR), we include plug-ins from the social network Instagram on our website (address: Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA) one. You can recognize the plug-ins by the Instagram logo.

Insofar as you have given your consent, the plug-in establishes a direct connection between your browser and the Instagram servers. We have no influence whatsoever on the nature and extent of the data that the plug-in transmits to the Instagram servers. You can find information on this here: https://help.instagram.com/519522125107875?helpref=page_content

The plug-in informs Instagram that you as a user have visited this website. There is the possibility that your IP address will be saved. If you are logged into your Instagram account while visiting this website, the information mentioned will be linked to it.

Use the functions of the plug-in – for example, by using the Instagram button, the corresponding information is also transmitted to Instagram.

If you would like to prevent Instagram from linking this data to your Instagram account, please log out of Instagram before visiting this website and delete the stored cookies.

l) LinkedIn

On the basis of your consent (within the meaning of Art. 6 Para. 1 lit. a. GDPR), we integrate the plug-ins of LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA, on our website. You can recognize the plug-ins by the LinkedIn logo.

If you have given your consent, the plug-in establishes a direct connection between your browser and the LinkedIn servers. We have no influence whatsoever on the nature and scope of the data that the plug-in transmits to the LinkedIn servers. You can find information on this here: https://www.linkedin.com/legal/privacy-policy, Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

The plug-in informs LinkedIn that you as a user have visited this website. There is the possibility that your IP address will be saved. If you are logged into your LinkedIn account while visiting this website, the information mentioned will be linked to it.

If you use the functions of the plug-in – for example by using the LinkedIn button – the corresponding information will also be transmitted to LinkedIn.

If you would like to prevent LinkedIn from linking this data with your LinkedIn account, please log out of LinkedIn before visiting this website and delete the stored cookies.

LinkedIn is certified under the Privacy Shield Agreement: https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active.

m) YouTube

Based on your consent (within the meaning of Art. 6 Para. 1 lit. a. GDPR), on the basis of Art. 6 Para. 1 S. 1 lit. f GDPR for the integration of videos the provider YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA, represented by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. This is done for the purpose of customer-friendly and more attractive presentation and explanation of our services.

If you have given your consent, the plug-in creates a direct connection between your browser and the Google servers. We have no influence whatsoever on the nature and scope of the data that the plug-in transmits to the Google servers. You can find information on this here: https://policies.google.com/privacy?hl=de

The plug-in informs Google that you as a user have visited this website. There is the possibility that your IP address will be saved. If you are logged into your Google account while visiting this website, the information mentioned will be linked to it.

If you use the functions of the plug-in – for example by watching a video – the corresponding information will also be transmitted to Google.

As already described above, you can prevent cookies from being stored on your computer. In addition, there is the option of preventing Google from using the data collected by the cookies by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de

Google complies with European data protection law and is certified under the Privacy Shield Agreement: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI

Data protection declaration: https://policies.google.com/privacy

Opt-Out: https://adssettings.google.com/authenticated.

>n) Vimeo

Based on your consent (within the meaning of Art. 6 Para. 1 lit. a. GDPR), on the basis of Art. 6 Para. 1 S. 1 lit. f GDPR for the integration of videos the provider Vimeo LLC, 555 West 18th Street, New York 10011, USA. This is done for the purpose of customer-friendly and more attractive presentation and explanation of our services.

If you have given your consent, the plug-in creates a direct connection between your browser and the Vimeo servers. We have no influence whatsoever on the nature and scope of the data that the plug-in transmits to Vimeo’s servers. You can find information on this here: https://vimeo.com/privacy

The plug-in informs Vimeo that you as a user have visited this website. There is the possibility that your IP address will be saved. If you are logged into your Vimeo account while visiting this website, the information mentioned will be linked to it.

If you use the functions of the plug-in – for example by watching a video – the corresponding information is also transmitted to Vimeo.

Google complies with European data protection law and is certified under the Privacy Shield Agreement: https://www.privacyshield.gov.

Data protection declaration: https://vimeo.com/privacy

3. Social media channels

Facebook

We have created a fan page on the social network Facebook (address: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland), hereinafter referred to as Facebook, and as the operator of this fan page are jointly responsible with Facebook within the meaning of the i.S.d. Art. 26 GDPR. As the operator of a fan page, Facebook offers us to create anonymous statistics in the form of so-called page insights about the usage behavior of our fan page. For this purpose, cookies are installed and read out on the user’s device by Facebook.

We have agreed with Facebook that the primary responsibility according to the GDPR for the processing of Insights data will be assumed by Facebook and that it will fulfill all obligations under the GDPR with regard to the processing of Insights data (including Articles 12 and 13 GDPR, Articles 15 to 22 GDPR and Articles 32 to 34 GDPR). In addition, Meta Platforms Ireland will make the essentials of this Page Insights supplement available to the data subjects.

This addendum can be viewed here:
https://www.facebook.com/legal/terms/page_controller_addendum

We process the data collected by means of Facebook Insights on the basis of our legitimate interest in accordance with. Art. 6 para. 1 lit. f) GDPR. Our legitimate interest in increasing our level of awareness is to provide information about our services and our company in the widely used social media. In particular, the modern and up-to-date presentation of our company is important to us.

You can find all further information on Facebook Insights here:
https://www.facebook.com/legal/terms/information_about_page_insights_data

Instagram

We have created a business profile on the social network Instagram (operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland), hereinafter referred to as Facebook, and as the operator of this profile, we are jointly responsible with Facebook within the meaning of the i.S.d. Art. 26 GDPR. As the operator of an Instagram profile, Facebook offers us the option of creating anonymous statistics in the form of so-called page insights about the usage behavior of our profile. For this purpose, cookies are installed and read out on the user’s device by Facebook.

We have agreed with Facebook that the primary responsibility according to the GDPR for the processing of Insights data will be assumed by Facebook and that it will fulfill all obligations under the GDPR with regard to the processing of Insights data (including Articles 12 and 13 GDPR, Articles 15 to 22 GDPR and Articles 32 to 34 GDPR). In addition, Meta Platforms Ireland will make the essentials of this Page Insights supplement available to the data subjects.

This addendum can be viewed here:
https://www.facebook.com/legal/terms/page_controller_addendum

We process the data collected by means of Facebook Insights on the basis of our legitimate interest in accordance with. Art. 6 para. 1 lit. f) GDPR. Our legitimate interest in increasing our level of awareness is to provide information about our services and our company in the widely used social media. In particular, the modern and up-to-date presentation of our company is important to us.

You can find all further information on Facebook Insights here:
https://www.facebook.com/legal/terms/information_about_page_insights_data

4. Transfer of data

Your personal data will generally not be passed on to third parties. However, in exceptional cases, data can be transmitted for the following reasons:

  • insofar as you have given your express consent, Art. 6 Para. 1 S. 1 lit. a GDPR,
  • as far as the disclosure according to Art. 6 Para. 1 S. 1 lit. f GDPR is required and there is no overriding legitimate interest in not disclosing your data,
  • insofar as we are legally obliged to pass on the data, Art. 6 Para. 1 S. 1 lit. c GDPR
  • in this respect a transfer according to Art. 6 Para. 1 S. 1 lit. b GDPR is permissible and necessary for the processing of contractual relationships with you.

If your data is processed by third parties commissioned by us, this is done on the basis of Art. 28 GDPR by means of an order processing contract.

5. Rights of data subjects

• Right to information Art. 15 GDPR

You have the right to request confirmation from us as to whether we are processing your personal data. If this is the case, you can request information about this personal data and the following information:

  • the processing purposes
  • the categories of personal data that are processed
  • the recipients or categories of recipients to whom the personal data have been disclosed or are still being disclosed, in particular to recipients in third countries or to international organizations
  • f possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration
  • the existence of a right to correct or delete your personal data or to restrict processing or a right to object to this processing
  • the existence of a right of appeal to a supervisory authority
  • if the personal data are not collected from you, all available information about the origin of the data
  • the existence of automated decision-making including profiling in accordance with Article 22 Paragraphs 1 and 4 GDPR and – at least in these cases – meaningful information about the logic involved and the scope and intended effects of such processing for the data subject

• Right to rectification Art. 16 GDPR

You can immediately request the correction of incorrect or incomplete personal data stored by us.

• Right to deletion (right to be forgotten) of your data, Art. 17 GDPR

You can request the deletion of your data stored by us, insofar

  • the personal data not for the purposes for which they were collected or otherwise processed or are no longer necessary;
  • You revoke your consent on which the processing is based in accordance with Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR and there is then no other legal basis for the processing;
  • You object to the processing in accordance with Article 21 (1) GDPR and there are no overriding legitimate reasons for the processing or you object to the processing in accordance with Article 21 (2) GDPR;
  • the personal data has been processed unlawfully;
  • the deletion of personal data is necessary to fulfill a legal obligation under Union law or the law of the member states to which you are subject;
  • the personal data was collected in relation to information society services offered pursuant to Article 8 (1) GDPR.

We are obliged to delete the data on submission of the requirements, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.

• Right to restriction of processing, Art. 17 GDPR

You have the right to request that we restrict processing in this regard

  • you dispute the correctness of the personal data, but only for the period that enables us to check the correctness of the data;
  • the processing is unlawful and you do not want your personal data to be deleted immediately, but instead request that the use of the personal data be restricted;
  • we no longer need the personal data for the purposes of processing, but you need them for the establishment, exercise or defense of legal claims, or
  • You have lodged an objection to the processing in accordance with Article 21 (1) GDPR, as long as it has not yet been established whether the legitimate reasons on our part outweigh you.

Insofar as processing is restricted, we may only store your personal data with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of an important public interest of the Union or a Member State.

You will be informed again before the restriction is lifted.

• Right to data portability Art. 20 GDPR

You have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transmitted to another person responsible.

• Right of objection Art. 21 GDPR

According to Art. 21 GDPR, you have the right to object to the processing of your personal data if this is due to a legitimate interest in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR are processed. However, this only applies if there are reasons that arise from your particular situation or the objection is directed against direct mail.

• Right of withdrawal Art. 7 Para. 3 GDPR

You have the right, according to Art. 6 para. 1 sentence 1 lit. a DSGVO to revoke your consent to us at any time. This revocation only applies to future use.

• Right to complain to supervisory authorities

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, your place of work or our company headquarters, if you are of the opinion that the processing of your personal data violates the General Data Protection Regulation.

If you want to make use of your rights as a data subject, you can also submit this by email to the above email address.

6. Data security

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as requests that you send to us as the site operator. You can recognize this by the fact that the address line of the browser changes from “http: //” to “https: //”. A lock symbol can also be seen in the browser line.

If the SSL or TLS encryption is activated, the data that you transmit to us cannot be read by third parties.

In addition, we have taken precautions in the form of technical and organizational measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties.

7. Topicality and changes to this data protection declaration

This data protection declaration is currently valid and has the status June 2020.

We reserve the right to make changes at any time to ensure that our data protection declaration always complies with the current legal requirements. This also applies in the event that the data protection declaration has to be adapted due to new or revised services, for example new services. The new data protection declaration will then apply on your next visit to our offer.

Our data protection declaration is always available for you to view and print out on our website.

8. Complaints and warnings

If you see yourself being disadvantaged in your rights or in any other way, we will bit you, we will die too. You will then receive a personal, individual answer. As part of your duty to mitigate damage, we would like to point out that we will not be responsible for the costs of a lawyer commissioned by you out of court without contacting us. The point is that we do not hire a lawyer to cease and desist and / or to issue a cease and desist declaration subject to penalties. It is therefore not possible to rely on the same will.

This data protection declaration was created by lawyer Martin Jedwillat: www.advomare.de