Thank you for your interest in our website www.catharinamende.com (the “Website”). The protection of your privacy is particularly important to us. In the following please find detailed information on how we use your data. All personal data will be collected and processed solely in accordance with the statutory regulations of the German Data Protection Act (GDPA, in effect until May 2018) and the EU Regulation 679/2016 (GDPR [General Data Protection Regulation], in effect as of May 2018).
Operator of the website and controller according to applicable data protection laws is Catharina Mende GmbH, [Schröderstrasse 12/1, 10115 Berlin, email@example.com].
1. Collection, Processing and Use of Personal Data
You may visit our Website without providing information about you. We only store data without a personal connection such as e.g. IP-address, type and version of browser, the operating system you are using, the name of your internet service provider, the page from which you are visiting, or the name of the file you have requested. The data is exclusively used to enable you to access and use our website and will be evaluated exclusively for the improvement of our offer and does not allow conclusions to your identity. The data is not merged with any other information you have provided. The use of this data for this purpose is justified by the protection of our rightful interest to provide and improve our Website pursuant to art. 6 para. 1 sub. 2 lit. f) of the GDPR. The data will be deleted by us as soon as it is no longer required for the purpose for which we collected it, i.e. usually after you leave the Website.
Contact and payment details
Personal data will only be stored in case you provide us with the data voluntarily in connection with your order or in connection with your registration for our newsletter. For orders, this includes your name, shipping address, email address and payment information (e.g. credit card number). For registrations for our newsletter this includes your email address. In accordance with art. 6 para. 1 sub. 2 lit. b) of the GDPR, we use the data which you have provided without your separate consent exclusively for the purpose of fulfilling and processing your order.
Upon complete performance of the contract and full payment of the purchase price, your personal data will be blocked from further usage and erased upon expiry of the retention periods stipulated by applicable tax and commercial law provisions, provided that you have not expressly agreed to the further use of your data.
If you register for our newsletter you will be asked to provide your email address and a separate consent to receive new information in connection with our offer at irregular intervals. Your email address collected in this connection will only be used for this purpose pursuant to art. 6 para 1 sub. 2 lit. a GDPR. You may revoke your consent at any time with future effect. You may do so either by sending an email to [firstname.lastname@example.org] or by clicking on the Opt-Out link in each of our newsletters. Upon receiving your revocation of your consent, we will immediately delete your email address. For sending out our newsletters we use the services of MailChimp (see below section 8).
The above-mentioned data will exclusively be stored on servers within Germany.
On several of our pages we use so-called cookies in order to make the visit to our Website attractive and enable the use of certain functions. Cookies are small text files which are stored on your computer when visiting our Website and which give us information about your current settings and use of the Website. Most of the cookies are only used to be able to use our Website and will be deleted on your hard disk after the end of the browser-session, i.e. closing your browser (so-called session cookies). Other cookies will remain on your hard disk and will enable us to recognize your browser during your next visit (so called persistent cookies). You may delete any and all cookies stored on your computer at any time.
You may set your browser to notify you before you receive a cookie and decide to accept these on a case-by-case or to reject cookies either in certain situations or in general. If cookies are rejected, the functionality of our Website may be restricted.
3. Disclosure of Personal Data
To the extent that it is required for the delivery of your ordered products, your data will be disclosed to the shipping company commissioned by us for the delivery. For the processing of payments, we will transfer your payment data to the financial institution commissioned with the processing payment or the payment service provider selected during the ordering process. These disclosures are required for the proper rendering of the services offered through our Website and are justified pursuant to art. 6 para. 1 sub. 2 lit. b) GDPR.
4. Your rights
You are entitled to (i) request information about all data we store about you (§ 34 GDPA or art. 15 GDPR), (ii) request the correction of incorrect data (§ 35 para. 1 GDPA or art. 16 GDPR), (iii) rquest the deletion (§ 35 para. 2 GDPA or art. 17 GDPR) or (iv) request the blocking or restriction of the processing of such data (§ 35 para. 3 GDPA or art. 18 GDPR). In accordance with art. 21 GDPR you are further entitled to object to the processing of your data on compelling legitimate grounds relating to your situation and provided that it is data which we process to safeguard our interests. Furthermore, you are entitled to a right of appeal pursuant to art. 77 GDPR if you are of the opinion that we are not processing personal data in accordance with applicable law.
5. Contact for Data Protection
Should you have any questions about the collection, processing or use of your personal data or should you require information about or correction, blocking or deletion of your personal data or should you like to withdraw your prior given consent please contact:
Catharina Mende GmbH, [Schröderstrasse 12/1, 10115 Berlin, email@example.com].
6. Data Security
During the ordering process, your personal data will be transmitted via the internet by means of SSL/TLS. Credit card information is not stored but acquired and processed directly by our payment service provider (for example Paypal). We use technological and organizational means to protect our Website and further systems and prevent unauthorized persons from losing, destroying, accessing, tampering or disseminating your personal data.
7. Creating pseudonymous user profile for web analysis
This website is using functions of the web analytics service Google Analytics. Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA, is the provider of this service. Google Analytics is using so-called “cookies”. Cookies are text files which are stored on your computer and are used to analyze your use of the website. The information about your use of this website created by the cookie is usually transmitted to a Google server in the USA where it is stored. Google Analytics is using this website with a function called “IP Masking”, i.e. your IP address will be shortened within member countries of the European Union or in other contracting states of the Agreement on the European Economic Area before it is transmitted to the USA. The full IP address will only be transmitted to a Google server in the USA and shortened there in exceptional cases. On behalf of the provider of this website, Google will use this information to evaluate your use of the webpage in order to compile a report about the website activities and to provide further services to the website provider in connection with the website use and internet use. The IP address transmitted from your browser within the scope of Google Analytics will not be merged with other data from Google.
You may prevent the storing of cookies by selecting the appropriate settings of your browser software; however, we would like to point out that if you do so you may not be able to make full use of all functions on this website. Further, you may prevent the collection of the data about your use of the website (incl. your IP address) which is generated by the cookie to Google as well as the processing of such data by Google by downloading and installing the available browser Plugin under the following link:
8. DELIVERY OF NEWSLETTERS BY MAILCHIMP
Our newsletters are sent via "MailChimp", a newsletter distribution platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA.
The e-mail addresses of our newsletter recipients, as well as their further data described in the context of these notes, are stored on the servers of MailChimp in the USA. MailChimp uses this information to send and evaluate the newsletter on our behalf (e.g. to analyze how many recipients have opened the newsletter, etc.). Furthermore, MailChimp can use this data according to its own information to optimize or improve its own services, e.g. to technically optimize the sending and presentation of the newsletter or for economic purposes, in order to determine from which countries the recipients come. However, MailChimp does not itself use the data of our newsletter recipients to contact anyone themselves or pass the data on to third parties.
MailChimp is certified under the US-EU data protection agreement "Privacy Shield" and thus commits itself to comply with EU data protection regulations. Furthermore, we have concluded a data processing agreement with MailChimp. This is a contract in which MailChimp undertakes to protect the data of our users, to process them on our behalf in accordance with their data protection regulations, and in particular not to pass them on to third parties. The data protection regulations of MailChimp can be viewed here: https://mailchimp.com/legal/privacy/