Data protection

1) Information on the Collection of Personal Data and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data means any data by which you can be personally identified.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Leah Klemm

Benedikt-Bauer-Straße 10

78467 Konstanz, Germany

Tel.: +49 15168144511

E-mail: leahklemm@gmail.com

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser’s address bar.

2) Data Collection When Visiting Our Website

When using our website for purely informational purposes, i.e., if you do not register or otherwise provide us with information, we only collect the data that your browser transmits to our server (so-called server log files). When you access our website, we collect the following data, which are technically necessary for us to display the website to you:

The website you visited
Date and time of access
Amount of data transmitted in bytes
Source/referrer from which you accessed the page
Browser used
Operating system used
IP address used (possibly in anonymized form)

The processing is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. No further use or disclosure of the data takes place. However, we reserve the right to retrospectively review the server log files if there are concrete indications of unlawful use.

3) Cookies

To make visiting our website more attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted at the end of the browser session, i.e., after closing your browser (so-called session cookies). Other cookies remain on your device and allow your browser to be recognized during your next visit (so-called persistent cookies).

When cookies are set, they collect and process certain user information individually, such as browser and location data as well as IP address values. Persistent cookies are automatically deleted after a predetermined period, which may vary depending on the cookie. You can find information on the duration of each cookie in your web browser’s cookie settings.

Some cookies are used to simplify the ordering process by storing settings (e.g., remembering the contents of a virtual shopping cart for a later visit to the website). If personal data are processed by individual cookies we use, such processing is carried out in accordance with Art. 6(1)(b) GDPR for the performance of a contract, Art. 6(1)(a) GDPR in the case of given consent, or Art. 6(1)(f) GDPR to safeguard our legitimate interests in ensuring the optimal functionality of the website as well as a user-friendly and effective design of the website visit.

Please note that you can configure your browser to inform you about the setting of cookies and decide individually on their acceptance, or to block cookies either for certain cases or generally. Each browser differs in how it manages cookie settings. Instructions for changing cookie settings are described in the help menu of each browser and can be found at the following links:

Please note that if you do not accept cookies, the functionality of our website may be limited.

4) Contact

When contacting us (e.g., via contact form or email), personal data are collected. The data collected in the case of a contact form can be seen in the respective contact form. These data are used and stored exclusively for the purpose of responding to your inquiry or for contacting you and the associated technical administration.

The legal basis for the processing of these data is our legitimate interest in responding to your inquiry in accordance with Art. 6(1)(f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR.

Your data will be deleted after your inquiry has been fully processed. This is the case if the circumstances indicate that the matter in question has been conclusively resolved, provided that no statutory retention obligations prevent deletion.

5) Data Processing for Creating a Customer Account and for Contract Execution

In accordance with Art. 6(1)(b) GDPR, personal data are further collected and processed when you provide them to us for the purpose of executing a contract or creating a customer account. The data collected are indicated in the respective input forms.

Deletion of your customer account is possible at any time and can be requested by sending a message to the above-mentioned contact address of the data controller.

We store and use the data you provide for the purpose of contract execution. After the contract has been fully executed or your customer account has been deleted, your data will be blocked in consideration of tax and commercial retention periods and deleted after the expiry of these periods, unless you have explicitly consented to further use of your data or a legally permissible further use by us has been reserved.

6) Comment Function

When using the comment function on this website, in addition to your comment, information such as the date and time of the comment’s creation and the name you choose as a commentator are stored and published on this website. Furthermore, your IP address is logged and stored. This storage of the IP address is done for security reasons and in the event that the person concerned violates the rights of third parties or posts unlawful content through a submitted comment.

Your email address is required so that we can contact you if a third party contests your published content as unlawful.

The legal bases for storing your data are Art. 6(1)(b) and (f) GDPR. We reserve the right to delete comments if they are contested by third parties as unlawful.

7) Use of Your Data for Direct Marketing

7.1 Registration for Our E-Mail Newsletter
If you register for our e-mail newsletter, we will regularly send you information about our offers. The only mandatory information required for sending the newsletter is your e-mail address. Providing additional data is voluntary and is used to address you personally.

For sending the newsletter, we use the so-called double opt-in procedure. This means that we will only send you the e-mail newsletter after you have explicitly confirmed that you consent to receiving the newsletter. We will then send you a confirmation e-mail, asking you to confirm by clicking on a corresponding link that you wish to receive the newsletter in the future.

By activating the confirmation link, you give us your consent for the use of your personal data in accordance with Art. 6(1)(a) GDPR. When registering for the newsletter, we store the IP address assigned by your Internet Service Provider (ISP) as well as the date and time of registration, in order to be able to trace any possible misuse of your e-mail address at a later time.

The data collected by us during newsletter registration is used exclusively for the purpose of advertising via the newsletter. You may unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a corresponding message to the above-mentioned data controller. Upon successful unsubscription, your e-mail address will be immediately deleted from our newsletter distribution list, unless you have explicitly consented to further use of your data or we reserve the right to use your data beyond this in a manner permitted by law, of which we inform you in this privacy policy.

7.2 Advertising by Postal Mail
Based on our legitimate interest in personalized direct marketing, we reserve the right to store your first and last name, postal address, and—if provided to us within the scope of the contractual relationship—your title, academic degree, year of birth, and professional, industry, or business designation, in accordance with Art. 6(1)(f) GDPR, and to use this information to send you interesting offers and information about our products via postal mail.

You may object to the storage and use of your data for this purpose at any time by sending a corresponding message to the data controller.

8) Data Processing for Order Fulfillment

8.1 To process your order, we cooperate with the following service providers who support us fully or partially in executing concluded contracts. Certain personal data is transmitted to these service providers in accordance with the information below.

The personal data collected by us is passed on to the delivery company responsible for shipment as part of order fulfillment, insofar as it is necessary for the delivery of the goods. Your payment data is provided to the respective financial institution for payment processing, if required. Where payment service providers are used, we explicitly inform you below. The legal basis for data transfer is Art. 6(1)(b) GDPR.

8.2 To fulfill our contractual obligations to our customers, we work with external shipping partners. We provide your name, delivery address, and, if required for delivery, your phone number solely for the purpose of delivering goods, in accordance with Art. 6(1)(b) GDPR, to a shipping partner selected by us.

8.3 Use of specialized service providers for order processing and fulfillment

8.4 Disclosure of Personal Data to Shipping Providers – DHL
If the delivery of goods is carried out by DHL (DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn), your e-mail address is provided in accordance with Art. 6(1)(a) GDPR before delivery for the purpose of coordinating a delivery appointment or for delivery notifications, provided that you have explicitly consented to this during the ordering process. Otherwise, only the recipient’s name and delivery address are provided for delivery purposes in accordance with Art. 6(1)(b) GDPR. The data transfer only occurs to the extent necessary for the delivery of goods. In this case, prior coordination of the delivery time with DHL or delivery notification is not possible.

Consent may be revoked at any time with effect for the future, either to the data controller mentioned above or directly to DHL.

8.5 Use of Payment Service Providers
– PayPal
If you pay via PayPal (including credit card via PayPal, direct debit via PayPal, or – if offered – “purchase on account” or “installment payment” via PayPal), your payment data will be transmitted to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg, hereinafter “PayPal,” solely for payment processing purposes. The transfer is carried out in accordance with Art. 6(1)(b) GDPR and only to the extent necessary for payment processing.

For payment methods such as credit card via PayPal, direct debit via PayPal, or – if offered – “purchase on account” or “installment payment” via PayPal, PayPal reserves the right to conduct a credit check. For this purpose, your payment data may be transmitted to credit agencies pursuant to Art. 6(1)(f) GDPR based on PayPal’s legitimate interest in assessing your creditworthiness. The result of the credit check, including the statistical probability of default, is used to decide whether to provide the respective payment method. The credit assessment may contain probability values (so-called score values). If score values are included, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of score values may include, among other things but not exclusively, address data.

Further data protection information, including information about the credit agencies used, can be found in PayPal’s privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

You may object to this processing at any time by notifying PayPal. However, PayPal may still be entitled to process your personal data if this is required for proper contractual payment processing.

9) Use of Social Media: Social Plugins – Instagram Standard Plugin

Our website uses so-called social plugins (“plugins”) of the online service Instagram, operated by Instagram LLC, 1601 Willow Rd, Menlo Park, CA 94025, USA (“Instagram”). The plugins are marked with an Instagram logo, for example in the form of an “Instagram camera.” An overview of Instagram plugins and their appearance can be found here: http://blog.instagram.com/post/36222022872/introducing-instagram-badges.

When you visit a page of our website that contains such a plugin, your browser establishes a direct connection to Instagram’s servers. The content of the plugin is transmitted directly from Instagram to your browser and integrated into the page. Through this integration, Instagram receives the information that your browser has accessed the respective page of our website, even if you do not have an Instagram account or are not currently logged in to Instagram. This information (including your IP address) is transmitted directly by your browser to an Instagram server in the USA and stored there.

If you are logged in to Instagram, Instagram can directly associate your visit to our website with your Instagram account. If you interact with the plugins, for example by clicking the “Instagram Camera” button, this information is also transmitted directly to an Instagram server and stored there. The information is additionally published on your Instagram account and displayed to your contacts there.

The described data processing operations are carried out in accordance with Art. 6(1)(f) GDPR on the basis of Instagram’s legitimate interests in displaying personalized advertising, informing other users of the social network about your activities on our website, and optimizing the Instagram service.

If you do not want Instagram to associate the data collected through our website directly with your Instagram account, you must log out of Instagram before visiting our website. You can also prevent the loading of Instagram plugins and thus the above-described data processing operations in the future using browser add-ons, e.g., the script blocker “NoScript” (http://noscript.net/).

Instagram LLC, based in the USA, is certified under the US-European Privacy Shield framework, which ensures compliance with the data protection standards applicable in the EU.

For information on the purpose and scope of data collection, further processing, and use of the data by Instagram, as well as your rights and privacy settings, please refer to Instagram’s privacy policy: https://help.instagram.com/155833707900388/.

10) Use of Social Media – Videos: Use of YouTube Videos

This website uses the YouTube embedding feature to display and play videos from the provider “YouTube,” which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

The extended privacy mode is used, which, according to the provider, only triggers the storage of user information when the video is actually played. When the playback of embedded YouTube videos is started, YouTube sets cookies to collect information about user behavior. According to YouTube, these are used, among other things, to collect video statistics, improve user experience, and prevent abuse.

If you are logged into Google, your data will be directly associated with your account when you click on a video. If you do not want your activity to be associated with your YouTube profile, you must log out before activating the button. Google stores your data (even for users not logged in) as usage profiles and evaluates it. Such evaluation is carried out, in particular, in accordance with Art. 6(1)(f) GDPR based on Google’s legitimate interests in displaying personalized advertising, conducting market research, and/or tailoring its website. You have the right to object to the creation of these user profiles, which must be exercised directly with YouTube.

In the context of using YouTube, personal data may also be transmitted to the servers of Google LLC in the USA. Regardless of whether the embedded videos are played, a connection to the Google network is established every time this website is accessed, which may trigger additional data processing operations beyond our influence.

In the event of the transfer of personal data to Google LLC in the USA, Google LLC is certified under the US-European Privacy Shield framework, which ensures compliance with the data protection standards applicable in the EU. The current certificate can be viewed here: https://www.privacyshield.gov/list.

Further information on data protection at YouTube can be found in the provider’s privacy policy: https://www.google.de/intl/de/policies/privacy.

Where legally required, we have obtained your consent in accordance with Art. 6(1)(a) GDPR for the processing of your data described above. You may revoke your consent at any time with effect for the future. To exercise your revocation, please follow the instructions described above for raising an objection.

11) Online Marketing

11.1 Google AdSense

This website uses Google AdSense, a web advertising service by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google AdSense uses so-called cookies, which are text files stored on your computer that enable the analysis of your use of the website. In addition, Google AdSense uses “web beacons” (small invisible graphics) to collect information, which can be used to record, collect, and evaluate simple actions such as visitor traffic on the website.

The information generated by the cookie and/or web beacon (including your IP address) about your use of this website is generally transmitted to a Google server and stored there. This may also involve transfer to servers of Google LLC in the USA.

Google uses the information obtained to evaluate your use of AdSense ads. The IP address transmitted by your browser in connection with Google AdSense is not merged with other data from Google. The information collected by Google may be transmitted to third parties if required by law and/or if third parties process the data on Google’s behalf.

The processing of data described here is carried out pursuant to Art. 6(1)(f) GDPR for the purpose of targeted advertising of users by third-party advertisers whose ads are displayed based on the analyzed user behavior on this website. This processing also serves our financial interest in exploiting the economic potential of our website through the paid display of personalized third-party advertising content.

In the event of the transfer of personal data to Google LLC in the USA, Google LLC is certified under the US-European Privacy Shield framework, which ensures compliance with the EU’s applicable data protection standards. The current certificate can be viewed here: https://www.privacyshield.gov/list.

For further information about Google’s data protection policies, please visit: https://www.google.de/policies/privacy/.

You can permanently disable cookies for ad personalization by adjusting your browser settings accordingly, or you can download and install the browser plug-in available at: https://www.google.com/settings/ads/plugin?hl=de.

Please note that certain functions of this website may not or only partially be usable if you deactivate cookies.

Where legally required, we have obtained your consent pursuant to Art. 6(1)(a) GDPR for the data processing described above. You may revoke your consent at any time with effect for the future. To exercise your revocation, please follow the instructions described above.

11.2 Use of Google Ads Conversion Tracking

This website uses the online advertising program “Google Ads” and, within the framework of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). We use Google Ads to draw attention to our offers on external websites using advertising materials (so-called Google AdWords).

We can determine the success of individual advertising measures in relation to the data of the advertising campaigns. Our aim is to display ads that are relevant to you, make our website more interesting for you, and ensure fair calculation of advertising costs.

The conversion tracking cookie is set when a user clicks on a Google Ads ad. Cookies are small text files stored on your device. These cookies generally expire after 30 days and are not used for personal identification. If the user visits specific pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies cannot be tracked across the websites of Google Ads customers.

The information collected using the conversion cookie is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. The customers receive the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that allows users to be personally identified.

If you do not want to participate in tracking, you can block the use by deactivating the Google conversion tracking cookie in your web browser under “user settings.” You will then not be included in the conversion tracking statistics.

We use Google Ads based on our legitimate interest in targeted advertising pursuant to Art. 6(1)(f) GDPR. In the course of using Google Ads, personal data may also be transmitted to servers of Google LLC in the USA.

In the event of the transfer of personal data to Google LLC in the USA, Google LLC is certified under the US-European Privacy Shield framework, which ensures compliance with EU data protection standards. The current certificate can be viewed here: https://www.privacyshield.gov/list.

For further information on Google’s data protection policies, please visit: https://www.google.de/policies/privacy/.

You can permanently deactivate cookies for ad personalization by adjusting your browser settings or by downloading and installing the browser plug-in available at: https://www.google.com/settings/ads/plugin?hl=de.

Please note that certain functions of this website may not or only partially work if you deactivate cookies.

Where legally required, we have obtained your consent pursuant to Art. 6(1)(a) GDPR for the processing described above. You may revoke your consent at any time with effect for the future. To exercise your revocation, please follow the instructions described above.

12) MEMBERSHIP AREA

12.1 Access Restriction (Paywall)
For restricting access to the membership area, I use the MemberPress plugin. The privacy policy of MemberPress applies. Your data is not shared with third parties. Any sharing of your data with third parties occurs solely for the purpose of fulfilling the contract, meaning your data may be shared with MemberPress to enable the integration between the membership area and the paywall.

12.2 User Accounts
Website users can gain access to the password-protected membership area by providing personal data. The data is collected and stored via a form. Afterwards, the user receives their login credentials. No data is shared with third parties. The legal basis for processing the data is Art. 6(1)(b) GDPR. The purpose of processing the data is to grant access to the membership area.

User accounts are not public and cannot be indexed by search engines. If users cancel their account in the membership area of our website, their data related to the membership account will be deleted.

13) RIGHTS OF THE DATA SUBJECT

13.1 General Rights
Under applicable data protection law, you have comprehensive rights regarding the processing of your personal data, which we inform you about as follows:

Right of Access (Art. 15 GDPR): You have the right to obtain information about your personal data processed by us, the purposes of processing, the categories of personal data, recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period or criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if not collected from you, the existence of automated decision-making including profiling, and, if applicable, meaningful information about the logic involved, significance, and envisaged consequences of such processing, as well as your right to information regarding safeguards pursuant to Art. 46 GDPR when data is transferred to third countries.
Right to Rectification (Art. 16 GDPR): You have the right to immediate correction of inaccurate data concerning you and/or completion of incomplete data stored by us.
Right to Erasure (Art. 17 GDPR): You have the right to request deletion of your personal data if the conditions of Art. 17(1) GDPR are met. This right does not exist if processing is necessary for freedom of expression, legal obligations, public interest, or the assertion, exercise, or defense of legal claims.
Right to Restriction of Processing (Art. 18 GDPR): You have the right to request restriction of processing of your personal data while the accuracy of your disputed data is verified, if you refuse deletion due to unlawful processing and instead request restriction, if you need your data for the assertion, exercise, or defense of legal claims after the purpose has been achieved, or if you object due to special circumstances until it is determined whether our legitimate grounds outweigh yours.
Right to Notification (Art. 19 GDPR): If you have asserted your right to rectification, erasure, or restriction, we are obliged to notify all recipients to whom your personal data was disclosed, unless this proves impossible or involves disproportionate effort. You have the right to be informed of these recipients.
Right to Data Portability (Art. 20 GDPR): You have the right to receive the personal data you provided in a structured, commonly used, and machine-readable format or to request transmission to another controller, where technically feasible.
Right to Withdraw Consent (Art. 7(3) GDPR): You have the right to withdraw your consent for processing at any time with effect for the future. Upon withdrawal, we will delete the affected data immediately unless processing is based on a different legal basis. Withdrawal does not affect the lawfulness of processing prior to the withdrawal.
Right to Lodge a Complaint (Art. 77 GDPR): If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority, particularly in the Member State of your residence, workplace, or where the alleged infringement occurred.

13.2 Right to Object
If we process your personal data based on a legitimate interest following a balancing of interests, you have the right to object at any time, for reasons arising from your particular situation, to the processing of your personal data with effect for the future.

If you exercise your right to object, we will stop processing the affected data unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or if processing serves the assertion, exercise, or defense of legal claims.

If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such purposes. If you exercise your objection, we will stop processing the data for direct marketing purposes.

14) Duration of Storage of Personal Data

The duration of storage of personal data depends on the respective legal basis, the purpose of processing, and – where applicable – on any statutory retention periods (e.g., commercial and tax retention periods).

Processing based on explicit consent (Art. 6 para. 1 lit. a GDPR):
These data are stored as long as the data subject has not revoked their consent.
Processing for the performance of a contract (Art. 6 para. 1 lit. b GDPR):
Data processed in connection with contractual or contract-like obligations are routinely deleted after the statutory retention periods have expired, provided they are no longer required for contract fulfillment or contract initiation and/or there is no legitimate interest on our part to continue storing them.
Processing based on legitimate interests (Art. 6 para. 1 lit. f GDPR):
These data are stored until the data subject exercises their right to object under Art. 21 para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for processing that override the interests, rights, and freedoms of the data subject, or the processing serves the assertion, exercise, or defense of legal claims.
Processing for the purpose of direct marketing (Art. 6 para. 1 lit. f GDPR):
These data are stored until the data subject exercises their right to object under Art. 21 para. 2 GDPR.
General rule:
Unless otherwise specified in this privacy statement regarding specific processing situations, stored personal data are deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.

LEAH KLEMM

Data protection