Data protection
––––––––––––––––––––
Privacy Policy
––––––––––––––––––––
1) Information on the collection of personal data and contact details of the controller
1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data is any data with which you can be personally identified.
1.2 The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is David Scholz, David Scholz, Berliner Str. 112, 42929 Wermelskirchen, Germany, Tel.: 015756131452, E-mail: kontakt@de-scholz-design.com. The controller for the processing of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.
1.3 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the controller). You can recognize an encrypted connection by the string "https://" and the lock icon in your browser line.
2) Data collection when visiting our website
When using our website for informational purposes only, i.e. if you do not register or otherwise transmit information to us, we only collect data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:
- Our visited website
- Date and time of access
- Amount of data sent in bytes
- Source/referrer from which you came to the page
- Browser used
- Operating system used
- IP address used (if applicable: in anonymized form)
The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. No disclosure or other use of the data takes place. However, we reserve the right to check the server log files retrospectively if there are concrete indications of unlawful use.
3) Hosting
Hosting by Wix
We use the website building system of Wix HQ, 6350671, Nemal Tel Aviv St 40, Tel Aviv-Yafo, Israel ("Wix") for the purpose of hosting and displaying the website based on processing on our behalf. All data collected on our website is processed on Wix's servers. As part of Wix's aforementioned services, data may also be transmitted to Wix Inc., 500 Terry A. Francois Boulevard, San Francisco, California 94158, USA, for further processing on commission. In the event of data being transmitted to Wix in Israel, an adequate level of data protection is ensured by an adequacy decision of the European Commission. Further information on Wix's data protection can be found on the following website: https://de.wix.com/about/privacy
The scope of personal data processing is described below. Further processing on servers other than those mentioned above by Wix only takes place within the scope communicated below.
4) Cookies
To make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your device and enable us to recognize your browser on your next visit (so-called persistent cookies). If cookies are set, they collect and process certain user information to an individual extent, such as browser and location data and IP address values. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can find the duration of the respective cookie storage in the overview of the cookie settings of your web browser.
Some cookies serve to simplify the ordering process by storing settings (e.g. remembering the content of a virtual shopping cart for a later visit to the website). If individual cookies used by us also process personal data, the processing is carried out either in accordance with Art. 6 Para. 1 lit. b GDPR for the execution of the contract, in accordance with Art. 6 Para. 1 lit. a GDPR in the case of consent given, or in accordance with Art. 6 Para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.
Please note that you can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how to change your cookie settings. You can find these for the respective browsers under the following links:
Internet Explorer: https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies
Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
Chrome: https://support.google.com/chrome/answer/95647?hl=en&hlrm=en
Safari: https://support.apple.com/en-us/guide/safari/sfri11471/mac
Opera: https://help.opera.com/en/latest/web-preferences/#cookies
Please note that the functionality of our website may be limited if cookies are not accepted.
5) Contacting us
5.1 Personal data is collected when you contact us (e.g. via contact form or e-mail). Which data is collected in the case of using a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of answering your request or for contacting you and the associated technical administration. The legal basis for the processing of this data is our legitimate interest in answering your request in accordance with Art. 6 para. 1 lit. f GDPR. If your contact aims at concluding a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted after final processing of your inquiry. This is the case if it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.
5.2 WhatsApp Business
We offer visitors to our website the opportunity to contact us via the WhatsApp messaging service of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For this purpose, we use the so-called "Business version" of WhatsApp.
If you contact us via WhatsApp regarding a specific transaction (e.g. an order placed), we store and use your mobile phone number used on WhatsApp and – if provided – your first and last name in accordance with Art. 6 para. 1 lit. b GDPR to process and answer your request. On the basis of the same legal basis, we may ask you via WhatsApp to provide further data (order number, customer number, address or e-mail address) in order to assign your inquiry to a specific process.
If you use our WhatsApp contact for general inquiries (e.g. about the range of services, availability or our website), we store and use your mobile phone number used on WhatsApp and – if provided – your first and last name in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in providing the requested information efficiently and promptly.
Your data will only be used to answer your inquiry via WhatsApp. No disclosure to third parties takes place.
Please note that WhatsApp Business gains access to the address book of the mobile device we use for this purpose and automatically transmits telephone numbers stored in the address book to a server of the parent company Facebook Inc. in the USA. For the operation of our WhatsApp Business account, we use a mobile device whose address book only stores the WhatsApp contact data of users who have also contacted us via WhatsApp.
This ensures that any person whose WhatsApp contact data is stored in our address book has already consented to the transmission of their WhatsApp phone number from the address books of their chat contacts in accordance with Art. 6 para. 1 lit. a GDPR when first using the app on their device by accepting the WhatsApp terms of use. The transmission of data of users who do not use WhatsApp and/or have not contacted us via WhatsApp is therefore excluded.
For the purpose and scope of data collection and the further processing and use of the data by WhatsApp, as well as your related rights and setting options for protecting your privacy, please refer to WhatsApp's privacy policy: https://www.whatsapp.com/legal/?eea=1#privacy-policy
6) Data processing when opening a customer account and for contract processing
In accordance with Art. 6 para. 1 lit. b GDPR, personal data will continue to be collected and processed if you provide it to us for the purpose of executing a contract or when opening a customer account. Which data is collected can be seen from the respective input forms. Your customer account can be deleted at any time and can be done by sending a message to the above address of the controller. We store and use the data you provide for contract processing. After complete processing of the contract or deletion of your customer account, your data will be blocked with regard to tax and commercial retention periods and deleted after these periods have expired, unless you have expressly consented to further use of your data or further data use permitted by law has been reserved by us.
7) Data processing for order fulfillment
7.1 To process your order, we work with the following service provider(s), who support us fully or partially in carrying out concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.
The personal data collected by us will be passed on to the transport company commissioned with the delivery within the scope of contract processing, insofar as this is necessary for the delivery of the goods. We pass on your payment data to the commissioned credit institution within the framework of payment processing, insofar as this is necessary for payment processing. If payment service providers are used, we will inform you explicitly about this below. The legal basis for the transfer of data is Art. 6 para. 1 lit. b GDPR.
7.2 Use of payment service providers
- Klarna
If you choose a Klarna payment service, the payment will be processed via Klarna Bank AB (publ) [https://www.klarna.com/de], Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter "Klarna"). To enable the processing of the payment, your personal data (first and last name, street, house number, postcode, city, gender, e-mail address, telephone number and IP address) as well as data related to the order (e.g. invoice amount, item, delivery method) are transmitted to Klarna for the purpose of identity and creditworthiness checks, provided that you have explicitly consented to this in accordance with Art. 6 para. 1 lit. a GDPR during the ordering process. You can see which credit agencies your data may be forwarded to here:
https://cdn.klarna.com/1.0/shared/content/legal/terms/0/en_gb/credit_rating_agencies
The credit assessment may contain probability values (so-called score values). Insofar as score values are included in the result of the credit assessment, they are based on a scientifically recognized mathematical-statistical procedure. Address data, among other things, but not exclusively, are included in the calculation of the score values. Klarna uses the information obtained about the statistical probability of a payment default for a balanced decision on the establishment, execution or termination of the contractual relationship.
You can revoke your consent at any time by sending a message to the controller or to Klarna. However, Klarna may still be entitled to process your personal data if this is necessary for contractual payment processing.
Your personal data will be treated in accordance with applicable data protection regulations and in accordance with the information in Klarna's privacy policy for data subjects residing in Germany https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy
or for data subjects residing in Austria https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/privacy
will be handled.
- Paypal
If you pay via PayPal, credit card via PayPal, direct debit via PayPal or – if offered – "purchase on account" or "installment payment" via PayPal, we transmit your payment data within the scope of payment processing to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). The transfer takes place in accordance with Art. 6 para. 1 lit. b GDPR and only insofar as this is necessary for payment processing.
PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or – if offered – "purchase on account" or "installment payment" via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 para. 1 lit. f GDPR on the basis of PayPal's legitimate interest in determining your solvency. PayPal uses the result of the credit check regarding the statistical probability of a payment default for the purpose of deciding whether to provide the respective payment method. The credit assessment may contain probability values (so-called score values). Insofar as score values are included in the result of the credit assessment, they are based on a scientifically recognized mathematical-statistical procedure. Address data, among other things, but not exclusively, are included in the calculation of the score values. Further information on data protection, including the credit agencies used, can be found in PayPal's privacy policy: https://www.paypal.com/en/webapps/mpp/ua/privacy-full
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.
- Wix Payments
If you choose the Wix Payments payment method, the payment will be processed via the payment system of Wix HQ, 6350671, Nemal Tel Aviv St 40, Tel Aviv-Yafo, Israel ("Wix"). Wix Payments enables payment via all common credit card formats and, depending on the region, also via additional payment methods. The individual payment methods offered via Wix Payments will be communicated to you on our website.
For payments via Wix Payments, your payment data (e.g., payment amount, information on the payment method used, details of the payment recipient) and your confirmation that the payment data is correct are collected, processed, and transmitted by Wix to the credit institution commissioned with the payment in accordance with Art. 6 para. 1 lit. b GDPR. This processing only takes place to the extent that it is actually necessary for the execution of the payment. Wix then authenticates the payment via the authentication procedure stored for you at your credit institution.
In the context of the aforementioned services, data may also be transferred for further processing on behalf of Wix Inc., 500 Terry A. Francois Boulevard, San Francisco, California 94158, USA.
In the event of data transfer to Wix in Israel, an adequate level of data protection is ensured by an adequacy decision of the European Commission.
Further information on Wix's data protection can be found on the following website: https://de.wix.com/about/privacy
8) Web analytics services
8.1 Google (Universal) Analytics without cookies
This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").
This website uses Google (Universal) Analytics exclusively without the use of cookies, which means that the service never places cookies on your device.
Instead, your browser's local storage is used to store an individual ID assigned by Google (Universal) Analytics, which enables an analysis of your use of the website. For this purpose, certain user information is processed via the ID.
The information generated by the ID about your use of this website (including the truncated IP address) is usually transferred to a Google server and stored there; this may also involve a transfer to the servers of Google LLC. in the USA.
This website uses Google (Universal) Analytics exclusively with the "_anonymizeIp()" extension, which ensures the anonymization of the IP address by truncation and excludes direct personal reference. By means of the extension, your IP address is truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a server of Google LLC. in the USA and truncated there. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide us with other services related to website and internet use. The IP address transmitted by your browser as part of Google (Universal) Analytics is merged with other data from Google.
Google Analytics also enables, via a special function, the so-called "demographic characteristics", the creation of statistics with statements about the age, gender, and interests of site visitors based on an evaluation of interest-based advertising and with the inclusion of third-party information. This allows the definition and differentiation of user groups of the website for the purpose of target group-optimized alignment of marketing measures. However, data records collected via the "demographic characteristics" cannot be assigned to a specific person.
Details on the processing initiated by Google Analytics and on Google's handling of data from websites can be found here: https://policies.google.com/technologies/partner-sites
All the processing described above will only be carried out if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. Without this consent, Google Analytics will not be used during your visit to the site.
You can revoke your given consent at any time with effect for the future. To exercise your revocation, you can download and install the browser plugin available at the following link:
https://tools.google.com/dlpage/gaoptout?hl=de
Alternatively to the browser plugin or within browsers on mobile devices, you can revoke your consent by clicking on the following link to set an opt-out cookie that will prevent future collection by Google Analytics within this website (this opt-out cookie only works in this browser and only for this domain. If you delete your cookies in this browser, you must click this link again):
<a onclick="alert('Google Analytics wurde deaktiviert');" href="javascript:gaOptout() ">Deactivate Google Analytics</a>
We have concluded a data processing agreement with Google for the use of Google Analytics, obliging Google to protect the data of our site visitors and not to pass it on to third parties.
For the transfer of data from the EU to the USA, Google relies on so-called standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection in the USA.
Further information on Google (Universal) Analytics can be found here: https://policies.google.com/privacy?hl=de&gl=de
8.2 Wix Analytics
This website uses the analytics service "Wix Analytics", a service of Wix HQ, 6350671, Nemal Tel Aviv St 40, Tel Aviv-Yafo, Israel ("Wix"). Via Wix Analytics, various user data is collected, stored, and prepared and summarized in statistical reports in anonymized form for optimization and marketing purposes. This includes login data, time zone setting, operating system and platform, information about visits including URL, session duration, number of pages viewed per session, search terms, information about what you searched for or viewed on our site, website response time, and conversion rates. For this purpose, Wix Analytics uses cookies. Cookies are small text files that are stored locally in the cache of the website visitor's internet browser. The cookies enable, among other things, the recognition of the internet browser. The data collected via Wix Analytics is not used to personally identify the visitor to this website and is not combined with personal data of the data subject without separately given consent.
All the processing described above, in particular the setting of Wix Analytics cookies for reading out information on the end device used, will only be carried out if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. Without this consent, Wix Analytics will not be used during your visit to the site.
You can revoke your given consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "Cookie Consent Tool" provided on the website.
In the event of data transfer to Wix in Israel, an adequate level of data protection is ensured by an adequacy decision of the European Commission. Further information on Wix's data protection can be found on the following website: https://de.wix.com/about/privacy
We have concluded a data processing agreement with Wix (viewable at https://de.wix.com/about/privacy-dpa-users/), with which we oblige the provider to protect our customers' data and not to pass it on to third parties.
9) Use of a live chat system
Wix Chat
On this website, anonymized data is collected and stored using technologies from Wix HQ, 6350671, Nemal Tel Aviv St 40, Tel Aviv-Yafo, Israel ("Wix") for the purpose of web analysis and for operating the live chat system, which serves to answer live support inquiries. Usage profiles can be created from this anonymized data under a pseudonym. For this purpose, cookies may be used. Cookies are small text files that are stored locally in the cache of the website visitor's internet browser. The cookies enable the recognition of the internet browser. If the information collected in this way has a personal reference, the processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in effective customer support and the statistical analysis of user behavior for optimization purposes.
The data collected with Wix technologies is not used to personally identify the visitor to this website without separately given consent and is not combined with personal data about the bearer of the pseudonym. To avoid the storage of Wix cookies, you can set your internet browser so that no more cookies can be stored on your computer in the future, or already stored cookies are deleted. However, deactivating all cookies may lead to some functions on our websites no longer being executable. You can object to the collection and storage of data for the purpose of creating a pseudonymized usage profile at any time with effect for the future by sending us your objection informally by e-mail to the e-mail address mentioned in the imprint.
Further information on Wix's data protection can be found on the following website: https://de.wix.com/about/privacy
In the event of data transfer to Wix in Israel, an adequate level of data protection is ensured by an adequacy decision of the European Commission.
10) Rights of the data subject
10.1 The applicable data protection law grants you comprehensive data subject rights (rights of access and intervention) vis-à-vis the controller with regard to the processing of your personal data, about which we inform you below:
- Right to information pursuant to Art. 15 GDPR: In particular, you have a right to information about your personal data processed by us, the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if it was not collected by us from you, the existence of automated decision-making including profiling and, if applicable, meaningful information about the logic involved and the significance and envisaged consequences of such processing for you, as well as your right to be informed about what safeguards pursuant to Art. 46 GDPR exist for the transfer of your data to third countries;
- Right to rectification pursuant to Art. 16 GDPR: You have the right to immediate rectification of inaccurate data concerning you and/or completion of your incomplete data stored by us;
- Right to erasure pursuant to Art. 17 GDPR: You have the right to request the erasure of your personal data if the conditions of Art. 17 para. 1 GDPR are met. However, this right does not apply, in particular, if the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims;
- Right to restriction of processing pursuant to Art. 18 GDPR: You have the right to request the restriction of the processing of your personal data as long as the accuracy of your data disputed by you is being verified, if you refuse the erasure of your data due to unlawful data processing and instead request the restriction of the processing of your data, if you need your data for the establishment, exercise or defense of legal claims after we no longer need this data after the purpose has been achieved, or if you have objected for reasons arising from your particular situation, as long as it has not yet been determined whether our legitimate reasons outweigh your interests;
- Right to notification pursuant to Art. 19 GDPR: If you have asserted the right to rectification, erasure, or restriction of processing against the controller, the controller is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of data or restriction of processing, unless this proves impossible or involves disproportionate effort. You have the right to be informed about these recipients.
- Right to data portability pursuant to Art. 20 GDPR: You have the right to receive your personal data, which you have provided to us, in a structured, commonly used, and machine-readable format or to request transmission to another controller, insofar as this is technically feasible;
- Right to withdraw consent given pursuant to Art. 7 para. 3 GDPR: You have the right to withdraw consent once given to the processing of data at any time with effect for the future. In the event of withdrawal, we will immediately delete the data concerned, unless further processing can be based on a legal basis for processing without consent. The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of the consent until withdrawal;
- Right to complain pursuant to Art. 77 GDPR: If you believe that the processing of personal data concerning you violates the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement, without prejudice to any other administrative or judicial remedy.
10.2 RIGHT TO OBJECT
IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTERESTS WITHIN THE FRAMEWORK OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME WITH EFFECT FOR THE FUTURE FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED. FURTHER PROCESSING REMAINS RESERVED, HOWEVER, IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.
IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSES OF SUCH MARKETING. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.
11) Duration of storage of personal data
The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing, and - if applicable - additionally by the respective statutory retention period (e.g., commercial and tax law retention periods).
When personal data is processed on the basis of explicit consent in accordance with Art. 6 para. 1 lit. a GDPR, this data is stored until the data subject withdraws their consent.
If statutory retention periods exist for data processed within the framework of legal or quasi-legal obligations on the basis of Art. 6 para. 1 lit. b GDPR, this data will be routinely deleted after the retention periods have expired, provided it is no longer required for contract fulfillment or contract initiation and/or we no longer have a legitimate interest in further storage.
When personal data is processed on the basis of Art. 6 para. 1 lit. f GDPR, this data is stored until the data subject exercises their right to object pursuant to Art. 21 para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the data subject, or the processing serves the establishment, exercise or defense of legal claims.
When personal data is processed for direct marketing purposes on the basis of Art. 6 para. 1 lit. f GDPR, this data is stored until the data subject exercises their right to object pursuant to Art. 21 para. 2 GDPR.
Unless otherwise stated in the other information in this declaration regarding specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.