Data protection declaration
Contents
B. Privacy Policy for our Facebook page.
C. Privacy Policy for our Instagram page.
A. Privacy Policy for our business activities in connection with the sale of goods, including this website
This privacy policy applies to our business activities in connection with our sale of goods, including the operation of the website www.obastudios.com
Responsible person:
Barbara Jenner
Heinrich-Roller-Str. 9
10405 Berlin
barbara@obastudios.com
1.) Processing of personal data
As part of our business activities in connection with the sale of goods and the above-mentioned website, we process your personal data, among other things, as follows (for further data processing within the scope of the website, please refer to the following sections of this privacy policy):
Log files when visiting the website
When you use our website, our hosting provider logs so-called “log file” data each time you access the server, such as the name of the website accessed, the previously visited page (“referrer” URL), product and version information of the browser and operating system used, the requesting provider, the date and time of access, the search engines used, the country of access, the amount of data transferred, the names of downloaded files and the IP address.
The legal basis for processing is Article 6 (1) (f) GDPR. Our legitimate interest in storing log file data lies in ensuring system security, including investigating misuse. IP addresses are deleted after a maximum of seven days, unless they are required for a longer period due to a security-relevant incident, e.g., for investigation or evidentiary purposes.
Contact inquiries:
When you contact us, we process your personal data such as name, address, email address, telephone number, etc., which we need to answer your inquiry.
The legal basis for the processing of your personal data in the context of contact inquiries is Art. 6 (1) (b) of the General Data Protection Regulation.
When you contact us, we will store your personal data for as long as necessary to process your request, plus a reasonable retention period for follow-up queries.
The provision of this personal data is not required by law or contract, nor is it necessary for the conclusion of a contract. However, if you do not provide us with this data, we will not be able to respond to your contact request or, in the case of limited contact information, not be able to respond to all requested communication channels.
Registration/ Orders:
When you register or place an order, we process your personal data such as name, address, email address, telephone number, date of birth, self-selected user name, payment details, etc., which we need to fulfill the contractual relationship with you or to carry out pre-contractual measures that are carried out at your request.
We will store your personal data collected during registration or orders for as long as it is necessary to fulfill the contractual relationship and/or to carry out pre-contractual measures at your request and/or with regard to warranty, guarantee or similar obligations and/or with regard to statutory retention periods.
The legal basis for the processing of your personal data collected during registration or orders is Art. 6 (1) b) and Art. 6 (1) c) of the General Data Protection Regulation.
Newsletters:
If you subscribe to our newsletter, we will process the data collected, such as your email address, title, etc., for the purpose of sending the newsletter.
The legal basis for the processing of your personal data in the context of sending our newsletter is Art. 6 Para. 1 a) of the General Data Protection Regulation.
We will store the personal data we need to send the newsletter until you revoke your consent to receive the newsletter.
If information is mandatory (rather than voluntary) when registering for the newsletter, we cannot accept your newsletter registration without this information.
2.) Use of cookies
In this section we inform you about the use of cookies on our website.
a) Description and functionality
Cookies are small text files that are stored on the user's computer and that enable an analysis of the user's use of the website.
b) Own cookies
We use cookies to make using the website easier and more convenient for visitors and to enable certain functions in the first place.
The legal basis for our processing of your personal data in connection with the use of cookies is Article 6 (1) (f) of the General Data Protection Regulation (“legitimate interest”). This legitimate interest arises from the purposes stated above.
When using cookies, we store your personal data for as long as necessary to make using our website easier and more convenient.
c) Third-party cookies
The website may also use third-party cookies to collect or receive information from our website and elsewhere on the internet and then use that information to provide, for example, web tracking services, rating services or targeted advertising.
When using cookies, your personal data will be stored for as long as necessary to achieve the purposes described above.
To the extent that data processing for the purposes described above is carried out with your consent, the legal basis is Article 6, paragraph 1 a) GDPR (consent). Otherwise, data processing is carried out on the basis of Article 6, paragraph 1 f) GDPR ("legitimate interests"), whereby the legitimate interests lie in the purposes stated above.
d) Revocation/ Objection/ Settings
You have the option at any time to revoke your consent to the setting of cookies or to object to data processing by cookies by deleting the cookies in your browser settings.
You can also set your browser so that cookies are only accepted if you agree to this,
As for ad cookies, you can block and/or manage many of them through the following services:
www.aboutads.info/choices/
www.youronlinechoices.com/uk/your-ad-choices/
www.networkadvertising.org/managing/opt_out.asp
However, if you reject cookies, you may not be able to use certain website features, services, applications or tools.
3.) Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses "cookies," which are text files placed on your computer, to help the website analyze how users use the site.
Google may transfer your data to servers worldwide. Google bases data transfers to the USA on the EU-US Data Protection Framework. Data transfers to countries without an adequate level of data protection are based on the EU Standard Contractual Clauses. For details, see the following section of Google's privacy policy: https://policies.google.com/privacy/frameworks
Google’s privacy policy can be found at: https://policies.google.com/privacy.
The data processed as part of the use of Google Analytics is automatically deleted after a maximum of 26 months.
To the extent that data processing for the purposes described above is carried out with your consent, the legal basis is Article 6, paragraph 1 a) GDPR (consent). Otherwise, data processing is carried out on the basis of Article 6, paragraph 1 f) GDPR ("legitimate interests"), whereby the legitimate interests lie in the purposes stated above.
You can prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available under the following link:
https://tools.google.com/dlpage/gaoptout?hl=de
4.) YouTube (in the so-called enhanced privacy mode)
This website uses a plugin from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to display videos. The videos are embedded in the so-called extended data protection mode.For information about the enhanced privacy mode, see https://support.google.com/youtube/answer/171780?hl=de
If you play a video embedded by us, your IP address will be recorded by YouTube.
In addition, Google may collect additional data about your usage behavior in order to display personalized advertising. Data collection may begin as soon as you visit our site.
Google may transfer your data to servers worldwide. Google bases data transfers to the US on the EU-US Data Protection Framework. Google bases data transfers to countries without an adequate level of data protection on the EU Standard Contractual Clauses. Privacy Policy: https://policies.google.com/privacy;
You can object to the recording of your usage behavior for advertising purposes at any time. See letter d. in the “Cookies” section of this privacy policy. https://adssettings.google.com You can also set which types of ads you want to see in connection with Google services.
To the extent that data processing for the purposes described above is carried out with your consent, the legal basis is Article 6, Paragraph 1 a) GDPR (consent). Otherwise, data processing is carried out on the basis of Article 6, Paragraph 1 f) GDPR ("legitimate interests"), whereby the legitimate interests lie in the appealing presentation of our online offerings.
For more information about Google’s use of personal data in connection with YouTube, please see Google’s privacy policy at
https://policies.google.com/privacy?hl=de&gl=de
5.) Meta Pixel / Conversion API / Custom Audience
Meta Pixel, Conversion API, and/or Custom Audience are used on individual pages of our website. These services are operated by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin, D02, Ireland (hereinafter "Facebook").
Meta may transfer your data to servers worldwide. Meta may base data transfers to the USA and other third countries on adequacy decisions and, in other respects, on the EU standard contractual clauses. Details can be found in the following section of Meta's privacy policy: https://de-de.Meta.com/privacy/policy?annotations[0]=9.ex.2-MechanismsWeUseFor&subpage=9.subpage.3-HowDoWeSafeguard;
Meta’s privacy policy can be found at: https://de-de.Meta.com/privacy/policy
Meta Pixel, Conversion API, and/or Custom Audience enable targeted advertising on Facebook. Meta Pixel and/or Conversion API can, for example, be used to identify which visits to our website result from clicks on our Facebook ads. These tools are therefore used for the purposes of analysis, optimization, and economic operation of our online advertising.
When using the pixel technology, an invisible Facebook pixel is integrated into our website, which transmits, among other things, the Facebook user ID of the user (logged in to Facebook) and data on the use of our website to Facebook. This allows Facebook to track the online behavior of our website users. Facebook can display targeted advertisements (for example, for a product not purchased after an order process was canceled) to registered users.
A similar situation applies to the use of Meta Conversion API: Here, however, the information about user behavior is not generated via pixels, but rather we define certain user actions (conversions), which are then transmitted to Meta via an interface.
To the extent that data processing for the purposes described above is carried out with your consent, the legal basis is Article 6, paragraph 1 a) GDPR (consent). Otherwise, data processing is carried out on the basis of Article 6, paragraph 1 f) GDPR ("legitimate interests"), whereby the legitimate interests lie in the purposes stated above.
For more detailed information, please see Meta’s privacy policy:
https://de-de.facebook.com/policy.php
6.) Rights of data subjects
According to Article 15 of the General Data Protection Regulation, you have the right to request information about the processing of your personal data ("right of access of the data subject").
According to Article 16 of the General Data Protection Regulation, you have the right to request the rectification and erasure of inaccurate personal data concerning you ("right to rectification").
According to Article 17 of the General Data Protection Regulation, you can request the erasure of personal data concerning you if one of the reasons listed therein applies ("right to be forgotten").
Likewise, according to Article 18 of the General Data Protection Regulation, you have the right to request the restriction of the processing of personal data concerning you if one of the conditions listed therein applies ("right to restriction of processing").
According to Article 20 of the General Data Protection Regulation, you have the right to have personal data concerning you made available to you and to have this data transmitted to another controller ("right to data portability").
Revocation of consent: See section “Right of withdrawal” in this privacy policy.
Right of objection: See the “Right of objection” section in this privacy policy.
You have the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority is the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59-61, 10555 Berlin.
7.) Right of withdrawal
You can revoke your consent to the processing of your personal data at any time, for example, by sending an email to the email address mentioned above. This does not affect the legality of the processing carried out on the basis of your consent until the revocation.
8.) Right of objection
To the extent that our data processing is based on Article 6 paragraph 1 f) GDPR (“legitimate interests”), you have the right to object to the processing of your personal data in accordance with Article 21 GDPR.
9.) Sharing your data
Unless already stated elsewhere in this privacy policy, we will pass on your personal data to the following additional recipients or categories of recipients
Shipping service provider
Unless already stated above, we intend to transfer your personal data to the following third country or international organization.
- We operate our online shop using Shopify's software and servers. According to its privacy policy, Shopify processes data worldwide, including in Canada and the USA. Shopify's privacy policy, which also contains more detailed information on data transfer abroad, can be found here: https://www.shopify.de/legal/datenschutz
B. Privacy Policy for our Facebook page
This privacy policy applies to our Facebook page at the Internet address www.facebook.com/obastudiosberlin (hereinafter “Facebook Page”).
The operator of the Facebook page is:
Barbara Jenner
Hobrechtstrasse 44
12047 Berlin
jenner.barbara@gmail.com
Your personal data will be processed by us and, in particular, by Facebook. Below, we describe which of your data we process on our Facebook page and our relationship with Facebook.
1.) What personal data do we process when you use our Facebook page?
When you use our Facebook page, we process the following personal data:
a. communication
We maintain our presence on Facebook to present our goods and/or services and to communicate with customers and interested parties.
The legal basis for our processing of the relevant communication content with you is Article 6, Paragraph 1, Sentence 1, Letter f) of the GDPR ("legitimate interests"), whereby our legitimate interests lie in the aforementioned purposes. For orders placed via our social media presence, the legal basis is also Article 6, Paragraph 1, Letter b) of the GDPR ("performance of contract").
b. Technical usage data
When you use our Facebook page, we process technical information about your visit to our Facebook page, such as your device's IP address, the time of your visit, and the website from which you visit us. We process this data for technical administration and to provide the Facebook page, and as the operator of the Facebook page, to obtain statistical information about the use of our Facebook page.
The legal basis for processing your data is Art. 6 (1) (f) GDPR. Our interest lies in continuously improving our Facebook page and providing you with information that is interesting and relevant to you.
c. Statistical usage data
We also collect statistical usage data, including, for example,Information about page views, posts or videos, subscriptions, likes of posts, recommendations of posts or comments, sharing of content, reactions or comments on posts, reports of posts, clicks on links on other pages that lead to the fan page, mouse movements over names or profile pictures to get a preview of content, clicks on buttons on a fan page and the device (computer or mobile device) with which you are logged in.
We only receive such ("usage data") in aggregated form via the Facebook tool "Page Insights" (https://www.facebook.com/business/a/page/page-insights and https://de-de.facebook.com/legal/terms/information_about_page_insights_data) We cannot assign Insights data to you personally.
We process this data for technical administration and to provide our Facebook page, and as the operator of the Facebook page, to obtain statistical information about the use of our fan page. The legal basis for processing this data is Art. 6 (1) (f) GDPR. Our interest here is the administration and improvement of the Facebook page.
We and Facebook are so-called "joint controllers" for the processing of Insights data. This means that Facebook and we process this data for the joint purpose of learning about the usage behavior of visitors to our fan page. Facebook, as the operator of the platform, collects the detailed usage data from you; we only receive the aggregated Insights data from Facebook. Therefore, only Facebook makes the decisions regarding the processing of usage data in connection with Page Insights. In the case of such joint controllership, the EU General Data Protection Regulation requires us to enter into a contract with Facebook. You can access this contract here: https://www.facebook.com/legal/terms/page_controller_addendum. It contains further details and explanations on joint responsibility with Facebook within the framework of Insights.
d. Likes, posts and messages
When you use our Facebook page, we process
Your Facebook username and profile picture,
Your click interactions with our posts (“likes”, “shares”, etc.) and
Your comments, posts, messages and other content that you provide to us on our Facebook page.
The legal basis for processing is Art. 6 (1) (f) GDPR (balancing of interests). We process your data to provide you and other users of our Facebook page with interesting information and to regularly inform you about our offerings.
2.) Data processing by Facebook
We have no access to other personal data that is processed when you use Facebook. Facebook's privacy policy applies to the processing of your personal data by Facebook. (https://de-de.facebook.com/policy.php).
Please note the following in particular:
a. Data transfer to the USA and other third countries
Meta may transfer your data to servers worldwide. Meta bases data transfers to the USA and other third countries on adequacy decisions and, in other respects, on the EU standard contractual clauses. Details can be found in the following section of Facebook's privacy policy: https://de-de.facebook.com/privacy/policy?annotations[0]=9.ex.2-MechanismsWeUseFor&subpage=9.subpage.3-HowDoWeSafeguard;
Facebook’s privacy policy can be found at: https://de-de.facebook.com/privacy/policy
b. Use of cookies by Facebook
When you visit Facebook—regardless of our Facebook page—Facebook places cookies and similar trackers on your device. If you are also logged in to Facebook, Facebook can track that you visited our Facebook page and how you used it. This also applies to all other Facebook fan pages.
Facebook's data policy generally describes which cookies Facebook uses, what information Facebook receives through the cookie, how these cookies are used, how long they are stored by Facebook, and with which third-party partners they are shared. There you will also find information about how to contact Facebook and how to set up ad settings. The data policy is available at the following link: https://de-de.facebook.com/policy.php.
You can delete Facebook cookies here: http://www.youronlinechoices.com/de/praferenzmanagement/.
C. Privacy Policy for our Instagram page
We have a presence on Instagram.
The Instagram service is operated by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin, D02, Ireland (hereinafter “Facebook”).
Responsible
We are the controller within the meaning of Article 4 (7) of the General Data Protection Regulation (GDPR) if we exclusively process the personal data you send us via Instagram ourselves.
To the extent that the personal data you transmit to us via Instagram is also or exclusively processed by Instagram, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, D2 Dublin Ireland, is also responsible for data processing within the meaning of the GDPR, in addition to us.
You can contact the data protection officer of Instagram or Facebook using the contact form provided by Facebook.
As the controller of the Instagram page, we have entered into agreements with Facebook that, among other things, regulate the conditions for using the Instagram page. The Instagram Terms of Use and the other terms and guidelines listed at the end of the Instagram page apply.
Use of cookies by Facebook
When you visit our Instagram page, Facebook, as the controller, collects personal data from the respective users, including through the use of cookies.
You can find out which cookies Facebook uses and what information Facebook receives via the cookie, how these are used, how long they are stored by Facebook and with which third-party partners they are shared in Instagram's privacy policy.
There you will also find information about how to contact Facebook and how to configure your ad settings. You can also configure your browser settings according to your preferences and, for example, refuse cookies. However, please note that in this case, not all Instagram functions may be available to you.
You can delete Facebook cookies here, among other places: http://www.youronlinechoices.com/de/praferenzmanagement/.
Likes, posts and messages
If you visit our Instagram page as a registered Instagram user, we process the following data:
· Your Instagram username and profile picture,
· Your click interaction with our posts (“likes”, “shares”, etc.) and
· Your comments, posts, messages and other content that you make available on our site.
If you contact us via our Instagram page or by email, we will store the data you may provide with your message (email address, name) in order to answer your questions. We will delete the data collected in this context once storage is no longer required.
The legal basis for processing is Art. 6 (1) (b) and (f) GDPR (balancing of interests, upon request of the data subject). We process your data to provide you and other users of our site with interesting information and to regularly inform you about our offerings.
However, we do not have full access to the data collected by Facebook or your profile data and can only view the public information on your profile. You decide what this information is in your Instagram settings. For example, you have the option of actively hiding "likes" on your profile or unfollowing our Instagram page. Your profile will then no longer appear in the list of fans on our Instagram page.
However, we have no influence on the collection and further processing of your data by Instagram. Likewise, we cannot determine where, for how long, and to what extent the respective data is stored by Facebook. This also applies to Facebook's existing deletion obligations, which analyses and connections or links Facebook makes with the data, and to whom the data is shared. You can find out which additional personal data Facebook processes when you use our Instagram page in Instagram's privacy policy.
Statistical usage data
To better achieve the goals of our Instagram page, demographic and geographical analyses are created based on the information collected by Facebook and made available to us by Facebook. We can use this information to target interest-based advertisements without directly knowing the visitor's identity. If visitors use Instagram on multiple devices, the collection and analysis can also be carried out across devices if the visitors are registered and logged into their own profile. Facebook provides us with the following information about the use of our Instagram page:
Followers: Number of people who follow our Instagram page - including growth and development over a defined time frame.
Reach: The number of people who see a specific post. The number of interactions with a post. This can be used to determine, for example, which content is more popular in the community than others.
Ad performance: How many people were reached and interacted with a post or paid ad?
Demographics: Average age of visitors, gender, location, language.
Activities: Times when most users in the community are online.
On-site actions: clicks on routes, emails, website and profile visits.
Page views: Number of times the page was viewed and on which device.
These visitor statistics are transmitted to us by Facebook via the Instagram tool ("Insights") exclusively in anonymized form. However, we cannot assign Insights data to you personally. We also have no access to the underlying data.
We process this data exclusively for technical administration and to provide our Instagram page, and to obtain statistical information about its use as the page operator. The legal basis for processing this data is Art. 6 (1) (f) GDPR. Our interest here is the administration and improvement of the page.
We and Facebook are so-called "joint controllers" for the processing of Insights data. This means that Facebook and we process this data for the joint purpose of learning about the usage behavior of visitors to our Instagram pages. Facebook, as the operator of the platform, collects the detailed usage data from you; we only receive the aggregated Insights data from Facebook. Therefore, only Facebook makes the decisions regarding the processing of usage data in connection with Page Insights. In the case of such joint controllership, the EU General Data Protection Regulation requires us to enter into a contract with Facebook. You can access this contract here: https://www.facebook.com/legal/terms/page_controller_addendum. It contains further details and explanations on joint responsibility with Facebook within the framework of Insights.
The contract essentially stipulates that requests for information and the assertion of data subject rights regarding Insights data must be made directly to Facebook as the controller.
Instagram users can also influence the extent to which their user behavior may be recorded when visiting our Instagram page in their advertising preferences settings. Further options are available in the Instagram settings or the opt-out form.
Data transfer to the USA and other third countries
Meta may transfer your data to servers worldwide. Meta bases data transfers to the USA and other third countries on adequacy decisions and, in other respects, on the EU standard contractual clauses. Details can be found in the following section of Facebook's privacy policy: https://de-de.facebook.com/privacy/policy?annotations[0]=9.ex.2-MechanismsWeUseFor&subpage=9.subpage.3-HowDoWeSafeguard;
Facebook’s privacy policy can be found at: https://de-de.facebook.com/privacy/policy