PRIVACY POLICY
Contents
A. Privacy Policy for our business activities in connection with the sale of goods including this website
B. Privacy policy for our Facebook page
C. Privacy policy for our Instagram page
A. Privacy policy for our business activities in connection with the sale of goods, including this website
This privacy policy applies to our business activities in connection with our sale of goods, including the operation of the website www.obastudios.com
Responsible person:
Barbara Jenner
Eisenbahnstr. 6
10997 Berlin
contact@obastudios.com
1. processing of personal data
As part of our business activities in connection with the sale of goods and the above-mentioned website, we process your personal data as follows (for further data processing within the framework of the website, please refer to the following sections of this data protection declaration):
Log files when visiting the website
When using our website, our hosting provider logs so-called "log file" data each time the server is accessed, such as the name of the website accessed, previously visited page ("referrer" URL), product and version information of the browser and operating system used, requesting provider, date and time of access, search engines used, country of access, amount of data transferred, names of downloaded files and IP address.
The legal basis for processing is Article 6(1)(f) GDPR. Our legitimate interest in storing log file data lies in ensuring system security, including the investigation of misuse. The IP addresses are deleted after a maximum of 7 days, unless they are required for longer due to a security-relevant incident, e.g. for clarification or evidence purposes.
Contact requests:
For contact requests, we process your personal data such as name, address, e-mail address, telephone number or similar, which we need to answer your request.
The legal basis for the processing of your personal data in the context of contact inquiries is Art. 6 para. 1 b) General Data Protection Regulation.
In the context of contact inquiries, we store your personal data for as long as is necessary to process your inquiry, plus an appropriate retention period for follow-up questions.
The provision of this personal data is not required by law or contract or necessary for the conclusion of a contract. However, if you do not provide us with this data, we will not be able to respond to your contact request or - in the case of limited contact details - will not be able to respond to all requested communication channels.
Registration/orders:
When you register or place orders, we process your personal data such as name, address, e-mail address, telephone number, date of birth, user name you have chosen yourself, payment data or similar, which we require for the fulfillment of the contractual relationship with you or for the implementation of pre-contractual measures that are carried out at your request.
We store your personal data collected in the context of registration or orders for as long as is necessary for the fulfillment of the contractual relationship and/or for the implementation of pre-contractual measures taken at your request and/or with regard to warranty, guarantee or comparable obligations and/or with regard to statutory retention periods.
The legal basis for the processing of your personal data collected in the context of registration or orders is Art. 6 para. 1 b) and Art. 6 para. 1 c) of the General Data Protection Regulation.
Newsletter:
If you register for our newsletter, we process the data collected in the process, such as your email address, title, etc., for the purposes of sending the newsletter.
The legal basis for the processing of your personal data in the context of sending our newsletter is Art. 6 (1) a) of the General Data Protection Regulation.
We store the personal data that we need to send you the newsletter until you withdraw your consent to receive the newsletter.
Insofar as information is mandatory (instead of only voluntary) as part of the newsletter registration, we cannot accept your newsletter registration without this information.
2 Use of cookies
In this section we inform you about the use of cookies on our website.
a) Description and how they work
Cookies are small text files that are stored on the user's computer and that enable an analysis of the use of the website by the user.
b) Own cookies
We use cookies to make the use of the website easier and more convenient for the visitor or to enable certain functions in the first place.
The legal basis for the processing of your personal data by us in connection with the use of cookies is Art. 6 para. 1 f) General Data Protection Regulation ("legitimate interest"). The legitimate interest arises from the above-mentioned purposes.
In the context of the use of cookies, we store your personal data for as long as necessary to make the use of our website easier and more convenient.
c) Third-party cookies
Third-party cookies may also be used on the website to collect or receive information from our website and other places on the Internet and then use this information to provide, for example, web tracking services, evaluation services or targeted advertisements.
When cookies are used, your personal data is stored for as long as is necessary to achieve the purposes described above.
Insofar as the data processing for the purposes described above is carried out with your consent, the legal basis is Article 6 (1) a) GDPR (consent). Otherwise, data processing is carried out on the basis of Article 6(1)(f) GDPR ("legitimate interests"), whereby the legitimate interests lie in the above-mentioned purposes.
d) Revocation / objection / settings
You have the option at any time to revoke your consent to the use of cookies or to object to data processing by cookies by deleting the cookies in your browser settings.
You can also set your browser so that the storage of cookies is only accepted if you agree to this,
You can find another option for revoking, objecting to and/or managing your cookies here:
[insert button/link to cookie settings of your cookie tool here if necessary]
As far as advertising cookies are concerned, you can block and/or manage many of them using the following services:
www.aboutads.info/choices/
www.youronlinechoices.com/uk/your-ad-choices/
www.networkadvertising.org/managing/opt_out.asp
However, if you reject cookies, you may not be able to use certain website functions, services, applications or tools.
Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. The data collected is transmitted to the provider's servers in the USA. Google bases this data transfer on the EU standard contractual clauses.
However, if IP anonymization is activated on this website, your IP address will be shortened by Google beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. If cookies are not already set on the website only when you give your consent, you can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent.
The data processed as part of the use of Google Analytics is automatically deleted after 26 months.
Insofar as the data processing for the purposes described above is carried out with your consent, the legal basis is Article 6 (1) a) GDPR (consent). Otherwise, data processing is carried out on the basis of Article 6(1)(f) GDPR ("legitimate interests"), whereby the legitimate interests lie in the above-mentioned purposes.
You can prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link:
https://tools.google.com/dlpage/gaoptout?hl=de
YouTube (in the so-called extended data protection mode)
This website uses a plugin from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to display videos. The videos are integrated in the so-called extended data protection mode. You can find information on the extended data protection mode at https://support.google.com/youtube/answer/171780?hl=de
If you play a video embedded by us, your IP address will be recorded by YouTube.
In addition, Google may collect further data about your usage behavior in order to display personalized advertising. Data may be collected from the moment you access our website.
The data collected is transmitted to the provider's servers in the USA. Google bases this data transfer on the EU standard contractual clauses.
You can object to the collection of your usage behavior for advertising purposes at any time. See letter d. in the "Cookies" section of this privacy policy. At https://adssettings.google.com you can also set which types of ads you wish to be shown in connection with Google services.
Insofar as data processing for the purposes described above is carried out with your consent, the legal basis is Article 6(1)(a) GDPR (consent). Otherwise, data processing is carried out on the basis of Article 6(1)(f) GDPR ("legitimate interests"), whereby the legitimate interests lie in the attractive presentation of our online offers.
Further information on the use of personal data by Google in connection with YouTube can be found in Google's privacy policy at
https://policies.google.com/privacy?hl=de&gl=de
5. rights of data subjects
In accordance with Art. 15 of the General Data Protection Regulation, you have the right to request information about the processing of your personal data ("right of access by the data subject").
In accordance with Art. 16 GDPR, you have the right to request the rectification and erasure of inaccurate personal data concerning you ("right to rectification").
In accordance with Art. 17 GDPR, you can request the erasure of personal data concerning you if one of the reasons listed there applies ("right to be forgotten").
In accordance with Art. 18 GDPR, you also have the right to request the restriction of the processing of personal data concerning you if one of the conditions listed there applies ("right to restriction of processing").
In accordance with Art. 20 of the General Data Protection Regulation, you have the right to be provided with personal data concerning you and to have this data transmitted to another controller ("right to data portability").
Withdrawal of consent: See section "Right of withdrawal" in this privacy policy.
Right to object: See section "Right to object" in this privacy policy.
You have the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority is Berlin, Friedrichstraße 219, 10969 Berlin.
6. right of revocation
You can withdraw your consent to the processing of your personal data at any time, e.g. by sending an email to our email address stated at the beginning. This does not affect the lawfulness of the processing carried out on the basis of the consent until revocation.
7. right to object
Insofar as our data processing is based on Article 6(1)(f) GDPR ("legitimate interests"), you have the right to object to the processing of your personal data in accordance with Article 21 GDPR.
8 Disclosure of your data
Unless already listed elsewhere in this privacy policy, we will pass on your personal data to the following other recipients or categories of recipients
Workshop - Christophorus Werkstätten, Fürstenwalde (sends orders)
Shipping service provider dhl
Shipping service provider Hermes
Unless already listed above, we intend to transfer your personal data to the following third country or international organization
B. Privacy policy for our Facebook page
This privacy policy applies to our Facebook page at the Internet address www.facebook.com/obastudiosberlin (hereinafter "Facebook page").
The operator of the Facebook page is
Barbara Jenner
Eisenbahnstr. 6
10997 Berlin
contact@obastudios.com
Your data is processed by us and, above all, by Facebook. In the following, we describe which of your data we process on our Facebook page and our relationship with Facebook.
What personal data do we process when you use our Facebook page?
When you use our Facebook page, we process the following personal data:
a) Technical usage data
When you use our Facebook page, we process technical information about your visit to our Facebook page, such as the IP address of your device, the time of your visit and the website from which you visit us. We process this data for the technical administration and provision of the Facebook page and, as the operator of the Facebook page, to obtain statistical information about the use of our Facebook page.
The legal basis for the processing of your data is Art. 6 para. 1 lit. f GDPR. Our interest lies in constantly improving our Facebook page and providing you with information that is interesting and relevant to you.
b) Statistical usage data
We also collect statistical usage data. This includes, for example, information about views of pages, posts or videos, subscriptions, likes of posts, recommendations of posts or comments, sharing of content, reactions or comments on posts, messages from posts, clicks on links on other pages that lead to the fan page, mouse movements over names or profile pictures to preview content, clicks on buttons on a fan page and on the device (computer or mobile device) with which you are logged in.
We only receive such ("usage data") in aggregated, i.e. summarized, form via the Facebook "Page Insights" tool (https://www.facebook.com/business/a/page/page-insights and https://de-de.facebook.com/legal/terms/information_about_page_insights_data) ("Insights data"). We cannot assign Insights data to you personally.
We process this data for the technical administration and provision of our Facebook page and, as the operator of the Facebook page, to obtain statistical information about the use of our fan page. The legal basis for the processing of this data is Art. 6 para. 1 lit. f GDPR. Our interest here is the administration and improvement of the Facebook page.
We and Facebook are so-called "joint controllers" for the processing of Insights data. This means that Facebook and we process this data for the joint purpose of getting to know the usage behavior of visitors to our fan page. As the operator of the platform, Facebook collects the detailed usage data from you; we only receive the summarized Insights data from Facebook. Therefore, only Facebook makes decisions about the processing of usage data in connection with Page Insights. In the event of such joint responsibility, the EU General Data Protection Regulation requires us to conclude a contract with Facebook. You can access this contract here: https://www.facebook.com/legal/terms/page_controller_addendum. It contains further details and explanations on joint responsibility with Facebook in the context of Insights.
c) Likes, posts and messages
When you use our Facebook page, we process
Your Facebook user name and profile picture,
your click interactions with our posts ("likes", "shares", etc.) and
your comments, posts, messages and other content that you make available to us on our Facebook page.
The legal basis for processing is Art. 6 para. 1 lit. f GDPR (balancing of interests). We process your data in order to provide you and the other users of our Facebook page with interesting information and to inform you regularly about our services.
Data processing by Facebook
We have no access to other personal data that is processed when you use Facebook. Facebook's privacy policy applies to the processing of your personal data by Facebook (https://de-de.facebook.com/policy.php).
Please note the following in particular:
a) Data transfer to the USA and other third countries
In order to provide our Facebook page on the Facebook platform, your personal data will be processed by Facebook Ireland Limited and transferred to Facebook, Inc. in the USA (as well as other third countries, as shown at https://de-de.facebook.com/policy.php). Facebook uses standard contractual clauses approved by the European Commission and relies on the adequacy decisions issued by the European Commission regarding certain countries for data transfers from the EEA to the USA and other countries.
b) Use of cookies by Facebook
When you visit Facebook - regardless of our Facebook page - Facebook places cookies and similar trackers on your device. If you are also logged in to Facebook as a user, Facebook is able to track that you have visited our Facebook page and how you have used it. This also applies to all other Facebook fan pages.
Which cookies Facebook uses and what information Facebook receives via the cookie, how it is used, how long it is stored by Facebook and with which third parties it is shared, is described by Facebook in general terms in its data policy. There you will also find information on how to contact Facebook and the settings options for advertisements. The data guidelines are available at the following link: https://de-de.facebook.com/policy.php.
You can delete Facebook cookies here, for example: http://www.youronlinechoices.com/de/praferenzmanagement/.
C. Privacy policy for our Instagram page
This privacy policy applies to our Instagram page at the Internet address www.instagram.com/obastudios
General information
When you visit our Instagram page, personal data is processed by the controller. The Instagram service is one of the Facebook products provided by Facebook Ireland Limited (hereinafter: Facebook).
Controller
The controller within the meaning of Art. 4 (7) of the General Data Protection Regulation (GDPR) is Barbara Jenner, Eisenbahnstr. 6, 10997 Berlin, E-Mail:contact@obastudios.com, provided that we only process the personal data you transmit to us via Instagram ourselves.
Insofar as the personal data you transmit to us via Instagram is also or exclusively processed by Instagram, Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, D2 Dublin Ireland, is also responsible for data processing within the meaning of the GDPR in addition to us.
Data protection officer
You can contact the data protection officer of Instagram or Facebook via the contact form provided by Facebook.
As the controller of the Instagram page, we have entered into agreements with Facebook that govern, among other things, the conditions for using the Instagram page. The Instagram terms of use and the other conditions and guidelines listed at the end of the agreement are authoritative.
Collection of personal data
In the following, we inform you about the collection of personal data when using our Instagram page, what data is involved, how it is processed and your rights in relation to data processing.
Use of cookies by Facebook
When you visit our Instagram page, Facebook, as the controller, collects personal data from the respective user via the use of cookies, among other things.
You can find out which cookies Facebook uses and what information Facebook receives via the cookie, how it is used, how long it is stored by Facebook and with which third-party partners it is shared in Instagram's privacy policy.
There you will also find information on how to contact Facebook and the settings options for advertisements. You can also configure your browser settings according to your wishes and, for example, refuse to accept cookies. However, we would like to point out that not all Instagram functions will be available to you in this case.
You can delete Facebook cookies here, for example: http://www.youronlinechoices.com/de/praferenzmanagement/.
Likes, posts and messages
If you visit our Instagram page as a registered Instagram user, we process the following data
Your Instagram username and profile picture,
your click interaction with our posts ("likes", "shares", etc.) and
your comments, posts, messages and other content that you make available on our page.
If you contact us via our Instagram page or by email, we will store the data you may have provided with the message (email address, name) in order to answer your questions. We delete the data collected in this context after storage is no longer necessary.
The legal basis for processing is Art. 6 para. 1 lit. b), f) GDPR (balancing of interests, at the request of the data subject). We process your data in order to provide you and other users of our website with interesting information and to inform you regularly about our services.
However, we do not have full access to the data collected by Facebook or your profile data and can only view the public information in your profile. You decide what this is specifically in your Instagram settings. For example, you have the option of actively hiding "likes" in your profile or no longer following our Instagram page. Your profile will then no longer appear in the list of fans of our Instagram page.
However, we have no influence on the collection of your data and further processing by Instagram. It is also not clear to us where, for how long and to what extent the respective data is stored by Facebook. This also applies to Facebook's existing deletion obligations, which evaluations and connections or links Facebook makes with the data and to whom the data is passed on. You can find out what additional personal data Facebook processes when you use our Instagram page in Instagram's privacy policy.
Statistical usage data
In order to better achieve the goals intended with our Instagram page, demographic and geographical evaluations are also created using the information collected by Facebook and made available to us by Facebook. We can use this information to place targeted interest-based advertisements without gaining direct knowledge of the visitor's identity. If visitors use Instagram on multiple devices, the data can also be collected and analyzed across devices if the visitors are registered and logged into their own profile. Facebook provides us with the following information about the use of our Instagram page
Followers: Number of people who follow our Instagram page - including growth and development over a defined time frame.
Reach: Number of people who see a specific post. Number of interactions with a post. This allows us to deduce, for example, which content is better received by the community than others.
Ad performance: How many people were reached with a post or paid ad and interacted with it?
Demographics: Average age of visitors, gender, place of residence, language.
Activities: Times when most users from the community are online.
Actions on the page: Clicks on route, emails, website and profile visits.
Page views: Number of times the page was viewed and on which device.
These visitor statistics are transmitted to us by Facebook via the Instagram tool ("Insights") exclusively in anonymized form. However, we cannot attribute Insights data to you personally. We also have no access to the underlying data.
We process this data exclusively for the technical administration and provision of our Instagram page and, as the operator of the page, to obtain statistical information about its use. The legal basis for the processing of this data is Art. 6 para. 1 lit. f GDPR. Our interest here is the administration and improvement of the site.
We and Facebook are so-called "joint controllers" for the processing of Insights data. This means that Facebook and we process this data for the joint purpose of learning about the usage behavior of visitors to our Instagram pages. As the operator of the platform, Facebook collects the detailed usage data from you; we only receive the summarized Insights data from Facebook. Therefore, only Facebook makes decisions about the processing of usage data in connection with Page Insights. In the event of such joint responsibility, the EU General Data Protection Regulation requires us to conclude a contract with Facebook. You can access this contract here: https://www.facebook.com/legal/terms/page_controller_addendum. It contains further details and explanations on joint responsibility with Facebook in the context of Insights.
The contract essentially states that requests for information and the assertion of data subject rights with regard to Insights data must be made directly to Facebook as the controller.
Instagram users can also use the settings for advertising preferences to influence the extent to which their user behavior may be recorded when they visit our Instagram page. Further options are offered by the Instagram settings or the form for the right to object.
Data transfer to the USA and other third countries
In order to provide our Instagram page on the Instagram platform, your personal data is processed by Facebook Ireland Limited and transmitted to Facebook, Inc. in the USA (as well as other third countries, as shown at https://de-de.facebook.com/policy.php). Facebook uses standard contractual clauses approved by the European Commission and relies on the adequacy decisions issued by the European Commission regarding certain countries for data transfers from the EEA to the USA and other countries, where applicable.
Your rights
You have the following rights vis-à-vis the controller with regard to your personal data
Right of access
Right to rectification or erasure
Right to restriction of processing
Right to object to the processing
Right to data portability
You also have the right to complain to a data protection supervisory authority about the processing of your personal data by the controller.