Data protection

1. Data Protection at a Glance

General Information

The following tips provide a simple overview of, what happens to your personal data when you visit this website. Personal data is all data that can be used to personally identify you. Detailed information about You can find information on data protection in the section listed below this text. Privacy Policy.

Data collection on this website

Who is responsible for data collection on this Website?

The data processing on this website is carried out by the website operator. Its You can find the contact details in the section "Note on the Responsible Entity" in this Privacy policy can be foand.

How do we collect your data?

Your data will be used for one raised by informing us of this. This may involve, for example, data that you enter into a Enter contact form.

Other data will be collected automatically or with your consent upon visiting the website is recorded by our IT systems. These are mainly technical data (e.g. internet browser, Operating system or time of page view). The collection of this data occurs automatically as soon as you Enter website.

What do we use your data for?

A part of the data is collected to create a to ensure error-free provision of the website. Other data may be used to analyze your User behavior can be used. If contracts are concluded or initiated via the website can be, the transmitted data will also be used for contract offers, orders or other order inquiries processed.

What rights do you have regarding your data?

You have the right to request information about the origin, recipients, and purpose of your data at any time free of charge. to obtain stored personal data. You also have the right to request the correction or to request the deletion of this data. If you have given consent to data processing, you can revoke this consent at any time for the future. You also have the right to ander certain circumstances the restriction of the processing of your personal data to demand. Furthermore, you have the right to lodge a complaint with the competent supervisory authority to.

For this and any further questions regarding data protection, you can contact us at any time. turn.

Analysis tools and third-party tools

When visiting this website, your browsing- Behavior is statistically evaluated. This is mainly done with so-called analysis programs.

Detailed information about these analysis programs can be found in the following Privacy Policy.

2. Hosting

We host the content of our website with the following providers:

Shopify

The provider is Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (hereinafter referred to as "Shopify").

Shopify is a tool for creating and for hosting websites. When you visit our website, Shopify collects your IP address as well as Information about the device and browser you are using. With Shopify, furthermore the visitor numbers, the visitor sources, and customer behavior analyzed as well as user statistics created. When you make a purchase on our website, Shopify also collects your name, your email- Address, delivery and billing addresses, payment data, and other data related to the purchase stand (e.g. phone number, amount of sales made, etc.). For the Shopify stores cookies in your browser.

You can find details in the Privacy Policy of Shopify: https://www.shopify.de/legal/datenschutz.

The use of Shopify is based on Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in as many reliable representation of our website. If a corresponding consent has been requested, it will take place the processing is based solely on Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG, as far as the consent concerns the storage of cookies or access to information on the end device of the Users (e.g. device fingerprinting) in the sense of the TDDDG is included. Consent can be revoked at any time revocable.

Strato

The provider is Strato AG, Otto-Ostrowski-Straße 7, 10249 Berlin (hereinafter "Strato"). When you visit our website, Strato collects various log files including your IP- Addresses.

For more information, please refer to the privacy policy of Strato: https://www.strato.de/datenschutz/.

The use of Strato is based on of Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in a reliable Presentation of our website. If appropriate consent has been requested, processing will take place exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG, as far as the Consent to the storage of cookies or access to information on the user's device (e.g. device fingerprinting) in the sense of the TDDDG. Consent can be revoked at any time.

3. General Information and Mandatory Information

Data Protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the legal Data protection regulations as well as this privacy policy.

If you use this website, various personal data is collected. Personal data is data that you can be personally identified. The present privacy policy explains, what data we collect and how we use it. It also explains how and for what purpose the happens.

We would like to point out that data transmission over the internet (e.g. when communication via email) may have security vulnerabilities. A seamless protection of the data against access by third parties is not possible.

Notice regarding the responsible party

The responsible party for data processing on this website is:

Mario Radlinger
Alt-Tempelhof 9B
12099, Berlin

Phone: +49 176 45714335
E-Mail: shop@holistic-ally.de

The responsible party is the natural or legal person who alone or jointly with others about the purposes and means of processing personal data (e.g. names, email- Addresses, etc.) decides.

Storage duration

As long as no more specific storage duration is stated within this privacy policy referred to, your personal data will remain with us until the purpose of data processing is omitted. If you assert a legitimate deletion request or give consent to If you revoke data processing, your data will be deleted unless we have other legal obligations. legitimate reasons for storing your personal data (e.g. tax- or commercial law retention periods); in the latter case, deletion will occur after the expiration these reasons.

General information on the legal basis for data processing on this website

Provided you have consented to the data processing, we process your personal data on the basis of Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, provided that special categories of data according to Art. 9 para. 1 GDPR to be processed. In the case of an explicit consent to the transfer of personal Data processing in third countries is also carried out on the basis of Art. 49 para. 1 lit. a GDPR. If you consent to the storage of cookies or to access information on your device (e.g. via You have consented to device fingerprinting, the data processing is additionally based on § 25 para. 1 TDDDG. Consent can be revoked at any time. Are your data necessary for the fulfillment of the contract or for Pre-contractual measures are required, we process your data on the basis of the Art. 6 para. 1 lit. b GDPR. Furthermore, we process your data if this is necessary for the fulfillment of a are required by legal obligation based on Art. 6 para. 1 lit. c GDPR. The data processing can also be based on our legitimate interest according to Art. 6 para. 1 lit. f GDPR. About the in each individual case relevant legal bases are set out in the following paragraphs of this Privacy policy informed.

Recipients of personal data

In the course of our business activities we work with various external parties. This may also involve the transmission of personal data to these external parties is required. We only share personal data with external parties if this is necessary for the fulfillment of a contract, when we are legally are obliged to do so (e.g. transfer of data to tax authorities) when we have a legitimate have an interest in the transfer pursuant to Art. 6 para. 1 lit. f GDPR or if another legal basis allows the Data sharing allowed. When using processors, we share personal data of our Customers only on the basis of a valid contract for order processing. In the event of a A contract for joint processing is concluded for joint processing.

Withdrawal of your consent to data processing

Many data processing operations are only possible with your explicit consent. You can revoke a consent already given can be revoked at any time. The legality of the data processing carried out until the revocation remains unaffected by the Cancellation remains unaffected.

Right of objection against data collection in special cases as well as against direct advertising (Art. 21 GDPR)

IF THE DATA PROCESSING IS BASED ON ART. 6 PAR. 1 LIT. E OR F GDPR APPLIES, YOU HAVE THE RIGHT AT ANY TIME, FOR REASONS ARISING FROM YOUR SPECIAL SITUATIONS ARISE, AGAINST THE PROCESSING OF YOUR PERSONAL DATA TO FILE A CONTRADICTION; THIS ALSO APPLIES TO A BASED ON THESE PROVISIONS PROFILING. THE RELEVANT LEGAL BASIS ON WHICH A PROCESSING IS BASED CAN BE FOUND YOU THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL YOUR DO NOT PROCESS PERSONAL DATA CONCERNING AFFECTED PERSONS UNLESS WE CAN MANDATORY PROTECTABLE REASONS FOR PROCESSING EVIDENCE THAT OUTWEIGHS YOUR INTERESTS, RIGHTS, AND FREEDOMS OR THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND RIGHTS (OBJECTION UNDER ART. 21 PAR. 1 GDPR).

WILL YOUR PERSONAL DATA PROCESSED TO CARRY OUT DIRECT MARKETING, YOU HAVE THE RIGHT, TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU DATA FOR THE PURPOSE OF SUCH ADVERTISING TO BE INCLUDED; THIS ALSO APPLIES TO PROFILING, AS FAR AS IT RELATES TO SUCH DIRECT ADVERTISING. IF YOU OBJECT, WILL YOUR PERSONAL DATA NO LONGER BE USED FOR THE PURPOSE OF DIRECT MARKETING USED (OBJECTION UNDER ART. 21 PARA. 2 GDPR).

Right to complain to the competent supervisory authority

In case of In the event of violations of the GDPR, affected individuals have the right to lodge a complaint with a Supervisory authority, particularly in the member state of their habitual residence, their of the workplace or the location of the alleged violation. The right to complain exists without prejudice to other administrative or judicial remedies.

Right to data portability

You have the right to data that we have based on process your consent or in fulfillment of a contract automatically, to itself or to a third party in to be provided in a common, machine-readable format. If you wish for the direct Request the transfer of data to another controller, this only occurs to the extent that it is technically feasible is.

Information, Correction and Deletion

You have in the context of the applicable legal You have the right to request free information about your stored personal data at any time. Data, their origin and recipients, the purpose of data processing, and if applicable, a right to Correction or deletion of this data. For this and for further questions regarding personal data You can contact us at any time for data.

Right to restriction of processing

You have the right to restrict the To request the processing of your personal data. You can contact us at any time. The right to restriction of processing exists in the following cases:

If you If you dispute the accuracy of your personal data stored with us, we usually need time, to verify this. For the duration of the examination, you have the right to the to request the restriction of processing your personal data.
If the If the processing of your personal data was/is unlawful, you can instead request the restriction of data processing for deletion.
If we your personal data no longer need, but you need it for the exercise, defense or If you need to assert legal claims, you have the right to request instead of deletion the to request the restriction of processing your personal data.
If you have a If you have lodged an objection pursuant to Art. 21 para. 1 GDPR, a balancing must be made between your and our interests to be taken into account. As long as it is not yet clear whose interests prevail, you have the Right to request the restriction of processing your personal data.

If you have restricted the processing of your personal data, these may Data – apart from their storage – only with your consent or for the assertion of, Exercise or defense of legal claims or to protect the rights of another natural or legal person or for reasons of an important public interest of the processed by the European Union or a member state.

SSL or TLS encryption

This page uses for security reasons and for protection the transmission of confidential content, such as orders or inquiries that you send to us as Site operators send an SSL or TLS encryption. Recognizing an encrypted connection Note that the address bar of the browser changes from "http://" to "https://" and on the lock symbol in your browser's address bar.

When the SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Objection to advertising emails

The use of in the context of the imprint obligation published contact details for the sending of unsolicited advertising and informational materials are hereby contradicted. The operators of the pages expressly reserve legal action in the event of unsolicited sending of promotional information, such as spam emails, before.

4. Data collection on this website

Cookies

Our websites use so-called "cookies". Cookies are small Data packages do not cause any damage to your device. They are either temporary for the duration of a session (session cookies) or permanently (permanent cookies) on your device saved. Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your device until you delete them yourself or an automatic Deletion is performed by your web browser.

Cookies can be set by us (first-party cookies) or from third-party companies (so-called third-party cookies). Third-party cookies enable the integration certain services from third-party companies within websites (e.g. cookies for processing from payment services).

Cookies have various functions. Numerous cookies are technically necessary, as certain website functions would not work without them (e.g. the shopping cart function or the display of videos). Other cookies may be used for the evaluation of the User behavior or for advertising purposes.

Cookies that are necessary for the execution of the electronic communication process, to provide certain functions desired by you (e.g. for the shopping cart function) or for optimizing the website (e.g. cookies for measurement The necessary cookies required for the web audience are based on Art. 6 para. 1 lit. f GDPR stored, unless another legal basis is provided. The website operator has a legitimate Interest in the storage of necessary cookies for technically error-free and optimized provision his services. Provided that consent is given for the storage of cookies and comparable Recognition technologies were queried, and the processing is carried out solely on the basis of this Consent (Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG); the consent can be revoked at any time.

You can configure your browser to notify you about the setting of cookies and Allow cookies only in individual cases, accept cookies for specific cases or generally exclude as well as activate the automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.

You can find out which cookies and services are used on this website in this Privacy policy can be found.

Server log files

The provider of the pages automatically collects and stores information in such server log files that your browser automatically transmits to us. These are:

Browser type and browser version
used operating system
Referrer URL
Hostname of the accessing computer
Time of server request
IP address

A merging of this data with other data sources will not be carried out.

The The collection of this data is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically flawless presentation and optimization of its website – the server log files must be captured for this.

Contact Form

If you send us inquiries via the contact form, your Information from the inquiry form including the contact details you provided there for processing the inquiry and in case of follow-up questions stored with us. We do not share this data without your Consent further.

The processing of this data is based on Art. 6 para. 1 lit. b GDPR, provided your request is related to the fulfillment of a contract or for execution pre-contractual measures are required. In all other cases, the processing is based on our legitimate interest in the effective processing of inquiries directed to us (Art. 6 para. 1 lit. f GDPR) or based on your consent (Art. 6 para. 1 lit. a GDPR) if this was requested; the consent is can be revoked at any time.

The data you entered in the contact form will remain with us until you request us for deletion, revoke your consent to storage or the purpose for the Data storage is not required (e.g. after your request has been processed). Mandatory Legal provisions – in particular retention periods – remain unaffected.

Inquiry by email, phone or fax

If you contact us by email, phone, or fax contact, your request including all resulting personal data (name, request) stored and processed for the purpose of handling your request with us. We do not share this data without Your consent continues.

The processing of this data is based on Art. 6 para. 1 lit. b GDPR, provided your request is related to the fulfillment of a contract or to Pre-contractual measures are required. In all other cases, it is based on the processing based on our legitimate interest in the effective handling of the requests directed to us Requests (Art. 6 para. 1 lit. f GDPR) or based on your consent (Art. 6 para. 1 lit. a GDPR) if this is requested was; the consent can be revoked at any time.

The inquiries you send to us via contact requests The transmitted data will remain with us until you request its deletion, your consent to Revocation of storage or the purpose for data storage no longer applies (e.g. after completed processing of your request). Mandatory legal provisions - in particular statutory retention periods – remain unaffected.

5. Social Media

Social media elements with Shariff

This website features elements of social media used (e.g. Facebook, X, Instagram, Pinterest, XING, LinkedIn, Tumblr).

The social media- You can usually recognize elements by their respective social media logos. To ensure data protection to ensure on this website, we use these elements only in conjunction with the so-called "Shariff" solution. This application prevents the integrated social media on this website from Media elements Your personal data is transmitted to the respective provider as soon as you enter the page for the first time. transfer.

Only when you click on the corresponding social media element will you... By activating the button, a direct connection to the provider's server is established (consent). As soon as you activate the social media element, the respective provider receives the information that you are interacting with have visited this website with your IP address. If you are simultaneously logged into your respective social media account When you are logged in to a service (e.g. Facebook), the respective provider can link your visit to this website to your user account assign.

Activating the plugin constitutes consent within the meaning of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. You can revoke this consent at any time with effect for the future revoke.

The use of the service is carried out to obtain the legally required consents for to obtain the use of certain technologies. The legal basis for this is Art. 6 para. 1 lit. c GDPR.

Facebook

This website integrates elements of the social network Facebook. Provider this service is provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. The collected Data is said by Facebook to also be transferred to the USA and other third countries. transferred.

An overview of the Facebook social media elements can be found here: https://developers.facebook.com/docs/plugins/?locale=de_DE.

If the social media- When the element is active, a direct connection will be established between your device and the Facebook server. manufactured. Facebook receives the information that you visited this website with your IP address have. If you click the Facebook "Like button" while you are on your Facebook- Once logged into your account, you can link the content of this website to your Facebook profile. This way Facebook can associate your visit to this website with your user account. We would like to point out that we as The provider of the pages has no knowledge of the content of the transmitted data or its use by Facebook. obtain. For more information, please see Facebook's privacy policy at: https://de- de.facebook.com/privacy/explanation.

The use of this service is based on your Consent according to Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. The consent can be revoked at any time revocable.

As far as personal data is processed on our website with the help of the tool described here captured and forwarded to Facebook, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland jointly responsible for this data processing (Art. 26 GDPR). Joint responsibility is limited exclusively to the collection the data and their transfer to Facebook. The processing that occurs after the forwarding by Facebook is not part of the shared responsibility. The obligations that we share have been recorded in an agreement on joint processing. The wording of the agreement can be found You under: https://www.facebook.com/legal/controller_addendumAccording to this agreement, we are for the provision of data protection information when using the Facebook tool and for the legally secure implementation of the tool on our website is responsible. For the Data security of Facebook products is the responsibility of Facebook. Rights of the affected (e.g. Requests for information regarding the data processed by Facebook can be made directly to Facebook assert. If you assert the affected rights with us, we are obliged to pass them on to Facebook to forward.

The data transfer to the USA is based on the standard contractual clauses of the EU- Commission supported. You can find details here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://de- de.facebook.com/help/566994660333381 und https://www.facebook.com/policy.php.

The company has a certification according to the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA, which complies with European data protection standards for data processing in the USA is to be ensured. Every company certified according to the DPF commits to this To comply with data protection standards. You can find more information from the provider at the following link: https://www.dataprivacyframework.gov/participant/4452.

Instagram

This website has features of the Instagram service integrated. This Functions are offered by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.

When the social media element is active, a direct connection will be established between your the device and the Instagram server. Instagram thereby receives information about the visit of this website by you.

When you are logged into your Instagram account, you can You can link the content of this website to your Instagram profile by clicking the Instagram button. This allows Instagram to associate your visit to this website with your user account. We would like to point out that we as providers of the pages have no knowledge of the content of the transmitted data and their use by Receive Instagram.

The use of this service is based on your consent according to Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDG. Consent can be revoked at any time.

As far as with the help of the the tools described here collect personal data on our website and transmit it to Facebook or Instagram we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal will be redirected Harbour, Dublin 2, Ireland jointly responsible for this data processing (Art. 26 GDPR). The shared responsibility is limited exclusively to the collection of data and the transfer to Facebook or Instagram. The processing that occurs after the forwarding by Facebook or Instagram is not part of the shared responsibility. The responsibilities we share Obligations have been recorded in an agreement on joint processing. The wording you can find the agreement at: https://www.facebook.com/legal/controller_addendum. Loud this agreement we are responsible for providing the data protection information when using Facebook- or Instagram tools and for the data protection-compliant implementation of the tool on our Website responsible. For the data security of the Facebook or Instagram products, Facebook is responsible. Rights of the affected (e.g. requests for information) regarding the data at Facebook or Instagram You can assert processed data directly with Facebook. If you exercise the rights of the affected parties with us to assert, we are obliged to forward this to Facebook.

The data transfer to the The USA is based on the standard contractual clauses of the EU Commission. You can find details here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://privacycenter.instagram.com/policy/ und https://de- de.facebook.com/help/566994660333381.

You can find more information about this in the Privacy Policy of Instagram: https://privacycenter.instagram.com/policy/.

6. Newsletter

Newsletter data

If you subscribe to the newsletter offered on the website would like, we need an email address from you as well as information that allows us to Verification allows you to confirm that you are the owner of the provided email address and agree with the agree to receive the newsletter. Further data will not be collected or will only be collected on a voluntary basis. We use this data exclusively for the shipping of the requested information and do not share do not disclose this to third parties.

The processing of the data entered in the newsletter registration form is based solely on your consent (Art. 6 para. 1 lit. a GDPR). The consent granted for Storage of the data, the email address, and their use for sending the newsletter can be can be revoked at any time, for example via the "Unsubscribe" link in the newsletter. The The legality of the data processing operations that have already taken place remains unaffected by the revocation. untouched.

The data you provided for the purpose of subscribing to the newsletter will be used by us until your unsubscription from the newsletter with us or the newsletter service provider stored and after will be removed from the newsletter distribution list upon cancellation of the newsletter or after the purpose has ceased. reserve the right to remove email addresses from our newsletter distribution list at our discretion as part of our to delete or block based on legitimate interests according to Art. 6 para. 1 lit. f GDPR.

Data that relates to other purposes stored with us remain unaffected.

After your deregistration from the newsletter distribution list will store your email address with us or the newsletter service provider possibly in a Blacklist saved, if this is necessary to prevent future mailings. The data from the Blacklists are used only for this purpose and are not merged with other data. This serves both your interest and our interest in complying with legal requirements when Shipping of newsletters (legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR). The storage in the Blacklist is not time-limited. You can object to the storage if your Our legitimate interests outweigh.

Newsletter dispatch to existing customers

When you order goods or services from us and here you can provide your email address, this email address can subsequently be used by us for the Newsletters will be used for shipping, provided we inform you about it in advance. In such a case will only promote direct advertising for its own similar goods or services through the newsletter shipped. You can unsubscribe from this newsletter at any time. For this purpose each newsletter contains a corresponding link. The legal basis for sending the newsletter is in this case Art. 6 para. 1 lit. f GDPR in conjunction with § 7 para. 3 UWG.

After your deregistration from the newsletter distribution list may store your email address in a blacklist with us to prevent future to prevent mailings to you. The data from the blacklist will only be used for this purpose and not merged with other data. This serves both your interest and our interest in the Compliance with legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6 Section 1 lit. f GDPR). The storage in the blacklist is not time-limited. You can object to the storage object to it, provided your interests outweigh our legitimate interest.

7. Plugins and Tools

Google Fonts

This page uses so-called Google for a uniform display of fonts. Fonts provided by Google. When you access a page, your browser loads the required Fonts in their browser cache to display texts and fonts correctly.

For this purpose, the the browser you use establishes a connection to Google's servers. This allows Google Knowledge that this website was accessed via your IP address. The use of Google Fonts are provided based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the uniform presentation of the typography on its website. Provided that a corresponding consent the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG, insofar as the consent concerns the storage of cookies or access to information in the User's device (e.g. device fingerprinting) in the sense of the TDDDG is included. The consent is can be revoked at any time.

If your browser does not support Google Fonts, a default font will be used. used by your computer.

For more information about Google Fonts, visit https://developers.google.com/fonts/faq and in Google's privacy policy: https://policies.google.com/privacy?hl=de.

Source: https://www.e-recht24.de