top of page

DATA PROTECTION

With this data protection declaration we would like to inform you about the type, scope and purpose of the processing of personal data on our website. Personal data is all data that is personally related to you, e.g. B. name, address, e-mail address or user behavior.

Who is responsible for data processing in our company:

​Sabine Broekmann

broekmann SPACE FOR ART

40235 Dusseldorf

art@lunico.de

Telephone +49 1777228988

web hosting

We use an Internet service provider to maintain our online presence, on whose server the website is stored (hosting) and who makes our website available on the Internet. The Internet service provider processes contact data, content data, contract data, usage data, inventory data as well as meta and communication data on our behalf. Legal basis: The legal basis for the processing described above is our legitimate interest in making our online offer available efficiently and securely, Art. V. m. Art. 28 DSGVO (order processing contract).

 

If you only use our website for information purposes, our Internet service provider will only collect the personal data that the browser you are using transmits to its server.

This is the following data:

        IP-Adresse

        das Datum und die Uhrzeit des Zugriffs to our website

        Zeitzonendifferenz zur Greenwich Mean Time (GMT )

        Zugriffsstatus (HTTP-Status)

        die übertragene Datenmenge

        der Internet-Service-Provider des accessing system

        der von Ihnen verwendete Browsertyp und dessen version

        das von Ihnen verwendete Betriebssystem

        die Internetseite, von welcher Sie gegebenenfalls reached our website

        die Seiten bzw. Unterseiten, welche visit you on our website.

The aforementioned data is stored as log files on the servers of our internet service provider. This is necessary in order to be able to display the website on the end device you are using and to ensure stability and security. Our legitimate interest in data processing lies in the above purposes. Legal basis: The legal basis for this is Art. 6 (1) sentence 1 lit. f GDPR. Duration: The above data for the provision of our website is stored for a period of 7 days and then deleted. Prevention: Since the processing of the above data is absolutely necessary for the provision of our website, there is no right of objection.

 

cookies

Our website uses cookies. Cookies are small text files consisting of a series of numbers and letters that are filed and saved on the end device you are using. Cookies neither transmit viruses nor can they run programs. Rather, they primarily serve to exchange information between the end device you are using and our website in order to make our website more user-friendly and effective for you. A distinction must be made between temporary (transient) cookies and persistent cookies. The transient cookies include in particular the session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This allows our website to recognize your computer when you return to our website. The session cookies are deleted when you log out or close your browser. Persistent cookies are automatically deleted after a specified period, which can vary depending on the cookie. You have the option of deleting these cookies at any time in the security settings of your browser.

The cookies are used to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change. In particular, information on language settings or log-in information can be stored in these cookies.

 

Our legitimate interest in data processing lies in the above purposes. The legal basis for this is Art. 6 (1) sentence 1 lit. f GDPR.

Since the cookies are stored on your computer, you as the user also have full control over the use of cookies. You have the option of using the security settings of your browser to determine whether cookies are saved at all. You can, for example, not accept cookies from the outset or only accept them on request, or you can specify that cookies are deleted each time you close your browser. If cookies are deactivated for our website, it may no longer be possible to use all the functions of the website to their full extent.

Duration of storage/deletion

We delete or block your personal data as soon as the purpose of storage has been achieved or no longer applies. Any further storage will only take place if we are required to do so by national or European regulations. In this case, the data will be blocked or deleted when the storage period prescribed in the respective regulations has expired, unless we need your data to fulfill a contract concluded between us or if this is necessary to assert, exercise or defend legal claims .

Contact via contact form, e-mail, social media or telephone

If you use the contact form offered on our website or send us an email. Telephone or social media and provide us with personal data, this data will be automatically stored and processed in our company to process your request. This data is only processed for correspondence with you. The data transmission via our contact form takes place via an encrypted SSL connection. Your data will not be passed on to third parties. Purpose: We need your name so that we can address you in our reply. We need your e-mail address in order to be able to answer your request. We need your telephone number in order to be able to fulfill your callback request. Legal basis: The legal basis for the use of your data as described above is Art. 6 (1) (a) GDPR. Deletion: The personal data we collect will be deleted if they are no longer required. We check the necessity every 2 years. You can also revoke data processing at any time.

blog

You have the opportunity to comment on the posts we have posted on our blog. Since we may be held liable for content that violates the law (insult, abusive criticism, hate speech, prohibited depiction of violence, etc.) in your comment, we store your IP address for a period of 7 days in order to be able to determine your identity if necessary. Legal basis: The legal basis for storing your data is Art. 6 (1) lit. f GDPR. Erasure: The data we collect and transmit in this way is automatically erased after 14 days. Prevention: You can prevent the storage of the IP address by not posting comments.

Online shop

If you use our web shop to place orders, we need certain data in order to be able to process your order. This includes in particular your name as well as your address and electronic contact details, information on the processing of the payment process and the services used. This data is stored by us. In detail, we use the data transmitted to us by Amazon in particular

identify you as our customer,

process, fulfill and process your order,

to get in touch with you,

to bill you

to be able to process any liability claims,

to assert contractual claims against you.

We only pass on your personal data to third parties if:

the transfer according to Article 6 paragraph 1 sentence 1 lit. f GDPR is necessary for the assertion, exercise or defense of legal claims   there is no reason to assume that you have an overriding legitimate interest in not disclosing have your data

there is a legal obligation to do so pursuant to Article 6 (1) sentence 1 lit. c GDPR,

this is necessary for the processing of the contract concluded with you in accordance with Article 6 (1) sentence 1 lit. b GDPR

(E.g. passing on the data to the logistics company responsible for the delivery or for the purpose of payment processing.

In addition, your personal data will not be passed on to third parties without your express consent. If we pass on your personal data to third parties, we limit the amount of data transmitted to the necessary minimum.

 

You can voluntarily create a user account in which you can view your orders. We store the data you provided when creating the user account upon revocation. If you have terminated your account, your data will be deleted, subject to their storage being necessary for commercial or tax reasons in accordance with Article 6 (1) (c) GDPR. Information in the customer account remains until it is deleted with subsequent archiving in the event of a legal obligation. It is the user's responsibility to back up their data before the end of the contract in the event of termination. We use transient cookies (see term under cookies) to save the contents of the shopping cart and persistent cookies (see term under cookies) to save the login status.

 

 

We can also use the data you have stored to inform you about other interesting products and/or services by post or email.

 

If you place an order, register for a user account or log in again, we save your IP address and the time of the respective user action. The purpose of the storage is our but also your legitimate interest in protection against misuse and other unauthorized use. The legal basis for this is Article 6 (1) (c) GDPR. This data will not be passed on to third parties unless it is necessary to pursue our claims or there is a legal obligation to do so in accordance with Article 6 (1) (c) GDPR.

Purpose: The processes and interests described above represent the purpose of storing the data. Legal basis:

We base the processing of your data in the processes described above on the following legal basis:

Insofar as we obtain your consent for processing, Article 6 (1) (a) GDPR serves as the legal basis.

Article 6(1)(b) GDPR is the legal basis for processing that serves to fulfill a contract concluded with you. This also applies to the processing operations that are necessary to carry out pre-contractual measures.

Insofar as processing is necessary to fulfill a legal obligation to which we are subject, Article 6 (1) (c) GDPR serves as the legal basis.

In the event that vital interests make processing necessary for you or another natural person, Art. 6 Para -136bad5cf58d_lit. d GDPR as the legal basis.

 

If the processing is necessary to safeguard one of our legitimate interests or that of a third party and your interests, fundamental rights and fundamental freedoms do not outweigh the former interest, Art. 6 Paragraph 1 lit. f GDPR serves as the legal basis for the processing.

Deletion: Due to commercial and tax law requirements, we are obliged to store your address, payment and order data for a period of 10 years. After the statutory warranty rights (2 years) have expired, however, we will restrict the processing to the effect that your data will only be used to comply with statutory obligations.

Newsletter

We send out a newsletter at regular intervals to inform our customers, business partners and interested parties about our offers and related news. You have the option of registering for our newsletter on our website and consenting to receiving the newsletter as part of the registration process. If you register for our newsletter, it is mandatory to provide your e-mail address. We save the e-mail address in order to be able to send you the newsletter. As soon as you register for our newsletter, you will receive a confirmation e-mail to the e-mail address provided during registration using the so-called double opt-in procedure. This email contains a link. If you click on this link, you confirm that you wish to receive the newsletter. In this way we ensure that your e-mail address was not misused by a third party when you registered. For the same reason, we save the date and time of registration as well as the IP address assigned to you when you registered. We do not pass on the aforementioned data to third parties. Purpose: The processes and interests described above represent the purpose of storing the data. Legal basis: The legal basis for the processing of your data is Article 6 (1) (a) GDPR. Deletion: The e-mail address will be deleted either if you have not clicked on the confirmation link 1 month after sending the confirmation e-mail in the double opt-in procedure or immediately after you have unsubscribed from our newsletter. Revocation: You can revoke your consent to receive the newsletter at any time and unsubscribe from the newsletter.

We offer the following options for you to declare your revocation:

Click on the link provided for this purpose in the newsletter

by email to: sabinebroekmann@web.de

through the contact details provided in the imprint of our website

 

Shipping by shipping service provider

We have commissioned the following shipping service provider to send our newsletter: Wix.com Ltd., Namal 40, 6350671 Tel Aviv, Israel. You can view its privacy policy here: https://www.wix.com/about/privacy. The shipping service provider can use your data in pseudonymous form, ie without assignment to a user, to optimize or improve its own services, e.g. to technically optimize shipping and the presentation of the newsletter or for statistical purposes. However, the shipping service provider is not authorized to write to you itself or to pass on your data to third parties. Legal basis: The shipping service provider acts on the basis of our legitimate interests in accordance with Article 6 Paragraph 1 Letter f GDPR and an order processing contract in accordance with Article 28 Paragraph 3 Clause 1 GDPR.

Your rights as a user of our online presence according to the GDPR

According to the GDPR, you are entitled to the rights listed below, which you can assert at any time with the person responsible named in Section 1 of this data protection declaration:

Right to information: According to Art. 15 GDPR, you can request confirmation as to whether and which of your personal data we are processing. In addition, you can receive information from us free of charge about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to correction, deletion, restriction of processing or objection , the existence of a right of appeal and the origin of their data, if they were not collected from us. You also have a right to information as to whether your personal data has been transmitted to a third country or to an international organization. If this is the case, you have the right to receive information about the appropriate guarantees in connection with the transmission.

Right to rectification: In accordance with Art. 16 GDPR, you can request the correction of incorrect or incomplete personal data stored by us relating to you.

Right to erasure: In accordance with Art. 17 GDPR, you have the right to request the erasure of your personal data stored by us, provided we do not need their processing for the following purposes:

to fulfill a legal obligation,

to assert, exercise or defend legal claims,

to exercise the right to freedom of expression and information or

for reasons of public interest mentioned in Art. 17 Para. 3 lit c and d GDPR.

Right to restriction: According to Art. 18 GDPR, you have the right to request the restriction of the processing of your personal data if   the accuracy of the data is disputed by you, for a period that uns ermöglicht, die Richtigkeit der         _cc781905-5cde-3194-bb3b- 136bad5cf58d_     to check your personal data, the processing of your data is unlawful, but you refuse its deletion and instead request the restriction of the use of the data, we the personal data for the purposes of processing, but you need the data to assert, exercise or defend legal claims, you object to the processing of your data, but it is not yet certain whether the legitimate reasons that entitle us to further processing despite your objection outweigh your rights.

Right to information: If you have asserted the right to correction, deletion or restriction of processing against us, we are obliged to all recipients to whom the personal data concerning you have been disclosed, the correction or deletion of the data requested by you or their Restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed by us about these recipients.

Right to data portability: In accordance with Art. 20 GDPR, you can request that we receive the personal data that you have provided to us in a structured, common and machine-readable format or request that it be transferred to another person responsible.

Right of appeal: According to Art. 77 GDPR you have the right to complain to a supervisory authority. For this you can contact the supervisory authority of your usual place of residence, your workplace or our company headquarters.

right of withdrawal

In accordance with Art. 7 Para. 3 GDPR, you have the right to revoke your consent to the processing of your data at any time. The revocation you have declared does not change the lawfulness of the processing of your personal data up to the point of revocation.

Right to object

You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data, which is based on a weighing of interests (Article 6 (1) (f) GDPR). This is particularly the case if the data processing is not required to fulfill a contract. If you make use of your right of objection, we ask you to explain the reasons. We will then no longer process your personal data unless we can prove to you that compelling reasons for data processing worthy of protection outweigh your interests and rights.

Regardless of the above, you have the right to object to the processing of your personal data for advertising and data analysis purposes at any time.

Please address your objection to the contact address of the person responsible given above.

YouTube

On this website we use components from YouTube, a service provided by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA.

YouTube is a video portal where users can watch videos for free. YouTube offers website operators the option of embedding videos on their own website. For this purpose, YouTube provides a code snippet that displays the video in a so-called inline frame. After a page or subpage of our website is called up on which such an embedding has taken place, the Internet browser you are using is prompted to download video components of the respective embedded video or clip. This process requires YouTube to read the IP address assigned to you; otherwise YouTube could not transmit the video to your browser. YouTube can recognize that you have visited one of our pages on which we have embedded a YouTube video if you are logged in to YouTube. This information is also transmitted to YouTube if you do not click on the YouTube video. Both YouTube and Google collect this information and assign it to your YouTube account. Prevention: You can prevent this data transfer at any time by logging out of your YouTube account or by using the following link https://adssettings.google.com/authenticated  set an opt-out cookie after logging into your Google account by pressing the logout button. Legal basis: The legal basis for the prescribed use of the data is Article 6 (1) (f) GDPR.

Third Party Information:

Registered office within the EU: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

 Privacy Policy: http://www.google.de/intl/de/policies/privacy

Getty Images

On this website we use elements of Getty Images International,  1st Floor, The Herbert Building, The Park, Carrickmines, Dublin 18, Ireland.

As a picture agency, Getty Images provides pictures and picture material. These can be used by the various customers by granting a license or free of charge on websites. When you visit our website, your IP address, length and time of access, as well as the language and type of browser used are transmitted to Getty Images. Information regarding which sub-pages of the website you have accessed or how often and for how long a sub-page was viewed and what interactions you have made may also be collected and processed accordingly by Getty Images. Getty Images may pass on this personal data collected via the technical process to third parties. Purpose: By using Getty Images, external content such as text, video or image data can be made available and embedded on your own website. The embedding is done by an embed code, an HTML code. As a result, the external content of another website is displayed and loaded directly on our own website. Our interest in embedding the image material as described above represents the purpose of using Getty Images. Legal basis: The legal basis for the use of the data as described above is Article 6 (1) (f) GDPR. Prevention: The processing of personal data can be objected to Getty Images at any time.

Third Party Information:

Privacy Policy:  http://www.gettyimages.de/enterprise/privacy-policy

Getty Images: http://www.gettyimages.de/enterprise/privacy-policy

Google Maps

We use "Google Maps" on our website, a service provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (hereinafter referred to as: "Google").

Google Maps visually displays geographic information. The IP address of the visitor is collected and processed by Google. This is transmitted to Google regardless of whether Google Maps is actually used or whether you are logged into your Google account. Your IP address will be assigned to your Google account if you are logged into it when you visit our website. This data is transmitted to external Google servers in the USA. Google is a participant in the Privacy Shield Agreement and is certified for data processing according to European standards. Google may pass on this data collected via the technical process to third parties. Purpose: The integration of Google Maps serves to simplify visualization and navigation when visiting our site. Google processes data for the purpose of advertising, market research, designing the website and providing needs-based advertising. Legal basis: The legal basis for the above-described use of the data is Article 6 (1) (f) GDPR. Prevention: You can prevent the assignment of the data by not using Google Maps on our website and logging out of your Google account before your visit. You can also deactivate JavaScript in your browser to prevent the map from being displayed.

Third Party Information:

Registered office within the EU: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

Privacy Policy: http://www.google.com/intl/de_de/help/terms_maps.html

Social Media Plugins

Our website uses social media plugins from the providers listed below. You can tell which plugin belongs to which provider by the respective logo with which the plugin is identified. If you call up one of our pages on which a plugin is implemented, a connection is automatically established between your browser and the server of the provider with the respective provider of the plugin. At this point in time, data is already being transmitted to the provider. In addition, data is transmitted to the provider as a result of further interactions with the respective social plugin (e.g. clicking the “Like” button on Facebook, Re-Tweet button on Twitter). If you have an account with the provider, this data can be linked to it. To prevent such a linking of your data, you can log out of the provider's service before visiting our site.

The data collected can be stored and evaluated by the provider in order to create usage profiles of you for the purpose of advertising and market research. You have a right of withdrawal against the creation of user profiles. To exercise this, you must contact the provider of the plugin.

For what purpose and to what extent data is collected by the provider can be found in the respective data protection declarations of the providers communicated below.

We ourselves do not collect any personal data using the social media plugins or their use. We have no influence on which data an activated plugin collects and how this data is used by the provider.

We use social plugins from the following companies on our website:

GooglePlus

Google Plus is a service provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043 - USA

Registered office in the EU: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001

Data protection declaration available at: https://policies.google.com/privacy?hl=de

Instagram

Instagram is a service of Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025 - USA

Data protection declaration available at: https://help.instagram.com/155833707900388

Facebook

Furthermore, we use plugins from Facebook on our website. Facebook is a service of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304 - USA.

The plugins can be recognized by one of the Facebook logos (white "f" on a blue tile or a "thumbs up" sign) or are marked with the addition "Facebook Social Plugin". The list and appearance of the Facebook Social Plugins can be viewed here:http://developers.facebook.com/plugins.

If you call up a website on our website that contains such a plugin, your browser establishes a direct connection to the Facebook servers. The content of the plugin is transmitted directly from Facebook to your browser, which integrates it into the website. We therefore have no influence on the amount of data that Facebook collects with the help of this plugin and can therefore only inform you according to our level of knowledge what we are doing with this: When you visit our website, Facebook finds out your IP address and saves it itself if you are not a member of the social media provider Facebook. According to its own information, Facebook only stores an anonymous IP address in Germany. In addition, Facebook receives information about which page of our website you have accessed. If you are a Facebook member and logged into your account, Facebook can assign your visit to your Facebook account. If you interact with the plugins, for example by pressing the Like button or making a comment, the corresponding information is transmitted directly from your browser to Facebook and stored there. If you are not a member of Facebook, there is still the possibility that Facebook will find out and store your IP address. According to Facebook, only an anonymous IP address is stored in Germany. The purpose and scope of the data collection and the further processing and use of the data by Facebook as well as the relevant rights and setting options for protecting the privacy of the users can be found in Facebook's data protection information: http://www.facebook.com/policy.php.

If you are a member of Facebook and do not want Facebook to collect data about you via this offer and link it to your member data stored on Facebook, you must log out of Facebook before visiting our website. You also have the option of blocking Facebook social plugins with add-ons for your browser, for example with the "Facebook Blocker". Further settings and objections to the use of data for advertising purposes are possible within the Facebook profile settings: https://www.facebook.com/settings?tab=ads. Headquarters in the EU: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 - Ireland

Data protection declaration available at: https://www.facebook.com/about/privacy/

PayPal

On our website we offer the processing of payments via the payment service provider PayPal (PayPal (Europe) S.à.rl & Cie. SCA, 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg).

If you have decided to pay via PayPal, the following data will be transmitted to PayPal as part of the order: First and last name, address, date of birth, e-mail address, telephone number, IP address and the information necessary for processing the respective order Data. Purpose: This data is transmitted so that PayPal can carry out an identity check to process your purchase. This makes it possible, among other things, to identify fraudulent activities and prevent the misuse of data. In addition, the data is transmitted so that PayPal can, if necessary, assess your creditworthiness or PayPal can pass on the data to credit agencies for assessing your creditworthiness in the form of a credit check. PayPal uses the result of the credit check in relation to the statistical probability of non-payment for the purpose of deciding whether to provide the respective payment method. The data collected can also be used by PayPal for analysis purposes, in particular for customer analysis, risk analysis, data analysis for the purpose of developing and improving the services offered by PayPal. Legal basis: The legal basis for the above-described use of the data is Art. 6 Para. 1 lit b GDPR. Erasure: The data we collect and transmit in this way is automatically erased after 26 months. You can find more information on PayPal's terms of use and data protection under https://www.paypal.com/de/webapps/mpp/ua/privacy-full#  Withdrawal: You can withdraw your consent to the use of personal data from PayPal at any time. Despite revocation, PayPal may still be entitled to process, use and transmit the personal data that is absolutely necessary for contractual payment processing.

Safety measures

We also take state-of-the-art technical and organizational security measures to comply with the provisions of data protection laws and to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorized access by third parties.

Updating and changing this data protection declaration

This data protection declaration is currently valid and has the status of May 2018. Due to changed legal or official requirements, it may be necessary to adapt this data protection declaration.

This privacy statement was created using the privacy statement generator from SOS data protection created.

SOS data protection is an offer of the MMR Müller Müller Rößner Rechtsanwälte partnership with seat 

bottom of page