Data Protection statement
​
This privacy policy applies to the collection, processing and use of your personal data ("data processing") when using the website of Julia Hettmann.
​
The protection of your personal data is very important to us. Therefore, we collect and process your data exclusively on the basis of the legal provisions, in particular the provisions of the GDPR. In this privacy policy we inform you about the most important aspects of data processing within our website.
In the following, we would like to inform you in detail which data we collect, process and use for which purpose and how you can object to this data processing.
​​
​​
§1 Extent of processing of personal data
My host site receives, collects and stores any information you enter on my website or provide me in any other way. In addition, they collect the Internet protocol (IP) address used to connect your computer to the Internet. I may use software tools to measure and collect session information, including page response times, length of visits to certain pages, page interaction information, and methods used to browse away from the page. If you fill in the contact form, I also collect personally identifiable information, such as your name, email and message.
​
My site is hosted on the Wix.com platform. Your data may be stored through Wix.com’s data storage, databases and the general Wix.com applications. They store your data on secure servers behind a firewall.
​
If you don’t want me to process your data anymore or if you would like to: access, correct, amend or delete any personal information I have about you, please contact me via the contact form on the "GET IN TOUCH" page.
​
In order to ensure the functionality of our website and the provision of our content and services, it is necessary that we collect and use personal data of our users.
​
Personal data is stored and processed exclusively on servers in the European Union.
​
All data is encrypted based on the SSL method.
Data processing takes place on the basis of the statutory provisions of Art. 6 (1) (a) (consent) and / or f (legitimate interest) of the GDPR. If processing is necessary to safeguard the legitimate interests of our company or a third party, and if the interests, fundamental rights and freedoms of the data subject do not prevail over the first interest, Art. 6 para. 1 lit. f GDPR as legal basis for processing
Any further use will only take place with the express consent of the customer. Specifically, data is collected and processed as follows.
In our server log-file data is automatically collected when visiting our website and stored in an internal log file, which are transmitted to us via your browser. These are the following data:
Type and version of the browser you are using,
Type and version of the operating system you are using,
URL of the page where you came to us,
Keywords you used to find our site,
Date and time of retrieval of our website,
Names of subpages you have retrieved.
We collect and process this data in an anonymous form, which means that it can not be assigned to a specific person. The purpose of the data collection and processing is the evaluation for internal system-related and statistical purposes. Furthermore, for the purpose of technical security, in particular to ward off attacks on our web server; in addition to the abuse control in suspicion and to clarify the suspicion of a criminally relevant use. The IP address will only be evaluated in case of attacks on our network infrastructure.
We use your e-mail address to complete a message sending process on our pages via the contact form.
​
The legal basis for processing the data is Article 6 (1) (b) (necessary to fulfill the contract) of the GDPR.
The legal basis for processing the data is Article 6 (1) (b) (necessary to fulfill the contract) of the GDPR
If you use the contact form on our website, which can be used for electronic contact or contact us via our e-mail address, the personal data you provide will be automatically saved. The storage serves solely for purposes of processing or contacting the person concerned. A transfer of data to third parties does not take place. Legal basis for the processing of the data is in the presence of the consent of the user Art. 6 para. 1 lit. a GDPR.
The legal basis for the processing of the data transmitted in the course of sending an e-mail is Article 6 (1) lit. f DSGVO. If the e-mail contact aims to conclude a contract, then additional legal basis for the processing is Art. 6 para. 1 lit. b DSGVO.
​
§2 Legal basis for the processing of personal data
Insofar as we obtain the consent of the persons concerned for the processing of personal data, Art. 6 para. 1 lit. a EU General Data Protection Regulation (GDPR) as legal basis.
​
In the processing of personal data required for the performance of a contract of which the data subject is a party, Art. 6 (1) (b) of the GDPR serves as the legal basis. This also applies to the processing operations required to carry out pre-contractual measures.
Insofar as processing of personal data is required to fulfill a legal obligation that is subject to our company, Art. 6 para. 1 lit. c GDPR as legal basis.
​
If the processing is necessary to safeguard the legitimate interest of our company or a third party and if the interests, fundamental rights and fundamental freedoms of the person concerned do not outweigh the former interest, Art. 6 para. 1 lit. f GDPR as legal basis for processing.
​
​
​​
§3 Recipient of the data or categories of recipients
After entering and transferring your data, they are sent directly to the server of an external service provider via an encrypted connection
​
The recipients of the data are public bodies that receive data on the basis of statutory regulations (eg social insurance institutions, tax authorities), internal bodies involved in the execution of the respective business processes (personnel administration, accounting, banking institutions / payment service providers, accounting, customer service, marketing, sales), in the case of shipping products to the transport company / shipping company, contract partner, business partner commissioned by us, as far as the legal requirements demand or permit.
​
A transfer of data to third parties does not take place.
​
After entering and transferring your data, they are sent directly to the server of an external service provider via an encrypted connection
​
​
§4 Routine deletion and storage of personal data
We only process and store personal data of the data subject for the period required to achieve the purpose of the storage or as provided by the European directives and regulations or any other legislator in laws or regulations which the controller is subject to ,
​
If the storage purpose is omitted or if a storage period prescribed by the European directives and regulations or any other relevant legislator expires, the personal data will be routinely blocked or deleted in accordance with the statutory provisions.
In the case of collecting the data for providing the website, this is the case when the respective session is completed.
​
In the case of a newsletter subscription this is the case as long as the subscription is active.
​
§5 Your Legal rights
​
If you process personal data, in the sense of DGPR and you have the following rights to the person responsible:
​
Right of Access
You may ask the person in charge to confirm if personal data concerning you is processed by us.
If such processing is available, you can request information from the person responsible about the following information:
a. the purposes for which the personal data are processed;
b. the categories of personal data that are processed;
c. the recipients or categories of recipients to whom the personal data relating to you have been disclosed or are still being disclosed;
d. the planned duration of the storage of your personal data or, if specific information is not available, criteria for determining the duration of storage;
e. the existence of a right to rectification or erasure of personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;
f. the existence of a right of appeal to a supervisory authority;
g. all available information on the source of the data if the personal data are not collected from the data subject;
h. the existence of automated decision-making including profiling under Article 22 (1) and (4) GDPR and, at least in these cases, meaningful information about the logic involved, and the scope and intended impact of such processing on the data subject.
You have the right to request information about whether your personal information relates to a third country or an international organization. In this connection, you can request the appropriate guarantees in accordance with. Art. 46 GDPR in connection with the transfer.
​
Right to rectification
You have a right to rectification and / or completion to the controller, if the personal data you process is incorrect or incomplete. The responsible person must make the correction without delay.
​
Right to restriction of processing
You may request the restriction of the processing of your personal data under the following conditions:
a. if you contest the accuracy of your personal information for a period of time that enables the controller to verify the accuracy of your personal information;
b. the processing is unlawful and you refuse to delete the personal data and instead request the restriction of the use of the personal data;
c. the controller no longer requires personal data for the purposes of processing, but you need them to assert, exercise or defend legal claims, or
d. if you objected to the processing pursuant to Art. 21 para. 1 GDPR and have not yet determined whether the legitimate reasons of the person responsible outweighed your reasons.
If the processing of personal data concerning you has been restricted, this data may only be used with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of important public interest Union or a Member State.
If the limitation of the processing after the o.g. If conditions are restricted, you will be informed by the person in charge before the restriction is lifted.
Right to erase
You may require the controller to delete your personal information without delay, and the controller is required to delete that information immediately if one of the following is true:
a. Your personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
b. You revoke your consent to the processing gem. Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR and there is no other legal basis for processing.
c. You gem gem. Art. 21 para. 1 GDPR objection to the processing and there are no prior justifiable reasons for the processing, or you lay gem. Art. 21 (2) GDPR Opposition to processing.
d. Your personal data has been processed unlawfully.
e. The deletion of personal data concerning you is required to fulfill a legal obligation under Union law or the law of the Member States to which the controller is subject.
f. The personal data concerning you were collected in relation to information society services offered pursuant to Art. 8 para. 1 GDPR.
If the person in charge has made the personal data concerning you public and is acc. Article 17 (1) of the GDPR, it shall take appropriate measures, including technical means, to inform data controllers who process the personal data that you have been identified as being affected, taking into account available technology and implementation costs The person requesting the deletion of all links to such personal data or of copies or replications of such personal data.
The right to erasure does not exist if the processing is necessary
a. to exercise the right to freedom of expression and information;
b. to fulfill a legal obligation required by the law of the Union or of the Member States to which the controller is subject, or to carry out a task of public interest or in the exercise of official authority conferred on the controller;
c. for reasons of public interest in the field of public health pursuant to Art. 9 (2) lit. h and i and Art. 9 (3) GDPR;
d. for archival purposes of public interest, scientific or historical research purposes or for statistical purposes acc. Article 89 (1) of the GDPR, in so far as the law referred to in paragraph 1 is likely to render impossible or seriously affect the achievement of the objectives of that processing, or
e. to assert, exercise or defend legal claims.
​
​
Right to information
If you have the right of rectification, erasure or restriction of processing to the controller, they are obliged to notify all recipients to whom your personal data have been disclosed of this correction or deletion of the data or restriction of processing, unless: this proves to be impossible or involves a disproportionate effort.
You have a right to the person responsible to be informed about these recipients.
​
Right to data portability
You have the right to receive personally identifiable information you provide to the controller in a structured, common and machine-readable format. In addition, you have the right to transfer this data to another person without hindrance by the person responsible for providing the personal data, provided that
a. the processing on a consent acc. Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR or on a contract acc. Art. 6 para. 1 lit. b GDPR is based and
b. the processing is done using automated procedures.
In exercising this right, you also have the right to obtain that your personal data relating to you are transmitted directly from one person responsible to another person responsible, as far as this is technically feasible. Freedoms and rights of other persons may not be affected.
The right to data portability does not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority delegated to the controller.
​
Right to object
You have the right at any time, for reasons that arise from your particular situation, against the processing of your personal data, which pursuant to Art. 6 para. 1 lit. e or f GDPR takes an objection; this also applies to profiling based on these provisions.
The controller will no longer process the personal data concerning you unless he can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purpose of enforcing, exercising or defending legal claims.
If the personal data relating to you are processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct mail.
If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.
Regardless of Directive 2002/58 / EC, you have the option, in the context of the use of information society services, of exercising your right to object through automated procedures that use technical specifications.
​
Right to revoke the data protection consent declaration
You have the right to revoke your data protection declaration at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.
Automated decision on an individual basis including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which has a legal effect on you or, in a similar manner, significantly affects it. This does not apply if the decision
a. is required for the conclusion or performance of a contract between you and the controller,
b. is permissible on the basis of Union or Member State legislation to which the controller is subject, and that legislation contains adequate measures to safeguard your rights and freedoms and your legitimate interests, or
c. with your express consent.
However, these decisions must not be based on special categories of personal data pursuant to Art. 9 (1) GDPR, unless Art. 9 (2) lit. a or g and reasonable measures have been taken to protect the rights and freedoms and your legitimate interests.
Regarding the in a. and c. In the above-mentioned cases, the person responsible shall take appropriate measures to safeguard the rights and freedoms and your legitimate interests, including at least the right to obtain the intervention of a person by the controller, to express his or her own position and to contest the decision.
​
Right to complain to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to complain to a supervisory authority, in particular in the Member State of its place of residence, employment or the place of the alleged infringement, if you believe that the processing of your personal data is contrary to the GDPR contrary.
The supervisory authority to which the complaint has been submitted shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy pursuant to Article 78 of the GDPR.
​
§6 Information, objection, correction and removal possibility
You have the option at any time to revoke your consent to the processing of personal data with effect for the future and to have your personal data deleted or modified. If the data are required for the fulfillment of the contract or for the execution of pre-contractual measures, a premature deletion of the data is only possible, as far as not contractual or legal obligations preclude a deletion.
Information, rectification and cancellation requests as well as the revocation or the contradiction regarding the further use of the data of any given consent can be explained informally via the contact form.
​
I reserve the right to modify this privacy policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the website. If I make material changes to this policy, I will notify you here that it has been updated, so that you are aware of what information I collect, how I use it, and under what circumstances, if any, I use and/or disclose it.
​​
§7 Cookies
​
We use so-called "cookies" for our websites. Cookies are small text files that are stored on your computer and stored by your browser. By using cookies, our web server can recognize your browser, your individual settings in our web pages and, if applicable, parts of the log-in data in encrypted form, thus making it easier for you to use our pages and enabling automatic log-on. The following data is stored and transmitted in the cookies:
​
The purpose of using technically necessary cookies is to facilitate the use of websites for users. Some features of our website can not be offered without the use of cookies. For this it is necessary that the browser is recognized even after a change of the page. The user data collected through technically necessary cookies will not be used to create user profiles. We require cookies for the following applications.
​
The legal basis for the processing of personal data using cookies is our legitimate interest, Art. 6 para. 1 lit. f GDPR.
​
Cookies are stored on the computer of the user and transmitted by this to our site. Therefore, as a user, you have full control over the use of cookies. Your browser settings allow you to reject cookies, delete cookies from your computer, block cookies or request them before setting a cookie. The cookies we set will be deleted from your computer after each session. By deactivating cookies for our website, it may not be possible to use all functions of the website to the full.
​
§8 Protection of minors
Children and persons under the age of 18 should not submit any personal data to us without the consent of their parents or guardians. We do not solicit personal information from children, do not collect them and do not share them with third parties.