Our Data Protection Policy
The following statement will provide you with an overview of the ways in which your data will be processed by Studio Margret Wibmer.
- Information about us as controllers of your data
- Your data
- Your rights
- Information about the data processing
Information about us as controllers of your data
In accordance with data security laws, the responsible authority, Studio Margret Wibmer, is contactable at
KNSM laan 153, 1019 LC Amsterdam, Netherlands. Phone +31 6242 77754
Please direct all questions and concerns to Ms Margret Wibmer, KNSM laan 153, 1019 LC Amsterdam, Netherlans. firstname.lastname@example.org
We take the protection of your data very seriously and would like you to feel safe while visiting our website. We assure you that your data will be handled in accordance with the applicable data protection regulations and that the necessary technical and organizational measures in compliance with data protection are in place. The protection of your data is a key priority for us.
• Your data
Personal data (usually referred to just as “data” below) will only be processed by us to the extent
necessary and for the purpose of providing a functional and user-friendly website, including its contents, and the services offered there.
• Your rights
With regard to the data processing to be described in more detail below, users and data subjects have the right to confirmation of whether data concerning them is being processed, information about the data being processed, further information about the nature of the data processing, and copies of the data (cf. also Art. 15 GDPR);
1. to correct or complete incorrect or incomplete data (cf. also Art. 16 GDPR);
- to the immediate deletion of data concerning them (cf. also Art. 17 DSGVO), or, alternatively, if further processing is necessary as stipulated in Art. 17 Para. 3GDPR, to restrict said processing per Art. 18 GDPR;
- to receive copies of the data concerning them and/or provided by them and to have the same transmitted to other providers/controllers (cf. also Art. 20 GDPR);
- to file complaints with the supervisory authority if they believe that data concerning them is being processed by the controller in breach of data protection provisions (see also Art. 77 GDPR). In addition, the controller is obliged to inform all recipients to whom it discloses data of any such corrections, deletions, or restrictions placed on processing the same per Art. 16, 17 Para. 1, 18 GDPR. However, this obligation does not apply if such notification is impossible or involves a disproportionate effort. Nevertheless, users have a right to information about these recipients. Likewise, under Art. 21 GDPR, users and data subjects have the right to object to the controller’s future processing of their data pursuant to Art. 6 Para. 1 lit. f) GDPR. In particular, an objection to data processing for the purpose of direct advertising is permissible.
Information about the data processing
Your data processed when using our website will be deleted or blocked as soon as the purpose for its storage ceases to apply, provided the deletion of the same is not in breach of any statutory storage obligations or unless otherwise stipulated below.
• Server data
For technical reasons, the following data sent by your internet browser to us or to our server provider will be collected, especially to ensure a secure and stable website: These server log files record the type and version of your browser, operating system, the website from which you came (referrer URL), the webpages on our site visited, the date and time of your visit, as well as the IP address from which you visited our site. The data thus collected will be temporarily stored, but not in association with any other of your data.
The basis for this storage is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in the improvement, stability, functionality, and security of our website.
The data will be deleted within no more than seven days, unless continued storage is required for evidentiary purposes. In which case, all or part of the data will be excluded from deletion until the investigation of the relevant incident is finally resolved.
a) Session cookies
The legal basis for such processing is Art. 6 Para. 1 lit. b) GDPR, insofar as these cookies are used to collect data to initiate or process contractual relationships.
If the processing does not serve to initiate or process a contract, our legitimate interest lies in improving the functionality of our website. The legal basis is then Art. 6 Para. 1 lit. f) GDPR.
When you close your browser, these session cookies are deleted.
b) Third-party cookies
c) Disabling cookies
If you prevent or restrict the installation of cookies, not all of the functions on our site may be fully usable.
The data you submit when ordering goods and/or services from us will have to be processed in order to fulfill your order. Please note that orders cannot be processed without providing this data.
The legal basis for this processing is Art. 6 Para. 1 lit. b) GDPR.
After your order has been completed, your personal data will be deleted, but only after the retention periods required by tax and commercial law.
In order to process your order, we will share your data with the shipping company responsible for delivery to the extent required to deliver your order and/or with the payment service provider to the extent required to process your payment. The legal basis for the transfer of this data is Art. 6 Para. 1 lit. b) GDPR.
Our newsletter helps us keep you informed about upcoming events and activities. If you register for our free newsletter, the first step will entail providing personal data to initiate your registration, i.e. your e-mail address and – optionally – your name and address. This data will be transferred to us. We will also save the IP address of the internet connection from which you accessed our website, as well as the date and time of your registration. In the next step of the registration process, we will send you an email describing the newsletter’s content as well as providing you with our data protection declaration. This email will also serve as a means of obtaining your consent to send you the newsletter. We use the data collected during the registration process for the exclusive purpose of sending the newsletter – data is not passed on to third parties. If you choose to voluntarily provide your first and last names, we will use these, with your consent, as a means of addressing you in the newsletter.
Following, Art. 6 Para. 1 S. 1 lit. f DSGVO, in all cases, this kind of data storage is based on our legitimate interest in the statistical evaluation of the newsletter campaigns, and in order to optimize marketing and improve our focus on the interests of our subscribers.
We use the provider Mailchimp for the dispatch of our newsletters, which is part of The Rocket Science Group, LLC with headquarters in the USA. In legal terms, the use of Mailchimp means data processing in a third country. We would like to point out that e-mail addresses and other data collected in the context of the newsletter – including information about browser and system, IP address and time of access – are also stored on the servers of Mailchimp. We have chosen Mailchimp because The Rocket Science Group, LLC has a valid EU-Privacy-Shield-Certification and thus meets the measures and standards set by the EU for the protection of personal data stored in the USA. We have entered a newsletter dispatch contract with Mailchimp to ensure the protection of your data. This means that Mailchimp will use the information given to us in order to send and evaluate the newsletter on our behalf. In some cases, we may also use this data to optimize and improve our own offers, however, our contract partner, Mailchimp, will never contact you directly. We trust in the reliability and the IT– and data security of the provider.
We would like to point out that, as we continue to send you the newsletter, we also evaluate your user behavior through Mailchimp’s built-in tracking. We would like to expressly point out that your consent also covers this data use/data storage. In order to evaluate your user behavior, the e-mails sent contain so-called web beacons, or tracking pixels, which are one-pixel image files stored on our website. We link the above-mentioned data and the web beacons to your e-mail address and an individually- generated ID. Links received in the newsletter may also contain this ID. With the data
thus obtained, we create a user profile to tailor the newsletter to your individual interests. We record when you read our newsletters and which links you click on, and can thereby determine your personal user interests. We also link this data to actions you take on our website.
You can object to this tracking by unsubscribing from our newsletter. You will find more information on this at the end of this section. User information is stored as long as you are subscribed to the newsletter. After you unsubscribe, we store the data anonymously for purely statistical purposes. You can also circumvent this tracking by deactivating image display in your emails. However, in this case, the newsletter will not be displayed in its entirety and you may not be able to use it fully. If you manually activate display the images, the above-mentioned tracking will take place.
This declaration is based on Art. 6 para. 1 sentence 1 lit. a DSGVO. You can revoke your consent to the storage of your data and e-mail address, as well as its use for newsletter dispatch, at any point. Please send a short e-mail to email@example.com. Each newsletter also contains an unsubscribe link.
If you contact us via email, the data you provide will be used for the purpose of processing your request. We must have this data in order to process and answer your inquiry; otherwise we will not be able to answer it in full or at all. The legal basis for this data processing is Art. 6 Para. 1 lit. b) GDPR.
Your data will be deleted once we have fully answered your inquiry and there is no further legal obligation to store your data, such as if an order or contract resulted therefrom.
25 March 2021