Privacy and Data Protection of Jolly designs Status 2021

Welcome to Jolly Designs!

With the following data protection regulations we would like to inform you about the handling of your data when using our homepage or our web shop www.jolly-designs.de (hereinafter: homepage). When using our website, you agree to the following data protection regulations. The data protection notices and declarations there apply to websites of other providers to which reference is made via links, for example.

I. Responsible body

Responsible for the collection, processing and use of your personal data within the meaning of Art. 4 No. 7 General Data Protection Regulation (GDPR).

Jolly Designs GmbH
Hans-Mess-Strasse 3, 61440
Oberursel (Taunus), Germany
Email
: info@jolly-designs.com

as operator of the homepage www.jolly-designs.de. If you have any questions about your data or this data protection declaration or to assert your rights as a data subject, you can contact us using the above contact details.

II. Encryption

All incoming and outgoing data is TLS-encrypted. You can recognize the encrypted connection when using our homepage by the fact that the address line of your browser starts with "https://" and the encryption symbol there. Thanks to the TLS encryption, the transmitted data cannot be read by third parties.

III. Collection, processing and use of personal data

1. Personal Data

"Personal data" within the meaning of the GDPR is all information relating to an identified or identifiable natural person; A natural person is considered to be identifiable if they can be identified directly or indirectly, in particular by means of assignment to an identifier such as a name, an identification number, location data, an online identifier or to one or more special features that express the physical , physiological, genetic, psychological, economic, cultural or social identity of that natural person.

Your personal data will only be processed in accordance with the provisions of applicable data protection law. Further information on the type, scope and purpose of the collection, processing and use of personal data can be found below:

2. Collection of data when visiting our homepage

When you visit our homepage, the web server automatically records log files on the basis of our legitimate interests in accordance with Article 6 (1) (f) GDPR. These cannot be assigned to a specific person; this data includes, for example, browser type and version, language, operating system used, referrer URL (the previously visited page), IP address of the requesting computer, access date and time of the server request and the client's file request (file name and URL). This data is only collected for the purpose of statistical evaluation and for security reasons (e.g. to clarify acts of abuse or fraud) and stored for a period of 7 days and then deleted. Should longer storage of the data be necessary for evidence purposes,

In principle, you can visit our website without having to enter any personal data.

3. Use of Cookies

We or third parties commissioned by us store so-called cookies on the customer's hard drive in order to make the use of our website more user-friendly and effective overall. The legal basis for this is Article 6 (1) (f) GDPR.

A cookie is a small text file that is used, among other things, to collect information about the use of a website. These cookies cannot run programs or transfer viruses to your computer. They do not contain any personal data, cannot be assigned to specific persons and, unless otherwise stated, are automatically deleted after one year at the latest. This data is not merged with other data sources.

You can also use our website without cookies. In the respective browser, the storage of cookies can be deactivated, restricted to certain websites or the browser can be set so that it notifies the user as soon as a cookie is sent. The user can also delete cookies from the hard drive of his PC at any time.

IV. Data exchange with third parties, integration of third countries in data processing

We also collect and store data provided by third parties on the basis of your consent in accordance with Article 6 (1) (a) GDPR and transmit the corresponding data to them.

If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or this happens in the context of using third-party services or disclosure or transmission of data to third parties, this only takes place

a. if it is necessary to fulfill our (pre)contractual obligations (Art. 6 Para. 1 lit. b GDPR),

b. on the basis of your consent (Article 6 (1) (a) GDPR),

c. due to a legal obligation (Art. 6 Para. 1 lit. c GDPR) or

i.e. on the basis of our legitimate interests (Art. 6 Para. 1 lit. f GDPR).

Subject to legal or contractual permissions, we only process or have the data processed in a third country if the special requirements of Art. 44 et seq. GDPR are met. The processing takes place, for example, on the basis of special guarantees, such as compliance with officially recognized special contractual obligations ("standard contractual clauses").

V. Creation of a customer account

You have the option of registering as a customer on our website and setting up a customer account. To do this, you must fill out the form under "Create account" with your first name, last name, e-mail address, password and birthday. When you log into your customer account for the first time, you can add your details. Mandatory fields are marked with [* Required]. Your full contact details will then be automatically transferred to every (follow-up) order. You can view your past orders via your customer account. The data is collected and used on the basis of your consent in accordance with Art. 6 (1) (a) GDPR.

VI. Use of the contact form

If you use our contact form, we collect your full name and email address to fulfill (pre)contractual obligations or to carry out measures, Article 6 Paragraph 1 lit. b GDPR. This personal data, which you make available to us as part of this contact request, is only required to answer your request or to contact you and is used for the associated technical administration. The transfer to third parties does not take place.

Your personal data will also be deleted without your revocation if we have processed your request or you revoke the consent to storage given here. This also happens if the storage is not permitted for other legal reasons.

VII. Newsletter subscription

We offer to inform you regularly by e-mail about new products, interesting offers and current price developments. Subscribing to our newsletter is voluntary and takes place via the so-called single opt-in procedure. All you have to do is register for the newsletter on our homepage. In order to be able to document the subscription in accordance with the legal requirements, the time of registration, the time of confirmation and the IP address are logged on the basis of our legitimate interests in accordance with Article 6 (1) (f) GDPR. As part of registering for the newsletter, you agree to the processing of the data provided for sending or receiving the e-mails, Article 6 (1) (a) GDPR. Furthermore, you agree

You can revoke your consent to the sending of the newsletter at any time and without giving reasons with effect for the future via a link that you will find at the end of each newsletter or by sending an e-mail to info@jolly-designs.com .

We can store the unsubscribed e-mail addresses and the data stored as part of the logging of the registration for up to three years on the basis of our legitimate interests before we delete them for the purpose of sending the newsletter in order to be able to prove a previously given consent. The processing of this data is limited to the purpose of a possible defense against claims. An individual request for deletion is possible at any time, provided that the previous existence of consent is confirmed at the same time.

The newsletter is sent using "Omnisend", an e-mail marketing service provided by Omnisend LLC, Unit A3, Gateway Tower, 32 Western Gateway, E16 1YL, London, England. Omnisend supports us, for example, by sending personalized messages, promoting products and acquiring customers. This is software that is integrated with e-commerce platforms such as Shopify. Your data is processed on the basis of our legitimate interests in accordance with Article 6 (1) (f) GDPR. Further information on data protection can be found at: https://www.omnisend.com/privacy/

The shipping service provider is used on the basis of our legitimate interests in accordance with Article 6 Paragraph 1 Letter f GDPR and an order processing contract in accordance with Article 28 Paragraph 3 Clause 1 GDPR.

The shipping service provider can use the data of the recipients in an anonymous form, ie without assignment to a user, to optimize or improve their own services, e.g. to technically optimize the shipping and the presentation of the newsletter or for statistical purposes. However, the shipping service provider does not use the data of our newsletter recipients to write to them themselves or to pass the data on to third parties.

VIII. Disclosure of Personal Information

1. Disclosure of data to service providers

Your personal data will be passed on in accordance with Article 6 Paragraph 1 Letter b GDPR if this is necessary for the processing and fulfillment of contractual obligations, e.g. logistics partners such as DHL, Hermes, dpd, GLS, FEDEX or payment service providers such as Paypal or Stripe, StripeKlarna , Klarna Pay Later, VISA or Mastercard. The transfer of your personal data is limited to the minimum (e.g. name, delivery address for logistics partners). Our contractual partners may only use this data to fulfill the order.

In addition, your personal data will be passed on on the basis of Article 6 Paragraph 1 lit. a, c, f GDPR.

2. Disclosure of Data to Hosting Providers

Hosting services serve to provide infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services.

Our homepage is provided via "Shopify", a service of Shopify International Limited, Victoria Buildings, 2nd Floor 1-2, Haddington Road, Dublin 4, D04 XN32, Ireland.

You can find more information about the data protection regulations at: https://www.shopify.de/legal/datenschutz .

We or our hosting provider processes inventory data, contact data, content data, contract data, usage data, meta and communication data from customers, interested parties and visitors to our website on the basis of our legitimate interests in making our website available efficiently and securely in accordance with Art. 6 Para. 1 lit. f GDPR. Any processing of data by Shopify is based on an order data processing relationship, Art. 28 GDPR.

IX. Use of web analysis, remarketing and retargeting tools

On the basis of our legitimate interests within the meaning of Article 6 (1) (f) GDPR, we use various tools or plugins for web analysis, remarketing and retargeting to optimize our online presence and to be able to put together more targeted offers for you.

Cookies are used, the IP address forwarded and/or different types of data are recorded and evaluated. These include, for example, the number of website visitors, visit duration, average page loading time, origin of the visitors.

In detail:

1.Google Analytics

We use Google Analytics, a web analytics service provided by Google Inc. based at 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. Google Analytics uses cookies, which enable an analysis of the use of the website by users. The information generated by the cookie about your use of this website (including your IP address) is usually transmitted to a Google server in the USA and stored there. IP anonymization is activated on our homepage by adding the code "gat._anonymizeIp();" so that your IP address is transmitted by Google in abbreviated form within EU member states or in other contracting states of the Agreement on the European Economic Area (so-called .IP masking). Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on our website activities and to provide other services related to website and internet use. Google may also transfer this information to third parties if this is required by law or if third parties process this data on behalf of Google.

Google offers an extension for web browsers (add-on) that can be used to prevent data collection by Google Analytics and the processing of this data by Google. The add-on can be downloaded and installed at https://tools.google.com/dlpage/gaoptout at your own risk.

You can find more information on this at: https://www.google.com/policies/privacy (general information on Google Analytics and data protection).

2.Facebook

We use remarketing tags from the social network facebook.com of Meta Platforms Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA ("Facebook"). The "Custom Audiences" feature used is a targeting option for advertisements to build our target group of Facebook users. When you visit our website, a direct connection is established between your browser and the Facebook server via the remarketing tags. This allows Facebook to associate your visit to our site with your user account. We can use the information obtained in this way to display Facebook Ads.

You can find more information on this in Facebook's data protection declaration at https://www.facebook.com/about/privacy/ .

X. Social Media Plugins

On the basis of our legitimate interests within the meaning of Article 6 (1) (f) GDPR, we use various social media plugins for web analysis, remarketing and retargeting to optimize our online presence and to be able to put together more targeted offers for you.

1.Facebook

We use the social plugin of the social network facebook.com. This is operated by Meta Platforms Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA ("Facebook"). The plugins can be recognized by a Facebook logo or are marked with the addition "Facebook Social Plugin". The list and appearance of the Facebook Social Plugins can be viewed here: https://developers.facebook.com/docs/plugins .

If you call up a function of this online offer that contains such a plugin, a direct connection to the Facebook servers will be established. The content of the plugin is transmitted directly to your device by Facebook and integrated into the online offer. User profiles can be created from the processed data. We therefore have no influence on the amount of data that Facebook collects with the help of this plugin and are therefore informing you according to our level of knowledge. By integrating the plugin, Facebook receives the information that you have accessed the corresponding page of the online offer. If you are logged into Facebook, Facebook can assign the visit to your Facebook account. If you interact with the plugins, e.g. B. share our homepage via the “share” button on Facebook, the corresponding information is transmitted from your device directly to Facebook and stored there. If you are not a Facebook member, there is still the possibility that Facebook will find out and store your IP address. According to Facebook, only an anonymous IP address is stored in Germany. If you are a Facebook member and do not want Facebook to collect data about you via this online offer and link it to your member data stored on Facebook, you must log out of Facebook before using our online offer and delete your cookies. According to Facebook, only an anonymous IP address is stored in Germany. If you are a Facebook member and do not want Facebook to collect data about you via this online offer and link it to your member data stored on Facebook, you must log out of Facebook before using our online offer and delete your cookies. According to Facebook, only an anonymous IP address is stored in Germany. If you are a Facebook member and do not want Facebook to collect data about you via this online offer and link it to your member data stored on Facebook, you must log out of Facebook before using our online offer and delete your cookies.

Further information can be found in Facebook's data protection information:

https://www.facebook.com/about/privacy and at
http://www.aboutads.info/choices (US site) or
http://www.youronlinechoices.com (EU site).

The settings are platform-independent, ie they are adopted for all devices, such as desktop computers or mobile devices.

2. Twitter

Within our online offer, functions and content of the Twitter service may be integrated, offered by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. In particular, this may include buttons with which the user can share the link on the website. If you are a member of the Twitter platform, Twitter can assign the above-mentioned content and functions to your profile there.

Twitter privacy policy: https://twitter.com/de/privacy

3.Instagram

In addition, functions and content of the Instagram service can be integrated within our online offer. The provider is Meta Platforms Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. This can include, for example, content such as images, videos or text and buttons with which users can express their liking for the content, the authors of the content or subscribe to our posts.

If you are a member of the Instagram platform, Instagram can assign the above-mentioned content and functions to your profile there.

More on Instagram's privacy policy at: http://instagram.com/about/legal/privacy/

4.TikTok

Furthermore, functions and content of the TikTok service may be integrated within the online offer, offered by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380 Ireland. This includes, for example, content such as videos and buttons with which users can express their liking for the content, the author of the content or subscribe to the provider's contributions.

If you are a member of the TikTok platform, TikTok can assign the above-mentioned content and functions to your profile there. The information generated by the pixel about your use of this website is transmitted to several TikTok servers, also in third countries such as the USA, and stored there. If IP anonymization is activated on this website, your IP address will be shortened beforehand by TikTok within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to the TikTok servers in third countries and shortened there. On behalf of the operator of this website, TikTok will use this information to evaluate your activities on the website,

TikTok offers extensive data protection information at https://www.tiktok.com/legal/privacy-policy?lang=de .

5.Pinterest

We also use the Pinterest social media plugin provided by Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland. This can include content such as images, videos or text and buttons that users can use to express their liking for the content, the authors of the content or to subscribe to our posts.

If you are a member of the Pinterest platform, Pinterest can assign the above-mentioned content and functions to your profile there. The information generated by the plugin about your website usage is transmitted to a Pinterest server in the USA and stored there. If IP anonymization is activated on this website, your IP address will be shortened beforehand by Pinterest within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Pinterest server in the USA and shortened there. On our behalf, Pinterest will use this information to evaluate your website activities,

Pinterest privacy policy: https://policy.pinterest.com/de/privacy-policy

XI. Integration of videos via YouTube

We use videos from YouTube, LLC 901 Cherry Ave., 94066 San Bruno, CA, USA, a company of Google Inc., Amphitheater Parkway, Mountain View, CA 94043, USA. If you call up the page of one of our products that has an embedded video (can also be accessed directly via YouTube), a connection to the YouTube servers is established and the content is displayed on the website by a message to your browser. The information generated by the plugin about your website usage is transmitted to a YouTube server in the USA and stored there. If IP anonymization is activated on this website, However, your IP address will be shortened beforehand by YouTube within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a YouTube server in the USA and shortened there. On our behalf, YouTube will use this information to evaluate your website activities, to compile reports on them and to provide us with other services related to website activity and internet usage. According to information from YouTube, only data is transmitted to the YouTube server in "– extended data protection mode -", in particular which of our product pages you have visited when you watch the video. If you are logged into YouTube at the same time, this information is also assigned to your member account on YouTube. You can prevent this by logging out of your member account before visiting our website.

Further information on YouTube's data protection is provided by Google under the following link. https://www.google.de/intl/de/policies/privacy/

XII. Your rights

You have the following rights:

1. Right to information (Article 15 GDPR)

You have the right at any time to request free information about your personal data stored by us, its origin and recipient, the purpose of data processing, the planned duration of data storage including a copy of the personal data that is the subject of processing.

2. Right to rectification (Article 16 GDPR)

You also have the right to have incorrect personal data corrected or incomplete personal data completed at any time.

3. Right to revoke consent (Article 7 (3) GDPR)

You have the right to revoke your consent to data processing at any time and with effect for the future, without there having to be a reason for revocation.

4. Right to erasure (Art. 17 GDPR)

Under the conditions of Art. 17 GDPR, you can request the deletion of your personal data. Your right to deletion depends, among other things, on whether we still need the data relating to you to fulfill our legal obligations.

5. Right to restriction of processing (Article 18 GDPR)

Under the conditions of Art. 18 GDPR, you can request the restriction of the processing of your personal data.

6. Right to data portability (Art. 20 GDPR)

You have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to transmit it to another person responsible, provided that the processing is based on consent and the processing is carried out using automated procedures.

7. Right to object (Art. 21 GDPR)

You have the right to object to the creation of user profiles and the processing of your personal data concerned at any time, provided that the processing is based on Article 6 Paragraph 1 lit. e or lit. f GDPR. Your personal data will no longer be processed unless compelling reasons worthy of protection outweigh your interests, rights and freedoms. If your personal data is used for the purpose of direct advertising, you naturally have the right to object to such processing at any time.

8. Right not to be subject to an automated decision (Art. 22 GDPR)

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you

9. Right of appeal (Art. 77 GDPR)

You also have the right to lodge a complaint with a supervisory authority.