Privacy Policy
The data controller is:
Sabine Welz
Tauentzienstrasse 9-12
10789 Berlin Germany
sw@art-domino.com
Thank you for your interest in our online shop. Protecting your privacy is very important to us. Below, we inform you in detail about how we handle your data. Your data is processed in accordance with the GDPR and § 165 para. 3 TKG (Austria).
1. Access data and hosting
You can visit our websites without providing any personal information. Each time a website is accessed, the web server automatically stores a so-called server log file, which contains, for example, the name of the requested file, your IP address, the date and time of access, the amount of data transferred, and the requesting provider (access data), and documents the access. This access data is evaluated exclusively for the purpose of ensuring the trouble-free operation of the site and improving our services. This serves to protect our legitimate interests, which are overriding within the scope of a balancing of interests, in a correct presentation of our services according to Art. 6 Para. 1 S. 1 lit. f GDPR. All access data will be deleted no later than seven days after the end of your visit to the site.
Hosting
The services for hosting and displaying the website are partly provided by our service providers as part of processing on our behalf. Unless otherwise explained in this privacy policy, all access data and all data collected in forms provided for this purpose on this website are processed on their servers. If you have questions about our service providers and the basis of our cooperation with them, please contact the contact option described in this privacy policy. Our service providers are located and/or use servers in the following countries for which the European Commission has issued a decision confirming an adequate level of data protection: Switzerland. Our service providers are located and/or use servers in the following countries for which the European Commission and the Swiss Federal Council have issued a decision confirming an adequate level of data protection: New Zealand, Canada, USA. The adequacy decisions for the USA apply as a basis for third-country transfers, provided that the respective service provider is certified. Certification is in place. Our service providers are located and/or use servers in countries outside Switzerland, the EU and the EEA. There is no adequacy decision from the European Commission and the Swiss Federal Council for these countries. Our cooperation with them is based on the European Commission's standard data protection clauses.
2. Data processing for contract execution and contact initiation
2.1 Data processing for contract execution
For the purpose of contract execution (including inquiries about and processing of any existing warranty and performance disturbance claims as well as any legal update obligations) according to Art. 6 para. 1 S. 1 lit. b GDPR, we collect personal data when you voluntarily provide it to us as part of your order. Mandatory fields are marked as such, because in these cases we absolutely need the data for contract execution and cannot ship the order without their provision. Which data is collected can be seen from the respective input forms. Further information on the processing of your data, in particular on the transfer to our service providers for the purpose of order, payment and shipping processing, can be found in the following sections of this privacy policy. After complete execution of the contract, your data will be restricted for further processing and deleted after the expiry of tax and commercial law retention periods in accordance with Art. 6 para. 1 S. 1 lit. c GDPR, unless you have expressly consented to further use of your data in accordance with Art. 6 para. 1 S. 1 lit. a GDPR or we reserve the right to further data use that is legally permitted and about which we inform you in this declaration.
2.2 Customer account
If you have given your consent to this in accordance with Art. 6 para. 1 S. 1 lit. a GDPR by deciding to open a customer account, we will use your data for the purpose of opening the customer account and for storing your data for future orders on our website. You can delete your customer account at any time, either by sending a message to the contact option described in this privacy policy or by using a dedicated function in the customer account. After deleting your customer account, your data will be deleted, unless you have expressly consented to further use of your data in accordance with Art. 6 para. 1 S. 1 lit. a GDPR or we reserve the right to further data use that is legally permitted and about which we inform you in this declaration.
2.3 Contacting Us
As part of customer communication, we collect personal data to process your inquiries in accordance with Art. 6 para. 1 S. 1 lit. b GDPR, if you voluntarily provide it to us when contacting us (e.g., via contact form, live chat tool, or email). Mandatory fields are marked as such, as we absolutely need this data to process your contact request. Which data is collected can be seen from the respective input forms. After your inquiry has been fully processed, your data will be deleted, unless you have expressly consented to further use of your data in accordance with Art. 6 para. 1 S. 1 lit. a GDPR, or we reserve the right to further data use that is legally permitted and about which we inform you in this declaration.
2.4 Data Processing Electronic Right of Withdrawal Function
Nature and Scope of Processing
To provide the legally required electronic right of withdrawal procedure, we use the app EU-Widerrufsbutton on our website. This app is operated by Visionz GmbH, Richthofenstr. 29, 31137 Hildesheim, Germany.
The Visionz app is used for the purpose of legally complying with the legal requirements for providing an easily accessible electronic withdrawal procedure (withdrawal button) in accordance with § 356a BGB. The legal basis for this data processing is Art. 6 Para. 1 lit. c GDPR (fulfillment of a legal obligation to which we as an online retailer are subject) and Art. 6 Para. 1 lit. b GDPR, provided that the withdrawal serves to process the existing contractual relationship.
The transmitted data will be stored for as long as it is necessary for the processing of your withdrawal and for the fulfillment of legal retention obligations (e.g., under commercial or tax law). Thereafter, the data will be deleted.
We have concluded an order processing agreement (AV contract) with the app provider (Visionz GmbH). This ensures that the provider processes our customers' data exclusively according to our instructions and in compliance with the GDPR.
Data processing for appointment booking
We collect personal data if you voluntarily provide it to us when booking an appointment. Mandatory fields are marked as such, as we absolutely need this data for appointment booking and cannot send the appointment booking without it. Which data is collected can be seen from the respective input forms. Information in free text fields is voluntary and does not necessarily have to be filled in for sending the appointment booking. We ask you to refrain from providing sensitive data (e.g., health-related information such as illnesses) in such free text fields. We use the data provided by you for appointment booking in accordance with Art. 6 Para. 1 S. 1 lit. b GDPR. After the booked appointment has been fully processed, your data will be restricted for further processing and deleted after the expiry of any tax and commercial law retention periods in accordance with Art. 6 Para. 1 S. 1 lit. c GDPR, unless you have expressly consented to further use of your data in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR or we reserve the right to further data use that is legally permitted and about which we inform you in this declaration.
2.4 Data Processing Electronic Right of Withdrawal Function
Nature and Scope of Processing
To provide the legally required electronic right of withdrawal procedure, we use the app EU-Widerrufsbutton on our website. This app is operated by Visionz GmbH, Richthofenstr. 29, 31137 Hildesheim, Germany.
The Visionz app is used for the purpose of legally complying with the legal requirements for providing an easily accessible electronic withdrawal procedure (withdrawal button) in accordance with § 356a BGB. The legal basis for this data processing is Art. 6 Para. 1 lit. c GDPR (fulfillment of a legal obligation to which we as an online retailer are subject) and Art. 6 Para. 1 lit. b GDPR, provided that the withdrawal serves to process the existing contractual relationship.
The transmitted data will be stored for as long as it is necessary for the processing of your withdrawal and for the fulfillment of legal retention obligations (e.g., under commercial or tax law). Thereafter, the data will be deleted.
We have concluded an order processing agreement (AV contract) with the app provider (Visionz GmbH). This ensures that the provider processes our customers' data exclusively according to our instructions and in compliance with the GDPR.
3. Data processing for shipping purposes
For the purpose of fulfilling the contract in accordance with Art. 6 Para. 1 S. 1 lit. b GDPR, we pass on your data to the shipping service provider commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods. If you have questions about our service providers and the basis of our cooperation with them, please contact the contact option described in this privacy policy.
4. Data processing for payment processing
When processing payments in our online shop, we work with the following partners: technical service providers, credit institutions, payment service providers.
4.1 Data processing for transaction processing
Depending on the selected payment method, we pass on the data necessary for processing the payment transaction to our technical service providers, who act on our behalf as processors, or to the commissioned credit institutions or the selected payment service provider, insofar as this is necessary for payment processing. This serves to fulfill the contract in accordance with Art. 6 Para. 1 S. 1 lit. b GDPR. In some cases, the payment service providers collect the data required for payment processing themselves, e.g., on their own website or via technical integration in the ordering process. In this respect, the privacy policy of the respective payment service provider applies. If you have questions about our partners for payment processing and the basis of our cooperation with them, please contact the contact option described in this privacy policy.
4.2 Data processing for the purpose of fraud prevention and optimizing our payment processes
We may share additional data with our service providers, which they, as our processors, use together with the data necessary for payment processing, for the purpose of fraud prevention and optimizing our payment processes (e.g., invoicing, processing disputed payments, supporting accounting). This serves to protect our legitimate interests in protecting ourselves against fraud and in efficient payment management, which are overriding within the scope of a balancing of interests, in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR.
5. Advertising by email
5.1 Email newsletter with registration, newsletter tracking with separate consent
If you subscribe to our newsletter, we will use the data required for this purpose or separately provided by you to send you our email newsletter regularly based on your consent in accordance with Art. 6 para. 1 S. 1 lit. a GDPR. You can unsubscribe from the newsletter at any time either by sending a message to the contact option described below or via a dedicated link in the newsletter. After unsubscribing, we will delete your email address from the recipient list, unless you have expressly consented to further use of your data in accordance with Art. 6 para. 1 S. 1 lit. a GDPR or we reserve the right to further data use that is legally permitted and about which we inform you in this declaration. If you have additionally given us your consent in accordance with Art. 6 para. 1 S. 1 lit. a GDPR to analyze our newsletters, we will also analyze your interaction with our newsletter by measuring, storing and evaluating opening rates and click-through rates for the purpose of designing future newsletter campaigns ("newsletter tracking"). For this evaluation, the emails sent contain single-pixel technologies (e.g., so-called web beacons, tracking pixels) that are stored on our website. For the evaluations, we link the following "newsletter data" in particular
- the page from which the page was requested (so-called referrer URL),
- the date and time of the request,
- the description of the type of web browser used,
- the IP address of the requesting computer, the email address,
- the date and time of registration and confirmation
and the single-pixel technologies with your email address or your IP address and, if applicable, an individual ID. Links contained in the newsletter may also contain this ID. You can unsubscribe from newsletter tracking at any time, either by sending a message to the contact option described or via a dedicated link in the newsletter. The information will be stored as long as you are subscribed to the newsletter.
5.2 Newsletter dispatch
The newsletter and the newsletter tracking described above may also be sent by our service providers as part of processing on our behalf. If you have questions about our service providers and the basis of our cooperation with them, please contact the contact option described in this privacy policy. Our service providers are located and/or use servers in the following countries for which the European Commission and the Swiss Federal Council have issued a decision confirming an adequate level of data protection: USA, Canada. The adequacy decisions for the USA apply as a basis for third-country transfers, provided that the respective service provider is certified. Until certification by our service providers, data transfer continues to be based on this: Standard data protection clauses of the European Commission. Our service providers are located and/or use servers in these countries: India. There is no adequacy decision from the European Commission and the Swiss Federal Council for these countries. Our cooperation with them is based on these guarantees: Standard data protection clauses of the European Commission.
5.3 Sending review requests by email
If you have given us your explicit consent for this during or after your order in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR, we will use your email address to request a review of your order via the review system we use. This consent can be revoked at any time by sending a message to the contact option described in this privacy policy or via a link provided for this purpose in the review request. After successful revocation of your consent, we will delete your email address from the recipient list, unless you have expressly consented to further use of your data in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR or we reserve the right to further data use that is legally permitted and about which we inform you in this statement. Review requests may also be sent by our service provider Trusted Shops SE, Subbelrather Str. 15C, 50823 Cologne ("Trusted Shops"). In this context, we receive information about the respective status from Trusted Shops (e.g. whether the review request has been sent and whether it has arrived). This is done in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR to fulfil our legitimate interest in receiving information about the review invitations in order to make optimisations based on this, and to fulfil the legitimate interest of Trusted Shops in being able to offer this service. We are jointly responsible with Trusted Shops for sending review requests and for collecting and displaying review and status information. Within the framework of the joint responsibility between us and Trusted Shops, please contact Trusted Shops primarily for data protection questions and to assert your rights; you can find their contact details here. Further information on data protection can be found at the following link here. Irrespective of this, you can always contact us via the contact option described in this privacy policy. Your request will then, if necessary, be forwarded to the other responsible party for a response.
6. Cookies and other technologies
General Information
To make visiting our website attractive and to enable the use of certain functions, we use technologies, including so-called cookies, on various pages. Cookies are small text files that are automatically stored on your end device. Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your end device and enable us to recognise your browser on your next visit (persistent cookies).
Protection of privacy on end devices
When using our online offering, we employ strictly necessary technologies to provide the expressly requested telemedia service. The storage of information on your end device or access to information already stored on your end device does not require consent in this respect. For functions that are not strictly necessary, the storage of information on your end device or access to information already stored on your end device requires your consent. We point out that if consent is not given, parts of the website may not be fully usable. Any consent you have given remains valid until you adjust or reset the respective settings on your end device.
- Choosing a selection results in a full page refresh.
- Opens in a new window.
