This data protection information provides information about the processing of your personal data when you visit and use the online portal “brushedandgilded”, www.brushedandgilded.com (hereinafter “portal”, “we” or “us”) in accordance with the Basic Data Protection Regulation (hereinafter “DS-GVO”).
1. scope of application, responsible body and definitions
1.1 Scope of application of this privacy information
This data protection information applies to the visit and use of the portal as well as the processing of the services sold via this site.
Other websites or portals are not covered by this privacy information and provide their own specific privacy information.
1.2 Authority responsible for processing your personal data
Astrid Vangenechten, Julius-Leber-Strasse 14E, 48151 Münster
+49 176 21 06 81 14
This data protection information is based on the following data protection terms, which we have defined for easier understanding:
The DS-GVO is the basic data protection regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EG)
The recipient is a natural or legal person, public authority, agency or other body to whom the personal data are disclosed, whether or not that person is a third party, however, authorities which may receive personal data in the context of a specific investigation mandate under Union or Member State law shall not be considered as recipients; the processing of such data by those authorities shall be carried out in accordance with the applicable data protection rules and in accordance with the purposes of the processing.
Personal data shall mean any information relating to an identified or identifiable natural person, i.e. the data subject. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. Personal data may include, for example, name, contact details, user behaviour or bank details.
Responsible party shall mean the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data Where the purposes and means of such processing are determined by Union law or by the law of the Member States, provision may be made for the controller to be designated by Union law or by the law of the Member States, or for the specific criteria for such designation. Mrs. Astrid Vangenechten is the controller of the data processing operations described in this privacy statement.
2. Purposes, legal basis and, if applicable, data categories when processing your personal data
When you visit our websites, we process your personal data which is technically necessary for us to provide you with our websites and to ensure the stability and security when you visit our websites. For this purpose we process the following personal data:
– IP address to document log-in and log-out for the purpose of tracking data changes and as brute force protection
We process your personal data on the basis of our legitimate interest in providing you with the web pages and ensuring IT security for you when you visit our web pages, on the basis of Art. 6 Paragraph 1 S. 1 lit. f) DS-GVO.
2.1.2 Transfer of data to third parties
The aforementioned data will be passed on to our service partners exclusively, in strict compliance with the legal requirements, insofar as this is necessary for the execution of the contracts. For our part, the service partners are obliged to limit the use to the purpose of the transfer. Overall, the transmission of the aforementioned data is limited to the minimum necessary.
The legal basis of the processing Art. 6 Paragraph 1 lit. a), b) and f) DS-GVO.
No personal data will be passed on in the event of transfer to www.designfiles.com . On this page, however, a separate registration is required, during which personal data is requested. See https://designfiles.co/privacy for the data protection provisions there. The operator of the site guarantees compliance with the provisions of the Basic Data Protection Regulation (DSGVO).
The data processing remains permissible until such time as consent is revoked. We would like to expressly point out at this point that in the event that contact data is passed on, we have only a very limited influence on the further processing of this data. The person concerned must contact the respective third party directly in order to enforce any rights to which he/she may be entitled.
If you have any questions about events, wish to exercise your rights under this data protection information, or wish to make a complaint, you can contact us (see contact details under point 1.2).
Depending on the subject of your inquiry, we will use your personal data to answer your questions. If and to the extent necessary to answer your inquiry, we also collect data from external sources.
The processing of your personal data is carried out for the purpose of processing your inquiry on the basis of art. 6 Paragraph 1 S. 1 lit. a) DS-GVO. If you exercise your rights vis-à-vis us, we will process your personal data for the purpose of fulfilling a legal obligation on the basis of Art. 6 Paragraph 1 S. 1 lit. c) DS-GVO.
3. storage and deletion of your personal data
We store your personal data for as long and as far as it is necessary for the purposes (Section 2) for which it is processed.
As soon as the data is no longer required for the purposes mentioned in Section 2, we will retain your personal data for the time during which you can assert claims against us or we can assert claims against you (statutory limitation period usually of three years, beginning at the end of the year in which the claim arises; e.g. at the end of the year of the ticket transaction).
In addition, we store your personal data for as long and as far as we are legally obliged to do so. Corresponding proof and storage obligations result from the German Commercial Code, the German Tax Code and the Money Laundering Act (e.g. § 257 HGB; § 147 AO). According to these laws, the storage obligations are up to ten years.
4. legitimate interests in data processing and opposition
We process your personal data within the meaning of Section 2 on the basis of our legitimate interests, in particular to ensure IT security on our websites and to inform you about events and activities, to prevent fraud and abuse, to protect our legal interests (including in court if necessary), to enforce and defend them and to carry out internal administration efficiently and on the basis of a division of labour. You can obtain information about the weighing up of interests carried out via:
Insofar as we process your personal data on the basis of these legitimate interests (Art. 6 Paragraph 1 S. 1 lit. f) DS-GVO), you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation. We will then no longer process your data for this/these purpose(s), unless our interests worthy of protection outweigh this/these or the processing serves to assert, exercise or defend legal claims. We expressly point out that we cannot block data that has already been passed on to third parties. In such a case you must contact the third party directly.
If you object to the data processing according to Section 4.2, we will process your personal data collected in this context to answer your inquiry. The processing of your personal data is carried out in order to fulfil a legal obligation on the basis of Art. 6 Paragraph 1 S. 1 lit. c) DS-GVO.
5. consent and withdrawal of your consent
If you have given us permission to process your personal data, you can revoke this permission at any time. The revocation of your consent is effective for the future. The legality of the processing of your personal data up to the time of the revocation remains unaffected. You can independently revoke your consent to the use of your e-mail address and other contact data at any time.
Please send your revocation to:
If you revoke your consent, we will process your personal data collected in this context to answer your inquiry. The processing of your personal data is carried out to fulfill a legal obligation on the basis of Art. 6 Para. 1 S. 1 lit. c) DS-GVO.
6. Your rights
You can demand from us at any time in accordance with the DS-GVO that we:
-Provide you with information about the personal data we process concerning you (Art. 15 DS-GVO),
-Correct personal data that concerns you and is incorrect (Art. 16 DS-GVO) and/or
-Delete (Art. 17 DS-GVO), block (Art. 18 DS-GVO) and/or release (Art. 20 DS-GVO) your personal data stored by us.
Please direct your request
-by e-mail to email@example.com or to the above mentioned contact details.
If you assert your rights towards us, we will process your personal data collected in this context to answer your inquiry. The processing of your personal data is carried out in order to fulfil a legal obligation on the basis of Art. 6 Paragraph 1 S. 1 lit. c) DS-GVO.
Without prejudice to your rights under Section 7, you may lodge a complaint with a data protection supervisory authority if you believe that the processing of personal data concerning you is in breach of the DS-GVO (Art. 77 DS-GVO).
“Marketing cookies” are the cookies that are used by Google to analyze visitor behavior.
Transient cookies are automatically deleted when you close the browser. This includes in particular the seasonal cookies. These store a so-called season ID, which can be used to assign various requests from your browser to the shared session. This allows your computer to be recognized when you return to our website. These season cookies are deleted when you log out or close your browser.
Persistent cookies are automated and are deleted after a predefined period of time, which may vary depending on the cookie. You can delete the cookies in the security settings of your browser at any time.
If you have given your consent, this website uses Google Analytics, a web analytics service provided by Google Ireland Limited (“Google”). The use includes the operating mode “Universal Analytics”. This makes it possible to assign data, sessions and interactions across multiple devices to a pseudonymous user ID and thus analyze the activities of a user across multiple devices.
This website uses the services of MailChimp for sending newsletters. Provider is the Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA.
MailChimp is a service that can be used to organize and analyze the sending of newsletters. If you enter data for the purpose of receiving newsletters (e.g. e-mail address), this data is stored on the servers of MailChimp in the USA.
With the help of MailChimp we can analyze our newsletter campaigns. When you open an e-mail sent with MailChimp, a file contained in the e-mail (so-called web-beacon) connects to the servers of MailChimp in the USA. This way it can be determined whether a newsletter message was opened and which links were clicked on, if any. Furthermore, technical information is collected (e.g. time of retrieval, IP address, browser type and operating system). This information cannot be assigned to the respective newsletter recipient. It is used exclusively for statistical analysis of newsletter campaigns. The results of these analyses can be used to better adapt future newsletters to the interests of the recipients.
If you do not want to receive analysis by MailChimp, you must unsubscribe from the newsletter. For this purpose we provide a link in every newsletter message.
The data processing is based on your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke this consent at any time by unsubscribing the newsletter. The legality of the data processing operations that have already taken place remains unaffected by the revocation.
The data that you provide us with for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from our servers as well as from the servers of MailChimp after the cancellation of the newsletter. Data which is stored for other purposes (e.g. e-mail addresses for the member area) remains unaffected.