Data Privacy Statement - Nostalgic-Art Merchandising GmbH

Data Privacy Statement according to the General Data Protection Regulation (DSGVO)

1. Scope

This privacy policy is intended to inform the customers of Nostalgic-Art Merchandising GmbH, as well as the users of their website in accordance with the General Data Protection Regulation, the Federal Data Protection Act and the Telemedia Act on the manner, the scope and purpose of the collection and use of personal data by the company and the website operator of the pages www.nostalgic-art.de, www.na-shop.de and www.plakatindustrie.de.
The company takes your privacy very seriously and handles your personal information confidentially and in accordance with the law. Bear in mind that data transfer on the internet may entail security vulnerabilities. A full protection against access by Strangers cannot be realized.

2. Contact details of those responsible and the data protection officer

I. Responsible

Those responsible in the sense of the “DSGVO” and other national data protection laws of the member states as well as other data protection regulation is the:

Nostalgic-Art Merchandising GmbH
Am Borsigturm 156
13507 Berlin
Deutschland
E-Mail: info@nostalgic-art.de
Website: www.na-shop.de, www.nostalgic-art.de, www.weloveretro.de und www.plakatindustrie.de

II. Data Protection Officer

You can reach our data protection officer in the following way:

Nostalgic-Art Merchandising GmbH
Am Borsigturm 156
13507 Berlin
Deutschland
E-Mail: datenschutzbeauftragter@nostalgic-art.de

3. Access data

The website operator or page provider collects data about access to the site and saves these as “Server log files”. The following data is logged:

Visited website
Time at the time of access
Amount of data sent in bytes
Source / reference from which you came to the page
Browser used
Operating system used
Used IP address

The data collected are for statistical purposes only and to improve the website. However, the website operator reserves the right to check the server log files later, should specific Indications of unlawful use be evident.

The legal basis for temporary storage is Article 6 (1) (f) GDPR. We capture such technical information in so-called “log files”, so our website is displayed for you correctly and we can determine the causes of possible technical problems, for technical optimization of our websites and for the purpose of security of our computer systems and networks. For these purposes lies our legitimate interest in data processing in accordance with Art.6 Section 1 lit.f DSGVO.

The data will be deleted as soon as they are no longer necessary to achieve the purpose of their collection. Typically, this technical information will be deleted or made unrecognizable at the latest after seven days.

The collection of data for the provision of the website and the storage of data in log files is mandatory for the operation of the website. Therefore, the user has no opportunity for objection.

I. Cookies

These websites use cookies. Cookies are small files that make it possible to store specific device-related information on users’ access devices (PCs, smartphones, etc.). They ensure user-friendliness of web pages and thus serve the users (for example storage of login data). On the other hand, they are used to collect the statistical data of website use and to be able to analyze them for the purpose of improving the offer. Users can influence the use of cookies. Most browsers have an option to restrict or completely prevent the storage of cookies. However, it is pointed out that the use and especially the comfort of use are limited without cookies.

You can manage many online advertising cookies from companies via the US website http://www.aboutads.info/choices/ or the EU page or the EU website http://www.youronlinechoices.com/uk/your-ad-choices/. Popular browsers offer the preference option of not allowing cookies. Note: There is no guarantee that you will be able to access all the functions of this website without restrictions if you choose certain settings.

II. Handling of personal data

The Company / The Website Operator collects, uses and shares your personal data only if permitted by law or if you consent to the collection of data.
Personal information means all information that is used to identify your person and which can be traced back to you – such as your name, e-mail address and telephone number.
The processing of personal data is only permitted if there is a legal basis under Art. 6 GDPR, e.g. if you have given us your consent, if you want to make a purchase with us, or if we assert our legitimate interest in the processing.

III. user account

To be able to place orders via this offer, each customer must set up a password-protected customer account. This contains an overview of placed orders and active order transactions. If you leave the online shop as a customer, you will be logged out automatically. The operator assumes no liability for password abuse, unless this was caused by the operator.

IV. Ordering process

All data, which are entered during the order processing by the customer, are stored. This includes:

Name, FIrst Name
Adress
Payment Data
E-Mail adress

Those data, which are absolutely necessary for the delivery or order processing, are passed on to third service providers. As soon as the storage of your data is no longer required or required by law, it will be deleted.

V. Credit check

In order to guarantee your and the security of the operator, in individual cases the operator carries out a credit check. In addition to checking past transactions with the operator and any changes to your personal data, the operator also resorts to third party service providers.
Your personal data (name, address, date of birth) will be sent as part of the credit check to the Association of Clubs Creditreform e.V., HellersbergstraÃŸe 12 D-41460 Neuss.

VI. Handling contact information

If you contact the website operator through the offered contact options, your details will be stored so that they can be used to process and answer your request. Without your consent, this data will not be disclosed to third parties.

VII. Dealing with comments and posts

If you leave a post or comment on this website, your IP address will be saved. This is done for the safety of the website operator: If your text violates the law, the website operator may want to be able to track your identity.

VI. Subscriptions

Hinterlassen Sie auf dieser Website einen Beitrag oder Kommentar, wird Ihre IP-Adresse gespeichert. Dies dient der Sicherheit des Websitebetreibers: Verstößt Ihr Text gegen das Recht, möchte er Ihre Identität nachverfolgen können.

Abonnements

You have the option to subscribe to both the entire website and follow-up comments on your post. You will receive an e-mail confirming your e-mail address. Besides this, no further data will be collected. The stored data will not be passed on to third parties. You can unsubscribe at any time.

VIII. Google Analytics

This website uses the “Google Analytics” service provided by Google Inc. (1600 Amphitheater Parkway Mountain View, CA 94043, USA) to analyze users’ website usage. The service uses “cookies” – text files which are stored on your device. The information collected by the cookies is usually sent to a Google server in the US and stored there.
On this website the IP anonymization is in effect. Within the member states of the EU and the European Economic Area the IP address of users is shortened. This reduction eliminates the personal reference of your IP address. Under the terms of the agreement, which the website operators have entered into with Google Inc., they use the information collected to compile an evaluation of website activity and site activity and provide Internet-related services.
You have the option to prevent the storage of cookies on your device by making the appropriate settings in your browser. There is no guarantee that you will be able to access all features of this website without restriction if your browser does not allow cookies. Furthermore, you can use a browser plug-in to prevent the information collected by cookies (including your IP address) from being sent to Google Inc. and used by Google Inc. The following link leads you to the corresponding plugin:
https://tools.google.com/dlpage/gaoptout?hl=de
Alternatively, by clicking on this link you prevent Google Analytics from collecting data about you within this website. By clicking on the link above you download an “opt-out cookie”. Your browser must allow cookies to be stored. If you delete your cookies regularly, you will need to click on the link each time you visit this website. Here’s more information on data usage by Google Inc.: https://support.google.com/analytics/answer/6004245?hl=de

IX. Use of social media plugins

This website uses Facebook Social Plugins, which is operated by Facebook Inc. (1 Hacker Way, Menlo Park, California 94025, USA). The integration is recognizable by the Facebook logo or the terms “Like”, “Like”, “Share” in the Facebook colors (blue and white). Information on all Facebook plug-ins can be found using the following link: https://developers.facebook.com/docs/plugins/
The plugin creates a direct connection between your browser and the Facebook servers. The website operator has no influence whatsoever on the nature and extent of the data transmitted by the plugin to the Facebook Inc. servers. Information on this can be found here: https://www.facebook.com/help/186325668085084
The plugin informs Facebook Inc. that users have visited this website. There is the possibility that your IP address will be saved. If you are logged into your Facebook account while visiting this website, the information will be linked to it.
If you use the functions of the plugin – for example by sharing or “liking” a post – the corresponding information will also be transmitted to Facebook Inc.
If you want to prevent that Facebook. Inc. associates this information with your Facebook account, please log out of Facebook before visiting this website.
Furthermore, this website uses the “+1” button of Google Plus. It is operated by Google Inc. (1600 Amphitheater Parkway Mountain View, CA 94043, USA). If you visit a page that contains the “+1” button, a direct connection is created between your browser and the Google servers. Therefore, the website operator has no influence whatsoever on the nature and extent of the data transmitted by the plugin to the servers of Google Inc. If you click on the “+1” button while being logged in to Google+, you share the content of the page on your public profile.
Personal data is not collected by Google Inc. until you click the button. Also, with logged in Google users, the IP address among other things is stored. If you would like to prevent Google Inc. from storing this data and linking it to your account, please log out before visiting this website.
For information on the “+1” button, see https://developers.google.com/+/web/buttons-policy.
Furthermore, this website uses Twitter buttons. These are operated by Twitter Inc. (795 Folsom St., Suite 600, San Francisco, CA 94107, USA). If you visit a page containing such a button, a direct link will be created between your browser and the Twitter servers. Therefore, the website owner has no influence over the nature and the extent of the data, which the plugin transmits to the server Twitter Inc.
According to the Twitter Inc. only your IP address is collected and stored.
Information on the handling of personal data by Twitter Inc. can be found here: https://twitter.com/privacy?lang=de

X. Newsletter Subscription

The website operator offers you a newsletter in which he informs you about current events and offers. If you would like to subscribe to the newsletter, you must agree to this and provide a valid e-mail address.

4. Rights of the Customer/User: Disclosure, Correction and Deletion

Insofar as we process personal data about you, you – as far as you have sufficiently identified yourself – are entitled to the following rights towards our company as a “person concerned” in accordance with DSGVO.

I. Right to information

You may request confirmation from our company as to whether we process personal information pertaining to you. If such processing is available, you can request information about a large number of circumstances in accordance with DSGVO, such as

(1) the purposes for which your personal information is processed;
(2) the categories of personal data being processed;
(3) the recipients or categories of recipients to whom your personal information has been disclosed or is still being disclosed;
(4) the planned duration of the storage of your personal data or, if specific information is not available, criteria for determining the retention time;
(5) the existence of a right to correction or deletion of your personal data, a right of limitation of our processing or a right to object to such processing;
(6) the existence of a right of appeal to a supervisory authority;
(7) all available information about the source of your personal data, unless your personal information was collected from yourself;
(8) (8) the existence of automated decision-making including profiling in accordance with articles 22 (1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved and the scope and intended impact of such processing on the person concerned.

You have the right to request information about whether your personal information is transferred to a third country or an international organization. In this case, you can request to be informed about the appropriate guarantees in accordance with. Art.46 GDPR in connection with the transfer.

II. Right to Correction

You have the right to correct and / or complete your personal data if this information is incorrect or incomplete. We will make the correction without delay.

III. Right to restriction of processing

Under certain circumstances, you may request the restriction of the processing of your personal data.

(1) if you contest the accuracy of your personal information for a period of time that enables us to verify the accuracy of your personal information;
(2) if the processing is unlawful and you refuse the deletion of your personal data and instead request the restriction of the use of your personal data;
(3) if we no longer need your personal information for the purposes of processing, but you need it to assert, exercise or defend your rights, or
(4) if you object to the processing and it is not yet certain that the legitimate reasons of our company group and affiliates exceed your reasons.

If the processing of your personal data has been restricted, we may only process this data – with the exception of its storage – with your consent or for the assertion, exercise or defense of legal claims or for the protection of the rights of another natural or legal person.
If the limitation of the processing after the above-mentioned conditions are restricted, you will be informed by us before the restriction is lifted.

IV. Right to Deletion

In certain cases, you may require us to have your personal information deleted immediately, and in such cases, we will be obliged to immediately delete that information.

(1) Your personal data are no longer necessary for the purposes for which they were collected or otherwise processed
(2) You revoke your consent (see below) or the lack of any other legal basis for the processing
(3) You object to the processing (see below) and there are no legitimate reasons for the processing
(4) We have improperly processed your personal information
(5) The deletion of personal data concerning you is required to fulfill a legal obligation under union or national law.

If we have made your personal information public and we are required to delete it, we must take reasonable steps taking into account available technology and implementation costs to inform other companies that process your personal information that you are deleting all of them and have requested links to your personal data (and all copies thereof) to be deleted (“right to be forgotten”).

The right to deletion does not exist if the processing is necessary

(1) to exercise the right to freedom of expression and information;
(2) to fulfill a legal obligation required by the law of the Union or of the Member States to which the controller is subject, or to carry out a task which is in the public interest, or in the exercise of official authority, which has been conferred to the controller;
(3) for reasons of public interest in the field of public health in accordance with Article 9 (2) (h) and (i) and Article 9 (3) DSGVO, or
(4) to assert, exercise or defend legal claims.

V. Right to information of third parties by our company

If you have enforced the right to correct, delete or restrict the processing of your data to our company, we are obliged to notify all recipients to whom we have disclosed your personal data about this correction or deletion of the data or restriction of processing, unless this proves to be impossible or involves a disproportionate effort. You also have the right to be informed by us about these recipients.

VI. Right to data portability

You have the right to receive your personal information provided to us in a structured, common and machine-readable format. You also have the right to transfer this information to another company as far as technically feasible. Freedoms and rights of other persons may not be affected.

VII. Right to object

You have the right to object to the processing of your personal data at any time for reasons arising from your particular situation without incurring any additional costs than the connection costs; this also applies to profiling based on these provisions as well as to our existing customer mailing.
In this case we will no longer process your personal information unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purposes of asserting, pursuing or defending legal claims.
You have the right to object to the processing of your personal data for direct marketing purposes at any time; this also applies to profiling insofar as it is associated with such direct mail. If you object to the processing for direct marketing purposes, we will no longer process your personal data for these purposes.

VIII. Right to revoke the data protection consent declaration

You have the right to revoke your data protection declaration at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.

IX. Automated decision on an individual basis including profiling

You have the right not to be subjected to a decision based solely on automated processing, including profiling, which will have legal effect or similarly affect you considerably.
This does not apply if the decision

(1) is required for the conclusion or performance of a contract between you and us,
(2) is permitted by Union or Member States legislation to which the controller is subject, and where such legislation contains appropriate measures to safeguard your rights and freedoms and legitimate interests, or
(3) with your expressed consent.

With respect to the cases referred to in (1) and (3), the person responsible shall take reasonable steps to uphold the rights and freedoms and your legitimate interests, including at least the right to intervention of a person of our company in order to express his or her own position and to challenge the decision.

X. Right to complain to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you shall have the right to complain to a supervisory authority, in particular in the Member State of its residence, place of work or place of alleged infringement, if you believe that the processing of the personal data concerning you, violates the DSGVO.

For Berlin this is:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Friedrichstr. 219
10969 Berlin

Tel.: +49 (0) 30 13889-0