DATA PRIVACY POLICY d-tom Tom Farenski Industrial Design § 1 Information on the collection of personal data 1.1 In the following, the owner and operator of the website www.d-tom.com (‘website’) provides information about the collection of personal data when using this website. Personal data is all data that can be related to you personally, e.g. name, address, email addresses, user behaviour. 1.2 The controller pursuant to Art. 4 (7) of the EU General Data Protection Regulation (‘GDPR’) is Tom Farenski, Lenkersheimer Straße 14, 90431 Nuremberg, Germany, VAT identification number pursuant to Section 27 a of the German VAT Act: DE276444314, farenski@d-tom.com, phone: 0911. 92 333 599 (see legal notice). 1.3 When you contact us by e-mail, the data you provide (your e-mail address, your name and telephone number if applicable) will be stored by us in order to answer your questions. We delete the data collected in this context after storage is no longer required, or restrict processing if there are statutory retention obligations. The legal basis for the storage of data when using our contact form is Art. 6 para. 1 sentence 1 lit. b GDPR for (pre-)contract-related requests, for other requests Art. 6 para. 1 sentence 1 lit. f GDPR, whereby our legitimate interest lies in the technical possibility of answering your contact enquiry. § 2 Your rights 2.1 When you > view, confirm, correct, rectify, update, supplement, anonymise, block, restrict or erase your personal data > object to the use of your personal data by us (see § 3.2) or wish to restrict it; > have questions about the processing of your personal data; or > would like us to pass on your personal data to another person or company, please contact us using the contact details provided under § 1.2. 2.2 We grant you all rights in relation to your personal data to which you are entitled under applicable law. If you have any complaints regarding the handling of your personal data, you can contact a data protection supervisory authority (Art. 13 para. 2 lit. d GDPR). Alternatively, you can contact us using the contact details provided under § 1.2. § 3 Objection to or revocation of consent 3.1 If you have given your consent to the processing of your data, you can revoke this at any time by informing us accordingly using the contact details provided in § 1.2. Such revocation will affect the processing of your personal data from the time of revocation. 3.2 Insofar as we base the processing of your personal data on a balancing of interests (Art. 6 para. 1 sentence 1 lit. f GDPR), you can object to the processing. This is the case if, in particular, the processing is not necessary for the fulfilment of a contract with you, which is described by us in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of an objection, we will examine the situation and will either discontinue or adapt the data processing or show you our compelling reasons worthy of protection on the basis of which we will continue the processing. § 4 Collection, processing and use of your data 4.1 If you only use the website for information purposes, i.e. if you do not transmit information separately, we only collect the personal data that your browser transmits to our server. We then collect the following data, which is technically necessary for us to display our websites to you and to ensure stability and security (legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR, whereby our legitimate interest lies in the technical possibility of operating the websites): > IP address; > Website(s) that are requested/accessed; > Date and time of the enquiry; > Time zone difference to Greenwich Mean Time (GMT); > Content of the request (specific page); > Access status/HTTP status code; > the amount of data transferred in each case; > Website from which the request originates; > Browser (browser type, version and language setting of the browser); > operating system and its interface; and > language and version of the browser software. 4.2 In addition, we only process your personal data if a) there is a legitimate interest in the operation of the websites, in particular > for responding to enquiries; > for the provision of services and/or information intended for you > for the operation and administration of our website; > for the prevention and detection of fraud and criminal offences; or > to ensure network and data security, to the extent that these interests are consistent with applicable law and with the rights and freedom of the user; b) you have consented to the use for the specifically named, lawful purposes; or c) we are obliged to do so for legal reasons. § 5 Use of Google Analytics 5.1 We may use Google Analytics from Google Inc (1600 Amphitheatre Parkway Mountain View, CA 94043, USA, ‘Google’) for our websites. Google Analytics uses cookies. ‘Cookies‘ are small files that are stored on users’ computers. Different information can be stored within the cookies. A cookie is primarily used to store information about a user (or the device on which the cookie is stored) during or after their visit to an online service. According to Google, the information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. 5.2 We use Google Analytics to analyse and constantly improve the use of our websites. The statistics enable us to improve our services and make them more interesting for users. In special cases where personal data is transferred to the USA, Google is certified via the EU-US Privacy Shield. The legal basis for the use of Google Analytics is Art. 6 para. 1 sentence 1 lit. f GDPR, whereby our legitimate interest lies in the provision of interactive and user-friendly websites and their continuous optimisation. 5.3 The websites use Google Analytics in conjunction with the ‘_anonymiseIP()’ option. This means that IP addresses are processed in abbreviated form in order to prevent the transmission of personal data. The legal basis for this is Art. 6 para. 1 sentence 1 lit. f GDPR, whereby our legitimate interest lies in the provision of a user-friendly app offering. 5.4 You can request information from the third-party provider by post: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland. Here you will find the terms of use, the data protection overview and the privacy policy. 5.5 You can use a browser add-on to deactivate the Java script of Google Analytics in your browser. The add-on for deactivating Google Analytics is compatible with Chrome, Internet Explorer 11, Safari, Firefox and Opera. For the add-on to work, it must be loaded and executed correctly in your browser. § 6 Deletion of stored data Your stored personal data will be deleted, provided that there are no legal obligations to retain the data or the personal data are no longer required for their intended purpose in accordance with Art. 17 GDPR, in particular after revocation of any consent (see § 3 of this declaration). If there is a legally permissible purpose for the further storage of personal data, its processing will be restricted in accordance with Art. 18 GDPR by blocking this data and no longer processing it. This applies in particular to data that must be retained for legal reasons. §7 External links Typekit fonts from Adobe: On the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. GDPR. GDPR), we use external ‘Typekit’ fonts from the provider Adobe Systems Software Ireland Limited, 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Republic of Ireland. Adobe is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000TNo9AAG&status=Active). YouTube: We integrate the videos of the platform ‘YouTube’ of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy policy: https://www.google.com/policies/privacy/, opt-out: https://adssettings.google.com/authenticated. Google Maps: We integrate the maps of the ‘Google Maps’ service of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The processed data may include, in particular, IP addresses and location data of users, which, however, are not collected without their consent (usually as part of the settings of their mobile devices). The data may be processed in the USA. Privacy Policy: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated. Xing: Functions and content of the Xing service, offered by XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany, may be integrated into our online offering. This may include, for example, content such as images, videos or texts and buttons with which users can share content from this online offering within Xing. If the users are members of the Xing platform, Xing can assign the access to the above-mentioned content and functions to the users' profiles there. Privacy policy of Xing: https://www.xing.com/app/share?op=data_protection..LinkedIn Functions and content of the LinkedIn service, offered by inkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland, may be integrated into our online offering. This may include, for example, content such as images, videos or text and buttons with which users can share content from this online offering within LinkedIn. If the users are members of the LinkedIn platform, LinkedIn can assign the access to the above-mentioned content and functions to the users' profiles there. LinkedIn privacy policy: https://www.linkedin.com/legal/privacy-policy.. LinkedIn is registered under the is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active). Privacy policy: https://www.linkedin.com/legal/privacy-policy, Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.