(According General Data Protection Regulation)
With the following information, we would like to give an insight in how we handle your personal data, related to using our website and using our services for purchasing and shipping goods. We will also explain what your rights are with respect to privacy etc. How we handle data, and what data we handle, depends on the services you use from us.
Reference is made to the General Data Protection Regulation, effective as of 25th of May 2018 (European Directive: 95/46/EC). The directive will be referenced to as GDPR in the following text.
1. Responsible, Art. 4 Section 7 GDPR
Responsible for handling your data, with respect to Art 4. Section 7 of the GDPR is:
K&L Wall Art GmbH
Buckower Chaussee 114
K&L Wall Art GmbH
Further details can be found in Imprint.
2. What are „Personal Data“?
Personal Data comprises all information about you as a person, which can be traced to your identity, such as your name, adress, phone number. Information, which cannot be traced to your identity is not part of Personal Data.
3. Scope of data collection, processing and use
a) Contact by mail or contact form
When you send us an email, or use the contact form, the data you supplied (such as mailadress, name, telephone number) will be saved on our server in order to answer your question or request. This data will be deleted when retaining the data is no longer required, or processing will be restricted when statutory storage requirements apply.
b) Data collection when visiting our website
When using our website for informational purposes only, thus without registration as customer or newsletter user, data will be collected which is transferred from your browser to our server. When you visit our site, the following data is collected (for technical reasons to supply you with a stable and safe website):
- - IP-Adress
- - Date and time of your request/visit
- - Timezone difference with Greenwich Mean Time (GMT)
- - Content of your request (i.e. your request to visit the site/pages)
- - Access status/http status
- - Transmitted data to and from our server
- - Website from which the request comes
- - Browser
- - Operating System and version
- - Language and version of your browser
Besides the aforementioned data, when visiting our site, cookies will be saved on your device. A cookie is a small text file which your browser uses to remember already visited sites, and to make the internet experience faster and more user friendly. In no way can a cookie install a program or infect your device with a virus.
In our online shop, cookies contain data about the contents of your shopping basket (if any), this can be displayed the next time you visit our site. The already existing data in the cookie will be used for next visits, also when you place an order, the cookie will remember the adress details. Cookies will expire (i.e. will be deleted automatically) after 6 months.
You can setup you browser to not accept cookies. Please check the instruction of your browser on how to do this. Not accepting cookies may lead to the site not performing correctly on your device.
When you order goods at our website you have to register. At registration we will ask for: your name, surname, adress data and a mailadress. The other data are optional. The data we ask for are only required for- and will only be used to process your order and to keep you up to date of the status of your order.
When applying for our newsletter, your name and mailadress will be saved (after explicit permission from you) on our server. This data can be used to send marketing related email messages (newsletters). You can unsubscribe from our newsletter at any time.
f) Analytic - Tools
This website uses Google Analytics, a web analysis service from Google-Inc. („Google“). Google Analytics uses so called Cookies: small text files which are stored on your device, enabling analysis of your site usage.
The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, if IP anonymisation is activated on this website, your IP address will be shortened by Google beforehand within member states of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address provided by Google Analytics as part of Google Analytics will not be merged with other Google data. You can prevent the storage of cookies by a corresponding setting of your browser software; however, please note that if you do this, you may not be able to use all the features of this website to the fullest extent possible. In addition, you may prevent the collection by Google of the data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google by downloading the browser plug-in, please search for „Google Analytics Opt Out Browser Add-on“ and install.
This website uses technology from Episerver Inc., 542 Amherst Street, Route 101A, Nashua, NH 03063, USA (https://www.episerver.com/) for marketing and optimization purposes. These data enable us to tailor our website to your interests and to offer you a personalized service. This is done by an analysis of your user behavior based on the products for which you are already interested in our shop. We store your e-mail address. Additional personal data will not be stored here. Data will not be transferred to third parties. These data are collected using so-called "cookies". These cookies are small text files that are stored on your computer or mobile device. These cookies enable us to recognize your browser when visiting our website again.
If you do not want to use our service for a website that is personalized for you, you either delete the cookies stored by you after visiting our website or you can set your Internet browser so that generally no cookies can be stored on your computer.
Facebook Social Plug-in
Bing Ads Conversion Tracking
Bing Ads Conversion Tracking works identical to Google Adwords Tracking, a harmless cookie is placed on your device to track if you have arrived on our site by clicking on a Bing Advertisement from Wall-Art. This method of tracking does not contain any personal data. If you do not want tracking cookies to be placed on your device, you can set up your browser in not doing so. Keep in mind that reduced functionality of the site can be a result of adjusting your browser.
Trusted Shops Logo
To display our Trusted Shops quality seal and any collected reviews and to offer the Trusted Shops products for buyers after placing an order, the Trusted Shops Trust Badge is included on our website.
This serves to safeguard our legitimate interests, which predominate in the context of a weighing up of interests, in the optimal marketing of our offer. The Trustbadge and the services advertised are an offer of Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne.
When the Trustbadge is called, the Web server automatically stores a so-called server log file, which can be used, for example. Your IP address, date and time of the retrieval, transferred amount of data and the requesting provider (access data) contains and documented the call. These access data will not be evaluated and automatically overwritten within seven days after the end of your page visit.
Further personal data are only transferred to Trusted Shops, as far as you decide after the conclusion of an order for the use of Trusted Shops products or have already registered for the use. In this case, the contractual agreement between you and Trusted Shops applies.
Voucher offers from Sovendus GmbH
If you are looking for a voucher offer of Sovendus GmbH, Moltkestr. 11, 76133 Karlsruhe (Sovendus) and click on the coupon banner, we will send the address, name and your e-mail address to Sovendus for the preparation of the voucher in encrypted form (Art. 6 (1) b, f GDPR). Previously, the IP address is already transmitted, used by Sovendus exclusively for data security purposes and usually anonymized after seven days. In addition, for billing purposes we will pseudonymize order number, order value with currency, session ID, coupon code and timestamp to Sovendus.
4. Purpose of processing and legal basis
We process personal data in accordance with the provisions of the European Data Protection Regulation (GDPR).
a) For the fulfillment of contractual obligations (Article 6 (1) (b) GDPR)
The processing of data takes place to provide our contractual services or to carry out pre-contractual measures, which are made on request. In this way, we use the data provided by you, such as the name of the address and any other contact details, in order to be able to deliver products ordered to you and settle our services to you. The purpose of the respective measure depends primarily on the specific service ordered. Further details on the purpose of data processing can therefore be found in the relevant contract documents and terms and conditions.
b) As part of the balance of interests (Article 6 (1) (f) GDPR)
Beyond the use of the actual fulfillment of the contract, it may be necessary to process your data for the protection of legitimate interests of us or third parties. For example, we use a number of analysis tools (see above) on our website to examine the usage behavior in our online shop and to further improve it in the interest of our customers.
- - Ensuring the security and stability of our system (see 3 b above) and c))
- - Analysis of the use of our website
c) On the basis of your consent (Article 6 (1) a) GDPR)
For specific purposes (such as sending our newsletter) we need your consent. Processing will only take place if you have expressly granted this consent. You can revoke your consent at any time. The revocation does not affect the lawfulness of the processing before receipt of the revocation.
5. Third Party
When you order goods from us, we will transfer your delivery data to transport service providers who bring the goods to you.
6. Transmission of data to a third country
To recipients based outside the EU and the EEA, we only provide data with your express consent or to the extent required by law.
7. Duration of storage and criteria for determining the duration
Basically, we store your data only as long as the storage is necessary for the specific purpose. You can delete all or part of your user account data at any time.
- - We delete data on orders after execution of the order and expiry of the legal warranty period. At the latest 3 years after execution of the order, please note:
- - When in conflict with commercial and fiscal retention requirements, data will be deleted.
- - Data to prove claims from the contractual relationship must be maintained within the regular limitation period (3 years).
As far as a deletion according to the above sentence does not take place, the data will be blocked for other usage.
8. Security of your data
We take all reasonable technical and organizational measures to ensure the protection of your data. All communication via our web forms is encrypted and therefore protected against unauthorized readout in the best possible way.
9. Your privacy rights
As "data subject" you have the right to information according to Art. 15 GDPR, the right to correction according to Art. 16 GDPR, the right to cancellation under Art. 17 GDPR, the right to restriction of processing according to Art. 18 GDPR, the Right to object to Art. 21 GDPR and the right of data transferability from Art. 20 GDPR. With regard to the right to information and the right to cancel, local restrictions may apply. You also have the right to complain to the responsible data protection authority (Article 77 GDPR i.V.), which in our case is the Berlin Commissioner for Data Protection and Freedom of Information.
10. Obligation to provide data
You are not required by law to provide us with data. However, if you wish to order goods, subscribe to the newsletter or participate in promotions, you must provide us with the information needed to provide our services. Without this data, a use of our services is not possible, and we can not conclude a contract with you.
11. Automated decision making and profiling
An automated decision-making and / or profiling within the meaning of Art. 22 section. 1 and 4 GDPR does not take place.
12. Privay and Data Representative
If you have any questions or comments regarding data protection, please send an e-mail to our data protection officer, Mr. Thorsten Müller - Winterhager, at [email protected]
V 1.0 Berlin April 2018