top of page

Data protection policy

With the following data protection declaration we would like to explain to you which types of your personal data (hereinafter also referred to as "data") we process, for what purposes and to what extent. The data protection declaration applies to all processing of personal data carried out by us, both within the framework the provision of our services and in particular on our website as well as within external online presences, such as our social media profiles (hereinafter collectively referred to as "online offer"). With regard to the terms used, such as "processing" or "person responsible", we refer to the definitions in Art. 4 of the General Data Protection Regulation (GDPR).

 

As of June 15, 2021

 

Contents overview:

 

  • responsible

  • Overview of the processing

  • Safety measures

  • Transmission and disclosure of personal data

  • Data processing in third countries

  • Deletion of data

  • Your rights as a data subject

  • Change and update of the data protection declaration

  • contact

  • Contract conclusion and commercial services

  • Data collection on our website

    • Use of cookies

    • Website hosting and server log files

    • Web analysis and optimization

    • Plugins and embedded functions as well as content

  • Communication via messenger

  • Online conferences, meetings and webinars

  • Cloud services

  • Payment service provider

  • Newsletter and broad communication

  • Presence in social networks

 

 

Responsible:

Well book

Springbornstrasse 66

12487 Berlin, Germany

Email address: tassjabuch@gmail.com
Phone: + 49-170-6018215
Imprint: https://www.tassjabuch.com/de/impressum

 

Overview of the processing:

The following overview summarizes the types of data processed, the purposes of their processing and the categories of data subjects.

  • Types of processed data: inventory data (e.g. names, addresses), content data (e.g. text entries, photographs, videos), contact data (e.g. e-mail, telephone numbers), meta / communication data (e.g. device information, IP addresses), usage data ( e.g. websites visited, interest in content, access times), location data (data that indicate the location of the end user's device), contract data (e.g. subject of the contract, duration, customer category), payment data (e.g. bank details, invoices, payment history).

  • Purposes of processing: Provision of our online offer and user-friendliness, visitor activity evaluation, office and organizational procedures, direct marketing (by email), contact inquiries and communication, conversion measurement (measuring the effectiveness of marketing measures), range measurement (e.g. access statistics, recognition of returning visitors), security measures, Tracking (e.g. interest / behavior-based profiling, use of cookies), server monitoring and error detection, contractual services and services, administration and answering of inquiries.

  • Categories of data subjects: contractual partners, clients, interested parties, communication partners, users (e.g. website visitors, users of online services).

 

Safety measures:

We take appropriate technical and organizational measures in accordance with the legal requirements, taking into account the state of the art, the implementation costs and the type, scope, circumstances and purposes of processing as well as the different probabilities of occurrence and the extent of the threat to the rights and freedoms of natural persons to ensure a level of protection appropriate to the risk.

The measures include, in particular, securing the confidentiality, integrity and availability of data by controlling physical and electronic access to the data as well as the access, input, transfer, securing of availability and their separation.

SSL encryption (https): We use SSL encryption to protect your data transmitted via our online offer. You can recognize such encrypted connections by the prefix https: // in the address line of your browser.

 

Transmission and disclosure of personal data:

As part of our processing of personal data, it may happen that the data is transmitted to other bodies, companies, legally independent organizational units or persons or they are disclosed to them. The recipients of this data can include, for example, payment institutions in the context of payment transactions, service providers commissioned with IT tasks or providers of services and content that are integrated into a website. In such a case, we observe the legal requirements and, in particular, conclude corresponding contracts or agreements that serve to protect your data with the recipients of your data.

 

Data processing in third countries:

If we process data in a third country (i.e. outside the European Union (EU), the European Economic Area (EEA)) or the processing in the context of the use of third-party services or the disclosure or transmission of data to other persons, offices or companies takes place, this is only done in accordance with the legal requirements.

Subject to express consent or contractually or legally required transfer, we only process or have the data processed in third countries on the basis of special guarantees, such as contractual obligations through so-called standard protection clauses of the EU Commission, the existence of certifications or binding internal data protection regulations (Art. 44 bis 49 GDPR, information page of the EU Commission: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection_de)

 

Deletion of data:

The data processed by us will be deleted in accordance with the legal requirements as soon as the consent allowed for processing is revoked or other permissions are no longer applicable (e.g. if the purpose of processing this data is no longer applicable or is not required for the purpose).

If the data are not deleted because they are required for other and legally permissible purposes, their processing will be limited to these purposes. This means that the data will be blocked and not processed for other purposes. This applies, for example, to data that must be kept for commercial or tax reasons.

Further information on the deletion of personal data can also be found in the individual data protection information of this data protection declaration.

 

Your rights as a data subject:

As a data subject, you have various rights under the GDPR, which arise in particular from Articles 15 to 18 and 21 GDPR:

  • Right of objection: You have the right, for reasons that arise from your particular situation, to object at any time to the processing of your personal data, which is based on Art. 6 Para. 1 lit. e or f DSGVO takes place to object; this also applies to profiling based on these provisions. If the personal data concerning you are processed in order to operate direct mail, you have the right to object at any time to the processing of the personal data concerning you for the purpose of such advertising; this also applies to profiling insofar as it is connected to such direct advertising.

  • Right to withdraw consent: You have the right to withdraw your consent at any time.

  • Right to information: You have the right to request confirmation as to whether the data in question is being processed and to request information about this data as well as further information and a copy of the data in accordance with the legal requirements.

  • Right to correction: In accordance with the legal requirements, you have the right to request the completion of the data concerning you or the correction of incorrect data concerning you.

  • Right to deletion and restriction of processing: In accordance with the legal requirements, you have the right to request that the data relating to you be deleted immediately or, alternatively, to request that the processing of the data be restricted in accordance with the legal requirements.

  • Right to data portability: You have the right to receive data relating to you that you have provided to us in accordance with the legal requirements in a structured, common and machine-readable format or to request that it be transmitted to another person responsible.

  • Complaint to the supervisory authority: In accordance with the legal requirements, you also have the right to submit a complaint to a supervisory authority, in particular in the member state of your habitual residence, your place of work or the place of the alleged violation, if you are of the opinion that the processing of your personal data violates the GDPR.

 

Change and update of the data protection declaration:

We ask you to inform yourself regularly about the content of our data protection declaration. We will adapt the data protection declaration as soon as the changes to the data processing carried out by us make this necessary. We will inform you as soon as the changes require your participation (e.g. consent) or other individual notification.

If we provide addresses and contact information of companies and organizations in this data protection declaration, please note that the addresses can change over time and ask you to check the information before contacting us.

 

Contact:

When you contact us (e.g. via the contact form, email, telephone or via social media), the details of the inquiring person are processed, insofar as this is necessary to answer the contact inquiries and any requested measures.

The answering of contact inquiries in the context of contractual or pre-contractual relationships takes place in order to fulfill our contractual obligations or to answer (pre) contractual inquiries and otherwise on the basis of the legitimate interests in answering the inquiries.

 

Contract conclusion and commercial services:

We process the data of our clients as well as interested parties and other clients or contractual partners (uniformly referred to as "clients") in order to be able to provide them with our services, for the purposes of the administrative tasks associated with these services and the business organization.

The processed data, the type, the scope, the purpose and the necessity of their processing are determined by the underlying contractual and client relationship.

The information required is marked as such in the context of the conclusion of the order, booking or comparable contract and includes the information required for the provision of services and billing as well as contact information in order to be able to hold any discussions.

We only pass on the data of the contractual partners to third parties within the framework of applicable law to the extent that this is necessary for the aforementioned purposes or to fulfill legal obligations or with the consent of the contractual partners (e.g. to tax and legal advisors, payment service providers or tax authorities). The contractual partners will be informed about other forms of processing, e.g. for marketing purposes, within the scope of this data protection declaration.

We delete the data after 4 years, unless the data has to be archived for legal reasons (e.g. for tax purposes usually 10 years).

Insofar as we use third-party providers or platforms to provide our services, the terms and conditions and data protection notices of the respective third-party providers or platforms apply in the relationship between the users and the providers.

 

Data collection on our website:

 

Use of cookies

This website uses cookies and similar technologies, which are small files or short texts that are downloaded to a device when a visitor accesses a website or app. A cookie is primarily used to store information about a user during or after their visit to an online offer and can, for example, contain data from websites or domains they have visited. Wix.com is the hosting platform on which we operate this website. For information on how to view the cookies placed on your device, see About the Cookies Wix.com uses .

 

Revocation and objection (opt-out): Regardless of whether your data is processed by cookie technologies on the basis of consent or legal permission, you have the option at any time to revoke your consent or to process your data using cookie technologies to object (collectively referred to as "opt-out").

You can first declare your objection using the settings of your browser, e.g. by deactivating the use of cookies (this can also restrict the functionality of our online offer).

You can object to the use of cookies for online marketing purposes using a variety of services, especially in the case of tracking, on the US website http://www.aboutads.info/choices/ or the EU website http: //www.youronlinechoices.com/ or generally on http://optout.aboutads.info .

 

Website hosting and server log files:

In order to be able to provide our online offer safely and efficiently, we use the services of Wix.com as a website hosting provider, from whose servers (or servers managed by you) the online offer can be accessed. For these purposes, we can use infrastructure and platform services, computing capacity, storage space and database services as well as security services and technical maintenance services.

The data processed as part of the provision of the hosting offer can include all information relating to the users of our online offer that is generated in the context of use and communication. This regularly includes the IP address, which is necessary in order to be able to deliver the content of online offers to browsers, and all entries made within our online offer or from websites.

Collection of access data and log files: We (or Wix.de) collect data on every access to the server (so-called server log files). The server log files can include the address and name of the websites and files accessed, the date and time of the access, the amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page) and, as a rule, IP Addresses and the requesting provider belong.

The server log files can be used on the one hand for security purposes, e.g. to avoid overloading the server (especially in the case of abusive attacks, so-called DDoS attacks) and on the other hand to ensure the load on the server and its stability.

Wix.com requires the data to operate this website and to protect and improve its platform and services. Wix analyzes the data in a depersonalized form.

 

Used services and service providers:

 

Web analysis and optimization:

This website collects personal data that serve as the basis for our website analytics. This includes:

  • Information about your browser, your network and your device

  • Websites that you accessed before visiting this website

  • Your IP address

 

This information may also include details about your use of this website, including:

  • Clicks

  • Internal links

  • Pages visited

  • Scroll

  • Searches

  • time stamp

 

We share this information with Wix, our website analytics provider, to learn more about the traffic and activity on this website.

 

Used services and service providers:

 

Plugins and embedded functions as well as content:

We incorporate functional and content elements into our online offer that are obtained from the servers of their respective providers (hereinafter referred to as "third-party providers"). These can be graphics, videos or social media buttons as well as posts (hereinafter uniformly referred to as "content").

The integration always presupposes that the third-party providers of this content process the IP address of the user, since without the IP address they would not be able to send the content to their browser. The IP address is therefore required for the display of this content or functions. We strive to only use content whose respective providers only use the IP address to deliver the content. Third-party providers can also use so-called pixel tags (invisible graphics, also known as "web beacons") for statistical or marketing purposes. The "pixel tags" can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information can also be stored in cookies on the user's device and contain, among other things, technical information on the browser and operating system, the websites to be referred to, the time of visit and other information on the use of our online offer, as well as being linked to such information from other sources.

 

Used services and service providers:

  • Google Fonts: We integrate the fonts ("Google Fonts") from the provider Google, whereby the user data is used solely for the purpose of displaying the fonts in the user's browser. The integration is based on our legitimate interests in a technically secure, maintenance-free and efficient use of fonts, their uniform representation and taking into account possible licensing restrictions for their integration. Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA; Website: https://fonts.google.com/ ; Data protection declaration: https://policies.google.com/privacy .

  • Adobe Fonts: We integrate the fonts ("Adobe Fonts") from the provider Adobe, whereby the user data is used solely for the purpose of displaying the fonts in the user's browser. The integration is based on our legitimate interests in a technically secure, maintenance-free and efficient use of fonts, their uniform representation and taking into account possible licensing restrictions for their integration. Service provider: Adobe Systems Software Ireland Limited, 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Republic of Ireland, parent company: Adobe, 345 Park Avenue, San Jose, CA 95110, USA; Website: https://fonts.adobe.com/ ; Data protection declaration: https://www.adobe.com/privacy/policies/adobe-fonts.html .

  • Instagram plugins and buttons: Instagram plugins and buttons - this may include, for example, content such as images, videos or text and buttons with which users can share content from this online offer within Instagram. Service provider: https://www.instagram.com , Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA; Website: https://www.instagram.com ; Data protection declaration: http://instagram.com/about/legal/privacy .

  • Facebook plugins and content: Facebook social plugins and content - This may include, for example, content such as images, videos or texts and buttons with which users can share content from this online offer within Facebook. The list and the appearance of the Facebook social plugins can be viewed here: https://developers.facebook.com/docs/plugins/ ; Service provider: https://www.facebook.com , Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland, parent company: Facebook, 1 Hacker Way, Menlo Park, CA 94025, USA; Website: https://www.facebook.com ; Data protection declaration: https://www.facebook.com/about/privacy ; Opposition option (opt-out): Settings for advertisements: https://www.facebook.com/settings?tab=ads .

 

Communication via Messenger:

We use messenger services for communication purposes and therefore ask you to observe the following information on the functionality of the messenger, on encryption, on the use of the metadata of communication and on your options for objection.

You can also contact us in alternative ways, e.g. by phone or email. Please use the contact options provided to you or the contact options given within our online offer.

In the case of end-to-end encryption of content (ie the content of your message and attachments), we point out that the communication content (ie the content of the message and attached images) is encrypted from end to end. This means that the content of the messages cannot be viewed, not even by the messenger provider themselves. You should always use the latest version of the messenger with activated encryption to ensure that the message content is encrypted.

However, we also point out to our communication partners that the messenger providers do not see the content, but can find out that and when communication partners are communicating with us as well as technical information about the device used by the communication partner and, depending on the settings of their device, location information ( so-called metadata).

Reservation of reference to other communication channels: We would like to point out that for reasons of your security we reserve the right not to answer inquiries via Messenger. This is the case if, for example, internal contract matters require special confidentiality or a response via the messenger does not meet the formal requirements. In such cases, we refer you to more appropriate communication channels.

 

Used services and service providers:

 

Online conferences, meetings and webinars:

We use platforms and applications from other providers (hereinafter referred to as “third-party providers”) for the purpose of holding video and audio conferences, webinars and other types of video and audio meetings. When selecting third-party providers and their services, we observe the legal requirements.

In this context, data of the communication participants are processed and stored on the servers of third-party providers, insofar as they are part of communication processes with us. This data can include, in particular, registration and contact data, visual and vocal contributions as well as entries in chats and shared screen content.

If users are referred to the third-party providers or their software or platforms in the context of communication, business or other relationships with us, the third-party providers can process usage data and metadata that are processed by them for security purposes, service optimization or marketing purposes. We therefore ask you to observe the data protection information of the respective third party provider.

 

Used services and service providers:

 

Cloud services:

We use software services (so-called "cloud services", also known as "software as a service") that are accessible via the Internet and run on the servers of their providers for the following purposes: accounting, invoicing, customer management, document storage and management, calendar management, E. - Mail, spreadsheets and presentations, exchange of documents, content and information with specific recipients or publication of websites, forms or other content and information as well as chats and participation in audio and video conferences.

In this context, personal data can be processed and stored on the servers of the provider, insofar as they are part of communication processes with us or otherwise processed by us, as set out in this data protection declaration. This data can include, in particular, master data and contact details of the users, data on transactions, contracts, other processes and their content. The cloud service providers also process usage data and metadata, which they use for security purposes and for service optimization.

If we use the cloud services to provide forms or other documents and content for other users or publicly accessible websites, the providers can place cookies on the users' devices for the purposes of web analysis or to change user settings (e.g. in the case of media control) remember, save.

Sending and hosting of e-mails: The cloud services we use also include sending, receiving and storing e-mails. For these purposes, the addresses of the recipients and senders as well as other information relating to the sending of emails (e.g. the providers involved) and the content of the respective emails are processed. The aforementioned data can also be processed for the purpose of recognizing SPAM. We ask you to note that emails on the Internet are generally not sent in encrypted form. As a rule, e-mails are encrypted on the transport route, but (if no so-called end-to-end encryption method is used) not on the servers from which they are sent and received. We cannot therefore accept any responsibility for the transmission path of the emails between the sender and the recipient.

 

Used services and service providers:

 

Payment service provider:

As part of contractual relationships, we offer our contractual partners efficient and secure payment options and use other payment service providers in addition to banks and credit institutions (collectively, "payment service providers").

The data processed by the payment service provider includes inventory data such as name and address, bank data such as account numbers or credit card numbers, passwords, TANs and checksums as well as contract, sum and recipient-related information. The information is required to carry out the transactions. However, the data entered will only be processed and stored by the payment service providers. This means that we do not receive any account or credit card-related information, but only information with confirmation or negative information about the payment. Under certain circumstances, the data will be transmitted by the payment service provider to credit reporting agencies. The purpose of this transmission is to check identity and creditworthiness. For this purpose, we refer to the terms and conditions and the data protection information of the payment service providers.

For payment transactions, the terms and conditions and the data protection information of the respective payment service provider apply, which can be called up within the respective websites or transaction applications. We refer to these for the purpose of further information and assertion of rights of revocation, information and other data subjects.

 

Used services and service providers:

 

Newsletter and broad communication:

We send newsletters, e-mails and other electronic notifications (hereinafter "newsletters") only with the consent of the recipient or legal permission. If the content of the newsletter is specifically described when registering for the newsletter, they are decisive for the consent of the user. In addition, our newsletters contain information about our services and us.

In order to register for our newsletters, it is generally sufficient to provide your email address. However, we ask you to also provide a name so that we can address you personally in the newsletter.

We use rapidmail as a service provider for sending emails based on our legitimate interests in an efficient and secure shipping system.

Double opt-in procedure: The registration for our newsletter takes place in a so-called double opt-in procedure. In other words, after registering you will receive an email asking you to confirm your registration. This confirmation is necessary so that nobody can register with someone else's email address. The registrations for the newsletter are logged in order to be able to prove the registration process in accordance with the legal requirements. This includes the storage of the registration and confirmation times as well as the IP address. Changes to your data stored by the shipping service provider are also logged.

Deletion and restriction of processing: We can save the unsubscribed email addresses for up to three years on the basis of our legitimate interests before we delete them in order to be able to prove a previously given consent. The processing of this data is limited to the purpose of a possible defense against claims. An individual request for deletion is possible at any time, provided that the previous existence of consent is confirmed at the same time. In the event of obligations to permanently observe contradictions, we reserve the right to store the e-mail address in a blacklist for this purpose alone.

Success measurement: The newsletters contain a so-called "web beacon", ie, a pixel-sized file that is retrieved from our server when the newsletter is opened or, if we use a shipping service provider, from its server Information such as information about the browser and your system, as well as your IP address and the time of access, are collected.

This information is used to technically improve our newsletter on the basis of the technical data or the target groups and their reading behavior based on their retrieval locations (which can be determined with the help of the IP address) or the access times. This analysis also includes determining whether the newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to the individual newsletter recipients. However, it is neither our endeavor nor, if used, that of the shipping service provider to observe individual users. Rather, the evaluations serve us to recognize the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.

The evaluation of the newsletter and the measurement of success take place, subject to the express consent of the users, on the basis of our legitimate interests for the purpose of using a user-friendly and secure newsletter system that serves both our business interests and the expectations of the users.

A separate revocation of the success measurement is unfortunately not possible, in this case the entire newsletter subscription must be canceled or contradicted.

Opposition option (opt-out): You can cancel the receipt of our newsletter at any time, ie revoke your consent or object to further receipt. You will find a link to cancel the newsletter at the end of each newsletter and you can also use one of the contact options given above, preferably e-mail.

 

Used services and service providers:

 

Presence in social networks:

We maintain an online presence within social networks in order to communicate with the users active there and to offer information about us there.

We would like to point out that user data can be processed outside of the European Union. This can result in risks for the user because it could make it more difficult to enforce the users' rights, for example. With regard to US providers who are certified under the Privacy Shield or who offer comparable guarantees of a secure level of data protection, we would like to point out that they undertake to comply with EU data protection standards.

Furthermore, the data of the users within social networks are usually processed for market research and advertising purposes. For example, usage profiles can be created on the basis of user behavior and the interests of the user. The usage profiles can in turn be used, for example, to place advertisements inside and outside the networks that presumably correspond to the interests of the users. For these purposes, cookies are usually stored on the user's computer, in which the usage behavior and the interests of the user are stored. Furthermore, data can be stored in the usage profiles regardless of the devices used by the users (especially if the users are members of the respective platforms and are logged in to them).

For a detailed description of the respective forms of processing and the possibilities of objection (opt-out), we refer to the data protection declarations and information provided by the operators of the respective networks.

In the case of requests for information and the assertion of rights of data subjects, we point out that these can be most effectively asserted with the providers. Only the providers have access to the data of the users and can take appropriate measures and provide information. If you still need help, you can contact us.

 

Used services and service providers:

bottom of page