PRIVACY POLICY
Datenschutzerklärung
1. Data Protection at a Glance
General Information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data refers to any information that can be used to identify you personally.
For detailed information about data protection, please refer to the Privacy Policy set out below.
Data Collection on This Website
Who is responsible for data collection on this website?
The data processing on this website is carried out by the website operator. You can find the operator’s contact details in the section “Information about the Data Controller” of this Privacy Policy.
How do we collect your data?
Some data is collected when you voluntarily provide it to us, for example by entering information into a contact form.
Other data is collected automatically or with your consent when you visit this website through our IT systems. This mainly includes technical data such as:
-
Your internet browser
-
Your operating system
-
The date and time you accessed the website
This data is collected automatically as soon as you access the website.
What do we use your data for?
Some of the data is collected to ensure that the website is provided without technical errors.
Other data may be used to analyze user behavior.
If contracts can be concluded or initiated through this website, the transmitted data will also be processed for contract offers, orders, or other service requests.
What rights do you have regarding your data?
You have the right to receive, free of charge, information about the origin, recipients, and purpose of your stored personal data at any time.
You also have the right to request the correction or deletion of your personal data.
If you have given your consent to data processing, you may withdraw this consent at any time with effect for the future.
Under certain circumstances, you also have the right to request the restriction of the processing of your personal data.
Furthermore, you have the right to lodge a complaint with the competent supervisory authority.
If you have any questions regarding data protection or your personal data, you are welcome to contact us at any time.
Analytics Tools and Third-Party Services
When you visit this website, your browsing behavior may be analyzed for statistical purposes.
This is primarily carried out using analytics tools.
Detailed information about these analytics tools can be found in the following Privacy Policy.
2. Hosting
Wix
This website is hosted by Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel (hereinafter referred to as “Wix”).
Wix is a platform used to create and host websites. When you visit our website, Wix collects and processes certain information, including visitor behavior, traffic sources, visitor regions, and visitor statistics.
Wix also stores cookies on your browser that are necessary for the proper display of the website and to ensure its security (essential cookies).
The data collected through Wix may be stored on servers located in various countries around the world, including the United States.
For more information, please refer to Wix’s Privacy Policy:
https://www.wix.com/about/privacy
The transfer of data to the United States and other third countries is based on the European Commission’s Standard Contractual Clauses or comparable safeguards pursuant to Article 46 of the GDPR.
More information is available here:
https://www.wix.com/about/privacy-dpa-users
The use of Wix is based on Article 6(1)(f) GDPR. We have a legitimate interest in ensuring the reliable presentation and secure operation of our website.
Where consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and, where applicable, Section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG), insofar as the consent includes the storage of cookies or access to information stored on the user’s device (for example, device fingerprinting). Consent may be withdrawn at any time with future effect.
Wix is certified under the EU–U.S. Data Privacy Framework (DPF).
The Data Privacy Framework is an agreement between the European Union and the United States that ensures compliance with European data protection standards for data processing activities carried out in the United States.
Every company certified under the DPF is committed to complying with these data protection standards.
More information is available at:
https://www.dataprivacyframework.gov/participant/5626
3. General Information and Mandatory Disclosures
Data Protection
The operators of this website take the protection of your personal data very seriously.
We treat your personal data confidentially and in accordance with the applicable data protection laws and this Privacy Policy.
When you use this website, various types of personal data are collected.
Personal data is any information that can be used to identify you personally.
This Privacy Policy explains what data we collect, how we use it, and for what purpose.
Please note that data transmission over the Internet (for example, communication via email) may be subject to security vulnerabilities. Complete protection of data against access by third parties cannot be guaranteed.
3. General Information and Mandatory Disclosures
Information about the Data Controller
The controller responsible for data processing on this website is:
Yesenia Delgado-Matz
Eiderblick 6
24794 Borgstedt
Germany
Email: info@thewithinspace.com
The data controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data (such as names, email addresses, or similar information).
Data Retention
Unless a more specific retention period has been stated in this Privacy Policy, your personal data will remain with us until the purpose for processing the data no longer applies.
If you request the deletion of your data or withdraw your consent to data processing, your personal data will be deleted unless we are legally required or otherwise entitled to retain it (for example, due to tax or commercial retention obligations).
In such cases, the data will be deleted once the legal retention period has expired.
Legal Basis for Data Processing
If you have given your consent, we process your personal data on the basis of Article 6(1)(a) GDPR and, where special categories of personal data are involved, Article 9(2)(a) GDPR.
Where you have expressly consented to the transfer of personal data to third countries, processing is also carried out in accordance with Article 49(1)(a) GDPR.
If you have consented to the storage of cookies or access to information stored on your device (for example, through device fingerprinting), processing is also based on Section 25(1) TDDDG. Your consent may be withdrawn at any time.
Where your personal data is necessary for the performance of a contract or to take steps prior to entering into a contract, we process your data pursuant to Article 6(1)(b) GDPR.
We also process your data where necessary to comply with a legal obligation in accordance with Article 6(1)(c) GDPR.
Furthermore, processing may be carried out on the basis of our legitimate interests pursuant to Article 6(1)(f) GDPR.
The applicable legal basis for each specific processing activity is explained in the relevant sections of this Privacy Policy.
Recipients of Personal Data
As part of our business activities, we work with various external service providers.
In some cases, it is necessary to transfer personal data to these external parties.
We only disclose personal data when:
-
it is necessary for the performance of a contract,
-
we are legally obliged to do so,
-
we have a legitimate interest under Article 6(1)(f) GDPR, or
-
another legal basis permits the transfer.
When using data processors, we only transfer personal data on the basis of a valid Data Processing Agreement (DPA).
Where joint processing takes place, a Joint Controller Agreement is concluded.
Withdrawal of Your Consent
Many data processing activities are only possible with your explicit consent.
You may withdraw your consent at any time with future effect.
The lawfulness of any processing carried out before the withdrawal remains unaffected.
3. General Information and Mandatory Disclosures (continued)
Right to Object to Data Processing (Article 21 GDPR)
If your personal data is processed on the basis of Article 6(1)(e) or Article 6(1)(f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data. This also applies to any profiling based on these provisions.
The legal basis on which the processing is carried out can be found in this Privacy Policy.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves the establishment, exercise, or defense of legal claims (objection pursuant to Article 21(1) GDPR).
Objection to Direct Marketing
If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing.
This also applies to profiling insofar as it is related to direct marketing.
If you object, your personal data will no longer be used for direct marketing purposes (Article 21(2) GDPR).
Right to Lodge a Complaint with the Supervisory Authority
In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, particularly in the Member State of their habitual residence, place of work, or the place of the alleged infringement.
This right exists without prejudice to any other administrative or judicial remedies.
Right to Data Portability
You have the right to receive the personal data that we process automatically based on your consent or in fulfillment of a contract in a structured, commonly used, and machine-readable format.
You also have the right to request that this data be transmitted directly to another controller where technically feasible.
Right of Access, Rectification, and Erasure
Within the framework of the applicable legal provisions, you have the right at any time to obtain free information about your stored personal data, its origin, recipients, and the purpose of its processing.
You also have the right to request the correction or deletion of your personal data.
If you have any questions regarding your personal data, you may contact us at any time.
Right to Restrict Processing
You have the right to request the restriction of the processing of your personal data.
You may exercise this right at any time by contacting us.
The right to restrict processing applies in the following situations:
-
If you contest the accuracy of your personal data stored by us, we generally require time to verify its accuracy. During this verification period, you have the right to request the restriction of processing.
-
If the processing of your personal data is unlawful, you may request the restriction of processing instead of deletion.
-
If we no longer need your personal data, but you require it for the establishment, exercise, or defense of legal claims, you have the right to request the restriction of processing instead of deletion.
-
If you have objected to processing pursuant to Article 21(1) GDPR, your interests and ours must be balanced. Until it has been determined whose interests prevail, you have the right to request the restriction of processing.
If processing has been restricted, your personal data—apart from being stored—may only be processed with your consent or for the establishment, exercise, or defense of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.
SSL/TLS Encryption
For security reasons and to protect the transmission of confidential content, such as inquiries or orders you send to us, this website uses SSL or TLS encryption.
You can recognize an encrypted connection when your browser’s address bar changes from “http://” to “https://” and displays a padlock icon.
When SSL or TLS encryption is enabled, the data you transmit to us cannot be read by third parties.
Objection to Promotional Emails
The use of contact information published as part of our legal notice (Imprint) for sending unsolicited advertising or informational material is hereby expressly prohibited.
The operators of this website expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as spam emails.
4. Data Collection on This Website
Cookies
Our website uses so-called cookies. Cookies are small data files that do not cause any damage to your device.
They are stored either temporarily for the duration of your visit (session cookies) or permanently on your device (persistent cookies). Session cookies are automatically deleted once you leave our website. Persistent cookies remain on your device until you delete them yourself or they are automatically removed by your web browser.
Cookies may be set by us (first-party cookies) or by third-party providers (third-party cookies). Third-party cookies enable the integration of certain third-party services into our website (for example, payment processing services).
Cookies serve various purposes. Many cookies are technically necessary because certain website functions would not work without them (for example, shopping cart functionality or displaying videos). Other cookies may be used to analyze user behavior or for marketing purposes.
Cookies that are necessary for carrying out electronic communication, providing specific functions requested by you, or optimizing the website (essential cookies) are stored on the basis of Article 6(1)(f) GDPR, unless another legal basis applies.
The website operator has a legitimate interest in storing essential cookies to ensure the technically error-free and optimized provision of its services.
Where consent has been requested for the storage of cookies or comparable technologies, processing is based exclusively on your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be withdrawn at any time.
You can configure your browser to notify you whenever cookies are being set, allow cookies only in individual cases, exclude the acceptance of cookies in certain cases or in general, and activate the automatic deletion of cookies when closing your browser.
Please note that disabling cookies may limit the functionality of this website.
If additional cookies or third-party services are used on this website, they are described in the relevant sections of this Privacy Policy.
Contact Form
If you contact us using the contact form, the information you provide, including the contact details entered in the form, will be stored for the purpose of processing your request and any follow-up questions.
We will not share this information without your consent.
The processing of this data is based on Article 6(1)(b) GDPR, where your inquiry is related to the performance of a contract or pre-contractual measures.
In all other cases, processing is based on our legitimate interest in efficiently handling inquiries addressed to us (Article 6(1)(f) GDPR) or on your consent (Article 6(1)(a) GDPR) where applicable.
The data you enter into the contact form will remain with us until you request its deletion, withdraw your consent, or the purpose for storing the data no longer applies (for example, after your request has been fully processed).
Mandatory legal retention periods remain unaffected.
Contact by Email or Telephone
If you contact us by email or telephone, your inquiry, including all personal data arising from it (such as your name and the content of your request), will be stored and processed for the purpose of handling your inquiry.
We do not pass this information on to third parties without your consent.
The processing of this data is based on Article 6(1)(b) GDPR, if your inquiry is related to a contract or pre-contractual measures.
In all other cases, processing is based on our legitimate interest in responding effectively to your inquiry (Article 6(1)(f) GDPR) or on your consent (Article 6(1)(a) GDPR) where applicable.
The data transmitted through your inquiry will remain with us until you request its deletion, withdraw your consent, or the purpose for storing the data no longer applies.
Statutory retention obligations remain unaffected.
5. Social Media
This website integrates elements of the Facebook social network.
The provider of this service is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.
According to Meta, the data collected may also be transferred to the United States and other third countries.
An overview of Facebook’s social plugins is available here:
https://developers.facebook.com/docs/plugins/
When the Facebook social media element is active, a direct connection is established between your device and Facebook’s servers. As a result, Facebook receives information that you have visited this website using your IP address.
If you click the Facebook “Like” button while logged into your Facebook account, you can link the content of this website to your Facebook profile. This allows Facebook to associate your visit to this website with your user account.
Please note that, as the operator of this website, we have no knowledge of the content of the transmitted data or how Facebook uses it.
For more information, please refer to Facebook’s Privacy Policy:
https://www.facebook.com/privacy/policy/
The use of this service is based on your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be withdrawn at any time.
Where personal data is collected on our website and forwarded to Facebook, we and Meta Platforms Ireland Limited are jointly responsible for this data processing pursuant to Article 26 GDPR.
This joint responsibility is limited solely to the collection and transfer of data to Facebook. Any subsequent processing carried out by Facebook is not part of this joint responsibility.
Further information regarding the joint processing agreement is available at:
https://www.facebook.com/legal/controller_addendum
Meta is certified under the EU–U.S. Data Privacy Framework (DPF).
More information is available at:
https://www.dataprivacyframework.gov/
This website includes features of the Instagram service.
These features are provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.
When the Instagram element is active, a direct connection is established between your device and Instagram’s servers.
Instagram receives information that you have visited this website.
If you are logged into your Instagram account, clicking the Instagram button allows you to link content from this website to your Instagram profile.
This enables Instagram to associate your visit to this website with your user account.
Please note that we, as the website operator, have no knowledge of the content of the transmitted data or how Instagram uses it.
The use of this service is based on your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG.
You may withdraw your consent at any time.
Where personal data is collected and transmitted to Facebook or Instagram, we and Meta Platforms Ireland Limited act as joint controllers pursuant to Article 26 GDPR.
This joint responsibility is limited to the collection and transmission of data.
Further information is available here:
https://www.facebook.com/legal/controller_addendum
Instagram’s Privacy Policy can be found here:
https://privacycenter.instagram.com/policy/
Meta is certified under the EU–U.S. Data Privacy Framework (DPF).
This website uses features of the Pinterest social network.
The provider is Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland.
When you visit a page containing a Pinterest element, your browser establishes a direct connection with Pinterest’s servers.
The Pinterest element transmits log data to Pinterest’s servers in the United States.
This data may include:
-
Your IP address
-
The address of the websites you visited
-
Browser type and settings
-
Date and time of your request
-
Your use of Pinterest
-
Cookies
The use of this service is based on your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG.
You may withdraw your consent at any time.
For more information about how Pinterest processes your data, please visit:
https://policy.pinterest.com/privacy-policy
Pinterest is certified under the EU–U.S. Data Privacy Framework (DPF).
More information is available at:
https://www.dataprivacyframework.gov/
6. Plugins and Tools
Google Maps
This website uses the Google Maps mapping service.
The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).
Google Maps enables us to embed interactive maps directly into our website.
To use the features of Google Maps, it is necessary to process your IP address. This information is generally transmitted to and stored on a Google server in the United States.
As the operator of this website, we have no influence over this data transmission.
When Google Maps is activated, Google may also load Google Fonts to ensure the consistent display of fonts. When you access Google Maps, your browser loads the required web fonts into its browser cache to display text and fonts correctly.
The use of Google Maps is based on our legitimate interest in presenting our online services in an attractive way and making the locations specified on our website easy to find, in accordance with Article 6(1)(f) GDPR.
Where your consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent includes the storage of cookies or access to information on your device (for example, device fingerprinting). You may withdraw your consent at any time with future effect.
The transfer of data to the United States is based on the European Commission’s Standard Contractual Clauses (SCCs).
Further information is available at:
https://privacy.google.com/businesses/gdprcontrollerterms/
and
https://privacy.google.com/businesses/gdprcontrollerterms/sccs/
For more information about how Google processes personal data, please visit:
https://policies.google.com/privacy
Google is certified under the EU–U.S. Data Privacy Framework (DPF).
More information is available at:
https://www.dataprivacyframework.gov/
Source
This Privacy Policy is based on the template provided by eRecht24 and has been translated into English for the English version of this website.