Dr Keuper Consulting Data to Design
DEEN
Request Project

Privacy Policy

1. General Information and Mandatory Information

Designation of the Responsible Body (Controller) The responsible body for data processing on this website is:

Dr. Kristina Keuper
Rottmannstraße 9
55469 Simmern
Germany
kontakt@kristina-keuper.de

The responsible body (controller) is the natural or legal person who typically decides, alone or jointly with others, on the purposes and means of processing personal data (e.g., names, email addresses, etc.).

Revocation of Your Consent to Data Processing Many data processing operations are only possible with your express consent. You can revoke consent you have already given at any time. An informal notification by email is sufficient for the revocation. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Right to Lodge a Complaint with the Competent Supervisory Authority In the event of a breach of data protection law, the data subject has the right to lodge a complaint with the competent supervisory authority.

Right to Data Portability You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible.

Right to Information, Correction, Blocking, Deletion Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipient and the purpose of the data processing and, if applicable, a right to correction, blocking, or deletion of this data. You can contact us at any time via the contact options listed in the imprint/legal notice for this purpose and for further questions on the subject of personal data.

SSL or TLS Encryption For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

2. Data Collection on Our Website

Server Log Files The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

  • Browser type and browser version
  • Operating system used
  • Referrer URL
  • Hostname of the accessing computer
  • Time of the server inquiry
  • IP address

This data is not merged with other data sources. The basis for data processing is Art. 6 (1) (b) GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures.

Cookies Our website uses cookies. These are small text files that your web browser stores on your device. Cookies help us to make our offer more user-friendly, effective, and secure.

Some cookies are “session cookies.” Such cookies are deleted automatically after the end of your browser session. On the other hand, other cookies remain on your terminal device until you delete them yourself. Such cookies help us to recognize you when you return to our website.

With a modern web browser, you can monitor, restrict, or prevent the setting of cookies. Many web browsers can be configured so that cookies are deleted automatically when the program is closed. The deactivation of cookies may result in limited functionality of this website.

The setting of cookies, which are necessary for the exercise of electronic communication processes or the provision of certain functions desired by you (e.g., shopping cart), takes place on the basis of Art. 6 (1) (f) GDPR. As the operator of this website, I have a legitimate interest in the storage of cookies for the technically error-free and smooth provision of my services. If other cookies (e.g., for analysis functions) are set, these are treated separately in this data protection declaration.

Contact Form If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on this data without your consent.

The processing of the data entered into the contact form takes place exclusively on the basis of your consent (Art. 6 (1) (a) GDPR). You can revoke this consent at any time. An informal notification by email is sufficient. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.

The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to storage, or the purpose for data storage no longer applies (e.g., after your request has been processed). Mandatory statutory provisions – in particular retention periods – remain unaffected.

Beta Signup Ruby & Klara

When you sign up via the beta form on our website, we collect the following data: first and last name, email address, country, date of birth, preferred language, operating system, journaling experience, and optionally phone number and referral source. We also collect your free-text response regarding your motivation.

This data is used exclusively for managing the beta programme and contacting you regarding the product launch. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.

The data is transmitted to the operator via email and stored locally. It will not be shared with third parties. The data will be deleted once the purpose of storage no longer applies or you withdraw your consent.

3. e-Commerce and Payment Providers

Processing of Data (Customer and Contract Data) We collect, process, and use personal data only insofar as it is necessary for the establishment, content organization, or change of the legal relationship (inventory data). This is done on the basis of Art. 6 (1) (b) GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures. We collect, process, and use personal data about the use of our website (usage data) only insofar as this is necessary to enable the user to utilize the service or to bill for it.

Data Transmission upon Conclusion of Contract for Online Shops, Dealers, and Dispatch of Goods We transmit personal data to third parties only if this is necessary in the context of contract handling, for example, to the credit institution commissioned with the handling of payments. A further transmission of the data does not take place or only takes place if you have expressly consented to the transmission. Your data will not be passed on to third parties without your express consent, for example, for advertising purposes. The basis for data processing is Art. 6 (1) (b) GDPR.

WooCommerce We use the open-source shop system WooCommerce as a plugin on our website. This plugin is provided by Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA. When you place an order in our shop, the information necessary for the order (name, address, payment information, email) is processed to fulfill the contract.

PayPal On our website, we offer payment via PayPal. The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”).

If you select payment via PayPal, the payment data you enter will be transmitted to PayPal. The transmission of your data to PayPal takes place on the basis of Art. 6 (1) (a) GDPR (Consent) and Art. 6 (1) (b) GDPR (Processing for the fulfillment of a contract). You have the possibility to revoke your consent to data processing at any time. A revocation does not affect the effectiveness of data processing operations in the past.

Stripe We offer the possibility to pay via Stripe. The provider of this payment service is Stripe, Inc., 510 Townsend Street, San Francisco, CA 94103, USA. If you choose payment via Stripe, the payment data you enter will be transmitted to Stripe. The transmission of your data to Stripe takes place on the basis of Art. 6 (1) (a) GDPR (Consent) and Art. 6 (1) (b) GDPR (Processing for the fulfillment of a contract).

For data transfers to the USA, Stripe relies on the Standard Contractual Clauses (SCCs) of the European Commission to ensure compliance with European data protection standards. For more information, please refer to Stripe’s privacy policy: https://stripe.com/privacy.

4. Newsletter

Mailchimp This website uses the services of Mailchimp for sending newsletters. The provider is The Rocket Science Group LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA.

Mailchimp is a service with which, among other things, the sending of newsletters can be organized and analyzed. If you enter data for the purpose of subscribing to the newsletter (e.g., email address), this data will be stored on Mailchimp’s servers in the USA.

Legal Basis: The data processing is based on your consent (Art. 6 (1) (a) GDPR). You can revoke this consent at any time by unsubscribing from the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.

Data Transfer to the USA: Mailchimp processes data in the USA. We have concluded a so-called “Data Processing Agreement” with Mailchimp, in which we oblige Mailchimp to protect our customers’ data and not to pass it on to third parties. This agreement may rely on the Standard Contractual Clauses of the European Commission.

For more details, please see Mailchimp’s privacy policy: https://mailchimp.com/legal/.

5. Analytics and Advertising

Burst Statistics Nature and Scope of Processing We use the “Burst Statistics” extension on this website to analyze visitor flows. The provider is Really Simple Plugins, Roggeveenstraat 6, 1013 EA Amsterdam, Netherlands.

Unlike other analytics tools, Burst Statistics stores all collected data locally on the web server used by us. There is no data transfer to third-party providers (e.g., Google). The data collected includes anonymized IP addresses, date and time of the visit, referring URL, device type, operating system, and browser type. Because IP addresses are anonymized immediately upon collection, it is not possible for us to draw conclusions about the identity of individual visitors.

Purpose and Legal Basis The use of Burst Statistics is based on our legitimate interest in a statistically anonymous analysis of user behavior in order to optimize our website and our offer (Art. 6 (1) (f) GDPR). Since the tool is hosted locally and avoids passing data to third parties, the processing is considered necessary and proportionate to improve our web presence.

Storage Duration The data is stored for as long as is necessary to fulfill the purpose of the analysis. Since the data is anonymized, it generally does not fall under strict deletion periods for personal data, but we regularly clean up older statistical data to save server space.

Objection If you do not wish to be tracked, you can activate the “Do Not Track” setting in your browser. Burst Statistics respects this setting and will not record your visit in such cases.

6. Plugins and Tools

YouTube Videos Nature and Scope of Processing: We have integrated YouTube Video on this website. YouTube Video is a component of the video platform of YouTube, LLC, where users can upload content, share it over the Internet, and receive detailed statistics. YouTube Video allows us to integrate content from the platform into this website.

YouTube Video uses cookies and other browser technologies to evaluate user behavior, recognize users, and create user profiles. This information is used, among other things, to analyze the activity of the listened content and to create reports. If a user is registered with YouTube, LLC, YouTube Video can assign the played videos to the profile. When you access this content, you establish a connection to servers of YouTube, LLC, Google Ireland Limited, Gordon House, Barrow Street Dublin 4 Ireland, whereby your IP address and possibly browser data such as your user agent are transmitted.

Purpose and Legal Basis: The use of the service is based on your consent in accordance with Art. 6 (1) (a) GDPR and § 25 (1) TDDDG.

Data Transfer to Third Countries: We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. The transfer is safeguarded by Standard Contractual Clauses (see Google Analytics section for details).

Storage Duration: The specific storage period is determined by YouTube, LLC. Further information can be found in the privacy policy for YouTube Video: https://policies.google.com/privacy.

Google Maps Nature and Scope of Processing: We use the map service Google Maps to create directions. Google Maps is a service of Google Ireland Limited, which displays a map on this website. When you access this content on the website, you establish a connection to servers of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, whereby your IP address and possibly browser data such as your user agent are transmitted. These data are processed exclusively for the purposes mentioned above and to maintain the security and functionality of Google Maps.

Purpose and Legal Basis: The use of Google Maps is based on your consent in accordance with Art. 6 (1) (a) GDPR and § 25 (1) TDDDG.

Data Transfer to Third Countries: We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. The transfer is safeguarded by Standard Contractual Clauses (see Google Analytics section for details).

Storage Duration: The specific storage period is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Maps: https://policies.google.com/privacy.

Google Cloud Fraud Defense Nature and Scope of Processing: We have integrated components of Google Cloud Fraud Defense on this website among which is Google reCAPTCHA. Google reCAPTCHA is a service of Google Ireland Limited and allows us to distinguish whether a contact request comes from a natural person or is automated by means of a program. When you access this content, you establish a connection to servers of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, whereby your IP address and possibly browser data such as your user agent are transmitted. Furthermore, Google reCAPTCHA records the duration of stay and mouse movements of the user in order to distinguish automated requests from human ones.

Purpose and Legal Basis: The use of Google Cloud Fraud Defense is based on your consent in accordance with Art. 6 (1) (a) GDPR and § 25 (1) TDDDG.

Storage Duration: The specific storage period is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Cloud Fraud Defense: https://cloud.google.com/terms/data-processing-addendum.

Font Awesome Nature and Scope of Processing: We use Font Awesome from the provider Fonticons, Inc. for the proper provision of the content of this website.

Purpose and Legal Basis: The use of Font Awesome is based on your consent in accordance with Art. 6 (1) (a) GDPR and § 25 (1) TDDDG.

Data Transfer to Third Countries: We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. The transfer is safeguarded by Standard Contractual Clauses.

Storage Duration: The specific storage period is determined by Fonticons, Inc. Further information can be found in the privacy policy for Font Awesome CDN: https://cdn.fontawesome.com/privacy.