Privacy Policy

Privacy Policy General Information

This privacy policy provides detailed information about what happens to your personal data when you visit our website www.sabinebuettner.nz. Personal data refers to all data that can personally identify you. We strictly adhere to legal regulations, especially the General Data Protection Regulation (“GDPR”), when processing your data and place great importance on ensuring that your visit to our website is absolutely secure.

Data controller

Responsible for data collection and processing of personal data on this website is:

Name: Sabine Buettner
Address:
Schulterblatt 58 / Hof 5.OG
20357 Hamburg
Germany
info@sabinebuettner.de
Ph: 0049 40 71 666 439

Access Data (Server Logfiles)

When you access our website, we automatically collect and store access data in server log files, which your browser automatically transmits to us. These include:

  • Browser type and version of your PC
  • Operating system used by your PC
  • Referrer URL (source/reference from which you accessed our website)
  • Date and time of the server request

In general, personal identification is not possible or intended. The processing of such data is in accordance with Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interest in improving the stability and functionality of our website.

Web Analytics Tools and Advertising

Google Analytics

Our website uses the web analysis service Google Analytics, provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics uses “cookies,” which are text files stored on your computer that enable an analysis of your use of our website. The information generated by cookies about your use of our website is usually transmitted to a Google server in the USA and stored there.

Legal basis for processing your data is the consent given by you through the cookie consent tool according to Art. 6 para. 1 sentence 1 lit. a) GDPR.

IP Anonymization

We have activated the IP anonymization function on this website. This means that your IP address will be truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be sent to a Google server in the USA and truncated there. On our behalf, Google will use this information to evaluate your use of our website, compile reports on website activities, and provide us with other services related to website usage and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Data Processing Agreement

We have concluded a data processing agreement with Google and fully implement the strict requirements of German data protection authorities when using Google Analytics.

Storage Period

Data stored by Google on user and event level, linked to cookies, user IDs (e.g., User ID), or advertising IDs (e.g., DoubleClick cookies, Android advertising ID), is anonymized or deleted after 14 months. Details can be found at the following link: https://support.google.com/analytics/answer/7667196?hl=en

Objection to Data Collection

You can prevent the storage of cookies by adjusting your browser settings; however, please note that in this case, you may not be able to use all the features of this website to their full extent.

Additionally, you can prevent the collection of data generated by cookies related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing the browser add-on available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en. If you delete the cookies on your computer, you will need to set the opt-out cookie again.

For more information on how Google Analytics handles user data, please refer to Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=en

Further information on data protection can be found in Google’s privacy policy: https://policies.google.com/privacy?hl=en&gl=en

Google Fonts

We use “Google Fonts” on our website, a service provided by Google.

Google Fonts allows us to use external fonts, known as Google Fonts. When you access our website, your web browser loads the required Google Font into the browser cache. This is necessary for your browser to display an optically improved representation of our texts. If your browser does not support this function, a default font will be used for display on your computer.

The integration of Google Fonts is done through a server call, usually to a Google server in the USA. This transmits to the server which of our pages you have visited. The IP address of your device’s browser is also stored by Google. We have no influence on the scope and further use of the data collected and processed by Google through the use of Google Fonts.

We use Google Fonts for optimization purposes, especially to improve the usability of our website and to make its design more user-friendly. This is our legitimate interest in processing the above data by the third-party provider. The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR.

For more information on Google Fonts, visit https://fonts.google.com/, https://developers.google.com/fonts/faq?hl=en-US&csw=1.

WordPress Stats

Our website uses the WordPress Stats tool to statistically evaluate visitor access. WordPress Stats is a subfunction of the Jetpack plugin. The provider is Automattic Inc., 60 29th Street #343, San Francisco, CA 94110-4929, USA.

WordPress Stats uses cookies stored on your computer to analyze the use of our website. The information generated by the cookie about your use of our online offer is stored on a server in the USA. Usage profiles of users can be created from the processed data, which are used only for analysis and not for advertising purposes. Your IP address is anonymized after processing and before storage.

“WordPress Stats” cookies remain on your device until you delete them. Further information can be found in Automattic’s privacy policy: https://automattic.com/privacy/ and information on Jetpack cookies: https://jetpack.com/support/cookies/.

The storage of “WordPress Stats” cookies and the use of this analysis tool are based on Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in the anonymized analysis of user behavior to optimize both our website and our advertising.

Contact Form

If you contact us via email or through a contact form, transmitted data including your contact details will be stored to process your inquiry or to be available for follow-up questions. These data will not be disclosed without your consent. The processing of data entered into the contact form is based exclusively on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke your consent at any time. A simple notification by email is sufficient for the revocation. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation. Data transmitted via the contact form will remain with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer exists. Mandatory legal provisions, especially retention periods, remain unaffected.

Use and Disclosure of Data

Personal data that you communicate to us, for example, via email (such as your name and address or email address), will neither be sold to third parties nor otherwise marketed. Your personal data will only be processed for correspondence with you and for the purpose for which you provided us with the data. For payment processing, we pass on your payment data to the credit institution commissioned with the payment.

The use of data automatically collected during your visit to our website is only for the purposes mentioned above. The data will not be used otherwise.

We assure you that we do not disclose your personal data to third parties, unless we are legally obliged to do so or you have given us your consent beforehand.

SSL/TLS Encryption

For security reasons and to protect the transmission of confidential content, such as inquiries that you send to us as the site operator, our website uses SSL/TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line. When SSL/TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Storage Duration

Personal data communicated to us through our website will only be stored until the purpose for which it was entrusted to us is fulfilled. If commercial and tax retention periods must be observed, the storage period for certain data can be up to 10 years.

Rights of Data Subjects

As a data subject in the context of the processing of your personal data, you have the following rights against the data controller in accordance with legal provisions:

Right to Withdraw Consent

Many data processing operations are only possible with your explicit consent. If the processing of your data is based on your consent, you have the right to revoke the consent for data processing at any time in accordance with Article 7(3) of the GDPR, with future effect. The revocation of consent does not affect the lawfulness of processing based on consent before its withdrawal. Storage of data for billing and accounting purposes remains unaffected by a revocation.

Right to Information

You have the right to obtain confirmation from us as to whether or not we process personal data concerning you, in accordance with Article 15 of the GDPR. If such processing is taking place, you have the right to access information about the personal data we process, the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the envisaged storage period or the criteria for determining the storage period, the existence of the right to rectification, erasure, restriction of processing, objection to processing, complaint to a supervisory authority, the source of your data if not collected from you, the existence of automated decision-making, including profiling, and, if applicable, meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing, and your right to be informed about the safeguards pursuant to Article 46 of the GDPR relating to the transfer of your data to a third country.

Right to Rectification

You have the right to request the immediate correction of inaccurate personal data concerning you and the completion of incomplete data, in accordance with Article 16 of the GDPR.

Right to Erasure

You have the right to request the erasure of your personal data, in accordance with Article 17 of the GDPR, if one of the following reasons applies:

  • Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
  • You withdraw your consent on which the processing according to Article 6(1)(a) or Article 9(2)(a) of the GDPR is based, and there is no other legal ground for the processing.
  • You object to the processing pursuant to Article 21(1) of the GDPR, and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) of the GDPR.
  • Your personal data has been unlawfully processed. The erasure of your personal data is necessary for compliance with a legal obligation under Union or Member State law to which the data controller is subject.
  • Your personal data has been collected in relation to the offer of information society services referred to in Article 8(1) of the GDPR.

However, this right does not exist to the extent that processing is necessary:

  • To exercise the right of freedom of expression and information.
  • To comply with a legal obligation that requires processing according to Union or Member State law to which the data controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority.
  • For reasons of public interest in the area of public health pursuant to Article 9(2)(h) and (i) and Article 9(3) of the GDPR.
  • For archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes pursuant to Article 89(1) of the GDPR, insofar as the right referred to in paragraph 1 is likely to render impossible or seriously impair the achievement of the objectives of that processing, or
  • For the establishment, exercise, or defense of legal claims.

If we have made your personal data public and are obliged to erase it, we shall, taking into account available technology and implementation costs, take reasonable steps, including technical measures, to inform data controllers processing the personal data that you have requested the erasure of all links to your personal data or of copies or replications of your personal data.

Right to Restriction of Processing

You have the right to request the restriction of processing (blocking) of your personal data in accordance with Article 18 of the GDPR. You can exercise this right at any time by contacting us at the address provided in the imprint. The right to restrict processing exists in the following cases:

  • If you contest the accuracy of your personal data stored by us, we usually need time to verify this. For the duration of the examination, you have the right to request the restriction of the processing of your personal data.
  • If the processing of your personal data is unlawful, but you oppose the erasure of the data and request the restriction of its use instead.
  • If we no longer need your personal data, but you need it for the exercise, defense, or establishment of legal claims, you have the right to request the restriction of the processing of your personal data instead of erasure.
  • If you have objected to the processing pursuant to Article 21(1) of the GDPR, a balance must be struck between your interests and ours. As long as it is not clear whose interests prevail, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, this data may only be processed – apart from its storage – with your consent or for the establishment, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or of a Member State.

Right to Notification

If you have exercised your right to rectification, erasure, or restriction of processing against us, we are obliged to notify all recipients to whom your personal data has been disclosed of this rectification, erasure, or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients, according to Article 19 of the GDPR, if you request it.

Right Not to be Subject to Automated Decision-making, Including Profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, in accordance with Article 22 of the GDPR. This does not apply if the decision:

  • Is necessary for the conclusion or performance of a contract between you and us.
  • Is authorized by Union or Member State law to which we are subject and that also lays down suitable measures to safeguard your rights, freedoms, and legitimate interests, or
  • Is based on your explicit consent.

However, these decisions may not be based on special categories of personal data referred to in Article 9(1) of the GDPR, unless Article 9(2)(a) or (g) applies and suitable measures to safeguard your rights, freedoms, and legitimate interests are taken.

In the cases referred to in (a) and (c), we take reasonable measures to safeguard your rights, freedoms, and legitimate interests, which include at least the right to obtain human intervention on the part of the controller, to express your point of view, and to contest the decision.

Right to Data Portability

If the processing is based on your consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR, or on a contract pursuant to Article 6(1)(b) of the GDPR, and the processing is carried out by automated means, you have the right to receive your personal data from us in a structured, commonly used, and machine-readable format, and to transmit that data to another controller without hindrance, where technically feasible, in accordance with Article 20 of the GDPR.

Right to Object

Where we process your personal data based on the balancing of interests according to Article 6(1)(f) of the GDPR, you have the right to object to the processing of your personal data on grounds relating to your particular situation at any time, including profiling based on those provisions. The respective legal basis on which processing is based can be found in this data protection declaration. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the assertion, exercise, or defense of legal claims (objection pursuant to Article 21(1) of the GDPR).

If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. If you object, your personal data will subsequently no longer be used for direct marketing purposes (objection pursuant to Article 21(2) of the GDPR).

You have the option to exercise your right to object in connection with the use of services of the information society – notwithstanding Directive 2002/58/EC – by means of automated procedures using technical specifications.

Right to Lodge a Complaint with the Competent Supervisory Authority pursuant to Article 77 of the GDPR

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR. The right to lodge a complaint exists without prejudice to other administrative or judicial remedies.

The supervisory authority responsible for us is:
The Hamburg Commissioner for Data Protection and Freedom of Information
Ludwig-Erhard-Str. 22, 7th floor 20459 Hamburg
Phone: 040/428 54-40 40
Email: mailbox@datenschutz.hamburg.de
Website: https://www.datenschutz-hamburg.de

Validity and Modification of this Privacy Policy

This privacy policy is effective as of December 17, 2023. We reserve the right to modify this privacy policy at any time, in compliance with applicable data protection regulations. This may be necessary, for example, to comply with new legal requirements or to account for changes to our website or the introduction of new services on our website. The version available at the time of your visit shall apply.

If this privacy policy is amended, we intend to announce changes on this page, ensuring that you are fully informed about the personal data we collect, how we process it, and under what circumstances it may be disclosed.