Privacy policy – Amaziha

Privacy policy

The protection and security of personal data is a high priority for us. Therefore, we strictly adhere to the rules of the German Federal Data Protection Act (BDSG) and the DS-GVO.

Im Folgenden werden Sie darüber informiert, welche Art von Daten zu welchem Zweck erhoben werden.

Please bear in mind, however, that data transmission on the Internet can always be subject to security vulnerabilities. Complete protection against access by third parties is not possible.

1. responsible party

Amaziha Jewelry & Co. GbR

Goetheallee 26a

01309 Dresden | Germany

represented by:

Deborah und Florian von Canal

2. data transmission / data logging

During the mere informational use of our website, i.e. if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server.

If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (legal basis is Art. 6 para. 1 p. 1 lit. f GDPR):

– IP address
– Date and time of the request
– Time zone difference to Greenwich Mean Time (GMT)
– Content of the request (specific page)
– Access status/HTTP status code
– Amount of data transferred in each case
– Website from which the request comes
– browser
– Operating system and its interface
– language and version of the browser software.

This data is only collected for the purpose of statistical evaluation. It is not passed on to third parties for commercial or non-commercial purposes.

3. use of personal data

Personal data is only collected or processed if you provide this information voluntarily and share it with us. We describe the respective uses in the following.

4. collection of general data and information

The website of Amaziha collects a series of general data and information every time a data subject or automated system calls up the website. This general data and information is stored in the log files of the server. The following data may be collected: (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system accesses our website (so-called referrer), (4) the sub-websites which are accessed via an accessing system on our website, (5) the date and time of access to the website, (6) an Internet protocol address (IP address), (7) the Internet service provider of the accessing system and (8) other similar data and information that serve to avert danger in the event of attacks on our information technology systems.

When using these general data and information, Amaziha does not draw any conclusions about the data subject. Rather, this information is needed (1) to deliver the contents of our website correctly, (2) to optimise the contents of our website and the advertising for these, (3) to ensure the long-term functionality of our information technology systems and the technology of our website, and (4) to provide law enforcement authorities with the information necessary for prosecution in the event of a cyber attack. Therefore, the Amaziha analyzes anonymously collected data and information on one hand, and on the other hand, with the aim of increasing the data protection and data security of our enterprise so that we can ultimately ensure an optimal level of protection for the personal data we process. The anonymous data of the server log files are stored separately from any personal data provided by a data subject.

5. registration on our website

The data subject has the possibility to register on the website of the controller by providing personal data. The personal data that is transmitted to the data controller in this context results from the respective input mask used for the registration. The personal data entered by the data subject are collected and stored exclusively for internal use by the controller and for its own purposes. The controller may arrange for the data to be transferred to one or more processors, for example a parcel service provider, who will also use the personal data exclusively for an internal use attributable to the controller.

By registering on the website of the controller, the IP address assigned by the Internet service provider (ISP) of the data subject, the date and the time of registration are also stored. The storage of this data takes place against the background that only in this way can the misuse of our services be prevented and, if necessary, this data makes it possible to clarify criminal offences that have been committed. In this respect, the storage of this data is necessary for the protection of the data controller. As a matter of principle, this data is not passed on to third parties unless there is a legal obligation to pass it on or the passing on serves the purpose of criminal prosecution.

The registration of the data subject by voluntarily providing personal data serves the purpose of the controller to offer the data subject content or services which, due to the nature of the matter, can only be offered to registered users. Registered persons are free to modify the personal data provided during registration at any time or to have it completely deleted from the data of the controller.

The controller shall provide any data subject at any time, upon request, with information on what personal data is stored about the data subject. Furthermore, the controller shall correct or delete personal data at the request or indication of the data subject, provided that this does not conflict with any statutory retention obligations. The entire staff of the controller shall be available to the data subject as contact persons in this context.

6. subscription to our newsletter

On the website of Amaziha, users are given the opportunity to subscribe to our enterprise’s newsletter. The personal data transmitted to the controller when the newsletter is ordered is specified in the input mask used for this purpose.

Amaziha informs its customers and business partners at regular intervals by means of a newsletter about enterprise offers. The newsletter of our company can only be received by the data subject if (1) the data subject has a valid e-mail address and (2) the data subject registers for the newsletter mailing. For legal reasons, a confirmation e-mail is sent to the e-mail address registered by a data subject for the first time for the newsletter dispatch using the double opt-in procedure. This confirmation email serves to verify whether the owner of the email address as the data subject has authorised the receipt of the newsletter.

When registering for the newsletter, we also store the IP address of the computer system used by the data subject at the time of registration as well as the date and time of registration, which is assigned by the Internet service provider (ISP). The collection of this data is necessary in order to be able to trace the (possible) misuse of the e-mail address of a data subject at a later point in time and therefore serves as a legal safeguard for the controller.

The personal data collected in the context of a registration for the newsletter is used exclusively for sending our newsletter. Furthermore, subscribers to the newsletter could be informed by e-mail if this is necessary for the operation of the newsletter service or a related registration, as could be the case in the event of changes to the newsletter offer or changes in the technical circumstances. No personal data collected as part of the newsletter service will be passed on to third parties. The subscription to our newsletter can be cancelled by the data subject at any time. The consent to the storage of personal data, which the data subject has given us for the newsletter dispatch, can be revoked at any time. For the purpose of revoking consent, a corresponding link can be found in each newsletter. Furthermore, it is also possible to unsubscribe from the newsletter at any time directly on the website of the controller or to inform the controller of this in another way.

The aforementioned also applies to the activation of the notification function when an item becomes available again.

7. newsletter tracking

The Amaziha newsletter contains so-called tracking pixels. A tracking pixel is a miniature graphic that is embedded in such emails that are sent in HTML format to enable log file recording and log file analysis. This allows a statistical evaluation of the success or failure of online marketing campaigns. Based on the embedded tracking pixel, the PURELEI GmbH may see if and when an e-mail was opened by a data subject, and which links in the e-mail were called up by the data subject.

Such personal data collected via the tracking pixels contained in the newsletters are stored and analysed by the controller in order to optimise the newsletter dispatch and to better adapt the content of future newsletters to the interests of the data subject. This personal data will not be disclosed to third parties. Data subjects are entitled at any time to revoke the separate declaration of consent given in this regard via the double opt-in procedure. After a revocation, this personal data will be deleted by the data controller. The PURELEI GmbH automatically regards a withdrawal from the receipt of the newsletter as a revocation.

8. contact possibility via the website

The website of Amaziha contains legal requirements which enable a quick electronic contact to our enterprise, as well as direct communication with us, which also includes a general address of the so-called electronic mail (e-mail address). If a data subject contacts the controller by e-mail or by using a contact form, the personal data transmitted by the data subject will be stored automatically. Such personal data transmitted on a voluntary basis by a data subject to the controller will be stored for the purposes of processing or contacting the data subject. This personal data will not be disclosed to third parties.

9. comment function in the blog on the website

Amaziha offers users the possibility to leave individual comments on individual blog contributions on a blog, which is on the website of the controller. A blog is a portal maintained on an Internet page, usually publicly viewable, in which one or more persons, called bloggers or web bloggers, can post articles or write down thoughts in so-called blogposts. The blogposts can usually be commented on by third parties.

If a data subject leaves a comment on the blog published on this website, in addition to the comments left by the data subject, information on the time of comment entry and the user name (pseudonym) chosen by the data subject will be stored and published. Furthermore, the IP address assigned by the Internet service provider (ISP) of the person concerned is also logged. This storage of the IP address takes place for security reasons and in the event that the person concerned violates the rights of third parties by posting a comment or posts illegal content. The storage of this personal data is therefore in the controller’s own interest, so that the controller could exculpate itself if necessary in the event of an infringement. The personal data collected will not be disclosed to third parties, unless such disclosure is required by law or serves the legal defence of the controller.

10. subscription to comments on the blog on the website.

The comments made in Amaziha’s blog can in principle be subscribed to by third parties. In particular, it is possible for a commentator to subscribe to the comments following his or her comment on a particular blog post.

If a data subject opts in to the option to subscribe to comments, the controller will send an automatic confirmation e-mail in order to verify, by means of the double opt-in procedure, that the holder of the e-mail address provided has indeed opted in to this option. The option to subscribe to comments can be terminated at any time.

11. information, modification and deletion of your data – your rights

In accordance with applicable law, you can ask us in writing at any time whether and which personal data we have stored about you. You will receive a corresponding notification immediately. Unless your request conflicts with a legal obligation to retain data (e.g. data retention), you have the right to have incorrect data corrected and to have your personal data blocked or deleted.

In summary, you have the following rights against us:

– Right to information,
– Right to rectification or erasure,
– Right to restriction of processing,
– Right to object to processing,
– Right to data portability.

You also have the right to complain to a data protection supervisory authority about our processing of your personal data.

12.security of your data

Your personal data provided to us will be secured by taking all technical as well as organisational security measures so that they are inaccessible to unauthorised third parties. When sending very sensitive data or information, it is advisable to use the postal service, as complete data security cannot be guaranteed by e-mail.

To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) via HTTPS.

13.note on Google Analytics

This website uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf.

Google will not associate your IP address with any other data held by Google.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link:

http://tools.google.com/dlpage/gaoptout?hl=de.

By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above.

Information of the third party provider: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. User conditions: http://www.google.com/analytics/terms/de.html, overview of data protection: http://www.google.com/intl/de/analytics/learn/privacy.html, as well as the privacy policy: http://www.google.de/intl/de/policies/privacy.

14.Google Maps

This website uses Google Maps API to visually display geographical information. When using Google Maps, Google also collects, processes and uses data about visitors’ use of the map functions.

You can find more information about data processing by Google in the Google privacy policy. There you can also change your personal data protection settings in the data protection centre.

Detailed instructions on how to manage your own data in connection with Google products can be found here.

15.Cookies

This website uses the following types of cookies, the scope and functionality of which are explained below:

Persistent cookies (in addition b).

a) Transient cookies are automatically deleted when you close the browser. These include, in particular, session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This enables your computer to be recognised when you return to our website. The session cookies are deleted when you log out or close the browser.

b) Persistent cookies are automatically deleted after a predefined period of time, which may differ depending on the cookie. You can delete the cookies in the security settings of your browser at any time.

You can configure your browser settings according to your preferences and, for example, refuse to accept third-party cookies or all cookies. Please note that you may not be able to use all the functions of this website.

16. Social-Media-Plug-ins

We currently use the following social media plug-ins:

– Facebook
Instagram

We use the so-called two-click solution. This means that when you visit our site, no personal data is passed on to the providers of the plug-ins. You can recognise the provider of the plug-in by the marking on the box above its initial letter or logo. We give you the opportunity to communicate directly with the provider of the plug-in via the button. Only if you click on the marked box and thereby activate it, the plug-in provider receives the information that you have called up the corresponding website of our online offer. In addition, the data mentioned under 2. of this declaration is transmitted.

In the case of Facebook, according to the respective providers in Germany, the IP address is anonymised immediately after collection. By activating the plug-in, your personal data is transmitted to the respective plug-in provider and stored there (in the case of US providers, in the USA). Since the plug-in provider collects the data in particular via cookies, we recommend that you delete all cookies via your browser’s security settings before clicking on the greyed-out box.

We have no influence on the data collected and data processing procedures, nor are we aware of the full extent of the data collection, the purposes of the processing, the storage periods. We also have no information on the deletion of the collected data by the plug-in provider.

The plug-in provider stores the data collected about you as usage profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (also for users who are not logged in) for the display of needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right. Via the plug-ins, we offer you the opportunity to interact with the social networks and other users so that we can improve our offer and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Art. 6 para. 1 p. 1 lit. f DS-GVO.

The data transfer takes place regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in to the plug-in provider, the data we collect is directly assigned to your account with the plug-in provider. If you click the activated button and, for example, link to the page, the plug-in provider also saves this information in your user account and shares it publicly with your contacts. We recommend that you log out regularly after using a social network, but especially before activating the button, as this will help you avoid being assigned to your profile with the plug-in provider.

For further information on the purpose and scope of data collection and processing by the plug-in provider, please refer to the data protection declarations of these providers provided below. There you will also receive further information on your rights in this regard and setting options for protecting your privacy.

Addresses of the respective plug-in providers and URL with their privacy notices:

Facebook Inc, 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php; further information on data collection: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications as well as http://www.facebook.com/about/privacy/your-info#everyoneinfo. Facebook has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

Google Inc, 1600 Amphitheater Parkway, Mountainview, California 94043, USA; https://www.google.com/policies/privacy/partners/?hl=de. Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

17. changes to this privacy policy

We will update this policy from time to time to protect your personal information. You should review this policy from time to time to stay informed about how we are protecting your information and continually improving the content of our website. If we make any material changes to the collection, use and/or disclosure of the personal information you provide to us, we will notify you by placing a prominent and prominent notice on the website. By using the website, you agree to the terms of this Personal Data Protection Policy.

If you have any questions about this Privacy Policy, you may contact us at any time at hello@amaziha.com.