Privacy Policy

Data protection notice  – Kiss from Fleur

The following information gives you an overview of the processing of your personal data by our company as well as the rights for you resulting from the GDPR. 

A. Responsible body for data processing

The person responsible for data processing is (“company”, „we”):

Anna-Jill Gierhards

Kiss from Fleur

Dülsweg 9

40667 Meerbusch 

Germany

Tel.: 00491724794675

E-Mail: anna@kissfromfleur.deB. Processing of your personal data 

1. Data processing in the context of business relationships

a. Types of data processed

We process personal data that we receive from you in your function as a customer / contractual partner as part of our business relationship. In the business initiation phase and during the business relationship, we and you generate personal data. In the case of companies, these data essentially concern the contact person responsible for you and, if applicable, the company management (managing director, board member). The personal data usually generated are: 

Name, salutation, title, address, telephone number, fax number, e-mail address, account details, your company / company (with VAT ID), department, position, date of birth, creditworthiness assessments, inquiries and correspondence for conclusion, administration, implementation and for billing the contract. 

b. Purpose of data processing and legal basis 

The processing of personal data takes place for reasons of the establishment, execution and fulfillment of the contract as well as for the execution of pre-contractual measures. We use your personal data in particular to prepare offers, process orders and contact you (legal basis Art. 6 Para. 1 S. 1 lit. b GDPR).

In addition, we store your personal data as part of your business relationship with us on the basis of statutory archiving obligations (legal basis Art. 6 Para. 1 S.1 lit. c GDPR). 

c. Storage period

Your personal data will be processed and stored for as long as is necessary to fulfill our contractual and legal obligations. After fulfilling the contractual and legal obligations, the personal data is regularly deleted. Exceptions to this are: 

The fulfillment of commercial and tax retention periods. The deadlines for this are between two and ten years. 

Preservation of evidence within the framework of the applicable statute of limitations. According to §§ 195 ff. Of the German Civil Code, these limitation periods can be up to thirty years. The regular limitation period is three years until the end of the year. 

2. Data processing when you visit our website

a. Use of the website for information purposes 

If you only use the website for informational purposes, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server.  

aa. Types of data processed

If you want to view our website, we collect the following data:

• Information about the browser type and version used;
• The user’s operating system and its interface
• The user’s internet service provider 
• The user’s IP address 
• Date and time of access 
• Websites from which the user’s system reached our website 
• Websites that are accessed by the user’s system via our website
• amount of data transferred 
• Access status / HTTP status code 

bb. Purposes of data processing and legal basis 

The data processing in the context of the informational use of the website takes place for the purpose of pursuing our legitimate interests (legal basis Art. 6 Abs. 1 S. 1 lit.f GDPR). Our legitimate interest lies in the technical necessity of processing in order to display our website to you and to guarantee stability and security. 

cc. Storage period 

We delete or anonymize your personal data as soon as they are no longer required for the purposes for which we collected or used them according to the above purposes.

With regard to the storage of the data in log files, the deletion or anonymization takes place after 7 days at the latest. 

b. Cookies

We use cookies on our website. These are small files that your browser automatically creates and that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our site. Cookies do not cause any damage to your device and do not contain any viruses, Trojans or other malware. 

Information is stored in the cookie that results in connection with the specific device used. However, this does not mean that we are immediately aware of your identity. 

We use the technology of cookies for our website. Cookies are small text files that are sent from our web server to your browser when you visit our website and are stored by your browser on your device for later retrieval. 

The following types of cookies are used on our website:

• Necessary cookies 
• Functional and performance cookies 
• Advertising and targeting cookies 
• Sharing Cookies

Technically necessary cookies 

aa. Processed data type

Necessary cookies are absolutely necessary in order to move around the website, to use basic functions and to guarantee the security of the website; they do not collect information about you for marketing purposes, nor do they store which websites you have visited. 

bb. Disabling cookies 

You can determine whether cookies can be set and retrieved using the settings in your browser. For example, you can completely deactivate the storage of cookies in your browser, limit it to certain websites or configure your browser so that it automatically notifies you as soon as a cookie is to be set and asks you for feedback. You can block or delete individual cookies. For technical reasons, however, this can mean that some functions of our website are impaired and no longer function completely. 

cc. Purposes of data processing and legal basis

Necessary cookies ensure that the website can be used by enabling basic functions. The website would not function properly without these cookies. By setting cookies, personal data can be saved. This processing requires the legal basis according to Art. 6 Para. 1 lit.f GDPR. The legitimate interest lies in enabling the use of a functioning website. 

dd. Storage period 

The storage period depends on the cookie used. The exact storage duration of the respective cookie can be found in the table below. 

ee. Transfer of personal data 

The data collected is transmitted to the provider of the cookie services. These act as processors, which is why we have concluded a corresponding order processing contract with them. The data is passed on due to the legitimate interest in guaranteeing the functionality and usability of the website in accordance with the legal basis of Article 6 (1) (f) GDPR. The exact provider of the respective cookie can be found in the table below. 

ff. Consequences of failure to provide

If you deactivate the use of necessary cookies, the full functionality and usability of the website can no longer be guaranteed. 

gg. Cookies used 

Advertising und Targeting Cookies 

aa. Processed data type

Advertising and targeting cookies serve to offer website users needs-based advertising on the website or offers from third parties and to measure the effectiveness of these offers. 

bb. Disabling cookies

You can determine whether cookies can be set and retrieved using the settings in your browser. For example, you can completely deactivate the storage of cookies in your browser, limit it to certain websites or configure your browser so that it automatically notifies you as soon as a cookie is to be set and asks you for feedback. You can block or delete individual cookies. For technical reasons, however, this can mean that some functions of our website are impaired and no longer function completely. 

cc. Purposes of data processing and legal basis

These cookies show you personalized advertising. We can also collect data on how effective this advertising is. Your explicit and active consent in accordance with Article 6 Paragraph 1 Sentence 1 Letter a of the GDPR serves as the legal basis. You can revoke your consent at any time. However, processing before this point in time is not affected by the revocation. 

dd. Storage period

The storage period depends on the cookie used. The exact storage duration of the respective cookie can be found in the table below.

ee. Transfer of personal data 

The data collected is transmitted to the provider of the cookie services. These act as processors, which is why we have concluded a corresponding order processing contract with them. The exact provider of the respective cookie can be found in the table below. 

ff. Data processing outside the European Union 

Some of our providers may have servers outside the European Union, which is why your data can be transmitted there. 

gg. Consequences of failure to provide

Preventing the use of these cookies has no influence on the use of the website. 

hh. Table of cookies used 

c.Data processing when booking workshops 

aa. Types of data processed 

We process your data as part of the ordering process in our webstore on our website, through which you can order various workshops to enable you to select and order the selected workshops, as well as their payment and processing. The processed data includes inventory data, communication data, contract data, payment data and the persons affected by the processing include our customers, interested parties and other business partners. 

bb. Purposes of data processing and legal basis 

The processing takes place for the purpose of providing contractual services in the context of the operation of a web store, billing and handling of the workshops. The processing takes place on the basis of Art. 6 Paragraph 1 Clause 1 lit. b GDPR (execution of order processes) and Art. 6 Paragraph 1 Clause 1 lit. c DSGVO (legally required archiving). The information marked as necessary during registration and the ordering process is required to establish, execute and process the contract with us. 

cc. Storage period

The deletion takes place after the expiry of statutory warranty and comparable obligations, the necessity of storing the data is checked every three years; In the case of the statutory archiving obligations, the deletion takes place after their expiry (end of commercial law (6 years) and tax law (10 years) retention obligation). 

dd. Transfer of personal data 

We disclose the data to third parties in the context of delivery, payment or in the context of legal permits and obligations to legal advisors and authorities. 

d. Data processing for plugins 

Plugins are building blocks embedded in the website that represent a reference to third-party content (so-called “plugins”). When integrating plugins, we use the so-called two-click solution. This means that when you visit the website, no personal data is initially passed on to the third party provider. 

We give you the opportunity to communicate directly with the third-party provider via the plug-in. Only after activating the plug-in does the third-party provider receive the information that you have accessed the corresponding website of our online offer. In addition, the data automatically collected when you visit our website is transmitted. By activating the plugin, your personal data will be transmitted to the third party provider and stored there. Since third-party providers collect data in particular via cookies, we recommend that you delete all cookies using your browser’s security settings before clicking on the plug-in. 

We have no influence on the data collected and the data processing operations, nor are we aware of the full scope of the data collection, the purposes of processing or the storage periods. We also have no information on the deletion of the data collected by the third-party provider. 

aa. Types of data processed 

We use the following plugins :

When you visit the website, the third-party providers receive the information that you have accessed the corresponding subpage of our website. In addition, the following data is transmitted to the third party provider when used: 

• Information about the browser type and the version used 
• The user’s operating system and its interface 
• The user’s internet service provider 
• The user’s IP address 
• Date and time of access 
• Websites from which the user’s system reached our website 
• Websites that are accessed by the user’s system via our website 
• amount of data transferred 
• Access status / HTTP status code 

This takes place regardless of whether the third-party provider provides a user account that you are logged in to or whether there is no user account. If you are logged in with the third party provider, your data will be assigned directly to your account. If you do not wish to be assigned to your profile with the third party provider, you must log out before activating the button. Third-party providers save your data as usage profiles and use them for advertising, market research and / or needs-based website design. Such an evaluation takes place in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, although you must contact the third-party provider to exercise this right. 

bb. Purposes of data processing and legal basis

The processing of personal data takes place with regard to the collection and transmission of the user’s IP address and the information about the browser type and the version used to the third party provider in order to be able to make the third party’s online offer available for reasons of user-friendliness and for reasons the technical necessity. The IP address is necessary for the third-party provider to deliver the third-party content. Information about the browser type and the version used are necessary in order to deliver the content in the correct format. 

The legal basis for the collection and transmission of the IP address and the information on the browser type is therefore Art. 6 Para. 1 S. 1 lit.f GDPR. The legitimate interest lies in the provision and improvement of an online offer and the user-friendliness of the offer. 

The legal basis for the collection and transmission of cookies and the information you provide is your consent in accordance with Art. 6 Para. 1 S. 1 lit. You can withdraw your consent at any time. This does not affect the legality of the processing carried out on the basis of the consent up to the point of revocation. 

cc. Storage period

We do not save any data that arises in connection with the use of plugins.

With regard to any storage by third-party providers, please also note their respective data protection declaration (see above). 

dd. Transfer of personal data

The data collected is transmitted to the respective third party provider. The transmission of personal data is justified by the fact that we have a legitimate interest in passing on the data to provide and improve our online offer and for reasons of user-friendliness and to protect your rights and interests in the protection of your personal data within the meaning of Art. 6 Para . 1 sentence 1 lit.f GDPR do not predominate. 

ee. Data processing outside the European Union

For the cases in which personal data is transmitted to the USA, we have concluded EU standard contractual clauses with the third-party providers. 

3. Data processing in the context of inquiries using contact forms 

You can contact us using a contact form. 

aa. Types of data processed

The following data are processed in the context of the request using the contact form:

Name, phone number, email address 

bb. Purposes of data processing and legal basis

The processing of personal data takes place for communication purposes, to process your request or to be able to respond to it.

The legal basis is our legitimate interest according to Art. 6 Para. 1 S. 1 lit.f GDPR. Our legitimate interest is to establish a communication channel to process your request or to be able to respond to it. 

cc. Storage period

The information is stored for as long as it is necessary to answer your request. 

4. Data processing when registering for the newsletter

If you have given your express consent in accordance with Art. 6 Paragraph 1 Clause 1 lit. a GDPR, we will use your email address to regularly send you our newsletter. 

aa. Types of data processed 

If you have given your express consent to receive the newsletter, your email address will be processed by us. 

bb. Purposes of data processing and legal basis 

The processing of personal data takes place for reasons of direct marketing and business development. If you have consented to this, we will also evaluate your user behavior when the newsletter is sent. For this evaluation, the e-mails sent contain so-called web beacons or tracking pixels, which represent one-pixel image files that are stored on our website. For the evaluations, we link the data automatically collected when you visit the website (see “Collection of personal data when you visit our website” above) and the web beacons with your email address and an individual ID. With the data obtained in this way, we create a user profile in order to tailor the newsletter to your individual interests. We record when you read our newsletters, which links you click in them and deduce your personal interests from this. We link this data with actions you have taken on our website.

The legal basis is your consent according to Art. 6 Para. 1 S. 1 lit. a GDPR. You can withdraw your consent at any time. This does not affect the legality of the processing carried out on the basis of the consent until the revocation. 

You can unsubscribe from the newsletter at any time, for example via a link at the end of each newsletter. Alternatively, you can send your unsubscribe request at any time to anna@kissfromfleur.de by email. 

You can object to tracking at any time by clicking the separate link that is provided in every email or by informing us via another contact channel. 

cc. Storage period

The information is stored as long as you have subscribed to the newsletter. After you unsubscribe, we save the data purely statistically and anonymously. 

dd. Transfer of personal data

We use the service provider “Mailchimp”, The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308 USA, to send the newsletter. Your data will be passed on to our service provider for administrative purposes, as we have a legitimate interest in the efficient design of marketing measures and your interest in the protection of your personal data does not prevail, Art. 6 Para. 1 S. 1 lit.f GDPR does not prevail . 

C. Your rights

As the “data subject” you have the following rights towards us with regard to your personal data (Art. 15 ff. GDPR): 

1. Right of providing information

The person concerned has the right to request confirmation from us as to whether personal data concerning them are being processed; if this is the case, she has a right to information about this personal data and the information listed in detail in Art. 15 GDPR. 

2. Right to rectification

The person concerned has the right to request us to correct any incorrect personal data concerning them and, if necessary, to complete incomplete personal data (Art. 16 GDPR). 

3. Right to cancellation

The person concerned has the right to demand that we delete personal data concerning them immediately if one of the reasons listed in Art. 17 GDPR applies, e.g. if the data is no longer required for the purposes pursued (right to Deletion). 

4. Right to restriction of processing 

The person concerned has the right to demand that we restrict the processing if one of the conditions listed in Art. 18 GDPR is met, e.g. if the person concerned has objected to the processing for the duration of the examination by the person responsible. 

5. Right to object

The data subject has the right to object to the processing of personal data concerning them at any time for reasons that arise from their particular situation. We will then no longer process the personal data unless we can prove compelling legitimate reasons for the processing that outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims (Art. 21 GDPR). The revocation will only take effect in the future. Processing of personal data before the revocation is issued is not affected by this. 

6. Right to data portability

The data subject has the right, in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transmitted to another person responsible. 

7. Right to complain to a supervisory authority 

Without prejudice to any other administrative or judicial remedy, every person concerned has the right to lodge a complaint with a supervisory authority if the person concerned is of the opinion that the processing of their personal data violates the GDPR (Art. 77 GDPR). The person concerned can assert this right with a supervisory authority in the member state of their place of residence, their place of work or the place of the alleged violation. 

8. Revocation of Consent 

A consent given by a data subject to the processing of personal data can be withdrawn from us at any time. This also applies to consents that were given before May 25, 2018 (GDPR applies). The revocation will only take effect in the future. Processing of personal data before the revocation is issued is not affected by this. 

D. Obligation to provide data 

The data requested by us in the respective contract (name, company / company, contact and account data) must be provided. If you do not provide this data, we will have to reject you or your company as a contractual partner, as we absolutely need them to process the contract.