Privacy and Data Protection
Privacy and data protection
Status: Sep. 2018
The following data protection declaration applies to the offers made available at www.jolly-designs.com and our integrated shop offers (e.g. Facebook, Dawanda, Etsy, Amazon etc.) (hereinafter referred to individually and collectively as the “web shop”).
This data protection declaration, together with ours, defines the basis on which we process all personal data that we collect from you and / or that you provide to us.
1. Information about the collection of personal data and provider identification
1.1. In the following we will inform you about the collection of personal data when using the website. Personal data are all data that can be related to you personally, e.g. B. Name, address, email addresses, user behavior.
1.2. Service provider acc. To § 13 German Telemedia Act (TMG) and responsible entity gem. § 3 para. 7 Federal Data Protection Act (Act) is you can find Nishtha Jolly, further details under www.jolly-designs.com/pages/kontakt
2. Rights to information and revocation
2.1. You have the right to request information from us at any time about the data we have stored about you, as well as their origin, recipients or categories of recipients to whom this data is passed on and the purpose of storage.
2.2. If you have given your consent to the use of data, you can revoke this at any time.
2.3. Please send all information requests, requests for information or objections to data processing by e-mail to firstname.lastname@example.org or to the under section 1.2. named address.
3. Data security
We maintain current technical measures to ensure data security, in particular to protect your personal data from the dangers of data transfers and from third parties gaining knowledge. These are adapted to the current state of the art.
4. Collection of personal data when used for informational purposes
If you only use the website for informational purposes, i.e. if you do not log in to use the website, register or provide us with any other information, we do not collect any personal data, with the exception of the data that your browser transmits to enable you to visit the website. These are:
- IP address
- the date and time of the request
- Time zone difference to Greenwich Mean Time (GMT)
- content of the request (specific page)
- Access status / HTTP status code
- Amount of data transferred in each case
- Website from which the request came
- Operating system and its interface
- Language and version of the browser software
5.3. You can configure your browser settings according to your wishes and z. B. reject the acceptance of third-party cookies or all cookies. However, we would like to point out that you may then not be able to use all the functions of this website.
5.3.1. The Flash cookies used are not recorded by your browser, but by your Flash plug-in. These save the necessary data regardless of the browser you are using and have no automatic expiry date. If you do not want the Flash cookies to be processed, you have to install a corresponding add-on, e.g., B. "Better Privacy" for Mozilla Firefox (https://addons.mozilla.org/de/firefox/addon/betterprivacy/) or Adobe Flash Killer Cookie for Google Chrome.]
5.3.2. This stored information is stored separately from any data that may be provided to us. In particular, the data from the cookies are not linked to your other data.
6. Use of functions on our website
6.1. In addition to the purely informational use of our website, we offer various services that you can use if you are interested. To do this, you usually have to provide additional personal data that we use to provide the respective service. If additional voluntary information is possible, this is marked accordingly.
6.2. If you contact us by e-mail or using a contact form, we will save your e-mail address and, if you provide this, your name, telephone number and place of residence in order to answer your questions.
7. Data transfer to third parties
7.2. Sometimes we use external service providers to process your data. These have been carefully selected by us and commissioned in writing. They are bound by our instructions and are regularly checked by us. The service providers will not pass this data on to third parties. If these service providers are located outside the EU / EEA, we will inform you of this in connection with the respective functions.
7.3. Otherwise, we will only pass on your personal data to third parties if there is a legal obligation or you have given your prior consent. In particular, we will not sell, rent or otherwise transfer your personal data to third parties for marketing or advertising purposes without your separate consent.
7.4. Occasionally we may be forced to disclose your data due to legal provisions or legal processes. We can also disclose information about you if this is in the public interest, for example in the event of proven abuse or credit card fraud.
7.5. We can then pass on your personal data to third parties if we offer participation in campaigns, competitions or other contract conclusions together with a third party provider. In this case, you will be informed separately about the transfer to third parties before your data is passed on.
8. Rights of data subjects
The stored personal data will be deleted if your knowledge is no longer required to fulfill the purpose of the storage or if your storage is inadmissible for other legal reasons or if you revoke your consent.
As a data subject, you have the following rights:
• In accordance with Art. 15 GDPR, the right to request information about your personal data processed by us to the extent specified therein;
• In accordance with Art. 16 GDPR, the right to immediately request the correction of incorrect personal data or the completion of your personal data stored by us;
• In accordance with Art. 17 GDPR, the right to request the deletion of your personal data stored by us, unless further processing
- to exercise the right to freedom of expression and information;
- to fulfil a legal obligation;
- for reasons of public interest or
- is necessary for the establishment, exercise or defense of legal claims;
• In accordance with Art. 18 GDPR, the right to request that the processing of your personal data be restricted, insofar as
- you dispute the accuracy of the data;
- the processing is unlawful, but you refuse to delete it;
- we no longer need the data, but you need them to assert, exercise or defend legal claims or
- you have objected to the processing in accordance with Art. 21 GDPR;
• In accordance with Art. 20 GDPR, the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transmitted to another person responsible;
• According to Art. 77 GDPR the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or work or our company headquarters.
According to the Federal Data Protection Act, you have the right to free information about your stored data and, if necessary, the right to correct, block or delete this data.
9. Contact person & contact options for data protection
For information, correction, blocking or deletion of your data, objection to the use of your data for purposes of advertising or market or opinion research, revocation of granted consent or other questions or concerns on the subject of data protection, you can find our contact details in our imprint or contact us contact email@example.com directly .
If you have any questions about the collection, processing or use of your personal data, information, correction, restriction or deletion of data as well as revocation of granted consent or objection to a specific use of data, please contact us directly using the contact details in our imprint.
In order to protect data protection, the BDSG also provides for further instances that are intended to ensure compliance with the applicable data protection requirements and to help you enforce your rights. As the supervisory authority, the following is responsible for us:
State Office for Data Protection Supervision
The Hessian Commissioner for
Data Protection and Freedom of Information
PO Box 3163
Telephone: +49 611 1408 - 0
Fax: +49 611 1408 - 611
10. Methods of Payment
10.1. Use of PayPal as a payment method
The personal data transmitted to PayPal are usually first name, last name, address, telephone number, IP address, email address, or other data that are required for order processing, as well as data that is related to Your order includes the number of articles, article number, invoice amount and taxes in percent, invoice information, etc. The transmission of this data is necessary for the processing of your order. Paypay can also pass on the transmitted data to third parties (service providers, subcontractors or other affiliated companies) insofar as this is necessary to fulfill the contractual obligations from your order or the personal data are to be processed in the order.
10.2. Use of Sofort-Überweisung by Stripe
If you pay by Sofortüberweisung, your bank details will not be saved by us, but will be encrypted using the "SSL" method and passed on to the payment service provider StripePayments Europe Ltd., Block 4, Harcourt Center, Harcourt Road, Dublin 2, Ireland and processed by Stripe. Stripe processes the following information:
With regard to all transactions:
• the date of the transaction,
• Amount of money in the transaction.
• Status of the transaction (accepted / rejected)
When paying via SEPA:
• Surname and first name of the account holder
The current data protection information on Stripe and additional information can be found on the website:
If you have any questions
firstname.lastname@example.org or to:
185 Berry Street, Suite 550
San Francisco, CA 94107, USA
e.g. Att: Stripe Legal Department
We also use the data given above for statistical analysis of our website. The processing takes place in accordance with Art. 6 Para. 1 S. 1 Letter b GDPR to carry out a contract with you or for legitimate interests in accordance with Art. 6 Para. 1 S. 1 Letter f GDPR. The data will only be processed for as long as is necessary for the stated purposes. The financial information is only stored at Stripe. We have no access to this.
10.3. Use of checkoutportalbywirecard as a payment method
When paying via the payment service provider "checkoutportalbywirecard", payment is processed via the payment service providercheckoutportalbywirecard, Wirecard UK & Ireland Ltd, 1st Floor Ulysses House, Foley Street Dublin 1, Ireland, to whom we will provide the information you provided during the ordering process along with the information about your order (name , Address, possibly IBAN, possibly BIC, invoice amount, currency and possibly transaction number). Your data will only be passed on for the purpose of processing payments with the payment service provider checkoutportalbywirecard.
11. Use of our web shop / online store
11.1. If you would like to order something in our webshop / online store, you have the choice whether you only need to enter your data required for the order once for this order or whether you want to create a customer account in which your data will be saved for future purchases. If you do not create a customer account, we will save your data for the purpose of fulfilling the contract and delete it as soon as we are no longer legally obliged to save it. Mandatory information required for processing the contracts is marked separately; further information is voluntary. When you create an account under “My Account”, the data you provide there will be saved and revocable. You can always delete the account in the customer area. Even if you register a customer account, you will not receive any advertising emails or post from us.
11.2. We use the data you provide to process your order. For this purpose, we pass on your address data to a commissioned shipping company and, if necessary, your payment data to our house bank. We delete these after the contract has been processed and the retention obligations under tax and commercial law have expired.
11.3. In order to prevent unauthorized access by third parties to your personal data, especially financial data, the order process is encrypted using SSL technology.
11.4. If you place your order via our webshop on the platform etsy.com or www.dawanda.com or www.facebook.com or www.amazon.de , the data protection regulations apply in addition to these data protection regulations:
• the EtsyIreland UC, 66/67 Great Strand Street, Dublin 1, Ireland, https://www.etsy.com/de/legal/privacy/
• DaWanda GmbH, Windscheidstr. 18, 10627 Berlin, Germany https://de.dawanda.com/page/privacy
• Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland https://www.facebook.com/policy.php
• the Amazon Europe Core S.à.rl https://www.amazon.de/gp/help/customer/display.html/ref=footer_privacy?ie=UTF8&nodeId=201909010
Email advertising with registration for the newsletter
If you register for our newsletter, we will use the data required for this or separately provided by you in order to regularly send you our e-mail newsletter based on your consent in accordance with Art. 6 Para. 1 S. 1 lit.
Unsubscribing from the newsletter is possible at any time and can be done either by sending a message to the contact option described below or via a link provided in the newsletter. After unsubscribing, we will delete your e-mail address unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we will inform you in this declaration.
12.1. We use our service provider SendGrid, Inc. to register for our newsletter. If you have actively given your consent, we will send you our e-mail newsletter at irregular intervals.
If you would like to subscribe to our newsletter, you can actively send us a message via our newsletter registration box at the bottom of each page of our online shop. Newsletter data, such as e-mail address and voluntary data such as title, surname, first name, zip code and city and date of birth (if you have specified it) are transmitted to SendGrid, Inc., which stores the data on our behalf and for sending newsletters has been commissioned, but does not transmit or pass on this data to third parties. Of course, you can unsubscribe from the newsletter at email@example.com at any time .
We will save your email address until you unsubscribe from the newsletter. The storage serves the sole purpose of being able to send you the newsletter. Furthermore, we save your IP addresses and the times when you register and confirm in order to prevent misuse of your personal data.
12.2. The only mandatory information for sending the newsletter is the email address. The provision of further, separately marked, information is voluntary and is only used to personalize the newsletter. These data will also be completely deleted if you withdraw your consent.
12.3. You can revoke your consent to the sending of the newsletter at any time. You can declare your revocation by clicking on the link provided in every newsletter e-mail, by e-mail or letter to the contact details given in the legal notice.
12.4. Our newsletters are sent using the service provider "SendGrid, Inc.", operated by the US-based company SendGrid Inc., 1801 California Street, Suite 500, Denver Colorado 80202, USA ("SendGrid").
The data provided in connection with the registration for our newsletters, in particular your specified email address, are stored on SendGrid's servers, which are located outside the EU. SendGrid uses this information to send and evaluate the newsletter on our behalf.
According to its own information, SendGrid does not use this data to pass it on to third parties. We trust the reliability and the IT and data security of SendGrid. SendGrid is certified under the US-EU data protection agreement " SendGrid's data protection regulations here .
13. Customer and product reviews
13.1. For the purposes of customer and product reviews by customers of the web shop and for quality management, we have integrated the review app “Comments” from the service provider Automattic, Inc. “WooCommerce” on jolly-designs.com . After purchasing, customers can submit an anonymous rating to our online shop. We would like to send you an e-mail within 14 days of shipping the goods to ask you to submit a review on www.jolly-designs.com . You always have the right not to carry out the customer review.
13.2. With your order from us, you automatically agree to an electronic review request by Jolly Designs. You are free to ignore this review request or, in advance, to include Jolly Designs in your spam rule. However, with your rating you would be very helpful to us and other customers.
13.3. We also look forward to reviews on Google and our Facebook offer. You can find the data protection regulations here:
• Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA
• Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland https://www.facebook.com/policy.php
14. Use of Automattic, Inc. "WooCommerce"
14.1. The website is provided using the service provider Automattic, Incl., Operated by the US-based company Automattic, Inc., 60 29th Street # 343, San Francisco, CA 94110, USA (“WooCommerce”).
14.2. Data provided in connection with the use of the website, in particular your e-mail address, can be passed on to WooCommerce by us to carry out certain services (including sending our newsletter) and for the technical optimization of the website and on the WooCommerce servers, which are located outside the EU. WooCommerce uses this information exclusively for the technical optimization of the website on our behalf.
14.3. According to its own information, WooCommerce does not use this data to pass it on to third parties. We trust in the reliability and the IT and data security of WooCommerce. WooCommerce is certified under the US-EU data protection agreement " Privacy Shield
15. SSL encryption
The encryption of sensitive data transfers takes place with SSL certificates (Secure Soket Layer) which is provided by our online shop operator WooCommerce.
16. Use of Google services
16.1. This website uses Google Analytics, a web analysis service from Google Inc. (“Google”). Google Analytics uses so-called "cookies", text files that are stored on your computer and that enable your use of the website to be analyzed. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. If IP anonymization is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The full IP address will only be sent to a Google server in the USA and shortened there in exceptional cases.
16.1.1. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You can prevent the storage of cookies by setting your browser software accordingly; we would like to point out, however, that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by using the browser plug-in available under the following link. Download and install it from: http://tools.google.com/dlpage/gaoptout?hl=de . 3
16.1.2. This website uses Google Analytics with the extension "_anonymizeIp ()". As a result, IP addresses are further processed in abbreviated form, so that direct personal reference can be ruled out.
16.2. Use of the Google "+1" button
The “+1” button of the social network Google Plus from Google Inc., 1600 Amphitheater Parkway, Mountain View, California, 94043 USA, (hereinafter “Google”) is used on this website. If a website with the "+1" button on our website is called up, a connection to the Google servers in the USA is established and the button is displayed on the website by a message to your browser. Both your IP address and the information about which of our website you have visited are transmitted to the Google server. This applies regardless of whether you are registered or logged in to Google Plus. A transmission takes place even with unregistered or not logged in users. The "+1" button is not used to record your visits to the Internet. When a "+1" button is displayed, Google does not permanently log your browser history and does not evaluate your visit to a page with a "+1" button in any other way. Google stores data about your visit for about two weeks for system maintenance and troubleshooting purposes. However, this data is not structured according to individual profiles, user names or URLs and is also not forwarded to us.
If you are also a member of
Google Plus and are logged in to Google Plus while you are using the plugin,
the information collected about your website visit is linked to your Google
Plus account and made known to other users. In the case of interactions
that are possible with the various Google plugins, the corresponding
information about you is collected and transmitted to Google and
stored. You can see an overview of the different types of Google plugins
If you have made your profile publicly accessible in the Google Plus settings, your "+1" from Google can be used as a reference along with your profile name and your photo in Google services, such as in search results or in your Google profile, or to displayed in other places on websites and advertisements on the Internet. If you do not want Google to directly assign the information collected to your Google Plus profile, you must log out of Google Plus before visiting our site.
You can find more information on the collection and use of data by Google, your rights in this regard and options for protecting your privacy in Google's data protection information: www.google.com/intl/de/+/policy/+1button.html .
16.3. Use of Google Adwords (remarketing / conversion tracking)
Our website uses the Google Adwords service. Google AdWords is an online advertising program from Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (“Google”).
We also use what is known as conversion tracking when using the Google AdWords service. If you click on an advertisement placed by Google, a cookie for conversion tracking will be placed on your computer / device. These cookies lose their validity after 30 days, contain no personal data and are therefore not used for personal identification. The information that is obtained using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking.
You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. In addition, you can deactivate interest-related ads on Google and interest-related Google ads on the web (within the Google display network) in your browser by activating the "Off" button or deactivating it at http://www.google.de/settings/ads at http://www.aboutads.info/choices/ . You can find more information about your setting options and data protection at Google at https://www.google.de/intl/de/policies/privacy/?fg=1 .
17 Use of YouTube and vimeo
17.1. This website uses components (videos) from YouTube, LLC 901 Cherry Ave., 94066 San Bruno, CA, USA, a company of Google Inc., Amphitheater Parkway, Mountain View, CA 94043, USA.
17.2. When you call up a page that has an embedded video, a connection to the YouTube servers is established and the content is displayed on the website by notifying your browser.
17.3. According to the information provided by YouTube, only data is transmitted to the YouTube server in the ”- extended data protection mode -”, in particular which of our websites you have visited when you watch the video. If you are logged into YouTube at the same time, this information will also be assigned to your YouTube member account. You can prevent this by logging out of your member account before visiting our website.
17.4. Further information on data protection from YouTube is provided by Google under the following link. https://www.google.de/intl/de/policies/privacy/
17.5. This website uses components (videos) from Vimeo, Inc. 555 West 18th Street, New York, New York 10011, USA
17.6. If you call up a page that has an embedded video, a connection to the Vimeo servers is established and the content is displayed on the website by notifying your browser.
17.7. Further information on data protection from vimeo is provided under the following link. https://vimeo.com/privacy
18. Use of social media plug-ins
18.1. We currently use the following social media plug-ins:
We use the so-called 2-click solution. This means that when you visit our site, no personal data is initially passed on to the providers of these plug-ins. You can recognize the provider of the plug-in by the symbols based on the first letter / symbol. Personal data is only transmitted if you click on one of the plug-ins: By activating the plug-in, data is automatically transmitted to the respective plug-in provider and stored there (for US providers in the USA). We have no influence on the collected data and data processing, nor are we aware of the full scope of the data collection, the purposes and the storage periods. Since the plug-in provider collects data in particular using cookies, we recommend that you
18.2. When you activate a plug-in, the plug-in provider receives the information that you have accessed the corresponding subpage of our online offer. In addition, the data mentioned in section 4 of this declaration is transmitted, although in the case of Facebook, according to the information provided by the respective provider in Germany, only an anonymised IP is collected. This happens regardless of whether you have an account with this plug-in provider and are logged in there. If you are logged in with the plug-in provider, this data will be assigned directly to your account. If you press the activated button and z. If, for example, you link the page, the plug-in provider also saves this information in your user account and communicates this publicly to your contacts. If you do not want your profile to be assigned to the plug-in provider,
18.3. The plug-in provider saves this data as a usage profile and uses it for advertising, market research and / or needs-based design of its website. Such an evaluation takes place in particular (also for users who are not logged in) to display needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, although you must contact the respective plug-in provider to exercise this.
18.4. Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the data protection declarations of these providers, which are provided below. There you will also find further information on your rights in this regard and setting options to protect your privacy.
18.5. Addresses of the respective providers and URL with their data protection information:
• Facebook Inc., 1601 S
California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php; further
information on data collection:
https://www.facebook.com/help/186325668085084 x and https://www.facebook.com/about/privacy
• Google Inc., 1600
Amphitheater Parkway, Mountainview, California 94043, USA;
• Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA; http://instagram.com/about/legal/privacy/
• Pinterest, Inc., 808 Brannan St, San Francisco, CA 94103, USA, http://pinterest.com/about/privacy/
• Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA; https://twitter.com/privacy .
19. Use of other Facebook services
19.1. Facebook remarketing / retargeting
Remarketing tags from the social network Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA are integrated on our website. When you visit our website, the remarketing tags establish a direct connection between your browser and the Facebook server. Facebook receives the information that you have visited our site with your IP address. This enables Facebook to assign your visit to our website to your user account. We can use the information obtained in this way to display Facebook ads. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the data transmitted or its use by Facebook.
You can find more information on this in Facebook's data protection declaration at https://www.facebook.com/about/privacy/ . If you do not want data to be collected via Custom Audience, you can deactivate Custom Audiences here .
20. Conversion measurement with the Facebook visitor action pixel
We have decided against using the “visitor action pixel” from Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”) on our website and therefore do not use it.
21. Changes to the data protection declaration
We reserve the right to change the data protection declaration in order to adapt it to changed legal situations or to changes in the services offered and data processing. However, this only applies to declarations on data processing. If the consent of the user is required or components of the data protection declaration contain provisions of the contractual relationship with the users, the changes will only be made with the consent of the user.
The users are asked to inform themselves regularly about the content of the data protection declaration.