PRIVACY POLICY
Below, we inform you about the type, scope, and purpose of processing your personal data when using our website "www.vabelli.de." Personal data refers to all information related to an identified or identifiable natural person.
1. Controller
The controller under the EU General Data Protection Regulation (GDPR) is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data. For personal data processed during your visit to our website, the controller under the GDPR is:
Janine Mayer, Hochbergstr. 13, 88456 Ingoldingen, Germany
Phone: +49 7355 932763
Email: handmade@vabelli.de (referred to as "we" below).
2. When you visit our website
When you visit our website, our server collects the following information from your device: browser type and version, operating system, the previously visited website ("referrer"), IP address, and the time of page access.
We collect and process this data to ensure the smooth operation of our website and to detect, prevent, and pursue misuse of our services. Additionally, we use the data for statistical purposes, such as analyzing which devices and browsers access our platform, to continually adapt and improve our services based on user needs. This data processing is based on Article 6(1)(f) GDPR.
All the personal data mentioned above will be deleted no later than twelve months after collection.
3. Data processors
For operating our website, we utilize the technical services of Mittwald (Mittwald CM Service GmbH, 32339 Espelkamp, Germany) as a data processor in accordance with Article 28 GDPR.
4. Contacting us
If you send us a message via email, we store your message along with the sender data provided (name, email address, and any additional information added by your email program and transmitting servers). For receiving, storing, and sending emails, we use the services of Mittwald (Mittwald CM Service GmbH, 32339 Espelkamp, Germany) as a data processor in accordance with Article 28 GDPR.
The legal basis for this data processing is our legitimate interest in responding to your message and addressing any follow-up questions you may have (Article 6(1)(f) GDPR). We delete the data collected with your message no later than twelve months after the last communication with you regarding your inquiry, subject to the following provision:
If you send us a legally significant statement regarding a contractual relationship with us, the legal basis for processing (regardless of the method of transmission) is also Article 6(1)(b) GDPR. In such cases, we delete the data associated with your statement as soon as all mutual claims from the contractual relationship have been finally settled and the commercial and tax retention periods have expired.
5. Use of cookies
If you have consented to the use of cookies, we place one or more "cookies" on your device. A cookie is a small text file that allows us to recognize your device when you visit our website again. Cookies also enable us to analyze certain user behaviors, such as which areas of the website you view, how long you stay, and when and how often you return. Cookies we place are deleted no later than twelve months after your last visit.
This data processing is based on your consent (Article 6(1)(a) GDPR).
You can prevent cookies from being stored by adjusting your browser's cookie settings to block cookies from our website or all websites. You can also delete cookies that have already been stored.
6. Google Services
If you have consented, we use certain services from Google on our website. If you visit our website from a location within the European Union, Norway, Iceland, Liechtenstein, or Switzerland, "Google" refers to Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Otherwise, it refers to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
General information on how Google uses data can be found at: [Google Partner Sites](https://policies.google.com/technologies/partner-sites) ("How Google uses data from sites or apps that use our services").
7. Google Analytics
If you have consented, we use Google Analytics, a web analysis service by Google. Google places cookies on your device to collect information about your use of our website. This information is transmitted to a Google server, analyzed, and made available to us. We use this information to better understand what interests visitors to our website, evaluate the effectiveness of our advertising materials, and improve our offerings.
The legal basis for this processing is your consent (Article 6(1)(a) GDPR).
We use Google Analytics with IP anonymization enabled. This means your IP address is typically shortened within the scope of the GDPR so that it cannot be linked back to you. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.
You can prevent cookies from being stored by adjusting your browser software accordingly.
8. Google Fonts
If you have consented, our website uses fonts provided by Google ("Google Fonts"). The fonts are directly downloaded by your device from Google when you access our website. This allows Google to know your IP address, operating system, browser type, and version, which Google may use for its own purposes.
9. Social Media
Our website may display social media buttons, recognizable by the logos of the respective platforms (e.g., Facebook: "f" logo, Instagram: camera icon). These buttons are links to the respective platforms. Clicking on one of these links will direct you to the platform's website, transmitting your device's IP address and the URL of the referring page.
We do not collect or process any data in connection with the social media buttons.
10. Your Rights
You have the following rights regarding the personal data we process about you:
- **Access**: You have the right to request confirmation as to whether we are processing your personal data and, if so, to access the data and additional information.
- **Rectification**: You can request the correction of inaccurate personal data or the completion of incomplete data.
- **Erasure**: Under certain conditions, you can request the deletion of your personal data unless its processing is required under GDPR.
- **Restriction**: You can request the restriction of processing under specific circumstances.
- **Data portability**: You have the right to receive the personal data you provided to us in a structured, commonly used, and machine-readable format and to have it transmitted to another controller if technically feasible.
- **Withdrawal of consent**: If processing is based on your consent, you can withdraw it at any time without affecting the lawfulness of processing prior to withdrawal.
For objections and complaints, contact your local data protection authority.
