Privacy policy and consents

Table of contents

1. Objectives and responsible body
2. Basic information on data processing
3. Processing of personal data
4. Collection of access data
5. Cookies & reach measurement
6. Google Analytics
7. Newsletter
8. Integration of third-party services and content
9. User rights and deletion
10. Changes to the privacy policy

This privacy policy explains the type, scope and purpose of the processing (including collection, processing and use as well as obtaining consent) of personal data within our online offering and the websites, functions and content associated with it (hereinafter jointly referred to as "online offering" or "website"). The privacy policy applies regardless of the domains, systems, platforms and devices (e.g. desktop or mobile) used on which the online offering is executed.

The provider of the online offer and the party responsible for data protection is Art Brüt / Art Brüt Care GbR, Beetsweg 21, 22765 Hamburg (hereinafter referred to as “provider”, “we” or “us”). For contact options, please refer to our imprint.

The term "user" includes all customers and visitors to our online offering. The terms used, such as "user", are to be understood as gender-neutral.

2. Basic information on data processing

We only process users' personal data in compliance with the relevant data protection regulations and in accordance with the principles of data economy and data avoidance. This means that users' data will only be processed if there is legal permission, in particular if the data is required to provide our contractual services and online services, or is legally required, or if consent is given.

We take organizational, contractual and technical security measures in line with the state of the art to ensure that the provisions of data protection laws are complied with and to protect the data we process against accidental or intentional manipulation, loss, destruction or access by unauthorized persons.

If content, tools or other means from other providers (hereinafter referred to jointly as "third-party providers") are used within the scope of this data protection declaration and their stated headquarters are abroad, it can be assumed that data will be transferred to the countries in which the third-party providers are based. The transmission of data to third countries takes place either on the basis of legal permission, user consent or special contractual clauses that guarantee the legally required security of the data.

3. Processing of personal data

In addition to the uses expressly mentioned in this privacy policy, the personal data will be processed for the following purposes on the basis of legal permissions or consent of the users:

– The provision, execution, maintenance, optimization and security of our services and user benefits;

– Ensuring effective customer service and technical support.

We only transmit user data to third parties if this is necessary for billing purposes (e.g. to a payment service provider) or for other purposes if these are necessary to fulfil our contractual obligations to users (e.g. address communication to suppliers).

When you contact us (via contact form or email), the user's details are stored for the purpose of processing the request and in the event that follow-up questions arise.

Personal data will be deleted if it has fulfilled its intended purpose and there are no retention obligations that prevent deletion.

4. Collection of access data

We collect data about every access to the server on which this service is located (so-called server log files). The access data includes the name of the website accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider.

We use the log data without assigning it to the user or creating any other profile in accordance with legal provisions only for statistical evaluations for the purpose of operating, securing and optimizing our online offering. However, we reserve the right to subsequently check the log data if there is reasonable suspicion of illegal use based on concrete evidence.

5. Cookies & reach measurement

Cookies are information that is transferred from our web server or third-party web servers to the user's web browser and stored there for later retrieval. Users are informed about the use of cookies in the context of pseudonymous reach measurement in this data protection declaration.

This website can also be viewed without cookies. If users do not want cookies to be saved on their computer, they are asked to deactivate the corresponding option in the system settings of their browser. Saved cookies can be deleted in the system settings of the browser. The exclusion of cookies can lead to functional restrictions of this website.

It is possible to manage many companies' online advertising cookies through the US site http://www.aboutads.info/choices or the EU site http://www.youronlinechoices.com/uk/your-ad-choices/ .

6. Google Analytics

We use Google Analytics, a web analysis service provided by Google Inc. ("Google"). Google uses cookies. The information generated by the cookie about the use of the website by users is usually transferred to a Google server in the USA and stored there.

Google will use this information on our behalf to evaluate the use of our website by users, to compile reports on the activities within this website and to provide us with other services related to the use of this website and the Internet. Pseudonymous user profiles can be created from the processed data.

We only use Google Analytics with activated IP anonymization. This means that the user's IP address is shortened by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.

The IP address transmitted by the user's browser will not be merged with other data from Google. Users can prevent the storage of cookies by setting their browser software accordingly; users can also prevent Google from collecting the data generated by the cookie and relating to their use of the website and from processing this data by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de .

Further information on Google's use of data for advertising purposes, setting options and objection options can be found on Google's websites: https://www.google.com/intl/de/policies/privacy/partners ("How Google uses data when you use our partners' websites or apps"), http://www.google.com/policies/technologies/ads ("How Google uses data for advertising purposes"), http://www.google.de/settings/ads ("Manage information that Google uses to show you ads") and http://www.google.com/ads/preferences ("Determine which ads Google shows you").

7. Newsletter

With the following information we will inform you about the contents of our newsletter as well as the registration, dispatch and statistical evaluation procedures as well as your right of objection. By subscribing to our newsletter you agree to receive it and to the procedures described.

Content of the newsletter: We only send newsletters, emails and other electronic notifications with advertising information (hereinafter "newsletter") with the consent of the recipient or with legal permission. If the contents of the newsletter are specifically described when registering for the newsletter, they are decisive for the user's consent. In addition, our newsletters contain the following information: our products, offers, promotions and our company.

Double opt-in and logging: Registration for our newsletter is carried out using a so-called double opt-in process. This means that after registration you will receive an email asking you to confirm your registration. This confirmation is necessary so that no one can register using someone else's email address. Registrations for the newsletter are logged in order to be able to prove the registration process in accordance with legal requirements. This includes storing the time of registration and confirmation, as well as the IP address. Changes to your data stored by the shipping service provider are also logged.

The email addresses of our newsletter recipients, as well as their other data described in this notice, are stored on the servers of the shipping service provider. The shipping service provider uses this information to send and evaluate the newsletter on our behalf. Furthermore, according to its own information, the shipping service provider can use this data to optimize or improve its own services, e.g. to technically optimize the sending and presentation of the newsletter or for commercial purposes in order to determine which countries the recipients come from. However, the shipping service provider does not use the data of our newsletter recipients to write to them directly or to pass it on to third parties.

Registration data: To register for the newsletter, it is sufficient to provide your email address. Optionally, we ask you to provide the following data: “First and last name for the purpose of personalizing the newsletter. Date of birth, gender and industry in order to adapt the content of the newsletter to the interests of our readers.”

Statistical surveys and analyses – The newsletters contain a so-called “web beacon”, i.e. a pixel-sized file that is retrieved from the server of the mailing service provider when the newsletter is opened. As part of this retrieval, technical information such as information about the browser and your system, as well as your IP address and the time of retrieval, are initially collected. This information is used to technically improve the services based on the technical data or the target groups and their reading behavior based on their retrieval locations (which can be determined using the IP address) or the access times. The statistical surveys also include determining whether the newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to the individual newsletter recipients. However, it is neither our aim nor that of the mailing service provider to observe individual users. The evaluations are much more used to identify the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.

Cancellation/Revocation - You can cancel your subscription to our newsletter at any time, i.e. revoke your consent. This also means that your consent to the dispatch of the newsletter by the shipping service provider and the statistical analyses will expire. Unfortunately, a separate revocation of the dispatch of the newsletter by the shipping service provider or the statistical analysis is not possible. You will find a link to cancel the newsletter at the end of each newsletter.

8. Integration of third-party services and content

It may happen that content or services from third-party providers, such as city maps or fonts from other websites, are integrated into our online offering. The integration of content from third-party providers always requires that the third-party providers perceive the IP address of the user, since without the IP address they would not be able to send the content to the user's browser. The IP address is therefore required to display this content. Furthermore, the providers of the third-party content can set their own cookies and process the user's data for their own purposes. User profiles can be created from the processed data. We will use this content as economically and data-avoidingly as possible and select reliable third-party providers with regard to data security.

The following presentation provides an overview of third-party providers and their content, along with links to their privacy policies, which contain further information on the processing of data and, in some cases already mentioned here, options for objection (so-called opt-out):

– External fonts from Google, Inc., https://www.google.com/fonts (“Google Fonts”). The Google Fonts are integrated by calling a server at Google (usually in the USA).

Privacy Policy: https://www.google.com/policies/privacy/ ,

Opt-Out: https://www.google.com/settings/ads/ .

– Maps from the “Google Maps” service provided by the third-party provider Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Privacy Policy: https://www.google.com/policies/privacy/ ,

Opt-Out: https://www.google.com/settings/ads/ .

– Videos from the “YouTube” platform of the third-party provider Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy Policy: https://www.google.com/policies/privacy/, Opt-Out: https://www.google.com/settings/ads/.

9. User rights and deletion of data

Users have the right to receive, upon request and free of charge, information about the personal data we have stored about them.

In addition, users have the right to correct inaccurate data, revoke consent, block and delete their personal data, and the right to lodge a complaint with the competent supervisory authority in the event of suspected unlawful data processing.

The data stored by us will be deleted as soon as it is no longer required for its intended purpose and there are no statutory retention periods that prevent deletion.

10. Changes to the privacy policy

We reserve the right to change the privacy policy in order to adapt it to changes in the legal situation or in the event of changes to the service or data processing. However, this only applies to statements on data processing. If the consent of the users is required or if parts of the privacy policy contain provisions of the contractual relationship with the users, the changes will only be made with the consent of the users.

Users are asked to regularly inform themselves about the content of the data protection declaration.

Status: May 2023