Data protection declaration

Personal data (hereinafter only referred to as "data" here) are only processed by us as part of the necessity and for the purpose of providing a functional and user -friendly website, including its content and the services offered there.
In accordance with Art. 4 Section 1. Of the Ordinance (EU) 2016/679, i.e. the General Data Protection Regulation (hereinafter referred to as "GDPR"), every process carried out with or without the help of automated procedures is considered in connection with or without any such process series in connection With personal data, such as collecting, capturing, organization, ordering, storing, adapting or changing, reading, the use, the use, the disclosure by transmission, distribution or another form of provision, comparison or The link, restriction, deletion or destruction.
With the following data protection declaration, we will inform you in particular about the type, scope, purpose, duration and legal basis of the processing of personal data, insofar as we decide either alone or together with others about the purposes and means of processing. In addition, we will inform you below about the foreign components used by us for optimization purposes and to increase the quality of use, insofar as this processes third parties in our own responsibility.
Our data protection declaration is divided as follows:
I. Information about us as the person responsible
II. Rights of users and those affected
III. Information on data processing

I. Information about us as the person responsible
Responsible provider of this website in the data protection sense is:
Bombasei Decor GmbH
Schluchttalstr. 20
79761 Waldshut-Tiengen
Germany
Telephone: 07741 699 30 15
Fax: 07741 640 85 35
Email: s.ebe@bombasei.de
Data protection officer at the provider is:
Stefanie Ebe

II. Rights of users and those affected
With regard to the data processing described below, the users and those affected have the right
• confirming whether you are processed in relation to information about the processed data, further information about data processing and copies of the data (see also Art. 15 GDPR);
• to correct or complete incorrect or incomplete data (see also Art. 16 GDPR);
• On the immediate deletion of the data relating to it (see also Art. 17 GDPR), or, alternatively, insofar as further processing in accordance with Art. 17 Para. 3 GDPR is required, to restriction of processing in accordance with Art. 18 GDPR;
• receipt of the data relating to it and provided by you and to transmit this data to other providers/responsible (see also Art. 20 GDPR);
• to complaint to the supervisory authority, if they believe that the data relating to it are processed by the provider under violation of data protection regulations (see also Art. 77 GDPR).
In addition, the provider is obliged to include all recipients who have been disclosed from data by the provider, via any correction or deletion of data or the restriction of processing, which is carried out on the basis of Article 16, 17 (1) and 18 GDPR teach. However, this obligation does not exist if this communication is impossible or associated with disproportionate effort. Without prejudice to this, the user has the right to information about these recipients.
Users and those affected also have the right to object to the future processing of the data relating to them according to Art. 21 GDPR, provided the data is processed by the provider in accordance with Art. 6 Para. 1 lit. f) GDPR. In particular, an objection to data processing is permitted for the purpose of direct marketing purposes.

III. Information on data processing
Your data processed when using our website will be deleted or blocked as soon as the purpose of the storage is no longer necessary, the deletion of the data does not conflict with legal retention obligations and that no other information on individual processing procedures is given below.

Server data
For technical reasons, in particular to ensure a secure and stable website, data is transmitted to us or to our web space provider through your Internet browser. With these so-called server log files, the type and version of your internet browser, the operating system, the website, from which you switch to our website (referrer URL), the website (s) of our website you visit, date and time of the respective access and the IP address of the Internet connection, from which the use of our website is used.
These data collected in this way are temporarily saved, but not together with other data from you.
This storage takes place on the legal basis of Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in the improvement, stability, functionality and safety of our website.
The data will be deleted after seven days at the latest, provided that no further storage is required for evidence. Otherwise, the data is entirely or partially excluded from deletion until the final clarification of an incident.

Cookies
a) session cookies/session cookies
We use so -called cookies with our website. Cookies are small text files or other storage technologies that are placed and stored on your device by the Internet browser you use. These cookies process certain information from you to an individual extent, such as your browser or location data or your IP address.
This processing becomes our website more user -friendly, more effective and more secure, since the processing, for example, enables the reproduction of our website in different languages ​​or the offer of a shopping cart function.
The legal basis of this processing is Art. 6 Para. 1 Lit b.) GDPR, provided that the cookies are processed data for the contract initiation or contract processing.
If the processing does not serve to initiate the contract or contract, our legitimate interest is in the improvement of the functionality of our website. The legal basis is in Art. 6 Para. 1 lit. f) GDPR.
When your internet browser is closed, these session cookies are deleted.
b) third-party cookies
If necessary, our website also uses cookies from partner companies with which we work for the purpose of advertising, analysis or functionalities of our website.
The details of this, in particular for the purposes and the legal basis of processing such third-party cookies, can be found in the following information.
c) disposal option
You can prevent or restrict the installation of cookies by setting your internet browser. You can also delete already stored cookies at any time. However, the steps and measures required for this depend on your specifically used internet browser. If you have any questions, please use the help function or documentation of your internet browser or contact its manufacturer or support. With so-called flash cookies, the processing cannot be prevented via the settings of the browser. Instead, you have to change the setting of your flash player. The steps and measures required for this also depend on your specifically used flash player. If you have any questions, please also use the help function or documentation of your flash player or contact the manufacturer or user support.
If you prevent or restrict the installation of the cookies, this can mean that not all functions of our website can be fully usable.

Customer account / registration function
If you create a customer account with us via our website, we will only use the data you enter in the registration (i.e. your name, address or e-mail address) only for pre-contractual services, for the fulfillment of the contract or for the purpose of Customer care (e.g. to provide you with an overview of your previous orders or to be able to offer you the so -called notification function). At the same time, we then save the IP address and the date of your registration along with time. Of course, this data is not passed on to third parties.
As part of the further registration process, your consent will be obtained into this processing and referred to this data protection declaration. The data we collect are used exclusively for the provision of the customer account.
Insofar as you consent to this processing, Art. 6 Para. 1 lit. a) GDPR is the legal basis for processing.
If the opening of the customer account also also serves pre -contractual measures or the fulfillment of the contract, the legal basis for this processing is also Art. 6 Para. 1 lit. b) GDPR.
The consent given to us in the opening and maintenance of the customer account can be revoked at any time with effect for the future in accordance with Art. 7 Para. 3 GDPR. All you have to do is inform us about your revocation.
The data collected in this respect is deleted as soon as the processing is no longer necessary. However, we have to observe tax and commercial law storage periods.

Newsletter
If you register for our free newsletter, the data you request will be sent to us to us, i.e. your email address and - optional - your name and address. At the same time, we store the IP address of the Internet connection from which you access our website and the date and time of your registration. As part of the further registration process, we will obtain your consent to the sending of the newsletter, describe the content specifically and refer to this data protection declaration. We use the data collected exclusively for newsletter shipping-in particular, they are not passed on to third parties.
The legal basis here is Art. 6 Para. 1 lit. a) GDPR.
You can revoke your consent to the newsletter shipping in accordance with Art. 7 Para. 3 GDPR at any time with effect for the future. All you have to do is inform us about your revocation or press the deregistration link contained in each newsletter.

Contact inquiries / contact options
If you get in touch with us using the contact form or email, the data you provide will be used to process your request. The information of the data is required to process and answer your request - without its provision we cannot answer your request or at best.
The legal basis for this processing is Art. 6 Para. 1 lit. b) GDPR.
Your data will be deleted if your request has been answered in conclusion and there are no statutory retention obligations, such as the subsequent contract processing.

LinkedIn
At LinkedIn we entertain an online presence to present our company and our services and to communicate with customers/interested parties. LinkedIn is a service from LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, a subsidiary of the LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA.
In this respect, we point out that there is a possibility that data from users outside the European Union, especially in the United States, are processed. In this way, increased risks for users can exist in that, for example, the later access to the user data can be made more difficult. We also have no access to these user data. The access option is exclusively with LinkedIn.
You can find the data protection information from LinkedIn at
https://www.linkedin.com/legal/privacy-policy

Facebook
To apply for our products and services as well as for communication with interested parties or customers, we operate a company presence on the Facebook platform.
On this social media platform we are responsible for Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2 Ireland.
The Facebook data protection officer can be reached using a contact form:
https://www.facebook.com/help/contact/540977946302970
We have regulated the common responsibility in an agreement regarding the respective obligations within the meaning of the GDPR. This agreement, from which the mutual obligations arise, can be called up under the following link:
https://www.facebook.com/legal/terms/page_controller_addendum
The legal basis for the resulting processing of personal data is Art. 6 Para. 1 Lit. f GDPR. Our legitimate interest is in the analysis, communication as well as sales and application of our products and services.
The legal basis can also be a consent of the user in accordance with Art. 6 Para. 1 lit. a GDPR to the platform operator. According to Art. 7 Para. 3 GDPR, the user can revoke the consent for this at any time by notification to the platform operator for the future.
When calling our online appearance on the Facebook platform, Facebook Ireland Ltd. processed as the operator of the platform in the EU data of the user (e.g. personal information, IP address, etc.).
This data of the user serve on statistical information about the use of our company presence on Facebook. The Facebook Ireland Ltd. Use this data for market research and advertising purposes and to create users' profiles. Based on these profiles, it is the Facebook Ireland Ltd. For example, possible to advertise users within and outside of Facebook. If the user is logged into on Facebook at the time of the call in his account, Facebook Ireland Ltd. In addition, link the data to the respective user account.
In the event of contacting the user via Facebook, the personal data of the user in this occasion will be used to process the request. The data of the user will be deleted with us, provided that the user's request has been answered and there are no legal retention obligations, such as a subsequent contract processing.
To process the data, Facebook Ireland Ltd. Cookies may also be set.
If the user does not agree with this processing, it is possible to prevent the installation of the cookies by setting the browser by means of a corresponding setting. Cookies that have already been stored can also be deleted at any time. The settings for this depend on the respective browser. With flash cookies, the processing cannot be prevented via the settings of the browser, but by the corresponding setting of the flash player. If the user prevent or restrict the installation of the cookies, this can lead to not all functions of Facebook can be used in full.
More information on the processing activities, their connection and deletion of the data processed by Facebook can be found in the Facebook data directive:
https://www.facebook.com/privacy/explanation
It is not excluded that the processing by Facebook Ireland Ltd. also via Facebook Inc., 1601 Willow Road, Menlo Park, California 94025 in the USA.

Instagram
We operate a company presence on the Instagram platform to apply our products and services as well as communication with interested parties or customers.
On this social media platform we are responsible for Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2 Ireland.
The data protection officer of Instagram can be achieved using a contact form:
https://www.facebook.com/help/contact/540977946302970
We have regulated the common responsibility in an agreement regarding the respective obligations within the meaning of the GDPR. This agreement, from which the mutual obligations arise, can be called up under the following link:
https://www.facebook.com/legal/terms/page_controller_addendum
The legal basis for the resulting processing of personal data is Art. 6 Para. 1 Lit. f GDPR. Our legitimate interest is in the analysis, communication as well as sales and application of our products and services.
The legal basis can also be a consent of the user in accordance with Art. 6 Para. 1 lit. a GDPR to the platform operator. According to Art. 7 Para. 3 GDPR, the user can revoke the consent for this at any time by notification to the platform operator for the future.
When calling our online appearance on the Instagram platform, Facebook Ireland Ltd. processed as the operator of the platform in the EU data of the user (e.g. personal information, IP address, etc.).
This data of the user serve on statistical information about the use of our company presence on Instagram. The Facebook Ireland Ltd. Use this data for market research and advertising purposes and to create users' profiles. Based on these profiles, it is the Facebook Ireland Ltd. For example, possible to advertise users inside and outside Instagram. If the user is logged into Instagram in his account at the time of the call, Facebook Ireland Ltd. In addition, link the data to the respective user account.
In the event of contacting the user via Instagram, the personal data of the user in this occasion will be used to process the request. The data of the user will be deleted with us, provided that the user's request has been answered and there are no legal retention obligations, such as a subsequent contract processing.
To process the data, Facebook Ireland Ltd. Cookies may also be set.
If the user does not agree with this processing, it is possible to prevent the installation of the cookies by setting the browser by means of a corresponding setting. Cookies that have already been stored can also be deleted at any time. The settings for this depend on the respective browser. With flash cookies, the processing cannot be prevented via the settings of the browser, but by the corresponding setting of the flash player. If the user prevent or restrict the installation of the cookies, this can lead to not all functions of Facebook can be used in full.
More on the processing activities, their connection and deletion of the data processed by Instagram can be found in the Instagram data directive:
https://help.instagram.com/519522125107875
It is not excluded that the processing by Facebook Ireland Ltd. also via Facebook Inc., 1601 Willow Road, Menlo Park, California 94025 in the USA.

Linking social media about graphics or textlink
We also apply on our website presence on the social networks listed below. The integration takes place via a linked graphic of the respective network. The use of this linked graphic prevents it from calling a website that has a social media application when calling a connection to the respective server of the social network in order to present a graphic of the respective network itself. Only by clicking on the corresponding graphic is the user forwarded to the service of the respective social network.
After the forwarding of the user, the respective network includes information about the user. It cannot be ruled out that processing of the data collected in this way takes place in the United States.
These are first data such as IP address, date, time and page visited. If the user is logged in in his user account of the respective network, the network operator can, if necessary, assign the information collected to the user's personal account. If the user interacts via a "share" button of the respective network, this information can be saved in the user's personal user account and if necessary published. If the user wants to prevent the information collected from being assigned to his user account directly, he must log out before clicking on the graphic. There is also the possibility to configure the respective user account accordingly.
The following social networks are integrated into our website by linking:

Facebook
Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, a subsidiary of Facebook Inc., 1601 S. California Ave., Palo Alto, CA 94304, USA.
Data protection declaration: https://www.facebook.com/policy.php

LinkedIn
LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, a subsidiary of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085 USA.
Data protection declaration: https://www.linkedin.com/legal/privacy-policy

Instagram
Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, a subsidiary of Facebook Inc., 1601 S. California Ave., Palo Alto, CA 94304, USA.
Data protection declaration: https://help.instagram.com/519522125107875

"Facebook" social plug-in
On our website we use the plug-in of the Facebook social networks. Facebook is an Internet service of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. In the EU, this service is again operated by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, hereby both only called "Facebook".
The legal basis is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in the quality improvement of our website.
Further information about the possible plug-ins and their respective functions keeps Facebook at
https://developers.facebook.com/docs/plugins/
ready for you.
If the plug-in is deposited on one of the pages you visited from our website, your Internet browser downloads a representation of the plug-in from Facebook servers in the USA. For technical reasons, it is necessary that Facebook processes your IP address. In addition, the date and time of the visit of our website are also recorded.
If you are logged in on Facebook while visiting one of our plug-in website, the information collected by the plug-in is recognized by Facebook. Facebook may assign the information collected in this way to its personal user account there. If you use the so-called "Like" button from Facebook, for example, this information will be saved in your Facebook user account and, if necessary, published on Facebook's platform. If you want to prevent this, you must either log out of Facebook before visiting our website or by using an add-on for your internet browser prevent the loading of the Facebook plug-in blocked.
Further information on the collection and use of data as well as your rights and protection options in this regard keeps Facebook in the under
https://www.facebook.com/policy.php
available available data protection information.

Google Fonts
On our website we use Google Fonts to display external fonts. It is a service of the Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter only called "Google".
In order to enable the presentation of certain fonts on our website, a connection to the Google server in the USA is established when we call our website.
The legal basis is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in the optimization and economic operation of our website.
The connection to Google, which is established when our website is accessed, can determine which website has sent your request from and to which IP address the representation of the writing must be transmitted.
Google offers under
https://adssettings.google.com/authenticated
https://policies.google.com/privacy
Further information, in particular on the possibilities of preventing data use.

Livechat
On our website we use the Livechat service for analysis purposes and our live chat system. This is a service of Livechat Inc., 1 International PL, Ste 1400 Boston, MA 02110 - 2619, USA, which in the European Union of the Livechat Sofware SA. Ul. Zwycięska 47, 53 - 033 Wroclaw, Poland, subsequently only called "Livechat".
The legal basis is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in the effective and immediate care of our customers and interested parties as well as the statistical analysis of the visitor behavior for the purpose of optimizing and the economic operation of our website.
For the statistical analysis of the visitor behavior and for the operation of the live chat system, Livechat saves a cookie over your internet browser on your device. This cookie processes the anonymized data and create a pseudonymized user profile. However, the data collected is not used for your personal identification.
If you do not agree to this processing, you have the option of preventing the installation of the cookies by the corresponding settings in your internet browser. You can find details on this under the item "Cookies".
Livechat offers under
https://www.livechatinc.com/legal/privacy-policy/#main
Further information on the collection and use of the data as well as your rights and options for protecting your privacy.

Shopify (shop software + web analysis)

a) Shopify shop software
We use "Shopify" to host our shop system and to present our offers and contract processing.
The legal basis is Art. 6 Para. 1 lit. b) GDPR (contract initiation/contract processing).
"Shopify" is the service of a group of companies that from the companies Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc., Shopify (USA) Inc., Shopify Commerce Singapore PTE. Ltd., and Shopify International Limited.
As far as we are based in the European Economic Area (EEA), the processing is carried out by the Shopify International Limited, Victoria Buildings, 2nd floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland, here is only "Shopify".
Due to the company network, however, it cannot be ruled out that processing is also carried out in Canada and the USA, i.e. outside of the EEA. However, when it comes to data overturning to the Canadian Shopify Inc.
Shopify processes the following data on our behalf:
Name, invoice and possibly delivery address, email address, payment data, possibly company name, possibly telephone number, IP address, information about orders, information about the dealer shops supported by Shopify, which you visit, as well as information about Your end device and your internet browser.
Shopify also offers
https://www.shopify.de/legal/datenschutz
further data protection information.

b) Shopify web analysis
Insofar as we also use the Shopify web analysis service on our website, Shopify stores cookies on your end device via your internet browser. These cookies are more information, such as B. Translated the location, time or frequency of your visit to our website to a Shopify server.
The legal basis is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in the analysis and optimization of our website.
If you do not agree to this processing, you have the option of preventing the cookies from being stored by setting in your internet browser. You can find more information on this under "Cookies" above.

Sample data protection declarationtheLaw firm Weiß & Partner