Protecting your privacy is very important to us. We therefore proceed with all data processing procedures (e.g.collection, processing and transmission) in accordance with the statutory provisions of European and German data protection law.
The following declaration gives you an overview of your data as requested on our website, how this data is used and
passed on, in which way you can obtain information about the information given to us and which security measures
we take to protect your data.
1. Who is your contact person (person responsible) for your data protection concerns?
The person responsible in terms of data protection regulations for all data processing processes carried out via
our website is:
Nadja Cavallaro
Lachenhofstrasse 4
81737 Munich (Germany)
Provider's email address: Diese E-Mail-Adresse ist vor Spambots geschützt! Zur Anzeige muss JavaScript eingeschaltet sein!
We have not appointed a data protection officer because we do not meet the legal requirements for that order.
2. What data do we need from you to use our website? Which data is collected and stored during use?
Personal data is all information that relates to an identified or identifiable natural person ("data subject"), such as your name, your address, your telephone number, your date of birth, your bank details and your IP address.
In principle, we only collect and use personal data of our users insofar as this is necessary to provide a functional website for our content and services. The collection and use of personal data of our users takes place regularly only with the consent of the user. An exception applies in those cases in which prior consent cannot be obtained for factual reasons and the processing of the data is permitted by law.
a) Usage data
When using our website, the following data is logged, the storage being used exclusively for internal system-related and statistical purposes, so-called usage data:
1. Information about the browser type and the version used
2. The user's operating system
3. The user's Internet service provider
4. The user's IP address
5. Date and time of access
6. Websites from which the user's system reached our website
7. Websites that are accessed by the user's system via our website
The legal basis for the temporary storage of the data and the log files is Art. 6 Para. 1 lit. f GDPR.
The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. To do this, the user's IP address must be stored for the duration of the session.
The storage in log files takes place in order to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
Our legitimate interest in data processing according to Art. 6 Para. 1 lit. f GDPR lies in these purposes.
The data will be deleted as soon as the data is no longer required to achieve the purpose for which it was collected. In the case of collection of data for the provision of the website, this is when the respective session has ended.
If the data is stored in log files, it will be deleted after seven days. Any further storage is possible. The users' IP addresses will be deleted or alienated so that they can no longer be assigned to the accessing client.
The collection of the data for the provision of this website and the storage of the data in log files is essential for the operation of the website. There is consequently no possibility of the user's objection.
b) Registration
You can visit our website without providing any personal information. On our website, however, we also offer users the option of registering by providing personal data. The data is entered in an input mask and transmitted to us and stored. A transfer of data to third parties does not take place. The following data is processed as part of the registration process:
1. Email address
2. First name / surname
3. Private and / or business address
4. Telephone number
5. USt ID number (optional)
All other personal data that you can provide on Namala.eu (with the exception of the payment data, which is required for creating offline or online courses, workshops or activities) can be provided voluntarily.
If the user has given his / her consent, the legal basis for processing the data is Article 6 (1) (a) GDPR.
If the registration serves to fulfill a contract to which the user is a party or to carry out pre-contractual measures, the additional legal basis for the processing of the data is Article 6 (1) (b) GDPR.
A registration of the user is required for users who want to take part in a course offered on Namala.eu or teachers who want to offer a course on Namala.eu. Registration is required in order to fulfill the contract between you and us respectively the course provider and the course participant.
The storage of personal data enables us to meet our legal obligations.
The data will be deleted as soon as it is no longer required to achieve the purpose for which it is collected.
As a user, you can cancel your registration at any time. You can have the stored data changed at any time. To do this, write an email in which you describe your request to Diese E-Mail-Adresse ist vor Spambots geschützt! Zur Anzeige muss JavaScript eingeschaltet sein!.
If the data is required to fulfill a contract or to carry out pre-contractual measures, premature deletion of the data is only possible if there are no contractual or legal obligations to prevent deletion.
c) Contact form
We have a contact form available for you on our website, which you can use to contact us electronically and address your concerns to us. We only collect your first and last name and your email address via the contact form. At the time the message is sent, the following data is also stored:
1. IP address
2. Date and time of contact
Before the data is processed, you will be informed about the intended use of your data as part of the sending process and you will be referred to this data protection declaration.
Alternatively, you can contact us using the email address provided. In this case, the user's personal data transmitted with the email will be saved.
We only use your data to process your request and can contact you for this purpose using the contact details provided. This data is not used for advertising purposes or passed on to third parties.
The legal basis for the processing of the data transmitted via the contact form or in the course of sending an email is
Article 6 (1) (f) GDPR. If the purpose of making contact is to conclude a contract, the additional legal basis for
processing is Article 6 (1) (b) GDPR.
The processing of the personal data from the input mask serves us only to process the contact. If you contact us bye-mail, there is also the necessary legitimate interest in processing the data.
The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.
The data will be deleted as soon as its no longer required to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form and those that were sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been finally clarified.
The additional personal data collected during the sending process will be deleted after a period of seven days at the
latest.
Right to object:
You can object to the processing of your personal data at any time, please use the contact options listed above. If you contact us by email and object to the storage of your personal data, the conversation cannot be continued.
In this case, all personal data stored in the course of contacting us will be deleted.
3. How will my data be used and, if necessary, passed on to third parties and for what purpose is this done?
We use the personal data you provide to answer your inquiries, to process your order in our online shop and for the purpose of technical administration of our website.
Your personal data will only be passed on, sold or otherwise transferred to third parties if it is passed on for the purpose of processing the contract as is required for billing purposes or to collect the fee (e.g. shipping company or payment service provider) or you have given your express consent.
The legal basis for the transmission of the data to third parties for the purpose of contract processing or for billing purposes is Article 6 Paragraph 1 lit. b GDPR.
For payment processing in our online shop, we use the payment system of the external payment service provider PayPal (Europe) S.à r.l. et Cie, S.C.A. 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). If you want to pay via PayPal, for example, a connection to the PayPal online payment system is automatically established via a technical interface. The payment data you provide will be transmitted to PayPal via an encrypted connection exclusively for the purpose of payment processing and will be stored and processed there. The data is also processed exclusively for the aforementioned purpose of processing the payment of your order, whereby PayPal may forward the payment data to the credit institution you specified
4. References to external social network services
In detail, the following applies to the use of the Facebook and Instagram buttons on our website:
On our website we link to the social media platforms [Facebook and Instagram]. This is done via a corresponding symbol on our website, which is marked with the corresponding logo of the respective social media platform and behind which there is a corresponding link to our corresponding social media page. Social plugins (such as the Facebook “Like” button) are not included here.
Through our references to the social media services, no data from you will be transmitted to these services. These are normal hyperlinks, over which no data is regularly transmitted. If you click on the link, you will be forwarded directly to our social media presence at the respective social media service. Data will only be transmitted if you are logged into your user account for the relevant social media service. You can then link or share content from our website directly with the social media service or, in the case of YouTube, watch the videos on our YouTube channel. The respective social media service may find out what content you viewed on our website.
Responsible for the social media services linked by us are exclusively:
- for Facebook and its website, Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA;
- for Instagram and its website, Instagram, LLC, 1601 Willow Rd. Menlo Park, CA 94025, USA;
- for YouTube and ist website, die YouTube, LLC, 901 Cherry Ave., St. Bruno, CA 94066, USA
Further information about the purpose and scope of data collection and the further processing and use of your data by the respective social media service can be found in the data protection provisions of the respective service. These are available on the Internet.
On the websites of the providers, you will also find information about setting options to protect your privacy and your further rights with regard to the collection, processing and use of your data by the respective social media
service.
You yourself are responsible for the data transmission to the aforementioned social network services, as you become active yourself by logging into your respective social network account and following the respective link and thus initiate the subsequent data processing by the respective social network service.
5. What security measures have we taken to protect your data?
We have taken a variety of security measures to protect personal information in an appropriate and adequate way.
Our databases are protected by physical and technical measures as well as procedural measures that restrict access to the information to specially authorized persons in accordance with this data protection declaration. Our
information system is located behind a software firewall to prevent access from other networks that are connected to the Internet. Only employees who need the information to perform a specific task are given access to personal information. Our employees are trained in security and privacy practices.
When collecting and transmitting data via our website, we use standardized SSL encryption technology. As part of the ordering process, personal data is transmitted via SSL encryption, recognizable by the lock symbol in the browser and by the addition “https: //” in the address bar.
You should never give your password for access to our website to third parties and you should change this password regularly. In addition, you should not choose the same password for access to our website that you use on other websites for password-protected access (e-mail account, online banking, etc.). When you have left our website, you should log out and close your browser to prevent unauthorized users from gaining access to your user account.
We cannot guarantee complete data security when communicating by email.
6. You will receive an email newsletter from us. What does that mean for you?
To send email messages to our customers, we use the AcyMailing advertising email service from ACYBA, 12 Av. Tony Garnier, 69007 Lyon, Frankreich. The data named below are processed by AcyMailing on our behalf and, for this purpose, stored on AcyMailing´s servers in the USA. AcyMailing uses your data
exclusively for sending and evaluating the advertising emails.
- Email address
- First and last name
For the processing of the data, your consent for the processing of the data by AcyMailing is obtained as part of the registration process and reference is made to this data protection declaration.
The legal basis for processing the data by AcyMailing after registering for the advertising e-mails is the consent you have given in accordance with Art. 6 Para. 1 S. 1 lit. a in conjunction with Art. 7 GDPR.
The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. The user's data collected for sending e-mails are therefore stored for as long as the subscription to the advertising
e-mails is active.
An exception to this is your e-mail address, which we will add to our blocklist after you unsubscribe from the e-mail newsletter. In this case, the processing of the e-mail address is justified by Art. 6 Para. 1 f GDPR and the legitimate interest in this lies in the protection of your interest in not receiving any further advertising e-mails from us. Your email address will therefore not be deleted, but its processing will be restricted in accordance with Art. 18 GDPR.
Revocation of Consent
The user concerned can cancel the subscription to advertising e-mails at any time. For this purpose, there is a corresponding link in every e-mail with which the subscription can be canceled.
7. We use advertising email tracking in our newsletter. What does that mean for you?
The advertising emails sent by AcyMailing on our behalf contain a tracking pixel that transmits information to AcyMailing as soon as you open the advertising email. This information is then retrieved by us from AcyMailing's servers in order to generate statistical evaluations and to be able to measure the success of our e-mail campaigns.
This is the following information:
- your IP address
- Information on the browser used
- Information on the system used
- Time of retrieval
This information enables us to determine whether the advertising e-mails are opened, at what time they are opened and which links within these e-mails are clicked. Technically, an assignment to the individual e-mail
recipients is possible here, but this does not serve either us or AcyMailing as a service provider to individually track or monitor the individual user. The evaluations only serve to adapt the e-mail content to the wishes and interests of our subscribers based on their reading habits and to personalize them within the legal limits.
The legal basis for the processing of personal data by the service provider AcyMailing for analysis purposes is the consent you have given in accordance with Art. 6 Para. 1 S. 1 lit. a in conjunction with Art. 7 GDPR.
Revocation of Consent
By exercising your right to withdraw from receiving advertising emails (via link or email, see above), you can also withdraw your consent to the processing of your data for tracking purposes.
8. Cookie processing on your device
We use so-called cookies on our website. Cookies are small amounts of data in the form of text information that the web server sends to your browser. These are only saved on your hard drive. Cookies can only be read by the server that stored them beforehand. Cookies do not store any personal information such as your name. The data stored in the cookies are not linked to your personal data (name, address, etc.).
So-called transient cookies, persistent cookies and local storages are used on our websites.
a) Transient and persistent cookies
Transient cookies are automatically deleted when you close the browser. This includes in particular the session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the common session. This means that your computer can be recognized when you return to our website. The session cookies are deleted when you log out or close the browser.
We use transient cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after changing pages. The following data is stored and transmitted in the cookies:
1. Language settings
2. Items in a shopping cart
3. Session ID of the user
4. Last viewed categories and products
5. Wish list
6. Products compared
We also use persistent cookies on our website, which enable an analysis of the surfing behavior of the users. Persistent cookies are automatically deleted after a specified period, which can differ depending on the cookie. In this way, for example, the following data can be transmitted:
1. IP address
2. Entered search terms
3. Use of website functions
The data collected via persistent cookies are pseudonymised by technical precautions, so it is no longer possible to
assign the data to the calling user. The data is not stored together with other personal data of the user.
b) Legal basis for the use of cookies, etc.
The legal basis for the processing of personal data using technically necessary cookies is Article 6, Paragraph 1, Sentence 1, Letter f of the GDPR.
The purpose of using technically essential cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For this it is necessary that the browser is recognized even after changing pages.
The right of objection is excluded for technically essential cookies, as these are absolutely necessary in order to be able to display our website and its contents and to provide you with the functionalities of the website.
The user data collected by technically essential cookies are not used to create user profiles.
Cookies are used for analysis and marketing purposes to improve the quality of our website and its content. The analysis cookies tell us how the website is being used so we can continuously optimize our offer. Processing, in particular on your device, based on cookies or other identifiers (e.g. browser fingerprints, pixels) and not technically necessary for the function of our website, is only carried out with your consent. You can give your consent via the cookie consent tool, which is displayed when you visit our website. The legal basis for this cookie-based processing
is Section 15 Paragraph 3 Sentence 1 TMG, Article 5 Paragraph 3 Sentence 1 of the ePrivacy Directive. Before you have given your consent, cookies that are not required for the functioning of our website will not be set.
c) Revocation of consent given for the use of cookies, etc.
You can revoke the consent you have given for data collection by cookies at any time. The following steps are required for this:
- - The cookie consent tool is located on the lower left of the website and can be accessed by clicking on “Data protection and cookies”
• - Under the "Settings" button you can choose between "Necessary", "Preference", "Statistics" and "Marketing". If you do not want to allow certain cookies, please click on the term to remove the green tick
• - If you want to prohibit all cookies, please click on the "Reject" button
• - If you want to allow all cookies, please click on "Allow all cookies"
You can also delete cookies at any time or adjust the relevant cookie settings in the browser you are using. For more information on how you can delete and / or manage cookies using your browser settings, please visit the help pages of the respective browser.
9. Processing of the data collected via analysis cookies by us and third parties
a) Analysis services
We use analysis on our website. We use the following analysis tools for the statistical and analytical evaluation of certain data:
- Google Analytics
The data collected by the respective services are generally recorded in pseudonymised form and used exclusively for statistical evaluations.
We process the data collected by the analysis tools only with your prior consent and in order to keep the services and offers available on our website to our customers and to continuously improve them. How you
can revoke the evaluation of your data by individual services can be found in the paragraphs of this data protection declaration for the respective services.
Google Analytics
We use Google Analytics, a web analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) on our website. Analytics uses so-called "cookies", text files
that are stored on your computer and that enable your use of the website to be analyzed, as already described in the section on cookies above. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. If IP anonymization is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The full IP address will only be transmitted to a Google server in the USA and shortened there in exceptional cases. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of
Google Analytics will not be merged with other Google data. You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may
not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by clicking on the following link (https://tools.google.com/dlpage/gaoptout?hl=en ) download and install the available browser plug-in.
For more information on how Google Analytics works and on the terms of use and data protection provisions that apply to this service, see https://www.google.com/intl/en_us/policies/terms/archive/20070416/ or https://policies.google.com/terms?hl=en . We would also like to point out that Google Analytics with the anonymizeIP extension is used on our website and that IP addresses are therefore only processedin abbreviated form in order to exclude any personal reference.
If you have given your consent, we use so-called "Cross Device Tracking" to evaluate your usage behavior on our website. This means that we can recognize you as a registered user of our website across different
devices. For this purpose, you will be assigned an ID when you register on our site. This ID is recognized by Google Analytics when you log into our website from various devices (e.g. mobile phone, tablet). The data recorded about you is summarized by Google under the corresponding ID, stored there exclusively pseudonymized using the assigned ID and made accessible to us. We use these pseudonymised usage profiles in order to be able to tailor your shopping experience on our website to you even more personally and individually.
Revocation of Consent
You can also prevent Google from collecting the data related to your use of the website (including your IP-address) and from processing this data by Google by clicking on the following link (https://tools.google.com/dlpage/gaoptout?hl=en ) download and install the available browser plug-in.
As an alternative to installing the browser plug-in, you can also prevent Google Analytics from collecting data, especially in internet browsers on mobile devices, by clicking on the following link:
Deactivate Google Analytics
<a href=habenjavascript:gaOptout()"> Deactivate Google Analytics </a>
https://support.google.com/analytics/answer/1009696?hl=en
As a result, a so-called opt-out cookie is stored on your device, which prevents the future collection of your data by Google Analytics when you visit this website. You have to carry out this process independently for
each device.
Please note that if you delete cookies in your browser settings, this may result in the Google Analytics opt-out cookie being deleted and you may have to reactivate it.
10. We embed YouTube videos on our website. What does that mean for you?
On our websites, we have also included videos that are hosted on our YouTube channel, especially when displaying our products in the online shop.
YouTube is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Youtube"). For the integration we use the so-called extended data protection mode. This means that videos are integrated without cookies being set to record usage behavior. The usage behavior is therefore not observed in order to personalize the video delivery. However, technically necessary cookies are set, without which it would not be possible to play the videos on our website. No personal data is collected via these cookies, only technical data that is necessary for the provision of the videos is processed
11. We use software to protect our website from spam. What does that mean for you?
To protect input forms on our site, we use the "reCAPTCHA" service from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). With the help of this technology, it is possible for us to determine whether the entry in our input masks was made by a person or whether it was improperly made by automated machine processing.
In order to determine whether the input is made by a human, Google collects the following data, among other things, as soon as you visit our website: browser user agent, IP address, screen and window resolution, browser language set, time zone, length of stay , installed browser plugins, Google account, if you are logged in to Google, your input behavior and mouse movements on the reCAPTCHA areas. This
data is only called up if you have activated in your browser that JavaScript code may be loaded automatically. If you have deactivated the loading of JavaScript in your browser, no data will be transmitted to Google, but in this case the functions of our website secured by the "reCAPTCHA" service will not be accessible to you either.
The "reCAPTCHA" service is used in accordance with the Google Terms of Use:
https://www.google.com/intl/de/policies/privacy/.
The legal basis for the described processing of the data is Art. 6 Para. 1 S. 1 lit. c GDPR in conjunction with Art. 32 GDPR. The "reCAPTCHA" function serves to protect our systems and thus also the personal data you have stored on them from attacks by automated machine inputs (e.g. by so-called bots).
12. Rights of Data Subjects
If your personal data is processed, you are affected within the meaning of the GDPR, you have the following rights vis-à-vis the person responsible:
Information, correction, restriction of processing and deletion.
You have the right to free information about your personal data stored by us, their origin and recipient as well as the purpose of the data processing via our website at any time. In addition, you have the right to correct, delete and restrict the processing of your personal data, provided that the legal requirements for this are met.
Right to data portability
You have the right to receive the personal data concerning you, which you have provided to us as the person responsible, in a structured, common and machine-readable format. We can fulfill this right by providing a csv export of the customer data processed about you.
Right to be informed
If you have asserted the right to correction, deletion or restriction of processing against the person responsible, the person responsible is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this correction or deletion of the data or restriction of processing, unless this turns out to be impossible or involves a disproportionate effort. You have the right vis-à-vis the person responsible to be informed about these recipients.
Right to object
You have the right, for reasons that arise from your particular situation, to object at any time to the processing of your personal data, which is based on Article 6 (1) (e) or (f) GDPR; this also applies to profiling based on these provisions.
The person responsible will no longer process the personal data concerning you unless it can be proven by compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the
processing serves to assert, exercise or defend legal claims.
If the personal data concerning you are processed in order to operate direct mail, you have the right to object to the processing and at any time insert the personal data concerned for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct advertising.
If you object to processing for direct marketing purposes, the personal data relating to you will no longer be processed for those purposes.
In connection with the use of information society services - regardless of Directive 2002/58 / EC – you have the option of exercising your right of objection by means of automated processes that use technical specifications.
Revocability of declarations of consent under data protection law
In addition, you can revoke the consent you have given us at any time for the future use of the contact details given above. The revocation does not affect the legality of the data processing carried out on the basis of the consent until the revocation. Right to complain to a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your place of residence, your place of work or the place of the alleged infringement, if you are of the opinion that the processing of your personal data is against violates the EU General Data Protection Regulation.
The supervisory authority to which the complaint was submitted informs the complainant about the status and the results of the complaint, including the possibility of a judicial remedy in accordance with Art. 78 GDPR.
13. Changes to this data protection declaration
We reserve the right to change this data protection declaration in due course and without prior notice. Therefore, please keep yourself informed by regularly viewing this page about any changes to this data protection declaration.