Privacy Policy

We attach great importance to data protection. The collection and processing of your personal data is carried out in compliance with applicable data protection regulations, in particular the General Data Protection Regulation (GDPR).

1. Responsible person

The controller responsible for the collection, processing and use of your personal data within the meaning of Article 4 No. 7 GDPR is

Ceramic studio Maddie Taylor

Email: maddietaylorbusiness@gmail.com

(Due to privacy concerns, studio address is not included.)

If you wish to object to the collection, processing or use of your data by us in accordance with these data protection provisions, either in general or for individual measures, you can address your objection to the responsible party.

You can save and print this privacy policy at any time.

2. General purposes of processing

We use personal data for the purpose of operating the website and for initiating and fulfilling business relationships with prospective and current customers.

3. Which data we use and why

3.1 Hosting

The hosting services we use serve to provide the following services: infrastructure and platform services, computing capacity, storage space and
database services, security services, and technical maintenance services, which we use for the purpose of operating the website.

In this process, we, or rather our hosting provider 1&1 Internet SE, Elgendorfer Str. 57, 56410 Montabaur (the data is processed exclusively in the EU), process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, prospective customers and visitors to this website on the basis of our legitimate interests in the efficient and secure provision of our website pursuant to Art. 6 Para. 1 Sentence 1 f) GDPR in conjunction with Art. 28 GDPR.

3.2 Access data

We collect information about you when you use this website. We automatically collect information about your usage patterns and interactions with us, and we record data about your computer or mobile device. We collect, store, and use data about every access to our website (so-called server log files). Access data includes:

  • Name and URL of the retrieved file

  • Date and time of retrieval

  • amount of data transferred

  • Message indicating successful retrieval (HTTP response code)

  • Browser type and browser version

  • operating system

  • Referrer URL (i.e., the previously visited page)

  • Websites accessed by the user's system via our website

  • User's Internet service provider

  • IP address and the requesting provider

We use this log data without associating it with your identity or creating any other profile for statistical analysis for the purposes of operating, securing, and optimizing our website, as well as for anonymously recording the number of visitors to our website (traffic) and the extent and nature of the use of our website and services. This data is also used for billing purposes to measure the number of clicks received from our partners. Based on this information, we can provide personalized and location-based content, analyze traffic, troubleshoot and fix errors, and improve our services.

This also constitutes our legitimate interest pursuant to Art. 6 para. 1 sentence 1 f) GDPR.

We reserve the right to review log data retrospectively if there is a legitimate suspicion of unlawful use based on concrete evidence. We store IP addresses in log files for a limited period if this is necessary for security purposes, for providing our services, or for billing purposes, for example, when you use one of our offers. After the order process is canceled or payment is received, we delete the IP address if it is no longer required for security purposes. We also store IP addresses if we have a concrete suspicion of a crime related to the use of our website. In addition, we store the date of your last visit (e.g., registration, login, clicking on links, etc.) as part of your account information.

3.3 Cookies

We use so-called session cookies to optimize our website. A session cookie is a small text file that is sent by the respective servers when you visit a website and is temporarily stored on your hard drive. This file contains a session ID, which allows different requests from your browser to be associated with the same session. This allows your computer to be recognized when you return to our website. These cookies are deleted after you close your browser. They are used, for example, to allow you to use the shopping cart function across multiple pages.

We also use persistent cookies to a limited extent (small text files that are stored on your device).
These cookies remain on your device and allow us to recognize your browser on your next visit. They are stored on your hard drive and delete themselves automatically after a predetermined period. Their lifespan ranges from one month to ten years. This allows us to present our website to you in a more user-friendly, effective, and secure way, and, for example, to display information on the site that is specifically tailored to your interests.

Our legitimate interest in using cookies pursuant to Art. 6 para. 1 sentence 1 f) GDPR lies in making our website more user-friendly, effective and secure.

The following data and information are stored in the cookies:

  • Login information

  • Language settings

  • entered search terms

  • Information about the number of visits to our website and the use of individual functions of our website.

When a cookie is activated, it is assigned an identification number, and your personal data is not linked to this identification number. Your name, IP address, or similar data that would allow the cookie to be associated with you are not stored in the cookie. Using cookie technology, we only receive pseudonymized information, such as which pages of our shop were visited, which products were viewed, etc.

You can configure your browser to notify you before cookies are set and decide on a case-by-case basis whether to accept or reject cookies for specific cases or in general, or to block cookies entirely. This may limit the functionality of the website.

3.4 Data for the fulfillment of our contractual obligations

We process personal data that we need to fulfill our contractual obligations, such as name, address, email address, ordered products, and billing and payment information. Collecting this data is necessary for concluding the contract.

Data is deleted after the warranty periods and statutory retention periods have expired. Data associated with a user account (see below) is retained for as long as that account remains active.

The legal basis for processing this data is Art. 6 para. 1 sentence 1 b) GDPR, because this data is needed so that we can fulfill our contractual obligations to you.

3.5 Email Contact

When you contact us (e.g. via contact form or email), we process your information to handle your request and in case any follow-up questions arise.

If data processing is carried out for the purpose of carrying out pre-contractual measures at your request, or, if you are already our customer, for the performance of the contract, the legal basis
for this data processing is Art. 6 para. 1 sentence 1 b) GDPR.

We only process further personal data if you consent to this (Art. 6 para. 1 sentence 1 a) GDPR) or if we have a legitimate interest in processing your data (Art. 6 para. 1 sentence 1 f) GDPR). A legitimate interest exists, for example, in responding to your email.

4. Google Analytics

We use Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses "cookies," which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United States.

This also constitutes our legitimate interest pursuant to Art. 6 para. 1 sentence 1 f) GDPR.

Google has certified its compliance with the EU-US Privacy Shield Framework. This means Google is committed to adhering to European data protection standards and regulations. Further information can be found at the following link: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

We have activated IP anonymization on this website ( anonymizeIp ). This means that your IP address will be
shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide us with other services relating to website activity and internet usage.

The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You can prevent the storage of cookies by adjusting your browser settings; however, please note that in this case you may not be able to fully utilize all the functions of this website.

Furthermore, you can prevent the transmission of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

As an alternative to the browser plugin, or when using browsers on mobile devices, you can click the following link to set an opt-out cookie that
will prevent Google Analytics from collecting data on this website in the future (this opt-out cookie only works in this browser and only for this domain. If you delete the cookies in your browser, you will need to click this link again):  Disable Google Analytics

Unless specifically stated otherwise, we only store personal data for as long as is necessary to fulfill the purposes for which it was collected.

In some cases, the law requires the retention of personal data, for example under tax or commercial law. In these cases, we only
store the data for these legal purposes, do not process it in any other way, and delete it after the statutory retention period has expired.

5. Your rights as a data subject

Under applicable laws, you have various rights regarding your personal data. If you wish to exercise these rights, please send your request by email or post to the
address specified in section 1, clearly identifying yourself.

Below you will find an overview of your rights.

5.1 Right to confirmation and information

You have the right to clear and comprehensive information about the processing of your personal data.

In detail:

You have the right to obtain confirmation from us at any time as to whether or not personal data concerning you is being processed. If this is the case, you have the right
to request from us, free of charge, information about the personal data stored about you, along with a copy of this data. Furthermore, you have the right to the following information:

  1. the purposes of processing;

  2. the categories of personal data that are processed;

  3. the recipients or categories of recipients to whom the
    personal data have been or will be disclosed, in particular recipients in third countries or international organisations;

  4. If possible, the planned duration for which the personal data will be stored, or, if this is not possible, the criteria used to determine that duration;

  5. the existence of a right to rectification or erasure of personal data concerning you or to restriction of processing by the controller or a right to object to such processing;

  6. the existence of a right to lodge a complaint with a supervisory authority;

  7. If the personal data is not collected from you, all available information about the source of the data;

  8. the existence of automated decision-making including profiling pursuant to  Article 22
    (1) and (4) GDPR and – at least in these cases – meaningful information about the logic involved as well as the scope and
    intended effects of such processing for you.

If personal data is transferred to a third country or to an international organisation, you have the right to be informed about the appropriate safeguards pursuant to Art. 46 GDPR relating to the transfer.

5.2 Right to rectification

You have the right to request that we correct and, if necessary, complete personal data concerning you.

Specifically:
You have the right to request that we immediately correct any inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data, including by means of a supplementary statement.

5.3 Right to erasure (“right to be forgotten”)

In a number of cases, we are obliged to delete personal data concerning you.

In detail:

Pursuant to Article 17(1) of the GDPR, you have the right to request that we erase personal data concerning you without undue delay, and we are obliged to erase personal data without undue delay where one of the following grounds applies:

  1. The personal data are no longer necessary for the purposes for which they were collected or otherwise processed.

  2. You withdraw your consent on which the processing was based pursuant to  Art. 6 para. 1 1 a) GDPR or  Art. 9  para. 2 a) GDPR, and there is no other legal basis for the processing.

  3. You object to the processing pursuant to  Article 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or you object  to the processing
    pursuant to  Article 21 (2) GDPR.

  4. The personal data was processed unlawfully.

  5. The erasure of personal data is necessary for compliance with a legal obligation under Union or Member State law to which we are subject.

  6. The personal data were collected in relation to information society services offered, in accordance with  Article 8 (1) of the GDPR.

If we have made the personal data public and are obliged to erase it pursuant to Article 17(1) GDPR, we shall take reasonable steps, including technical measures, taking into account available technology and the cost of implementation, to inform controllers who are processing the personal data that you have requested the erasure by them of all links to, or copies or replications of, that personal data.

Source: http://www.e-recht24.de