Status: October 2022
We (FaceReading LadyFace) would like to inform you about the processing of your personal data.
1. Who is responsible for data processing?
The controller (Art. 4 No. 7 EU General Data Protection Regulation, GDPR) for data processing on our online offers is:
+49(0)171-269 269 3
2. Data processing when visiting our website
2.1 Log files
You can visit our websites without telling us who you are. For technical reasons, however, we automatically collect data that your browser transmits to our server (log files). This is the following data:
- IP address
- Date and time of the request
- Time zone difference from Greenwich Mean Time (GMT)
- Content of the request (concrete page)
- Access Status/HTTP Status Code
- Data volume transferred in each case
- Website from which the request comes
- Operating system and its interface
- Language and version of the browser software
The storage of the IP address for the duration of the session is necessary in order to be able to display our websites to you. The processing of the other data serves in particular to ensure the permanent functionality and security of our websites and information technology systems.
The legal basis for the processing of this data is Art. 6 para. 1 p. 1 lit. f GDPR. Our legitimate interest in processing the data is to achieve the aforementioned purposes.
The log files are stored for the period of 6 weeks and then deleted, unless they have to be kept for longer in exceptional cases to follow up an identified attack.
2.3 Use of Google Analytics
This website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables the website operator to analyse the behaviour of website visitors. In doing so, the website operator receives various usage data, such as page views, length of stay, operating systems used and the origin of the user. This data may be summarised by Google in a profile that is assigned to the respective user or their end device.
Furthermore, Google Analytics can record your mouse and scroll movements and clicks, among other things. Furthermore, Google Analytics uses various modelling approaches to augment the data sets collected and uses machine learning technologies in the data analysis.
Google Analytics uses technologies that enable the recognition of the user for the purpose of analysing user behaviour (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website is usually transferred to a Google server in the USA and stored there.
The use of this analysis tool is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising. If a corresponding consent has been requested (e.g. consent to store cookies), the processing is carried out exclusively on the basis of Section 25 (1) TTDSG, Art. 6 (1) lit. a GDPR; the consent can be revoked at any time.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.
We have activated the IP anonymisation function on this website. This means that your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
You can prevent the collection and processing of your data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
Data processing agreement
We have concluded a data processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
Data stored by Google at user and event level that are linked to cookies, user identifiers (e.g. user ID) or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) are anonymised or deleted after 14 months. Details can be found under the following link: https://support.google.com/analytics/answer/7667196?hl=de
Our website is hosted by an external service provider (hoster). The personal data collected on this website is stored on the hoster’s servers. This may include IP addresses, contact requests, meta and communication data, contract data, contact data, names, website accesses and other data generated via a website.
Our hoster will only process your data to the extent necessary to fulfil its service obligations and will follow our instructions with regard to this data.
We use the following hoster: Strato AG, Otto-Ostrowski-Str. 7, 10249 Berlin.
To ensure data protection-compliant processing, we have concluded a contract on commissioned processing in accordance with Art. 28 GDPR with our hoster.
3. Data processing in the context of business communication
3.1 General communication
When you are in business contact with us, we collect and process personal data that we receive from you and your employees. We may receive this data directly from you or we may have taken it from your email signature, for example. It may be the following data:
- E-mail address,
- Telephone and fax number and
- Further information from the signature
The legal basis for the processing is Art. 6 para. 1 lit. b and Art. 6 para. 1 lit. f GDPR. Our legitimate interest in data processing in this case is to be able to communicate with you for official/business purposes.
We delete your data after the end of its purpose. We store certain data until the expiry of statutory periods of limitation (regularly three years) and/or statutory retention periods, for example from the German Fiscal Code and the German Commercial Code (regularly up to ten years).
3.2 Audio and video conferencing
We use third-party video conferencing tools to conduct video and audio conferences, webinars and other types of video and audio meetings. The following categories of data are processed in this context:
- Inventory data (e.g. names, addresses),
- Contact details (e.g. e-mail, telephone numbers),
- Content data (e.g. text input, photographs, videos),
- Meta/communication data (e.g. device information, IP addresses).
The processing of the data serves to set up and conduct online meetings / video conferences. The processing is carried out on the legal basis of Art. 6 para 1 lit. b GDPR or according to Art. 6 para 1 lit. f GDPR on the basis of our legitimate interests in efficient and secure communication with our communication partners.
We use the following video conferencing tool:
Zoom Meetings: Provider is Zoom Video Communications, Inc. Information on data processing: https://explore.zoom.us/de/privacy/
We have concluded a contract processing agreement with each of the providers of the video conferencing solution in accordance with Art. 28 GDPR. In order to ensure a sufficient guarantee for any data transfers to the USA or other third countries, the EU standard contractual clauses apply.
4. Social Media profiles
We operate various social media profiles in order to provide information on the respective social media platforms and to be able to contact you. Please note that cookies may be stored in your browser by the respective platform operator, in which your usage behaviour is stored for market research and advertising purposes. These usage profiles can also be created across devices. The platform operators evaluate these usage profiles in order to display personalised advertising to you. The data processing may also affect persons who are not registered as users with the respective social media platform. The data may also be shared by the platform operators with other companies and transferred to countries outside the EU.
We receive information from the platform operator, in particular statistical evaluations, about visits to our social media profile. This may also involve personal data. The processing of your personal data when visiting one of our social media profiles is based on our legitimate interests in a diverse external presentation of our company and the use of an effective information option to improve our external presentation and communication with you. The legal basis for this is Art. 6 para. 1 lit. f GDPR. If you have given a platform operator your consent to data processing, the legal basis is Art. 6 para. 1 lit. a GDPR.
Further information on the scope, purpose and legal basis of data processing on social media platforms and on your rights vis-à-vis the platform operator can be found here:
Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland
Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland
Provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland
5. General information
5.1 Are personal data transferred to a third country?
We generally process your data in the European Union or the European Economic Area. Only in exceptional cases do we transfer data to countries outside the European Union or the European Economic Area (“third country”). We only transfer personal data to a third country if the special requirements of Art. 44 ff. GDPR are fulfilled. This means that the processing of your data then only takes place on the basis of an adequacy decision of the EU Commission regarding the level of data protection in the respective third country or special guarantees. We ensure these adequate guarantees by concluding so-called “standard contractual clauses”. This is a set of contracts recognised by the European Commission for the transfer of data to third countries.
5.2 Does automated decision making (including profiling) take place?
No, you will not be subject to a decision which produces legal effects vis-à-vis you or similarly significantly affects you and which is based exclusively on automated data processing (Art. 22 GDPR).
5.3 How long will your data be stored?
We only ever process your data for as long as we need it to achieve the respective purposes of the data processing. As soon as we no longer need your data, it will be deleted.
6. Your rights
You can assert your following rights against us at any time free of charge under firstname.lastname@example.org:
- If you have given us your express consent to the processing of your personal data, you can revoke this consent at any time free of charge with effect for the future. Your revocation has no effect on the lawfulness of the processing of your personal data that has taken place up to that point and on the lawfulness of such processing for which another legal basis exists.
- You can request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about the processing purposes, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making, including profiling, and, if applicable, meaningful information about its details. You may also request that we provide you with a copy of the data we hold about you;
- In accordance with Art. 16 GDPR, you can immediately request the correction of incorrect or completion of your personal data stored by us;
- In accordance with Art. 17 GDPR, you may request the deletion of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims;
- You can demand the restriction of the processing of your personal data pursuant to Art. 18 GDPR insofar as the accuracy of the data is disputed by you, insofar as the processing is unlawful but you object to its deletion, insofar as we no longer require the data but you need it to assert, exercise or defend legal claims or insofar as you have objected to the processing in accordance with Art. 21 GDPR;
- Pursuant to Art. 20 GDPR, you may receive your personal data which you have provided to us and which we process based on your consent or for the performance of a contract, in a structured, common and machine-readable format or, within the scope of what is technically feasible, request that it be transferred to another controller (right to data portability);
- You can complain to a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our registered office for this purpose.
Right of objection
If we process your personal data on the basis of legitimate interests pursuant to Art. 6 (1) sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, insofar as there are grounds for doing so that arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right of objection, which is implemented by us without specifying a particular situation.