Privacy Policy

Status: October 2022

We (FaceReading LadyFace) would like to inform you about the processing of your personal data.

1. Who is responsible for data processing?

The controller (Art. 4 No. 7 EU General Data Protection Regulation, GDPR) for data processing on our online offers is:

FaceReading Ladyface
Martina Michel
Schuppstraße 41
65191 Wiesbaden
+49(0)171-269 269 3
mm@space-reading.de

2. Data processing when visiting our website

2.1 Log files

You can visit our websites without telling us who you are. For technical reasons, however, we automatically collect data that your browser transmits to our server (log files). This is the following data:

IP address
Date and time of the request
Time zone difference from Greenwich Mean Time (GMT)
Content of the request (concrete page)
Access Status/HTTP Status Code
Data volume transferred in each case
Website from which the request comes
Browser
Operating system and its interface
Language and version of the browser software

The storage of the IP address for the duration of the session is necessary in order to be able to display our websites to you. The processing of the other data serves in particular to ensure the permanent functionality and security of our websites and information technology systems.

The legal basis for the processing of this data is Art. 6 para. 1 p. 1 lit. f GDPR. Our legitimate interest in processing the data is to achieve the aforementioned purposes.

The log files are stored for the period of 6 weeks and then deleted, unless they have to be kept for longer in exceptional cases to follow up an identified attack.

2.2 Use of cookies and similar technologies

We also use cookies on our websites. Cookies are small text files that are automatically downloaded and stored on your PC or mobile device. The use of cookies serves to make the use of our offer more pleasant for you. We use so-called session cookies to recognise that you have already visited individual pages of our website. These are automatically deleted after you leave our site or when you close the browser.

Pursuant to Section 25 (1) TTDSG, we obtain your express consent via our cookie banner or there is a technical necessity for the use of cookies pursuant to Section 25 (2) No. 2 TTDSG with regard to ensuring the permanent functionality and security of our websites and information technology systems. As far as personal data is concerned, we also rely on the legal basis of the GDPR for further/subsequent processing, regularly also on your express consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR as well as Art. 6 para. 1 sentence 1 lit. f GDPR, as is the case for further/subsequent processing.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

2.3 Use of Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyse the behaviour of website visitors. In doing so, the website operator receives various usage data, such as page views, length of stay, operating systems used and the origin of the user. This data may be summarised by Google in a profile that is assigned to the respective user or their end device.

Furthermore, Google Analytics can record your mouse and scroll movements and clicks, among other things. Furthermore, Google Analytics uses various modelling approaches to augment the data sets collected and uses machine learning technologies in the data analysis.

Google Analytics uses technologies that enable the recognition of the user for the purpose of analysing user behaviour (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website is usually transferred to a Google server in the USA and stored there.

The use of this analysis tool is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising. If a corresponding consent has been requested (e.g. consent to store cookies), the processing is carried out exclusively on the basis of Section 25 (1) TTDSG, Art. 6 (1) lit. a GDPR; the consent can be revoked at any time.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

IP anonymisation

We have activated the IP anonymisation function on this website. This means that your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Browser plugin

You can prevent the collection and processing of your data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

You can find more information on how Google Analytics handles user data in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

Data processing agreement

We have concluded a data processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Retention period

Data stored by Google at user and event level that are linked to cookies, user identifiers (e.g. user ID) or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) are anonymised or deleted after 14 months. Details can be found under the following link: https://support.google.com/analytics/answer/7667196?hl=de

2.4 Hosting

Our website is hosted by an external service provider (hoster). The personal data collected on this website is stored on the hoster’s servers. This may include IP addresses, contact requests, meta and communication data, contract data, contact data, names, website accesses and other data generated via a website.

Our hoster will only process your data to the extent necessary to fulfil its service obligations and will follow our instructions with regard to this data.

We use the following hoster: Strato AG, Otto-Ostrowski-Str. 7, 10249 Berlin.

To ensure data protection-compliant processing, we have concluded a contract on commissioned processing in accordance with Art. 28 GDPR with our hoster.

3. Data processing in the context of business communication

3.1 General communication

When you are in business contact with us, we collect and process personal data that we receive from you and your employees. We may receive this data directly from you or we may have taken it from your email signature, for example. It may be the following data:

Name
E-mail address,
Telephone and fax number and
Further information from the signature

The legal basis for the processing is Art. 6 para. 1 lit. b and Art. 6 para. 1 lit. f GDPR. Our legitimate interest in data processing in this case is to be able to communicate with you for official/business purposes.

We delete your data after the end of its purpose. We store certain data until the expiry of statutory periods of limitation (regularly three years) and/or statutory retention periods, for example from the German Fiscal Code and the German Commercial Code (regularly up to ten years).

3.2 Audio and video conferencing

We use third-party video conferencing tools to conduct video and audio conferences, webinars and other types of video and audio meetings. The following categories of data are processed in this context:

Inventory data (e.g. names, addresses),
Contact details (e.g. e-mail, telephone numbers),
Content data (e.g. text input, photographs, videos),
Meta/communication data (e.g. device information, IP addresses).

The processing of the data serves to set up and conduct online meetings / video conferences. The processing is carried out on the legal basis of Art. 6 para 1 lit. b GDPR or according to Art. 6 para 1 lit. f GDPR on the basis of our legitimate interests in efficient and secure communication with our communication partners.

We use the following video conferencing tool:

Zoom Meetings: Provider is Zoom Video Communications, Inc. Information on data processing: https://explore.zoom.us/de/privacy/

We have concluded a contract processing agreement with each of the providers of the video conferencing solution in accordance with Art. 28 GDPR. In order to ensure a sufficient guarantee for any data transfers to the USA or other third countries, the EU standard contractual clauses apply.

4. Social Media profiles

We operate various social media profiles in order to provide information on the respective social media platforms and to be able to contact you. Please note that cookies may be stored in your browser by the respective platform operator, in which your usage behaviour is stored for market research and advertising purposes. These usage profiles can also be created across devices. The platform operators evaluate these usage profiles in order to display personalised advertising to you. The data processing may also affect persons who are not registered as users with the respective social media platform. The data may also be shared by the platform operators with other companies and transferred to countries outside the EU.

We receive information from the platform operator, in particular statistical evaluations, about visits to our social media profile. This may also involve personal data. The processing of your personal data when visiting one of our social media profiles is based on our legitimate interests in a diverse external presentation of our company and the use of an effective information option to improve our external presentation and communication with you. The legal basis for this is Art. 6 para. 1 lit. f GDPR. If you have given a platform operator your consent to data processing, the legal basis is Art. 6 para. 1 lit. a GDPR.

Further information on the scope, purpose and legal basis of data processing on social media platforms and on your rights vis-à-vis the platform operator can be found here:

Facebook

Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland

Instagram

Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland

Provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland

YouTube

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland

5. General information

5.1 Are personal data transferred to a third country?

We generally process your data in the European Union or the European Economic Area. Only in exceptional cases do we transfer data to countries outside the European Union or the European Economic Area (“third country”). We only transfer personal data to a third country if the special requirements of Art. 44 ff. GDPR are fulfilled. This means that the processing of your data then only takes place on the basis of an adequacy decision of the EU Commission regarding the level of data protection in the respective third country or special guarantees. We ensure these adequate guarantees by concluding so-called “standard contractual clauses”. This is a set of contracts recognised by the European Commission for the transfer of data to third countries.

5.2 Does automated decision making (including profiling) take place?

No, you will not be subject to a decision which produces legal effects vis-à-vis you or similarly significantly affects you and which is based exclusively on automated data processing (Art. 22 GDPR).

5.3 How long will your data be stored?

We only ever process your data for as long as we need it to achieve the respective purposes of the data processing. As soon as we no longer need your data, it will be deleted.

6. Your rights

You can assert your following rights against us at any time free of charge under mm@space-reading.de:

If you have given us your express consent to the processing of your personal data, you can revoke this consent at any time free of charge with effect for the future. Your revocation has no effect on the lawfulness of the processing of your personal data that has taken place up to that point and on the lawfulness of such processing for which another legal basis exists.
You can request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about the processing purposes, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making, including profiling, and, if applicable, meaningful information about its details. You may also request that we provide you with a copy of the data we hold about you;
In accordance with Art. 16 GDPR, you can immediately request the correction of incorrect or completion of your personal data stored by us;
In accordance with Art. 17 GDPR, you may request the deletion of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims;
You can demand the restriction of the processing of your personal data pursuant to Art. 18 GDPR insofar as the accuracy of the data is disputed by you, insofar as the processing is unlawful but you object to its deletion, insofar as we no longer require the data but you need it to assert, exercise or defend legal claims or insofar as you have objected to the processing in accordance with Art. 21 GDPR;
Pursuant to Art. 20 GDPR, you may receive your personal data which you have provided to us and which we process based on your consent or for the performance of a contract, in a structured, common and machine-readable format or, within the scope of what is technically feasible, request that it be transferred to another controller (right to data portability);
You can complain to a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our registered office for this purpose.

Right of objection

If we process your personal data on the basis of legitimate interests pursuant to Art. 6 (1) sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, insofar as there are grounds for doing so that arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right of objection, which is implemented by us without specifying a particular situation.