Data Protection

​​

We are pleased to welcome you to our website. Below, we would like to inform you about the handling of your data in accordance with Art. 13 of the General Data Protection Regulation (GDPR).

​

Responsibilities

The entity responsible for the data processing described below is the entity specified in the legal notice.

​

Usage Data

When you visit our website, our web server temporarily evaluates so-called usage data for statistical purposes to improve the quality of our website. This data set consists of:

• The name and address of the requested content

• The date and time of the request

• The amount of data transferred

• The access status (content transferred, content not found)

• A description of the web browser and operating system used

• The referral link indicating the page from which you arrived at our site

• The IP address of the requesting computer, which is shortened so that it can no longer be traced to an individual

The mentioned log data is evaluated only in an anonymized form.

​

​

Data Security

Website visits are automatically redirected to an SSL-encrypted connection. Inputs you make on the website are transmitted in encrypted form. This ensures that the data cannot be read or altered by third parties during transmission.
When you contact us via email, the transmission is generally unencrypted. If you wish to send us confidential data, we recommend using encryption methods. This can prevent unauthorized reading or manipulation of the data during transmission.

 

Storage of IP Address for Security Purposes

In addition, we store the full IP address transmitted by your web browser for strictly limited purposes for a duration of seven days. This is to detect, limit, and eliminate attacks on our websites. After this period, the IP address is deleted or anonymized. The legal basis for this is Art. 6 para. 1 sentence 1 lit. f GDPR.

​

Required Cookies

We use cookies on our websites that are necessary for their operation.

Cookies are small text files that are stored on your device and can be read. There are session cookies, which are deleted once you close your browser, and permanent cookies, which are stored beyond a single session.

We do not use these necessary cookies for analysis, tracking, or advertising purposes.

Some of these cookies merely contain information about specific settings and are not personally identifiable. They may also be necessary to enable user navigation, security, and the implementation of the website.

We use these cookies based on Art. 6 para. 1 sentence 1 lit. f GDPR.

You can configure your browser to inform you about the placement of cookies, making the use of cookies transparent for you. You can also delete cookies at any time through the corresponding browser setting and prevent new cookies from being set. Please note that our websites may then not be displayed correctly, and some functions may no longer be available technically.

​

Essential Cookies from Wix:

​​

XSRF-TOKEN

Used for security reasons

Storage duration: Session

​

hs

Used for security reasons

Storage duration: Session

​

svSession

Used in connection with user login

Storage duration: 2 years

​

SSR-caching

Used to indicate the system from which the website was rendered

Storage duration: 1 minute

​

_wixCIDX

Used for system monitoring/debugging

Storage duration: 3 months

​

_wix_browser_sess

Used for system monitoring/debugging

Storage duration: Session

​

consent-policy

Used for cookie banner parameters

Storage duration: 12 months

​

smSession

Used to identify logged-in site members

Storage duration: Session

​

TS*

Used for security and anti-fraud purposes

Storage duration: Session

​

bSession

Used to measure system effectiveness

Storage duration: 30 minutes

​

fedops.logger.sessionId

Used to measure system effectiveness

Storage duration: 12 months

​

wixLanguage

Used on multilingual websites to store the user’s language preference

Storage duration: 12 months

​

​

​

YouTube Integration

We have integrated components from YouTube on this website. YouTube is an internet video portal that allows video publishers to upload video clips for free, and other users to view, rate, and comment on them at no cost. YouTube permits the publication of all types of videos, including complete movies and TV shows, music videos, trailers, and user-generated content.

The operating company of YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

Whenever a user accesses a page on our website that features a YouTube component (YouTube video), the internet browser on the user’s device automatically loads the corresponding YouTube component from YouTube. More information about YouTube can be found at https://www.youtube.com/yt/about/de/. During this technical process, YouTube and Google are informed about which specific subpage of our website was visited by the user.

If the user is logged into YouTube at the same time, YouTube detects which specific subpage of our website the user visited when a subpage containing a YouTube video is accessed. This information is collected by YouTube and Google and associated with the user’s respective YouTube account.

YouTube and Google receive information via the YouTube component that the user has visited our website whenever the user is logged into YouTube at the time of accessing our website, regardless of whether the user clicks on a YouTube video or not. If the user does not want this information to be transmitted to YouTube and Google, they can prevent this transmission by logging out of their YouTube account before accessing our website.

The privacy policies published by YouTube, which are available at https://www.google.de/intl/de/policies/privacy/, provide information about the collection, processing, and use of personal data by YouTube and Google.

 

Your Rights as a Data Subject

When your personal data is processed, the GDPR grants you certain rights as a data subject:

Right to Information (Art. 15 GDPR)

You have the right to request confirmation as to whether personal data concerning you is being processed. If this is the case, you have the right to access this personal data and the specific information listed in Art. 15 GDPR.

Right to Rectification (Art. 16 GDPR)

You have the right to demand the immediate correction of incorrect personal data concerning you and, if necessary, the completion of incomplete data.

Right to Erasure (Art. 17 GDPR)

You have the right to request that personal data concerning you be deleted immediately, provided one of the reasons listed in Art. 17 GDPR applies.

Right to Restriction of Processing (Art. 18 GDPR)

You have the right to request the restriction of processing if one of the conditions listed in Art. 18 GDPR is met, such as if you have objected to processing for the duration of the review by the controller.

Right to Data Portability (Art. 20 GDPR)

In certain cases listed in Art. 20 GDPR, you have the right to receive the personal data concerning you in a structured, commonly used, and machine-readable format, or to request the transfer of this data to a third party.

Right to Withdraw Consent (Art. 7 GDPR)

If the processing of data is based on your consent, you have the right under Art. 7(3) GDPR to withdraw your consent to the use of your personal data at any time. Please note that the withdrawal is only effective for the future. Processing that took place before the withdrawal is not affected.

Right to Object (Art. 21 GDPR)

If data is collected on the basis of Art. 6(1) sentence 1 lit. f GDPR (data processing for the protection of legitimate interests) or on the basis of Art. 6(1) sentence 1 lit. e GDPR (data processing for the protection of public interest or in the exercise of official authority), you have the right to object to the processing at any time for reasons arising from your particular situation. We will then no longer process the personal data unless there are demonstrable compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is for the establishment, exercise, or defense of legal claims.

Right to Lodge a Complaint with a Supervisory Authority (Art. 77 GDPR)

According to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of personal data concerning you violates data protection regulations. The right to lodge a complaint can be exercised particularly with a supervisory authority in the member state of your habitual residence, your workplace, or the place of the alleged infringement.

Exercising Your Rights

Unless otherwise described above, please contact the entity named in the imprint to exercise your rights as a data subject.

 

Contact

If you have any questions, suggestions, or criticisms, please let us know, for example, at info@atacama-blooms.de.

 

Contact details of the Data Protection Officer

Our external Data Protection Officer is available to provide information on the subject of data protection at the following contact details:

​

datenschutz nord GmbH
Konsul-Smidt-Straße 88
28217 Bremen
Web: www.datenschutz-nord-gruppe.de
E-Mail: office@datenschutz-nord.de

​

When contacting our Data Protection Officer, please also specify the responsible entity mentioned in the imprint.