Privacy policy according to the GDPR

I. Name and address of the data controller

ARTiS M. Hartmann GmbH

Martin-Kollar-Straße 12

81829 Munich

Germany

Tel.: +49 89 431909-71

E-Mail: info@artis-concepts.com

Website: artis-concepts.com

is the data controller as defined in the EU General Data Protection Regulation (DSGVO) and the national data privacy laws.

II. Name and address of the data protection officer

The data protection officer of the data controller is:

AGOR AG
Hanauer Landstr. 151-153
60314 Frankfurt am Main
Tel.: +49 (0) 69 – 9494 32 410
E-Mail: info@agor-ag.com
Website: www.agor-ag.com

III. General information about data processing

1. The extent to which personal data is processed

We collect and use the personal data of users of our homepage only to the extent that this is necessary for keeping our website, contents and services functioning properly.

Basically, we collect and use our users’ personal data only after they give their consent. An exception to this principle applies in cases where processing the data by statutory provisions is permitted or when obtaining prior consent for actual reasons is not possible.

2. Legal basis for processing personal data

The legal basis for processing personal data is basically based on:

• Art. 6 Section 1 lit. a GDPR upon obtaining the consent of the data subject.
• Art. 6 Section 1 lit. b GDPR for processing operations that serve to fulfill a contract to which the data subject is a party. Included here are processing operations that are necessary to carry out pre-contractual measures.
• Art. 6 Section 1 lit. c GDPR for processing required to fulfill a legal obligation.
• Art. 6 Section 1 lit. d GDPR, if vital interests of the data subject or another natural person require the processing of personal data.
• Art. 6 Section 1 lit. f GDPR, if the processing is necessary to safeguard the legitimate interests of our company or a third party, and the interests, fundamental rights and fundamental freedoms of the data subject do not outweigh the former interest.

3. Data erasure and storage duration

The personal data of users will be deleted or blocked as soon as the purpose of the storage is no longer applicable. Additional storage may be provided for by European or national legislators through EU regulations, laws or other regulations to which the data controller is subject. Blocking or deleting the data also takes place when a storage period prescribed by the standards mentioned expires, unless there is a need for additional storage of the data for concluding a contract or fulfilling the contract.

IV. Use of our website, general information

1. Description and scope of data processing

Every time our website is accessed, our system automatically collects data and information from the user's computer system. The following information is collected:

1. Information about the browser type and version used 
2. The user’s operating system 
3. The user’s Internet service provider 
4. The user’s IP address 
5. Date and time of access 
6. Websites the user’s system accesses to get to our website 
7. Websites that the user's system invokes by accessing our website 
8. Host name of the accessing computer 

The described data are stored in the log files of our system. This data is not stored together with any other personal user data.

2. Purpose and legal basis for data processing

Our system must temporarily store user IP addresses to allow us to deliver our website to the user's computer. To do this, the user's IP address must be stored for the duration of the session.

Storage in log files is done to ensure the functionality of the website. In addition, the data is used to optimize the website and to ensure the security of our information technology systems. This data is not evaluated for marketing purposes in this context.

The legal basis for the temporary storage of data and log files is Art. 6 Section 1 lit. f GDPR.

Collecting your personal data to ensure our web presence and storing this data in log files is essential for operating our website. A contradictory possibility of the user therefore does not exist.

3. Duration of storage

Your data will be deleted as soon as they are no longer necessary for achieving the purpose of the inquiry. Your data will be deleted when the session ends if your data has been collected to ensure the site's availability.

If your data is stored in log files, it will be deleted after seven days at the latest. Further storage is possible, whereby in this case, the IP addresses of the users are deleted or alienated. This means that it is then no longer possible to assign the client who has accessed our website.

V.  General information about the use of cookies

We use cookies on our website. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user’s computer system. If you display a webside; this is how a cookie can be stored on your operating system. This cookie contains a characteristic string that allows the browser to be clearly when the website is accessed again.

We use cookies to make our homepage more user friendly. Some elements of our website require that the browser be identified even after a page break.

The legal basis for processing personal data using cookies is defined in Article 6 Section 1 lit. f GDPR. The purpose for using technically required cookies is to simplify the use of our website.

We would like to point out that some functions on our website can only be offered if cookies are enabled. This applies to the following applications:

We do not use user data collected by technically required cookies to create user profiles.

Cookies are stored on the user’s computer, which transmits them to our page. As a user, you therefore have control over the use of cookies. You can restrict or disable transmission of cookies by making changes to your Internet browser settings. Here you can also delete cookies that have been stored. Please note that you may not be able to use all the features on our website if you deactivate cookies.

VI. Your rights/rights of the data subject

According to the EU General Data Protection Regulation, as an affected party you have the following rights:

1. The right to receive information

You have the right to obtain from us as data controller the information whether and which personal data concerning you are processed by us as well as further information in accordance with the legal requirements pursuant to Art. 13, 14 DSGVO.   

You could assert your right to information at: gea@artis-concepts.com 

2. The right to rectification 

If we process your personal data incorrectly or in an incomplete manner, then you have a right for it to be corrected/completed. The correction will be made immediately. 

3. Right to restriction 

You have the right to restrict the processing of personal data concerning you in accordance with the legal provisions (Art. 18 DSGVO).   

4.The right to delete 

If the reasons set out in Art. 17 DSGVO apply, you may request that the personal data relating to you be deleted without delay.

We would like to point out that the right to erasure does not exist insofar as the processing is necessary for one of the exceptional circumstances mentioned in Art. 17 Section 3. 

5. Right to information 

If you have asserted the right to rectify, delete or restrict the processing, we are obligated to notify all recipients to whom your personal data have been disclosed of this correction or deletion of the data or restriction of processing, unless this proves to be impossible or is associated with a disproportionate amount of effort. You also have the right to be informed about these recipients. 

6. Right to data portability 

Under the GDPR, you also have the right to receive the personal data concerning you that has been provided to us in a structured, common and machine-readable format or to request that it be transferred to another controller.   

7. Right to revoke the declaration of consent to data protection 

You have the right to revoke your data protection declaration at any time. Please note that revoking consent does not affect the lawfulness of the processing carried out based on the consent until the revocation goes into effect. 

8. Right to objection 

Furthermore, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is carried out on the basis of Art. 6 Section lit. e or lit. f DSGVO.   

9. Automated decision on an individual basis, including profiling 

Under the EU General Data Protection Regulation, you also have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. 

10. Right to complain to a supervisory authority 

Finally, if you believe that the processing of personal data concerning you is contrary to the GDPR, you have the right to complain to a supervisory authority, in the Member State of its place of residence, employment or the location of the alleged infringement. 

VII. Data transfers to third countries (outside of the EU): 

The GDPR ensures an equally high level of data protection within the European Union. When selecting our service providers, we therefore rely on European partners wherever possible when your personal data is being processed. Within some exceptions we may process personal data outside the EU through third-party services. This may only be the case where the special requirements in accordance with Art. 44 et. seq. GDPR are fully met. This means that the processing of your data may then only take place when the third country has been declared to ensure an adequate level of protection by the European Commission or if the European Standard Contractual Clauses have been signed.  

VIII. Consent Management Tool

We have embedded the consent management tool "Cookiebot" (https://www.cookiebot.com/) by Cybot A/S (Havnegade 39, 1058 Copenhagen, Denmark) on our website to request consent for data processing or the use of cookies or similar functions. You can use Cookiebot to give or refuse your consent for certain functionalities of our website or to give your consent for individual purposes or individual functions.

The settings you have made can also be changed by you afterwards. The purpose of integrating Cookiebot is to allow the users of our website to decide on the aforementioned matters and, in the course of further use of our website, to offer the possibility of changing settings already made. In the course of using Cookiebot, personal data as well as information of the end devices used, such as the IP address, are processed.

The legal basis for the processing is Art. 6 section 1 p. 1 lit. c) in conjunction with. Art. 6 section 3 p. 1 lit. a) in conjunction with. Art. 7 section 1 DSGVO and alternatively lit. f). By processing the data, we help our customers (according to DSGVO the responsible party) to fulfill their legal obligations (e.g. obligation to provide evidence). Our legitimate interests in the processing lie in the storage of user settings and preferences in relation to the use of cookies and other functionalities. Cookiebot stores your data as long as your user preferences are active. You may object to the processing. Your right to object exists for reasons arising from your particular situation.

IX. Electronic contact

You will find a contact form on our homepage that you can use to contact us electronically. The data entered into the input mask are transmitted to us and stored. These data include:

The following data is also stored once the message has been sent:

1. Name
2. E-Mail

The following data is also stored at the time the message is sent:

1. The user’s IP address
2. Date and time of registration

It is also possible to contact us via our provided email address. In this case, the user's personal data transmitted by email will be stored.

A transfer of your data to third parties will not take place in this context; this data will be used exclusively for processing the communication record.

The legal basis for processing the data is in submitting user consent as defined in Art. 6 Section 1 lit. a GDPR. The legal basis for processing the data transmitted while sending an email is Article 6 Section 1 lit. f GDPR. If the email contact aims to conclude a contract, then additional legal basis for the processing is Art. 6 Section 1 lit. b GDPR.

Processing personal data in this context is solely for processing the contact. In the case of contact via email, this also includes the required legitimate interest in processing the data.

If further personal data are processed during the sending process, then they serve only to prevent misuse of the contact form and to ensure the security of our information technology systems.

Your data will be deleted as soon as they are no longer necessary for achieving the purpose of the inquiry. Regarding the personal data from the input form on the contact form and those sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the relevant facts have been finally clarified.

The additional personal data collected during the sending process will be deleted at the latest after a period of seven days.

If the process is based on the legal basis of Art. 6 section 1 p. 1 lit. f DSGVO (legitimate interest), you can object to the storage of your personal data at any time. However, we would like to point out that in such a case the conversation cannot be continued. All personal data stored in the course of contacting you will be deleted in this case. 

X. Google Tag Manager

This website uses Google Tag Manager. Google Tag Manager is a solution that allows marketers to manage website tags through one interface. The Tag Manager tool itself (which implements the tags) is a cookie-less domain and does not collect any personally identifiable information. The tool takes care of triggering other tags, which in turn may collect data. Google Tag Manager does not access this data. If a deactivation has been made at the domain or cookie level, this remains in place for all tracking tags that are implemented with Google Tag Manager.

The legal basis for the use of the technically necessary cookie is the legitimate interest of the website operator pursuant to Art. 6 Section 1 p. 1 lit. f DSGVO. 

Further information can be found in the terms of use of the provider at: www.google.com/intl/de/tagmanager/use-policy.html 

XI. Newsletter

1.  General

You can subscribe to a free newsletter on our homepage that we use to inform you about our current interesting offers. The advertised goods and services are named in the declaration of consent.

The data you enter in the online registration form will be transmitted to us.

We collect the following data based on the consent obtained during the registration process: email address. The IP address of the invoking computer, the date and the hour of the registration.

Your data will not be forwarded as part of data processing involved in sending newsletters. The data will be used exclusively for sending the newsletter.

 2.  Double opt-in and logging

Registration for our newsletter takes place in a so-called double-opt-in procedure. After registration, you will receive an email asking you to confirm your registration. This confirmation is necessary so that nobody can register using external email addresses.

The registration for the newsletter will be logged to prove the registration process according to the legal requirements. This includes the storage of the login and the confirmation time, as well as the IP address.

3.  Legal basis

Legal basis for processing the data is once the consent of the user Art. 6 Section 1 lit. a GDPR has been submitted. Collecting the user's email address aids in delivering the newsletter.

4. Cancellation, revocation and opposition

Your data will be deleted as soon as they are no longer necessary for achieving the purpose of the inquiry. Your email address will therefore be saved as long as the subscription to the newsletter is active. You may terminate subscription to the newsletter at any time by revoking your consent. There is a corresponding link in each newsletter to do this.

We would like to further point out that at any time, you are free to cancel any future processing of your personal data in accordance with the statutory requirements. pursuant to Art. 21 GDPR. You are free to object to your data being processed for direct marketing purposes.

5. Shipping provider

The newsletter is sent using "Cleverreach", a newsletter sending platform of CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede, Germany. You can view the privacy policy of the dispatch service provider here: www.cleverreach.com/de/datenschutz/.

The e-mail addresses of our newsletter recipients, as well as their other data described in the context of this notice, are stored on the servers of the shipping service provider. The shipping service provider uses this information to send and evaluate the newsletter on our behalf. Furthermore, according to its own information, the dispatch service provider may use this data to optimize or improve its own services, e.g. for the technical optimization of the dispatch and the presentation of the newsletters or for economic purposes to determine from which countries the recipients come. However, the shipping service provider does not use the data of our newsletter recipients to write to them itself or to pass them on to third parties.

6. Statistical survey

We would like to point out that we evaluate your user behavior when sending the newsletter. For this evaluation, the emails sent include so-called web beacons or tracking pixels that represent one-pixel image files stored on our website. For the evaluations, we link the data mentioned under Point 1 and the web beacons with your email address and an individual ID. The links included in the newsletter you receive contain this ID as well.

The data are collected exclusively under a pseudonym, so the IDs are not linked to your other personal data, which prevents a direct personal reference to subscribers.

You can object to this tracking at any time by clicking on the separate link provided in each email or informing us via another means of contact. Your information will be stored as long as you are subscribed to the newsletter. After logging out, we store the data purely statistically and anonymously.

XII. Use of Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses so-called "cookies," text files that are stored on your computer and they allow how you use the website to be analyzed. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the US and is stored there. However, if IP anonymization is activated on this website, your IP address will be shortened by Google beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website and Internet usage to the website operator.

The IP address provided by Google Analytics within the framework of Google Analytics will not be merged with other data provided by Google.

You can prevent the storage of cookies by enabling a corresponding setting in your browser software; however, please note that if you do this, you may not be able to use all the features of this website to the fullest extent possible. You may also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) as well as prevent Google from processing this data by downloading and installing the browser plug-in available under the following link:

http://tools.google.com/dlpage/gaoptout?hl=de.

This website uses Google Analytics with the extension "_anonymizeIp()." As a result, IP addresses are processed shortened so that they cannot be related to any one particular person. Insofar as the data collected about you is assigned a personal reference, it will be immediately excluded, and the personal data will be deleted immediately.

We use Google Analytics to analyze and regularly improve the use of our website. We use the statistics to improve our offer and make it more interesting for you as a user. The legal basis for using Google Analytics is Art. 6 Section 1 p. 1 lit. a GDPR.

Third-party information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. User conditions: http://www.google.com/analytics/terms/de.html, Data privacy overview: http://www.google.com/intl/de/analytics/learn/privacy.html, data protection policy: http://www.google.de/intl/de/policies/privacy.

XIII. DoubleClick by Google

This website also uses the online marketing tool DoubleClick by Google. DoubleClick uses cookies to serve ads that are relevant to users, to improve campaign performance reports, or to prevent a user from seeing the same ads multiple times. Google uses a cookie ID to determine which ads are running in which browser and can prevent them from being displayed multiple times. In addition, DoubleClick uses cookie IDs to track conversions related to ad requests. This can occur, for example, if a user sees a DoubleClick ad and later goes to the advertiser's website with the same browser and buys something there. According to Google, DoubleClick cookies do not contain personally identifiable information.

Your browser automatically establishes a direct connection to the Google server because of the marketing tools used. We have no control over the extent and the later use of the data that is collected through Google’s use of this tool and we will therefore inform you according to our level of knowledge. By integrating DoubleClick, Google receives the information that you have accessed the relevant part of our website or have clicked on an ad from us. If you are registered with a service provided by Google, then Google may associate the visit with your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will find out and store your IP address.

You can prevent participation in this tracking process several different ways:

1. by setting your browser software accordingly; suppressing third-party cookies will prevent you from receiving any third-party advertisements
2. by deactivating cookies for conversion tracking by adjusting your browser settings so that cookies from the domain called

“www.googleadservices.com” are then blocked, https://www.google.de/settings/ads, whereby this setting will be deleted once you delete your cookies

1. by disabling interest-based ads from providers that are part of the About Ads self-regulatory campaign by clicking on http://www.aboutads.info/choices, which will be deleted when you delete your cookies
2. through permanent deactivation in your Firefox, Internet Explorer or Google Chrome browsers under the linkhttp://www.google.com/settings/ads/plugin. We would like to point out that in this case you may not be able to fully utilize all the features of this offer.

The legal basis for processing your data is Art. 6 Section 1 p. 1 lit. a GDPR.

You can get additional information on DoubleClick by Google at https://www.google.de/doubleclickand http://support.google.com/adsense/answer/2839090, which also includes Google general information on their data protection policy: www.google.de/intl/de/policies/privacy. Another option is to visit the Network Advertising Initiative (NAI) at: http://www.networkadvertising.org.

XIV. Social Media 

We maintain fan pages within various social networks and platforms for communicating with customers, prospects and users who are active there and for informing them about our services.

We would like to point out that your personal data may be processed outside the European Union, which may pose risks to you (e.g. in enforcing your rights under European/German law).

These users’ data are usually processed for market research and advertising purposes. Thus, for example, user profiles are created based on the user’s behavior and interests. These usage profiles can in turn be used to do such things as place advertisements inside and outside the platforms that are allegedly in line with users' interests. For these purposes, cookies are usually stored on the user’s computer where the user’s behavior and the user’s interests are stored. Furthermore, in the usage profiles, data can also be stored independently of the devices that the users use (this is especially true if the users are members of the respective platforms and are logged in to them).

Processing personal user data is based on our legitimate interests in an effective user information and communication with users in accordance with. Art. 6 Section 1 lit. f. GDPR. The legal basis for processing user info is Art. 6 Section a., Art. 7 GDPR, and this entails the respective providers asking users to consent to data processing (that is, that they declare their agreement, for example, by ticking a check box or clicking on a button to confirm).

Additional information about processing your personal data as well as your revocation options can be found under the links for the respective providers listed below. The assertion of information and further rights of the data subjects can likewise take place opposite the offerers, who then have only the direct access to the data of the users and have appropriate information. Of course, we are available for questions and support if you need help. Providers:

Facebook

Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland Data Privacy Policy: https://www.facebook.com/about/privacy/

Opt-Out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com

Instagram

Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA

Data Privacy Policy/Opt-Out: http://instagram.com/about/legal/privacy/.

Google/YouTube

Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) Data Protection Policy: https://policies.google.com/privacy

Opt-Out: https://adssettings.google.com/authenticated

XV. Integrating Typekit fonts from Adobe

Based on our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 Section 1 lit. f GDPR), we use external type kit fonts of the provider Adobe Systems Software Ireland Limited, 4 -6 Riverwalk, Citywest Business Campus, Dublin 24, Republic of Ireland.