In the following, I would like to inform you about data protection on my websites and about the nature, scope and purpose of the personal data collected, used and processed by me. Data protection is of great importance to me.

Personal data is any data with which you could be personally identified, e.g. name, IP address, telephone number, etc. Some of this data is processed automatically when you visit the website (e.g. IP address, browser type, operating system, etc.), or when you give me your consent to processing, or when you voluntarily provide me with your data, e.g. enter your data in a form on my website.

Furthermore, I would like to inform you about the rights you are entitled to under the GDPR.

You have the right at any time to receive information free of charge about the origin, recipients and purpose of your personal data processed by me, as well as the right to rectification or erasure of this data.

You furthermore have the right, under certain circumstances, to request the restriction of the processing of your personal data. If you have given me your consent to data processing, you can revoke this consent at any time with effect for the future. You are furthermore entitled to lodge a complaint with the competent data protection supervisory authority.

The controller responsible for data protection / processing body is:

Franziska Heimerl

Regensburgerstraße 45

93138 Lappersdorf

Phone +49(0)175 2073798

Email: info@shijamaa.de

Processing of your data in connection with the services I provide

In the case of my clients, customers or business partners, or in the event that you are interested in my services, the nature, scope and purpose of the processing of your personal data are determined by the contractual or pre-contractual relationships existing between us. In this context, I process personal data that I request from you or that you provide to me in order to answer your inquiry, prepare an offer for you or process your order. The data subjects in this context are clients, prospective clients, business and contractual partners. The purpose of processing is the performance of contractual services, communication, and the answering of contact inquiries.

Unless otherwise stated in the further notes of this privacy policy, the processing of your data, as well as its disclosure to third parties, is limited to the data that is necessary and appropriate for answering your inquiries and/or for performing the contract, for safeguarding my rights, and for fulfilling legal obligations.

The data concerned is

• Master data (e.g. names, addresses)
• Payment data (e.g. bank details, invoices)
• Contact data (e.g. email address, telephone number, postal address)
• Contract data (e.g. subject matter of the contract, contract term)

The legal basis for data processing is Art. 6(1)(b) GDPR, the performance of a contract or the fulfillment of pre-contractual inquiries.

Unless a specific storage period is stated in this privacy policy, I store your personal data until the purpose of the data processing no longer applies. I delete your personal data when I no longer need it, i.e. after the termination of the contractual relationships existing between us, or after my legitimate interest in the further processing of the data ceases to exist, or if you request me to delete it. Mandatory statutory provisions – in particular statutory retention periods – remain unaffected. Likewise, it may be necessary to process your personal data until these periods expire for the assertion, exercise or defense of legal claims arising from contractual relationships, or to protect the rights of another natural or legal person. In that case, I delete the personal data required for this only after these periods have expired. Until these periods expire, however, I restrict the processing of this data to these purposes.

• the page from which the file was requested - referrer URL
• the name of the file
• the date and time of the request
• a description of the type of web browser used / browser version and operating system
• IP address of the requesting computer
• access status (file transferred, file not found, etc.)
• Amount of data transferred

• Ensuring a proper and smooth connection setup for the website,
• Ensuring convenient use of the website,
• Evaluation of system security and stability

Accessing the website - processing of personal data and the nature and purpose of its use

When you access my website, you transmit data (for technical reasons) via your internet browser to my web server. The following data are processed in the server log files during an ongoing connection for communication between your internet browser and my web server:

• the page from which the file was requested - referrer URL
• the name of the file
• the date and time of the request
• a description of the type of web browser used / browser version and operating system
• IP address of the requesting computer
• access status (file transferred, file not found, etc.)
• Amount of data transferred

For technical reasons (accessing the website), these data are stored briefly. It is not possible for me to draw conclusions about individual persons from these data. The IP addresses are deleted or anonymized after 7 days at the latest.

The data are evaluated exclusively for internal purposes and do not allow me to draw any conclusions about you personally. They are not compared with other data sets.

The data mentioned are processed for the following purposes:

• Ensuring a proper and smooth connection setup for the website,
• Ensuring convenient use of the website,
• Evaluation of system security and stability

The legal basis for the data processing is Art. 6(1) sentence 1 lit. f GDPR. The legitimate interest follows from the purposes of data collection listed above. Under no circumstances do I use the collected data for the purpose of drawing conclusions about you personally. You can visit the website without providing any information about yourself.

Inquiries by email or phone

If you contact me by email or phone, your inquiry, including all personal data arising from it (e.g. name, inquiry), will be stored and processed by me for the purpose of handling your request. The data will not be passed on without your consent. There is no legal or contractual obligation to provide your data; however, it is not possible to handle your request without your data being provided.

These data are processed on the basis of Art. 6(1)(b) GDPR if your inquiry is related to the performance of a contract or is necessary for carrying out pre-contractual measures. In all other cases, the processing is based on your consent (Art. 6(1)(a) GDPR) and / or on my legitimate interest (Art. 6(1)(f) GDPR), since I have a legitimate interest in the effective handling of the inquiries addressed to me.

The data sent to me via contact inquiries (email) will be stored by me until you ask me to delete them, revoke your consent to their storage, or the purpose for storing the data no longer applies (e.g. after your request has been fully handled). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.

Email advertising and your right to object

If I have received your email address in connection with the sale of a service and you have not objected, I reserve the right, on the basis of § 7(3) UWG, to regularly send you my offers for services similar to those already purchased by email. The legal basis arises from my legitimate interest in addressing my customers for advertising purposes, and the processing of the data is permissible under Art. 6(1) sentence 1 lit. f GDPR within the scope of a balancing of interests.

You can object to the use of your email address at any time by sending me a message or via the corresponding link in the advertising email. Once the legal basis for data processing for advertising emails no longer applies, your email address will be deleted, unless statutory retention obligations (e.g. under tax or commercial law retention obligations) prevent this.

I further point out that you can object at any time to the future processing of your personal data in accordance with the statutory requirements pursuant to Art. 21 GDPR. The objection can in particular be made against processing for the purposes of direct marketing.

Newsletter

We send our newsletter containing promotional information (hereinafter “newsletter”) only with the express consent of the recipients pursuant to Art. 6(1) sentence 1 lit. a GDPR. Registration for our newsletter takes place in a so-called double opt-in procedure, i.e. after registering for our newsletter you receive an email asking you to confirm your registration. This confirmation is necessary so that no third party can register with your email address. There is no legal or contractual obligation to provide your data; however, it is not possible to send a newsletter without your data being provided.

Registrations for the newsletter are logged in order to be able to prove the registration process in accordance with the legal requirements. This includes storing the time of registration and of confirmation, as well as the IP address.

To subscribe to our newsletter, it is sufficient for you to provide your email address. Optionally, we ask you to provide your first and last name and your address. This information is voluntary and serves only to personalize the newsletter. You can also use a pseudonym.

Your email address remains stored with us until you unsubscribe from our newsletter. You can unsubscribe from the newsletter at any time with effect for the future by clicking either the link at the end of each newsletter in the newsletter itself or the link “Unsubscribe from newsletter” on our website and following the steps then described.

Consent to the sending to the email addresses is given on the basis of Art. 6(1)(a). Our interest is directed toward the use of a user-friendly and secure newsletter system that serves both our business interests and meets the users' expectations of information about our products.

We point out that you can revoke the future processing of your personal data at any time vis-à-vis us. Further information on your right of revocation can be found under the item “Rights of data subjects”.

Use of data when registering for the shop - customer account

We collect personal data if you voluntarily provide them to us in the course of your order, when contacting us (e.g. via contact form or email) or when opening a customer account.

When ordering goods or services via our shop, you have the choice of whether you want to register with us as a customer or order without registration. If you want to register as a new customer, we store the customer data collected from you for future orders. By registering with us, you are able to order more quickly by logging into your password-protected customer account, can see the status of your orders at any time, and always have an up-to-date overview of the orders you have placed so far.

If you want to order without registration, you must enter your data again for each further order.

Which data are collected can be seen from the respective input forms.

We use the data you provide exclusively for the processing of the contract and the handling of your inquiries. After your inquiry has been finally answered, the contract has been fully processed or your customer account has been deleted, your data will be blocked from further use and deleted after expiry of the retention periods under tax and commercial law.

Your customer account can be deleted at any time by sending us a message.

The legal basis for the data processing is Art. 6(1) sentence 1 lit. a, b GDPR.

PayPal

On our website we offer, among other things, payment via PayPal. The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”).

If you choose payment via PayPal, the payment data you enter will be transmitted to PayPal.

Your data are transmitted to PayPal on the basis of Art. 6(1)(a) GDPR (consent) and Art. 6(1)(b) GDPR (processing for the performance of a contract). You have the option to revoke your consent to data processing at any time. A revocation does not affect the validity of data processing operations carried out in the past.

Further information on data protection can be found in the PayPal privacy principles at https://www.paypal.com/de/webapps/mpp/ua/privacy-full .

Online presences on social networks

We operate online presences on social networks for advertising purposes We point out that you use the social services and their functions on your own responsibility. This applies in particular to the use of interactive functions (e.g. sharing, rating).

If you visit our online presences on social media, personal data are collected and processed by the respective provider for advertising and market research purposes. As a rule, usage profiles are also created in the process. This is particularly the case if you are a member of the respective platform and are logged in to it. The usage profiles can be used by the providers to show you interest-based advertising. To prevent social media operators from collecting information about you during your visit to our websites, you should log out of the respective social medium before starting your visit to our websites and delete any existing social media cookies from your browser.

Privacy notice - online presence on Facebook/Instagram (META)

Facebook Ireland (Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland – hereinafter referred to as Facebook) and the page administrator (we) are jointly responsible for the processing of personal data, as set out in the terms of use for Covered Products on the page administrator's Facebook account, that are collected in connection with a visit to or an interaction with a page (including its content).

Covered Products are all Facebook Products, Facebook Pages and Page Insights. Facebook Products include Facebook itself (including the mobile Facebook app and the in-app browser), Messenger, Instagram (including apps such as Direct and Boomerang), Portal-branded devices, Bonfire, Facebook Mentions, Facebook Shops, Spark AR Studio, Audience Network, NPE Team apps and all other features, apps, technologies, software products, products or services offered by Facebook, Inc. or Facebook Ireland Limited. In addition, the Facebook Business Tools also count among the Facebook Products.

The scope of the joint processing and of the Controller Addendum covers the collection of the personal data specified in the terms of use for Covered Products and their transmission to Facebook. The subsequent processing of data by Facebook is not part of the joint processing. Likewise, it is not part of the joint processing if personal data are processed exclusively by us – in this case we are the sole controller of the data processing.

The information required under Article 13(1)(a) and (b) GDPR can be found in Facebook's Data Policy at https://www.facebook.com/about/privacy . Further information on joint processing can be found in the respective terms of use of the products.

For the use of certain Facebook Products (so-called "Facebook Business Tools") and the associated data processing, the supplementary agreement between us and Facebook as joint controllers pursuant to Art. 26 GDPR applies, which you can view at https://www.facebook.com/legal/controller_addendum .

The page administrator and Facebook have concluded this Controller Addendum in order to define the respective responsibilities for fulfilling the obligations under the GDPR with regard to the joint processing (as set out in the terms of use for Covered Products).

Furthermore, we have agreed that, as between the parties, Facebook is responsible for enabling the rights of data subjects pursuant to Articles 15-20 of the GDPR with regard to the personal data stored by Facebook after the joint processing.

A possible transfer of personal data to the USA is based on the adequacy decision of the EU Commission (EU-U.S. Data Privacy Framework). Based on adequacy decisions, personal data can flow freely and securely from the European Economic Area to the third country concerned without any further conditions or authorizations being required. Data can thus be transferred to the third country in the same way as within the EU.

Data processing terms at Facebook

We expressly point out that the use of certain Facebook Products may involve the transmission of personal information to Facebook. Depending on the circumstances, it may also be that Facebook Ireland Limited transfers EU data to Facebook Inc. in the USA for storage and further processing. By using the Facebook Products, the user agrees to Facebook's data processing terms. These can be found at https://www.facebook.com/legal/terms/dataprocessing/update.

The Facebook EU Data Transfer Addendum can be found at https://www.facebook.com/legal/EU_data_transfer_addendum

Facebook's Data Policy can be found at https://www.facebook.com/about/privacy/ - Instagram's Data Policy can be found at https://privacycenter.instagram.com/policy/

Information on cookies and other storage technologies on Facebook can be found at https://www.facebook.com/policies/cookies/

Facebook's Data Security Terms can be viewed at https://www.facebook.com/legal/terms/data_security_terms .

Facebook's Commercial Terms can be found at https://www.facebook.com/legal/commercial_terms/update

You can contact Facebook's data protection officer at https://www.facebook.com/help/contact/540977946302970 .

Further information on Page Insights data

Facebook also provides us with so-called Page Insights for the Facebook page. Insights data are aggregated data through which we receive information about how users interact with the Facebook page. The legal basis for the data processing is Art. 6(1) sentence 1 lit. f GDPR, the protection of our legitimate interests in an optimized presentation of our web offering and effective communication with users.

The data processing is carried out on the basis of an agreement between the joint controllers pursuant to Art. 26 GDPR, which you can find at https://www.facebook.com/legal/terms/page_controller_addendum .

Further information on Page Insights data on Facebook at https://www.facebook.com/legal/terms/information_about_page_insights_data and at https://de-de.facebook.com/help/instagram/155833707900388

Data processing when contacting us via Facebook Products

We collect personal data when you contact us, e.g. via the contact form or via Messenger. These data are stored and used exclusively for the purpose of responding to your request or for making contact and the associated technical administration. The legal basis for processing the data is our legitimate interest in responding to your request pursuant to Art. 6(1) sentence 1 lit. f GDPR. Your data will be deleted after your inquiry has been finally processed, unless statutory retention obligations prevent this.

Your rights

Facebook and we have agreed that Facebook is primarily responsible for providing you with information about the joint processing and for enabling you to exercise your rights under the GDPR. Under the GDPR, you have the right to access, rectification, portability and erasure of your data, as well as the right to object to the processing of your data and to restriction of processing. You can learn more about these rights in your Facebook settings. For further information on your rights, see also “Rights of data subjects” in this privacy policy.

Facebook and we have agreed that the Irish Data Protection Commission is the lead supervisory authority overseeing the processing under joint responsibility. You have the right to lodge a complaint with the Irish Data Protection Commission (see www.dataprotection.ie ) or with your local supervisory authority.

Right to object to advertising

You can object to the processing of your data for advertising purposes on Facebook at any time by changing your ad settings in your Facebook user account at https://www.facebook.com/settings?tab=ads accordingly.

Legal basis for operating the Facebook page / Instagram and processing personal data when accessed

We operate the Facebook page / Instagram page for the purpose of advertising our goods and services. Personal data is processed on the basis of Art. 6(1)(f) GDPR.

gstatic

A web service (gstatic) of the company Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland may be loaded on our website in order to ensure the full functionality of our website. In this context, your browser may transmit personal data (IP address) to Google. The legal basis for the data processing is Art. 6(1)(f) GDPR. The legitimate interest lies in the error-free functioning of the website. The data is deleted as soon as the purpose for which it was collected has been fulfilled. Further information on the handling of the transmitted data can be found in Google's privacy policy at https://www.google.com/intl/de/policies/privacy/ .

Any data transfer to the USA is based on the adequacy decision of the EU Commission (EU-U.S. Data Privacy Framework).

You can prevent the collection and processing of your data by gstatic by deactivating the execution of script code in your browser or by installing a script blocker in your browser (you can find one e.g. at www.ghostery.com).

Google reCAPTCHA

To provide protection when forms are submitted, we use the reCAPTCHA service of the company Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This serves to distinguish whether the input was made by a natural person or abusively by machine and automated processing. In the process, your IP address and, where applicable, other data required by Google for the reCAPTCHA service are sent to Google. Your IP address is first truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. On behalf of the operator of this website, Google will use this information to evaluate your use of this service and to prevent spam. The IP address transmitted by your browser within the scope of reCaptcha is not merged with other data from Google.

The following personal data may be collected by or through the use of this service:

• Browser language
• Browser plugins
• Click path
• Date and time of the visit
• IP address
• User behavior
• Time spent on a page

You can view Google's privacy policy at https://policies.google.com/privacy?hl=de .

You can find Google's cookie policy at https://policies.google.com/technologies/cookies?hl=de

Any possible transfer of your IP address to the USA is based on the adequacy decision of the EU Commission (EU-U.S. Data Privacy Framework). Based on EU adequacy decisions, personal data can flow freely and securely from the European Economic Area to the third country concerned without any further conditions or authorizations being required. This means that data can be transferred to the third country in the same way as within the EU.

Data security - SSL encryption

On our website we use the SSL method (Secure Socket Layer) to encrypt and protect the transmission of confidential content. When SSL encryption is activated, the data you transmit to us cannot be read by third parties. You can tell whether an individual page of our website is transmitted in encrypted form by the closed key or padlock symbol in the status bar of your browser - with SSL encryption, the address bar of your browser shows "https://".

Processing/disclosure of data

Your personal data will not be transferred to third parties for purposes other than those listed above or below.

We only disclose your personal data to third parties if:

• you have given your express consent to this in accordance with Art. 6(1)(a) GDPR,
• this is legally permissible and necessary in accordance with Art. 6(1)(b) GDPR for the performance of contractual relationships or for the implementation of pre-contractual measures with you,
• in the event that there is a legal obligation for us to disclose the data in accordance with Art. 6(1)(c) GDPR,
• the processing is necessary in accordance with Art. 6(1)(f) GDPR to safeguard our legitimate interests or those of a third party, unless the interests or fundamental rights and freedoms of the data subject which require the protection of personal data override them, in particular where the data subject is a child.

Rights of data subjects

You have the right:

• in accordance with Art. 15 GDPR, to request information about your personal data processed by us;
• in accordance with Art. 16 GDPR, to request without delay the correction of incorrect or the completion of your personal data stored by us;
• in accordance with Art. 17 GDPR, to request the erasure of your personal data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims;
• in accordance with Art. 18 GDPR, to request the restriction of the processing of your personal data;
• in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request its transmission to another controller;
• in accordance with Art. 7(3) GDPR, to withdraw your consent once given to us at any time. As a result, we may no longer continue the data processing based on this consent in the future;

• in accordance with Art. 77 GDPR, to lodge a complaint with a supervisory authority if you believe that the processing of personal data concerning you infringes the GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or of our registered office for this purpose. A list of the data protection officers in Germany and their contact details can be found at the following link:
  https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html
  .

Right to object to data collection in special cases and to direct advertising (Art. 21 GDPR)

Insofar as we process your personal data in accordance with Art. 6(1)(f) GDPR to safeguard our overriding legitimate interests within the scope of a balancing of interests, you have the right, in accordance with Art. 21 GDPR, to object to the processing of your personal data with effect for the future. If the processing is carried out for direct marketing purposes, you can exercise this right at any time. This also applies to profiling insofar as it is connected with such direct advertising. Insofar as the processing is carried out for other purposes, you only have a right to object if there are grounds arising from your particular situation.

If you wish to exercise your right to object, an email to us is sufficient.

After you have exercised your right to object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves the establishment, exercise or defense of legal claims.

If you object to the processing of your personal data for direct advertising purposes, the personal data will no longer be processed for these purposes.

No automated decision-making or profiling takes place on our websites.

Changes to this privacy policy - As of

As a result of the further development of our website and the offers available through it, or due to changes in legal or regulatory requirements, it may become necessary to amend this privacy policy in compliance with the applicable data protection regulations. You can access and print out the current privacy policy at any time on our website under Privacy.

As of: December 2024 created by attorney Markus v. Hohenhau - www.e-anwalt.de