Laura Goergens, Flemingstr.90 , 81925 Munich ("MEANDMAR")
I. Name and contact details of data controller
The person responsible for processing personal data pursuant to Art. 4 of the EU DPA:
81925 Munich Germany
+0049 1775 288033
We collect data, so-called server log files on every accessing of the server on which the www.meandmar.com website is located. These access data include for example, the name of the website accessed, the file, date and time of access, the transferred data, a notification of successful access, the browser type and version, the user's operating system, the referrer URL (the page visited previously), the IP address and the provider making the inquiry.
We collect the user's personal data as part of the framework for setting up the user account. This includes the name, email address and physical address and telephone number, provided on a voluntary basis.
The legal basis for data processing is Art. 6 Sub-section 1 lit. a) of the EU DPA.
I will process any personal data you provide, i.e. an email address as well as any additional contact information along with your name for the purpose of responding to your inquiry should you contact us using email address specified on our website.
The legal basis for data processing is Art. 6 Sub-section 1 lit. b) and Art. 6 Sub-section 1 lit. f) of the EU DPA.
The legal basis for data processing is Art. 6 Sub-section 1 lit. f) of the EU DPA.
III. For what purposes will the data be used?
Personal data is only collected, stored and processed to the extent required for the service to be provided, for honoring the contract or for responding to the inquiry.
This data is processed by us in order to establish a connection to our website. Processing is required to ensure the security and stability of the system.
The creation of a user account makes it possible to use the services we provide. We will send you an invoice for the articles and jobs you have purchased on the basis of the data entered.
Processing your email address is vital in order to be able to answer your request. Should any data such as name, address or similar also be processed, then this processing serves to individualize the respective user and therefore allows us to respond to his/her request to the best of our ability.
IV. Will data be passed on to third parties and if so, which data?
In principle, any data transmitted by you will not be made available to third parties. In some cases, however, it may be necessary to pass on your personal data to companies which are entrusted by us with the provision of individual services.
V. How long is the data stored for?
Your data will be stored for as long as it is necessary in order to satisfy the purpose mentioned above. It will be deleted or blocked if required under commercial or tax law as soon as this is no longer the case, e.g. once the contract has been completed. The data will be deleted from the point in time from which legal storage obligations are no longer in conflict unless you have explicitly given consent for additional use.
VI. Your rights as the person affected
You will reserve the rights listed below as a person who is subject to the processing of personal data. These rights result from the provisions of the Basic Regulation on Data Protection and are represent here in a simplified form in a number of cases.
The right to information
You reserve the right to ask us to confirm whether any personal data concerning you will be processed, pursuant to Art. 15 of the EU DPA. If this is the case, you will reserve the right of access to this personal data and to the information specified in Art. 15 (1) Hs. 2 of the EU DPA. This specifically includes the purpose of the processing, the categories of any data processed, the recipients to whom data has been or will be disclosed, and the planned duration of the storage period or the criteria for the duration of the storage whenever these are possible.
The right to amendment
You reserve the right to ask us to rectify any incorrect data concerning with immediate effect, pursuant to Art. 16 of the EU DPA. You reserve the right to request any incomplete personal data be finalized by making an additional declaration and when taking the purposes of processing into consideration.
You reserve the right to ask us to delete your personal information with immediate effect, pursuant to Art. 17 of the EU DPA. We are obliged to delete any personal data immediately should one of the provisions of Art. 17 Sub-section 1 EU DPA apply. These reasons include, for example, the fact that the data is no longer required for the purposes for which it is being collected or otherwise processed.
The right to restricted processing
According to Art. 18 EU DPA, you have the right to ask us to restrict processing your personal information should any of the conditions of Art. 18 of the EU DPA apply. This includes, for example, where you may dispute the accuracy of any personal data. We may only then process any data to a limited extent for as long as it takes to verify the accuracy of any personal data.
The right to data portability
You reserve the right to receive any personal data concerning you, which has been provided to us in a structured, standard and machine-readable format, pursuant to Art. 20 of the EU DPA. You reserve the right to transfer this data to another data controller without any interference, i.e. to another body which processes data, provided that it was processed originally based on consent or it was required in order to honor a contract.
The right of objection
According to Art. 18 EU DPA, you have the right to object to any personal data concerning you from being processed at any time if this data is being processed on the basis of Art. 6 Sub-section 1 lit. e) or f) of the EU DPA and there are reasons for doing so which are linked to your personal situation. Objections can be made to the processing of data for the purpose of direct marketing at any time. Any personal data will then no longer be processed for this purpose. The right of objection can be exercised by making an informal declaration. A written declaration or an email sent to the contact address specified above will be sufficient.
Right to withdraw the declaration of consent
You reserve the right to withdraw your consent to processing at any time, pursuant to Art. 7 Sub-section 3 of the EU DPA. The legality of any processing carried out on the basis of the consent shall remain unaffected until it is withdrawn. The right of revocation can be exercised by making an informal declaration. A written declaration or an email sent to the contact address specified above will be sufficient.
Automated decision in individual cases including profiling
You reserve the right not to be subject to a decision based exclusively on automated processing, including profiling, which has a legal impact on you or which may disadvantage you in a similar manner, pursuant to Art. 22 of the EU DPA. Art. 22 Sub-section 1 of the EU DPA provides for exceptions to this, whereby Art. 22 Sub-section 4 of the EU DPA includes partial exceptions.
The right of appeal to a supervisory authority
You reserve the right of appeal to a supervisory authority under Article 77 of the EU DPA, in particular within the Member State of your place of residence, place of work or of the place of suspected infringement, without prejudice to any other administrative or legal remedy, should you believe that the processing of personal data concerning you contradicts this regulation.
VII. Third-party services
We use the following third-party services:
- Instagram Inc., subsidiary of Facebook Inc., 181 South Park Street, San Fransisco, CA 94107, USA (“Instagram”)
A third party may have its registered office located in a third country, i.e. a country in which the DPA has no direct legal implications. In this case, data shall only be transmitted if your consent is given, if an appropriate level of data protection remains intact or if another legal permit exists.
We have integrated plugins of social networks and Facebook and Instagram services on our website www.meandmar.com
We use the 2-click method in order to ensure the highest possible level of protection and to take the principle of minimizing data into consideration. By doing so, any direct contact between the social network and you is only established when you actively click on the corresponding button.
VIII. Technical and organizational measures
We take technical and organizational measures to ensure that the security and protection requirements of the EU DPA are met, and that any personal data are protected against loss, destruction, manipulation or access by unauthorized individuals. The measures are always adapted to state-of-the-art technology.
- Updated May 2018 -