data protection | Karin Doering | expressive contemporary artist

Data protection

Below we inform you about the processing of your personal data within the scope of the use of our online offer.

Responsible

Karin Doering

On the Klingenberg 29
74523 Schwaebisch Hall

Telephone: 01703289276
Email: info@karindoering.de

contact person

If you have any questions about data protection, please use the contact details given above.

storage duration

In principle, we delete your personal data when they are no longer necessary for the purposes for which they were collected or otherwise processed.

If we have asked for your consent and you have given it, we will delete your personal data if you revoke your consent and there is no other legal basis for the processing.

We delete your personal data if you object to the processing and there are no overriding legitimate grounds for the processing or you object to the processing for the purpose of direct marketing or related profiling.

If deletion is not possible because processing is still necessary to fulfill a legal obligation (statutory retention periods, etc.) to which we are subject or to assert, exercise or defend legal claims, we restrict the processing of your personal data.

Further information on the storage period can also be found in the following passages.

Your rights

You have the following rights towards us with regard to your personal data:
- Right to information
- Right to rectification
- Right to erasure
- Right to restriction of processing
- Right to object to processing
- Right to data portability

You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data, which is based on Article 6 Paragraph 1 lit. e or f GDPR; this also applies to profiling based on these provisions. We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
If we process your personal data in order to conduct direct advertising, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct advertising. We will then no longer process your personal data for these purposes.

You have the right to withdraw consent to the processing of your personal data at any time if you have given us such consent. The revocation of the consent does not affect the legality of the processing carried out on the basis of the consent up to the point of revocation.

You have the right to complain to a supervisory authority about our processing of your personal data.

Provision of your personal data

The provision of your personal data is in principle neither required by law nor by contract and is not required for the conclusion of a contract. In principle, you are not obliged to provide your personal data. If this should nevertheless be the case, we will point this out to you separately when collecting your personal data (e.g. by marking the mandatory fields on input forms).

Failure to provide your personal data regularly means that we do not process your personal data for one of the purposes described below and you are unable to take advantage of an offer related to the respective processing (example: you will receive our newsletter without providing your e-mail address not).

web hosting

We use external services for web hosting. These services may have access to personal data that is processed as part of the use of our online offering. Further information on the services used, the scope of data processing and the technologies and procedures when using the respective services can be found in the further information about the services we use at the end of this passage and under the links provided there.

wix
Provider: Wix.com Ltd, Israel.
Website: https://www.wix.com/
Further information & data protection: https://www.wix.com/about/privacy
Appropriate level of data protection when transferring personal data to Israel: adequacy decision of the EU Commission.
Guarantee: EU Standard Contractual Clauses. You can request a copy of the EU standard contractual clauses from us.

Web server log files

We process your personal data in order to be able to show you our online offer and to ensure the stability and security of our online offer. Information (e.g. element requested, URL accessed, operating system, date and time of the request, browser type and version used, IP address, protocol used, amount of data transferred, user agent, referrer URL, time zone difference to Greenwich Mean Time (GMT) and /or HTTP status code) in so-called log files (access log, error log, etc.).

If we have asked for your consent and you have given it, the legal basis for processing is Article 6 (1) (a) GDPR. If we have not asked for your consent, the legal basis for processing is Art. 6 (1) (f) GDPR. Our legitimate interest is the proper display of our online offer and ensuring the stability and security of our online offer.

Security

For security reasons and to protect the transmission of your personal data and other confidential content, we use encryption on our domain. You can recognize this in the browser line by the character string "https://" and the lock symbol.

contact

If you contact us, we process your personal data in order to process your contact.

If we have asked for your consent and you have given it, the legal basis for processing is Article 6 (1) (a) GDPR. If we have not asked for your consent, the legal basis for processing is Art. 6 (1) (f) GDPR. Our legitimate interest is the processing of your contact. If the processing is necessary to fulfill a contract with you or to carry out pre-contractual measures based on your request, the legal basis for the processing is also Article 6 (1) (b) GDPR.

We use external services to provide and maintain our email inboxes. These services may have access to personal data processed in the context of contacting us.

Cookies & Similar Technologies

Cookies are used. Cookies are pieces of text information that are stored on your end device. A distinction is made between session cookies, which are deleted immediately after you close your browser, and permanent cookies, which are only deleted after a certain period of time.

In addition to cookies, similar technologies (tracking pixels, web beacons, etc.) can also be used. The following statements on cookies also apply to similar technologies. These statements also apply to further processing in connection with cookies and similar technologies (analysis & marketing, etc.). This applies in particular to any consent you may have given to the use of cookies. This also extends to other technologies and to further processing in connection with cookies and similar technologies.

Cookies can be used to enable the use of certain functions. Cookies can also be used to measure the range of our online offer, to design it in a needs-based and interest-based manner and thus to optimize our online offer and our marketing. Cookies can be used by us and by external services.

We use a consent tool to manage the cookies used and related consents. Details on the cookies used (purpose, storage duration, external service if applicable, etc.) and the consent tool can be found in the following passages and the consent tool we use.

If we have asked for your consent and you have given it, the legal basis for processing is Article 6 (1) (a) GDPR. If we have not asked for your consent, the legal basis for processing is Art. 6 (1) (f) GDPR. Our legitimate interest is the management of the cookies used and the relevant consents. Depending on the purpose of the processing, our legitimate interests can be found in the following passages.

You can prevent the storage of cookies by setting your browser accordingly. Below we provide you with links for typical browsers, under which you can find further information on the management of cookie settings:
- Firefox: https://support.mozilla.org/de/kb/enhanced-protection-activity-tracking-desktop
- Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
- Internet Explorer / Edge: https://support.microsoft.com/de-de/windows/l%C3%B6schen-und-verwalten-cookies-168dab11-0753-043d-7c16-ede5947fc64d
- Safari: https://support.apple.com/en-us/guide/safari/sfri11471/mac
- Opera: https://help.opera.com/de/latest/web-preferences/#cookies
- Yandex: https://browser.yandex.com/help/personal-data-protection/cookies.html

You can find further objection options under the following links: https://www.youronlinechoices.eu/, https://youradchoices.ca/en/tools, https://optout.aboutads.info/?c=2&lang=EN and https://optout.networkadvertising.org/?c=1.

If you prevent the storage of cookies, this can impair the proper functioning of our online offer. If you delete all cookies, the above settings will also be lost and must be made again.

You can also activate your browser's "Do Not Track" function to indicate that you do not wish to be tracked. Below we provide you with links for typical browsers, under which you can find further information on the "Do Not Track" setting:
- Firefox: https://support.mozilla.org/de/kb/how-do-i-stop-that-websites-track-me-
- Chrome: https://support.google.com/chrome/answer/2790761?co=GENIE.Platform%3DDesktop&hl=en
- Internet Explorer / Edge: https://support.microsoft.com/en-us/windows/using-do-not-track-in-internet-explorer-11-ad61fa73-d533-ce96-3f64-2aa3a332e792
- Opera: https://help.opera.com/de/latest/security-and-privacy/
- As of February 2019, Safari no longer supports the "Do Not Track" function. Cross-site tracking can be prevented in Safari under the following link: https://support.apple.com/de-de/guide/safari/sfri40732/12.0/mac
- Yandex: https://browser.yandex.com/help/personal-data-protection/ytp.html

You can also revoke or manage your consent to the cookies used in the consent tool we use.

Shop

If you place an order, we process your personal data in order to process and process your order and to comply with the associated rights and obligations.

If you create a customer account, we process your personal data in order to provide the customer account and the associated functions (forgotten password function, etc.), to enhance your shopping experience and to make the ordering process easier for you for future orders.

If we have asked for your consent and you have given it, the legal basis for processing is Article 6 (1) (a) GDPR. If we have not asked for your consent, the legal basis for processing is Art. 6 (1) (f) GDPR. Our legitimate interest is the processing and processing of your order. If the processing is necessary to fulfill a contract with you or to carry out pre-contractual measures based on your request, the legal basis for the processing is also Article 6 (1) (b) GDPR.

Recipients of your personal data may be third parties (fulfillment service providers, IT service providers, shipping or transport service providers, banks, tax consultants, lawyers, authorities, etc.), insofar as this is necessary for the processing of your order and the associated rights and obligations .

We use external services to process payments. We transmit your personal data to these services insofar as this is necessary for the processing of payments. Further information on the services used, the scope of data processing and the technologies and procedures when using the respective services can be found in the further information about the services we use at the end of this passage and under the links provided there.

PayPal
Provider: PayPal (Europe) S.à rl et Cie, SCA, Luxembourg.
Website: https://www.paypal.com/de/home/
Further information & data protection: https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE

Newsletter

If we have asked for your consent and you have given it, we process your e-mail address in order to conduct e-mail marketing and, if necessary, other personal data in order to address you personally. The legal basis for processing is Art. 6 (1) (a) GDPR. The content of the e-mail marketing will be specifically described when your consent is obtained. The e-mail marketing also contains information about us, our goods and services.

We use the so-called double opt-in procedure to prevent possible misuse of your personal data. For this purpose, after collecting your e-mail address, we will send you an e-mail to the e-mail address you provided, in which we ask you to confirm that you actually want e-mail marketing. The legal basis for processing is Art. 6 (1) (f) GDPR. Our legitimate interest is the legally compliant implementation of e-mail marketing.

We log the time you gave your consent and the time of your confirmation as well as your IP address and the content of your declaration of consent in order to be able to prove that we obtained your consent in a legally compliant manner. The legal basis for processing is Art. 6 (1) (f) GDPR. Our legitimate interest is the legally compliant implementation of e-mail marketing.

We use external services for email marketing. Further information on the services used, the scope of data processing and the technologies and procedures when using the respective services and whether profiling takes place when using the respective services and, if necessary, information about the logic involved and the scope and intended effects of a Such processing for you can be found in the further information about the services we use at the end of this passage and under the links provided there.

You can revoke your consent at any time. The revocation of your consent does not affect the lawfulness of the processing carried out on the basis of the consent until revocation. To revoke your consent, you can use the link provided for this purpose in the e-mails or contact us using the contact details given above.

If you have revoked your consent, we reserve the right to process your personal data in a so-called blacklist/block list in order to be able to ensure in the future that no further e-mail marketing is carried out in connection with this personal data. The legal basis for processing is Art. 6 (1) (f) GDPR. Our legitimate interest is to avoid unwanted email marketing.

We process your personal data as part of tracking or success measurements in order to measure the reach of our email marketing, to design it in a needs-based and interest-based manner and thus to optimize our email marketing. This can also lead to profiling (for advertising purposes, personalized information, etc.). Profiling can also be done across services and devices. If we have asked for your consent and you have given it, the legal basis for processing is Article 6 (1) (a) GDPR. If we have not asked for your consent, the legal basis for processing is Art. 6 (1) (f) GDPR. Our legitimate interest is the optimization of our e-mail marketing. A separate revocation of your consent or objection in relation to the tracking or the measurement of success is unfortunately not possible. You must use the above options to revoke your consent or to object to the processing of your personal data for the purpose of email marketing as a whole.

Existing customer marketing - advertising by e-mail

If we have received your e-mail address in connection with the sale of a good or service and you have not objected to this, we process your e-mail address in order to conduct e-mail marketing for our own similar goods or services, and possibly other personal data in order to address you personally. The legal basis for processing is Art. 6 (1) (f) GDPR. Our legitimate interest is direct advertising.

You have the right to object at any time to the processing of your personal data for the purpose of e-mail marketing, without incurring any costs other than the transmission costs according to the basic tariffs. We will then no longer process your personal data for the purpose of email marketing. To object to the processing of your personal data for the purpose of e-mail marketing, you can use the link provided for this purpose in the e-mails or contact us using the contact details given above.

If you have objected to the processing of your personal data for the purpose of e-mail marketing, we reserve the right to process your personal data in a so-called blacklist/restricted list in order to be able to ensure in the future that no further e-mail Marketing in connection with this personal data takes place. The legal basis for processing is Art. 6 (1) (f) GDPR. Our legitimate interest is to avoid unwanted email marketing.

Analysis & Marketing

We process your personal data in order to measure the range of our online offer, to design it in a needs-based and interest-based manner and thus to optimize our online offer and our marketing.

We use external services for analysis and marketing. This can also lead to profiling (for advertising purposes, personalized information, etc.). Profiling can also be done across services and devices. Further information on the services used, the scope of data processing and the technologies and procedures when using the respective services and whether profiling takes place when using the respective services and, if necessary, information about the logic involved and the scope and intended effects of a Such processing for you can be found in the further information about the services we use at the end of this passage and under the links provided there.

See above for more information on cookies & similar technologies.

Google Analytics
Provider: In the European Economic Area (EEA) and Switzerland, Google services are offered by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://marketingplatform.google.com/intl/de/about/analytics/
Further information & data protection: https://support.google.com/analytics/answer/6004245?hl=en and https://policies.google.com/?hl=de
The transmission of personal data to third countries depends on the respective Google service and is subject to the various EU standard contractual clauses, provided these are offered by Google. You can find more information on this and Google's responsibility under the following link: https://business.safety.google/gdpr/. You can view a copy of the EU Standard Contractual Clauses there.

Social Media Presences

We maintain social media presences with external services in order to be able to communicate with users there and thus optimize our online offering and our marketing.

This data protection declaration also applies to the following social media presences:
https://www.instagram.com/karindoering.art
http://www.facebook.com/karindoering
https://www.youtube.com/channel/UCkT83IFxlk7NCbKAabkRypA
https://www.linkedin.com/in/karindoering
https://www.tiktok.com/@karindoering.art

Profiling (for advertising purposes, personalized information, etc.) may also occur as part of the use of external services. Profiling can also be done across services and devices. Further information on the services used, the scope of data processing and the technologies and procedures when using the respective services and whether profiling takes place when using the respective services and, if necessary, information about the logic involved and the scope and intended effects of a Such processing for you can be found in the further information about the services we use at the end of this passage and under the links provided there.

Facebook
Provider: Meta Platforms Ireland Limited, Ireland. Meta Platforms Ireland Limited is a subsidiary of Meta Platforms, Inc., United States of America.
Website: https://www.facebook.com
The provider and we are jointly responsible. We have concluded a corresponding agreement with the provider. You can read this agreement at https://www.facebook.com/legal/terms/page_controller_addendum and https://www.facebook.com/legal/controller_addendumSee .
Further information & data protection: https://developers.facebook.com/docs/plugins/, https://www.facebook.com/legal/terms/information_about_page_insights_data, https://www.facebook.com/privacy/policy/, https://de-de.facebook.com/policies/cookies/, https://www.facebook.com/help/566994660333381?ref=dp and https://de-de.facebook.com/help/568137493302217
Guarantee: EU Standard Contractual Clauses. You can request a copy of the EU standard contractual clauses from us.

Instagram
Provider: Meta Platforms Ireland Limited, Ireland. Meta Platforms Ireland Limited is a subsidiary of Meta Platforms, Inc., United States of America.
Website: https://www.instagram.com
Further information & data protection: https://help.instagram.com/581066165581870 and https://help.instagram.com/519522125107875
Guarantee: EU Standard Contractual Clauses. You can request a copy of the EU standard contractual clauses from us.

LinkedIn
Provider: If you are located in the EU, European Economic Area (EEA) or Switzerland, this service is provided by LinkedIn Ireland Unlimited Company, Ireland. If you are located outside of the EU, European Economic Area (EEA) or Switzerland, this service is provided by LinkedIn Corporation, United States of America.
Website: https://www.linkedin.com
Further information & data protection: https://de.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy and https://www.linkedin.com/legal/cookie-policy?trk=homepage-basic_footer-cookie-policy
Guarantee: EU Standard Contractual Clauses. You can request a copy of the EU standard contractual clauses from us.

tik tok
Providers: If you live in the European Economic Area, United Kingdom or Switzerland, TikTok Technology Limited, Ireland and TikTok Information Technologies UK Limited, United Kingdom are the joint data controllers for the processing of your data. If you live in the United States of America, TikTok Inc., United States of America is responsible for processing your data. In all other cases, TikTok Pte. Ltd., Singapore, responsible for the processing of your data.
Website: https://www.tiktok.com
Further information & data protection: https://www.tiktok.com/legal/privacy-policy?lang=en
Guarantee: EU Standard Contractual Clauses. You can request a copy of the EU standard contractual clauses from us.

Whatsapp
Providers: If Users reside in a country in the European Economic Area (which includes the European Union) and any other country or territory encompassed (collectively, the European Region), the Service is provided by WhatsApp Ireland Limited, Ireland. If users live in any country that is not in the European Region, the service is provided by WhatsApp LLC, United States of America.
Website: https://www.whatsapp.com/
Further information & data protection: https://www.whatsapp.com/privacy, https://www.whatsapp.com/legal/ and https://www.whatsapp.com/legal/privacy-policy-eea
Guarantee: EU Standard Contractual Clauses. You can request a copy of the EU standard contractual clauses from us.

YouTube
Provider: In the European Economic Area (EEA) and Switzerland, Google services are offered by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://www.youtube.com
Further information & data protection: https://policies.google.com/?hl=de
The transmission of personal data to third countries depends on the respective Google service and is subject to the various EU standard contractual clauses, provided these are offered by Google. You can find more information on this and Google's responsibility under the following link: https://business.safety.google/gdpr/. You can view a copy of the EU Standard Contractual Clauses there.

Captchas

We use captchas to protect our online offer from abusive, mechanical and/or automated entries (e.g. in forms) and to avoid any misuse.

We use external services to provide the captchas. This can also lead to profiling. Profiling can also be done across services and devices. Further information on the services used, the scope of data processing and the technologies and procedures when using the respective services and whether profiling takes place when using the respective services and, if necessary, information about the logic involved and the scope and intended effects of a Such processing for you can be found in the further information about the services we use at the end of this passage and under the links provided there.

Google reCAPTCHA
Provider: In the European Economic Area (EEA) and Switzerland, Google services are offered by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://www.google.com/recaptcha/
Further information & data protection: https://policies.google.com/?hl=en
The transmission of personal data to third countries depends on the respective Google service and is subject to the various EU standard contractual clauses, provided these are offered by Google. You can find more information on this and Google's responsibility under the following link: https://business.safety.google/gdpr/. You can view a copy of the EU Standard Contractual Clauses there.