You may wonder what the term "personal data" actually means. This is information that can be traced back to a specific person. It includes, for example, the following components:
- E-mail address
- Phone number
- Websites visited etc.
Urèz Studios UG processes such data when permitted by law. The legal basis for this is Art. 6 GDPR. This in turn presupposes that either the data subject has consented to the processing of their personal data (this may apply for one or more specific purposes), that this is necessary to fulfil a contract or to carry out pre-contractual measures, or that it is necessary to safeguard the legitimate interests of the data controller or of a third party. Nevertheless, the main objective is to safeguard the interests or fundamental rights and freedoms of the data subject which require the protection of personal data.
Where do we get your data? Usually it's quite simple: you share it with us. Maybe you enter it during the transaction or in a contact form. You are fundamentally free to choose whether to enter personal or business data (e-mail addresses, names, addresses) on our website. Other purely technical data is automatically collected by our IT systems as soon as you access our website. This includes, for example, the time you visit the site or the Internet browser used.
Purposes of data processing
We aim to improve our service for you. That is why we use your data for more than just processing your specific purchase from Urèz Studios UG. We also seek to analyse your user behaviour on the basis of your input. This is the only way we can optimally design and continuously improve our website for you.
Duration of data storage
Urèz Studios UG only stores information for a certain period of time. Did you order something from us? Then the tax and commercial law retention periods apply: we must legally store order-related data and the associated addresses for 10 years. Your data that we have stored for marketing purposes will be deleted if you request us to do so, if you revoke your consent to storage or if the purpose for data storage no longer applies.
Your data protection rights
By law, you are always in control of your data. This means specifically:
– You can request information about your data.
– You can have your data rectified or erased.
– You can restrict the processing and portability of your data.
– You can object to the storage and use of your data.
– If you have given your consent under data protection law, you can revoke it.
– You can lodge a complaint with the relevant regulatory authority.
What does this mean in detail?
Right to be informed
Would you like to know whether we process your personal data and what that data is? We are obliged to provide you with information free of charge, and of course we are happy to do so. You can even get a copy of the data. You are also entitled to the following information:
- The purposes of the processing.
- The categories of personal data processed.
- The recipients or categories of recipients to whom the personal data have been or will be disclosed. This applies in particular to recipients in third countries or at international organisations.
- If possible, the intended duration of the storage of your personal data. If this information is not available, we will tell you the criteria by which this duration will be determined.
- If the personal data is not collected from you, we will inform you – wherever possible – of the source of the data.
- The existence of automated decision-making, including profiling, referred to in Art. 22 (1) and (4) GDPR, and – at least in those cases – meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you.
If personal data is transferred to a third country, you can request suitable guarantees in accordance with Art. 46 GDPR.
Right to rectification
You have the right to request that we rectify your personal information without undue delay if it is inaccurate. Depending on the purpose of the processing, you may request that we complete your personal data, including by means of a supplementary statement.
Right to erasure ("right to be forgotten")
Art. 17 para. 1 GDPR gives you the right to request that we erase your personal data without undue delay. We are obliged to comply with this in the following cases:
- The personal data is no longer necessary for the purpose which you originally collected or processed it for.
- You revoke your consent on which the processing was based pursuant to Art. 6 para. 1 point 1 a) GDPR or Art. 9 para. 2 a) GDPR and there is no other legal basis for the processing.
- You object to the processing pursuant to Art. 21 para. 1 GDPR and there are no overriding legitimate reasons for the processing, or you object to the processing pursuant to Art. 21 para. 2 GDPR.
- The personal data have been unlawfully processed.
- The personal data have to be erased for compliance with a legal obligation in Union or Member State law to which we are subject.
- The personal data have been collected in relation to the offer of information society services referred to in Art. 8 para. 1 GDPR.
But what happens if we have made the personal data public and are obliged pursuant to Art. 17 para. 1 to erase the personal data? In this case we inform the data controllers who are processing the personal data that you have requested the deletion of any links to, or copy or replication of, those personal data. To this end, we take reasonable steps, including technical measures, taking account of available technology and appropriate costs of implementation.
Right to restriction of processing
You have the right to obtain from us restriction of processing where one of the following applies:
- The accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of the personal data.
- The processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead.
- We no longer need the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims.
- You have objected to processing pursuant to Art. 21 para. 1 GDPR pending the verification whether the legitimate grounds of our company override yours.
Right to data portability
You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format. You also have the right to transmit those data to another controller without hindrance from us, so long as:
- the processing is based on consent pursuant to Art. 6 para. 1 point 1 a) GDPR or Art. 9 para. 2 a) GDPR or on a contract pursuant to Art. 6 para. 1 point 1 b) GDPR and
- the processing is carried out by automated means.
In exercising your right to data portability pursuant to Art. 20 para. 1, you shall have the right to have us transmit the personal data directly to another controller, where technically feasible.
Right to object
You shall have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Art. 6 para. 1 point 1 e) or f) GDPR, including profiling based on those provisions. We shall no longer process the personal data, except under the following two exceptions:
- We demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms.
- The processing serves the establishment, exercise or defence of legal claims.
Where we process personal data for direct marketing purposes, you have the right to object to this at any time. This includes profiling related to such direct marketing.
You can also lodge an objection if the data processing is carried out for scientific or historical research purposes or for statistical purposes pursuant to Art. 89 para. 1 GDPR. There is one exception here as well: when the processing necessary for the performance of a task carried out for reasons of public interest.
Right to withdraw consent under data protection law
You have the right to withdraw your consent to the processing of personal data at any time. The data processing remains lawful until the time consent is withdrawn.
Right to lodge a complaint with a supervisory authority
If you believe that the processing of your personal data is unlawful, please contact the relevant supervisory authority. You can contact the data protection supervisory authority of the German federal state of your habitual residence or the authority of the federal state in which CHRIST Juweliere und Uhrmacher seit 1863 GmbH has its headquarters. This is in North Rhine-Westphalia.
Procedure for obtaining information
Would you like to know what personal data Urèz Studios UG has stored about you and which data have been transmitted to whom? Urèz Studios UG will be happy to inform you. Just submit a "subject access request" to us free of charge. Please note, however, that Urèz Studios UG is not allowed to provide any information by telephone for data protection reasons. After all, it is not possible to conclusively identify you over the phone. To avoid any misuse by third parties, Urèz Studios UG needs the following information from you: your surname (and maiden name, if applicable), first name(s), date of birth and current address (street, house number, postcode, city and country).
All rights under articles 15 to 18 GDPR may be exercised in relation to Urèz Studios UG at the following address:
Urèz Studios UG
Bergische Landstraße 79
Data collection on our website
Your orders, your personal data such as your name, your address and credit card details are protected by modern security systems. The transmission of this data is encrypted using the Secure Socket Layer (SSL) standard, which is supported by most web browsers. This makes the data unreadable to other parties. Our website www.ateliereqla.com takes all necessary precautions to protect your personal data. You can actively support us in this by
- never disclosing your password to anyone else and
- using a web browser that supports SSL encryption whenever we offer this (e.g. during the ordering process).
In this way, together we ensure that your online purchases are truly secure.
We will never pass on your data to third parties without your express consent. The only exceptions are our service partners, who we must involve in the processing of the contractual relationship, e.g. delivery and payment processing. In these cases, too, we of course strictly observe the requirements of the Federal Data Protection Act. In addition, we transmit only the most necessary data in terms of scope.
Visiting the Urèz Studios UG website
When you visit our website, the following data are sent automatically and without any action on your part to the server of our website:
- The IP address of the requesting internet-enabled device
- The date and time of access
- The name and URL of the viewed file
- The website/application from which access was made (referrer URL)
- The browser you are using and, if applicable, the operating system of your internet-enabled computer, as well as the name of your access provider
. A so-called log file stores these data temporarily for the following purposes:
- To ensure a smooth connection,
- To ensure that our website/application is easy to use
- To evaluate system security and stability.
If you have consented in your browser or in the operating system or other setting in your device to geolocalisation, we use this feature to offer you individualized services related to your current location (e.g. the location of the nearest store). We process your location data exclusively for this purpose. The legal basis for processing the IP address is Art. 6 para. 1 f) GDPR. Our legitimate interest arises from the purposes of data processing listed above. If the presentation is necessary for the preparation of a contract, the legal basis for the data processing is Art. 6 para. 1 b) GDPR.
Use and deactivation of cookies
To make our website attractive to visitors and to make certain functions usable, we use so-called cookies on various pages. These are small text files that are stored on your device. They serve on the one hand to make surfing more convenient and on the other hand market research and advertising purposes as well as the collection of usage statistics. In addition, we utilise cookies within the framework of web tracking and use these as the basis for personalised content. No personal data are stored in the cookies we use. Some of the cookies we use (so-called session cookies) are deleted as soon as you close your browser. Other cookies (permanent cookies) remain on your device and allow us or our partner companies to recognize your browser the next time you visit. These must be actively deleted by the user. You can either set your browser so that it can accept our cookies or use our website without cookie functionality. If your browser does not accept cookies, we will not be able to present you with content that is personally tailored to you. If you have not deactivated the cookie function of your web browser, we assume that its use is in your interest. If we processes personal data when using cookies and cookie-like technologies to make this website available, this is done on the basis of Art. 6 para. 1 f) GDPR. Our legitimate interest is to be able to offer our website securely and according to requirements.
If you access our websites from a partner's website via a link as part of the partner program, we set a cookie for billing with this partner. It is not possible to draw any conclusions about your personal data from this cookie.
On our website you can pay via PayPal. The payment service provider is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. If you use this option, the payment data entered by you will be transmitted to PayPal. This takes place on the basis of Art. 6 para. 1 a) GDPR (consent) and Art. 6 para. 1 b) GDPR (processing to fulfil a contract). You can revoke your consent at any time. However, data processing operations performed in the past shall remain effective.
Web analytics tools and advertising
Tools used on the website
This website uses Universal Analytics, a web analysis service provided by Google Inc. ("Google"). Universal Analytics uses so-called "cookies". These are small text files that are stored on your computer and allow an analysis of the use of the website. The information generated by the cookie about your behaviour on this website is generally transmitted to a Google server in the USA and stored there. However, if IP anonymisation is enabled on this website, your IP address will first be truncated by Google within the member states of the European Union or other states party to the agreement on the European Economic Area. The full IP address will be sent to a Google server in the USA and truncated there only in exceptional cases. Google will use this information on behalf of the operator of this website for the following purposes:
- To evaluate your use of the website.
- To compile reports on website activity.
- To provide other services regarding website activity and internet usage for the website operator.
The IP address provided by your browser as part of Google Analytics will not be combined with other data from Google. You can prevent cookies from being stored by selecting the appropriate settings in your browser. You can also prevent the data generated by cookies concerning your use of the website (incl. your IP address) from being passed to Google, and the processing of this data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en-GB.
As an alternative to the browser plug-in, or in browsers on mobile devices, please click the following link to prevent the collection of your data by Google Analytics on this website in the future: <a id="optout-ga" href="">Google Analytics deaktivieren</a> This sets an opt-out-cookie on your device. If you delete your cookies, you will have to click this link again.
You can find further information on conditions of use and data protection at https://policies.google.com/privacy?hl=en-GB. Please note that this website uses Google Analytics with the extension "anonymizeIp" in order to ensure the anonymous collection of IP addresses (so-called IP masking). This measure is designed to prevent Google from merging IP addresses with personal information.
Remarketing or "Similar target groups" function of Google Inc.
On our website, we use the Remarketing or "Similar target groups" function of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). This function is used to analyse visitor behaviour and interests. It is also intended to provide visitors to the site with interest-based advertisements as part of the Google advertising network. The website visitor's browser stores so-called cookies. These are small text files that are stored on your computer and allow the visitor to be recognised when they visit a website that is part of Google's advertising network. These pages can then be used to present targeted advertisements to the visitor. These refer to content that the visitor has previously viewed on a website that uses Google's remarketing function. According to its own information, Google does not collect any personal data during this process.
However, if you would prefer not to use Google's Remarketing feature, you can always disable it. To do this, select the appropriate settings at https://www.google.com/settings/ads.
Our pages include pixels from Facebook, Inc., 1601 S. California Ave., Palo Alto, CA 94304, USA ("Facebook"). These allow us to track the actions of users after they have been redirected to a provider website by clicking on a Facebook advertisement. In this way, we are able to record the effectiveness of Facebook advertisements for statistical purposes.
If we transmit data to Facebook for comparison purposes, this data is encrypted locally on your browser and only then sent to Facebook via a secure https connection. This is done solely for the purpose of comparing it with Facebook's data, which is likewise encrypted.
Visitors to this website can object to this data collection and storage at any time via the following link: <a id="optout-facebook" href="">Deactivate Facebook Pixel</a> In this case, an opt-out cookie is stored on your device. If you delete your cookies, you will have to click this link again.
Use of Instagram plug-ins
Our website uses social plug-ins ("plug-ins") of Instagram, operated by Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA ("Instagram"). The plug-ins are marked with an Instagram logo, for example in the form of an "Instagram camera".
If you visit a page on our website that contains such a plug-in, your browser will establish a direct connection to Instagram's servers. Instagram sends the content of the plug-in directly to your browser and integrates it into the web page. This integration provides Instagram with the information that your browser has accessed the respective page of our website, even if you do not have an Instagram profile or are not currently logged into Instagram. This information (including your IP address) is transferred directly from your browser to an Instagram server in the USA and stored there.
If you are logged into Instagram, Instagram can directly associate your visit to our website with your Instagram account. If you interact with the plug-ins, for example by pressing the "Instagram" button, this information is also transmitted directly to an Instagram server and stored there. The information will also be published to your Instagram account and displayed to your contacts.
If you do not want Instagram to associate the data collected through our website directly with your Instagram account, you must log out of Instagram before visiting our website. You can also completely prevent the Instagram plug-ins from loading by using add-ons for your browser, e.g. the script blocker "NoScript" (https://noscript.net/).
Urèz Studios UG constantly checks and updates the information on its websites. Despite all due care, the data may have changed in the meantime. We therefore cannot assume any liability or guarantee that the information provided is up-to-date, correct and complete. The same applies to all other websites referenced by hyperlink.
Urèz Studios UG is not responsible for the content of websites reached via such links. We expressly distance ourselves from any kind of content on the linked pages. We expressly declare that we have no influence whatsoever on the design and content of pages outside our domain and that we are therefore not responsible for their maintenance.
Furthermore, Urèz Studios UG reserves the right to change or supplement the information provided. The content and structure of the Urèz Studios UG websites are protected by copyright. The reproduction of information or data, in particular the use of texts, parts of texts or images, requires the prior consent of Urèz Studios UG.