Benny's Grafikstudio

Your one-stop-shop for graphics & design

Data protection at a glance

GENERAL INFORMATION The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you. Detailed information on data protection can be found in our privacy policy listed below this text.

DATA COLLECTION ON THIS WEBSITE Who is responsible for data collection on this website? The data processing on this website is carried out by the website operator. You can find the operator’s contact details in the “Responsible Party Notice” section of this privacy policy.

How do we collect your data? Your data is collected by you providing it to us. This can be, for example, data that you enter in a contact form.

Other data is automatically collected or obtained with your consent during your visit to the website through our IT systems. These are primarily technical data (e.g. internet browser, operating system, or time of page access). This data is collected automatically as soon as you enter this website.

What do we use your data for? Some of the data is collected to ensure the proper functioning of the website. Other data can be used to analyze your user behavior.

What rights do you have regarding your data? You have the right to obtain information about the origin, recipients, and purpose of your stored personal data free of charge at any time. You also have the right to request the correction or deletion of this data. If you have given consent for the processing of your data, you can revoke this consent at any time for the future. You also have the right, under certain circumstances, to request the restriction of the processing of your personal data. Furthermore, you have a right of appeal to the responsible supervisory authority. For this and for further questions regarding data protection, you can contact us at any time.

ANALYSIS TOOLS AND THIRD-PARTY TOOLS Your surfing behavior can be statistically evaluated when visiting this website. This is mainly done using so-called analysis programs.

Detailed information on these analysis programs can be found in the following privacy policy.

Hosting We host the contents of our website with the following provider: Strato AG Order Processing We have concluded an order processing agreement (OPA) for the use of the above-mentioned service. This is a data protection contract required by law, which ensures that this provider processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.
General information and mandatory information

DATA PROTECTION The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

When you use this website, various personal data is collected. Personal data is data that can be used to personally identify you. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

We point out that data transmission over the internet (e.g. communication by e-mail) can have security gaps. A complete protection of the data against access by third parties is not possible.

RESPONSIBLE PARTY NOTICE The responsible party for data processing on this website is: Benjamin Knittel Benny’s Graphic Studio Schweickhardtstraße 11, 77933 Lahr Phone: 017643268961 Email: info@bennysgrafikstudio.de

The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g. names, email addresses, etc.).

STORAGE DURATION Unless a more specific storage period has been mentioned in this privacy policy, your personal data will remain with us until the purpose for

GENERAL INFORMATION ON THE LEGAL BASIS FOR DATA PROCESSING ON THIS WEBSITE If you have given your consent to the processing of data, we process your personal data on the basis of Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR, if special categories of data are processed in accordance with Art. 9 Para. 1 GDPR. In the event of explicit consent to the transfer of personal data to third countries, data processing is also carried out on the basis of Art. 49 Para. 1 lit. a GDPR. If you have given your consent to the storage of cookies or access to information on your device (e.g. via device fingerprinting), data processing also takes place on the basis of § 25 Para. 1 TTDSG. The consent can be revoked at any time. If your data is necessary for the fulfilment of a contract or for the implementation of pre-contractual measures, we process your data on the basis of Art. 6 Para. 1 lit. b GDPR. Furthermore, we process your data if it is necessary to fulfil a legal obligation on the basis of Art. 6 Para. 1 lit. c GDPR. Data processing may also take place on the basis of our legitimate interests in accordance with Art. 6 Para. 1 lit. f GDPR. The relevant legal bases are explained in the following paragraphs of this data protection declaration.

NOTICE OF DATA TRANSFER TO THE USA AND OTHER THIRD COUNTRIES We use tools from companies based in the USA or other countries that do not provide an adequate level of data protection. If these tools are active, your personal data may be transferred to these third countries and processed there. We would like to point out that these countries may not provide a level of data protection comparable to that of the EU. For example, US companies are required to disclose personal data to security authorities without you as the data subject being able to take legal action against this. It cannot be ruled out that US authorities (such as intelligence agencies) may process, analyse and store your data located on US servers for surveillance purposes. We have no influence on these processing activities.

REVOCATION OF YOUR CONSENT TO DATA PROCESSING Many data processing operations are only possible with your express consent. You can revoke a consent already given at any time. The legality of data processing carried out until the revocation remains unaffected by the revocation.

RIGHT TO OBJECT TO DATA COLLECTION IN SPECIAL CASES AND TO DIRECT ADVERTISING (ART. 21 GDPR) IF DATA PROCESSING IS BASED ON ART. 6 PARA. 1 LIT. E OR F GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS DATA PROTECTION DECLARATION. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS OR THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS (OBJECTION ACCORDING TO ART. 21 PARA. 1 GDPR).

CONSENT WITH BORLABS COOKIE

Our website uses the consent technology of Borlabs Cookie to obtain your consent to store certain cookies in your browser or to use certain technologies and to document them in compliance with data protection regulations. The provider of this technology is Borlabs GmbH, Rübenkamp 32, 22305 Hamburg (hereinafter Borlabs).

When you enter our website, a Borlabs cookie is stored in your browser, in which the consents you have given or the revocation of these consents are stored. This data is not passed on to the provider of Borlabs Cookie.

The collected data is stored until you ask us to delete it or until the Borlabs cookie is deleted, or the purpose of data storage no longer applies. Mandatory legal retention periods remain unaffected. Details on data processing by Borlabs Cookie can be found at https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/.

The use of the Borlabs Cookie consent technology is used to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6 para. 1 lit. c GDPR.

CONTACT FORM

If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We will not disclose this data without your consent.

The processing of this data is based on Art. 6 para. 1 lit. b GDPR, insofar as your inquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of inquiries addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR) if this has been requested; the consent can be revoked at any time.

The data you enter in the contact form will remain with us until you ask us to delete it, revoke your consent to store it, or the purpose for data storage no longer applies (e.g., after processing your inquiry has been completed). Mandatory legal provisions – in particular retention periods – remain unaffected.

INQUIRY BY E-MAIL, TELEPHONE OR FAX

If you contact us by e-mail, telephone, or fax, your inquiry, including all resulting personal data (name, inquiry), will be stored and processed by us for the purpose of processing your request. We will not disclose this data without your consent.

The data you send to us via contact inquiries will remain with us until you ask us to delete it, revoke your consent to store it, or the purpose for data storage no longer applies (e.g., after processing your request has been completed). Mandatory legal provisions – in particular statutory retention periods – remain unaffected.

ANALYSIS TOOLS AND ADVERTISING

GOOGLE TAG MANAGER

We use the Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The Google Tag Manager is a tool that allows

Google Maps is a map service used on this website. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. To use the features of Google Maps, it is necessary to store your IP address. This information is usually transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transmission. If Google Maps is activated, Google may use Google Fonts for the purpose of uniform font display. When you call up Google Maps, your browser loads the required web fonts into your browser cache to display texts and fonts correctly. The use of Google Maps is in the interest of an attractive presentation of our online offers and an easy findability of the places we have indicated on the website. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information on the user’s terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. The consent can be revoked at any time. The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/. For more information on how user data is handled, please refer to Google’s privacy policy: https://policies.google.com/privacy?hl=en.

Google reCAPTCHA is used on this website. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. reCAPTCHA is used to check whether data entry on this website (e.g., in a contact form) is done by a human or an automated program. For this purpose, reCAPTCHA analyzes the behavior of website visitors based on various characteristics. This analysis starts automatically as soon as the website visitor enters the website. reCAPTCHA evaluates various information for the analysis (e.g., IP address, length of stay of the website visitor on the website, or mouse movements made by the user). The data collected during the analysis is transmitted to Google. The reCAPTCHA analyses run entirely in the background. Website visitors are not informed that an analysis is taking place. The storage and analysis of the data is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in protecting his web offerings against abusive automated spying and against spam. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information on the user’s terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. The consent can be revoked at any time. For more information on Google reCAPTCHA, please refer to Google’s privacy policy and terms of use at the following links: https://policies.google.com/privacy?hl=en and https://policies.google.com/terms?hl=en.

For communication with our customers, we use various online conference tools. The tools we use are listed below. When communicating with us via video or audio conference via the internet, we and the provider of the respective conference tool collect and process your personal data. The conference tools collect all data that you provide/use to use the tools (email address and/or your telephone number).

Storage period The data collected directly by us through video and conference tools will be deleted from our systems as soon as you request deletion, revoke your consent for storage, or the purpose for data storage no longer applies. Stored cookies remain on your device until you delete them. Mandatory statutory retention periods remain unaffected.

We have no control over the storage period of your data, which is stored by the operators of the conference tools for their own purposes. For details on this, please contact the operators of the conference tools directly.

Conference tools used We use the following conference tools:

GOOGLE MEET

We use Google Meet. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. For details on data processing, please refer to Google’s privacy policy: https://policies.google.com/privacy?hl=en.

Contract processing We have concluded a contract processing agreement (AVV) for the use of the above-mentioned service. This is a legally required contract that ensures that this processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.

OUR SOCIAL MEDIA PRESENCE

Data processing by social networks We maintain publicly accessible profiles on social networks. You will find the social networks we use in detail below.

Social networks such as Facebook, Twitter, etc. can generally comprehensively analyze your user behavior when you visit their website or a website with integrated social media content (e.g., like buttons or advertising banners). Visiting our social media presence triggers numerous data processing operations that are relevant to data protection. In detail:

If you are logged into your social media account and visit our social media presence, the operator of the social media portal can assign this visit to your user account. Your personal data may also be collected if you are not logged in or do not have an account with the respective social media portal. This data collection takes place in this case, for example, through cookies that are stored on your device or by recording your IP address.

With the help of the data collected in this way, the operators of the social media portals can create user profiles in which your preferences and interests are stored. In this way, interest-based advertising can be displayed to you both within and outside of the respective social media presence. If you have an account with the respective social network, interest-based advertising can be displayed on all devices on which you are or were logged in.

Please note that we cannot trace all processing operations on the social media portals. Depending on the provider, further processing operations may therefore be carried out by the operators of the social media portals. For details, please refer to the terms of use and privacy policies of the respective social media portals.

Legal basis Our social media presence is intended to ensure the most comprehensive presence possible on the Internet. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. The analysis processes initiated by the social networks may be based on different legal bases, which must be specified by the operators of the social networks (e.g., consent within the meaning of Art. 6 para. 1 lit. a GDPR).

Responsible and assertion of rights If you visit one of our social media presences (e.g., Facebook), we are jointly responsible with the operator of the social media platform for the data processing operations triggered by this visit. You can generally exercise your rights (information, correction, deletion, restriction of processing, data portability, and complaint) both against us and against the operator of the respective social media portal (e.g., Facebook).

Please note that despite the joint responsibility with the social media portal operators, we have limited influence on the data processing operations of the social media portals. Our options depend largely on the company policy.