Data protection

1. DATA PROTECTION AT A GLANCE
General information
The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data is all data with which you can be personally identified. Detailed information on the subject of data protection can be found in our privacy policy listed below this text.

Responsible body for data processing
Data processing on this website is carried out by the website operator. You can reach me using the contact details below:

PT Gili Island Stories
Human Design Stories
Anika Kreimeier
Gili Air
Pemenang Lombok Utara
83352 (zip code)
www.humandesignstories.com
E-mail: anika@humandesignstories.com

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, e-mail addresses, etc.).

How do I collect your data?
On the one hand, your data is collected when you provide it to us. This may, for example, be data that you enter in a contact form.
Other data is collected automatically by our IT systems when you visit the website. This is primarily technical data (e.g. internet browser, operating system or time of the page view). This data is collected automatically as soon as you enter our website.

What do I use your data for?
Some of the data is collected to ensure that the website is provided without errors. Other data can be used to analyze your user behavior.

What rights do you have with regard to your data?
You have the right to receive information about the origin, recipient and purpose of your stored personal data free of charge at any time. You also have the right to request the correction, blocking or deletion of this data. You can contact us at any time at the address given in the legal notice if you have further questions on the subject of data protection. You also have the right to lodge a complaint with the competent supervisory authority.


2. GENERAL NOTES AND MANDATORY INFORMATION
Data protection
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

Withdrawal of your consent to data processing
Many data processing operations are only possible with your express consent. You can revoke any consent you have already given at any time. All you need to do is send us an informal message by e-mail. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Your rights
You have a right to free information about the personal data we have stored about you and, if applicable, a right to rectification, restriction of processing or erasure of this data. You also have the right to data portability. Finally, you also have the right to complain to the data protection supervisory authority about the processing of your personal data by us.

We would also like to point out that you consent to the future processing of your personal data in accordance with the legal requirements pursuant to Art. 6 para. 1 lit. f GDPR. Art. 21 GDPR at any time. The objection can be made in particular against processing for direct marketing purposes

Right to lodge a complaint with the competent supervisory authority
In the event of breaches of data protection law, the data subject has the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority for data protection issues is the data protection officer of the federal state in which our company is based. A list of data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Provision of information
If you have any questions regarding the collection, processing or use of your personal data, for information, for the correction, blocking or deletion of data as well as for the revocation of any consent given or for objection to a specific use of data, please contact us using the following e-mail address:
hello@humandesignstories.com

Protocol data: The automatic collection and storage of log data by the provider of the Internet services (provider) takes place because the processing of this data is technically necessary in order to display our website to you and to ensure stability and security. The log data includes the following information:

Date and time of the respective request
Internet address (URL) that was requested
URL that the visitor visited immediately before
Browser and language used
Operating system used and its interface
IP address and host name of the visitor
Access status / http status code
Amount of data transferred in each case

This data is transmitted to us automatically and cannot be assigned to your person with reasonable effort. The legal basis for the processing of this data is our legitimate interest pursuant to Art. 6 (1) sentence 1 lit. f GDPR, as this data processing is necessary for the operation and display of the website. The data will be deleted as soon as it is no longer required for the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility for the user to object.

Encryption through SSL

For security reasons, our website uses SSL encryption (Secure Sockets Layer). This protects transmitted data and prevents it from being read by third parties. You can recognize successful encryption by the fact that the protocol name in the status bar of the browser changes from“http://” to“https://” and that a closed lock symbol is visible there.

Legal basis for the processing of personal data
Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a GDPR as the legal basis.
For the processing of personal data necessary for the performance of a contract to which the data subject is party, Art. 6 para. 1 lit. b GDPR as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.

Insofar as the processing of personal data is required to fulfill a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR as the legal basis.

In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR as the legal basis.

If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 para. 1 lit. f GDPR as the legal basis for data processing.


Data erasure and storage duration
The personal data of the data subject will be deleted as soon as the purpose of storage no longer applies. Data may also be stored if this is provided for by European or national laws or other regulations to which the controller is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned regulations expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.


3. DATA COLLECTION ON OUR WEBSITE

Cookies
In order to make your visit to my website attractive and to enable the use of certain functions, we use so-called cookies. These are small text files that are stored on your end device and that store certain information for exchange with our system. The legal basis for the processing of this data is Art. 6 para. 1 sentence 1 lit. f GDPR. Some of the cookies we use are deleted again at the end of the browser session, i.e. after closing the browser (transient cookies). These include, in particular, session cookies. These store a unique identifier (session ID). This session ID can be used to assign various requests from your browser to a common session. This allows your device to be recognized when you return to our website during a session. Session cookies are also deleted when you log out.

Other cookies remain on your end device for a specified period of time and enable us to recognize your browser or end device the next time you visit our website (persistent cookies).

Please note that certain cookies are already set as soon as you enter our website. You can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or to exclude the acceptance of cookies for certain cases, in particular cookies from third-party providers (third-party cookies) or in general. If you do not accept cookies, the functionality of our website may be restricted for you.

Contact form
You can contact us electronically using the contact form provided by us. Our contact form indicates which data is mandatory and which can be entered voluntarily. All data entered will be stored by us and used exclusively for the purpose of answering your inquiries. In addition, your IP address and the date and time of registration are stored. Your personal data will be deleted as soon as storage is no longer required for this purpose or we will restrict processing if there are statutory retention obligations. The legal basis for the processing of the data is the implementation of a pre-contractual measure through your request in accordance with Art. 6 para. 1 lit. f GDPR. Art. 6 para. 1 lit. b GDPR.

Objection to unauthorized advertising by e-mail
We have published general contact details and an e-mail address on our website as part of our obligation to provide a legal notice in accordance with Section 5 of the German Telemedia Act (TMG). We hereby object to the use of this contact data for the unsolicited sending of information material, advertising or spam e-mails that we have not explicitly requested.

Status of the privacy policy: January 2022