Privacy Notice

The following data protection declaration applies to the use of our online offer www.phoenixbrands.co (hereinafter "website"). We attach great importance to data protection. The collection and processing of your personal data is carried out in compliance with the applicable data protection regulations, in particular the EU General Data Protection Regulation

Contents

1. Controller
2. General purpose of the processed data
3. What data do we collect and why?
4. How long is the data stored?
5. Rights of data subjects

1. Controller

The following party is responsible for the processing of data in relation to the services, i.e., this is the person who determines the purposes and means of processing personal data:

Victoria Gaßmann
Auenstraße 104A
80689 Munich
Germany
Phone: +4915730291845
Email: hello@victoriagassmann.com

If you wish to object to the collection, processing or use of your data by me in accordance with these data protection provisions as a whole or for individual measures, you can address your objection to the person responsible. You can save and print out this data protection declaration at any time.

2. General purpose of the processed data

We use personal data for the purpose of operating the website.

3. What data do we collect and why?

Data for the fulfilment of our legal obligations

We process personal data that we need to fulfil my legal obligations, such as name, address, e-mail address, services ordered, invoice and payment data. The collection of these data is necessary for the conclusion of the contract. The data will be deleted after expiry of the warranty periods and statutory retention periods.  The legal basis for the processing of this data is Art. 6 para. 1 lit. b GDPR, because this data is required so that I can fulfil my contractual obligations towards you.

E-Mail Contact

If you contact me (e.g. via contact form or e-mail), we will process your data to process your request and in case follow-up questions arise. If the data processing is carried out to carry out pre-contractual measures which result in your enquiry or, if you are already a customer, to carry out the contract, the legal basis for this data processing is Art. 6 para. 1 lit. b GDPR.

We only process other personal data if you give your consent (Art. 6 para. 1 lit. a) GDPR) or if we have a legitimate interest in processing your data (Art. 6 para. 1 lit. f) GDPR). A legitimate interest lies, for example, in replying to your e-mail.

4. How long is the data stored?

he data is erased once it is no longer required for the purpose for which it was originally collected. In some cases the legislator provides for the retention of personal data, for example in tax or commercial law. In these cases, the data will only be stored by me for these legal purposes, but will not be processed in any other way and will be deleted after expiry of the legal retention period.

5. Rights of data subjects

Under applicable laws, you have various rights regarding your personal data. If you wish to exercise these rights, please send your request by e-mail or by post to the address mentioned in point 1, clearly identifying yourself. Below you will find an overview of your rights.

Right to object

You also have the right, at any time with future effect and for reasons relating to your particular situation, to object to the processing of personal data concerning you which is based on Art. 6, subs. 1 e) or f), GDPR, including profiling based on these provisions.

You can reach me via the contact data mentioned under 1 or you can use the following way.
Via mail to: hello@phoenixbrands.co

Right of access

You have the right to obtain confirmation from us as to whether or not personal data concerning you are being processed and, where that is the case, access to the personal data and the other information listed in Art. 15 GDPR .

Right to rectification

You have the right to obtain from us the rectification of inaccurate personal data concerning you without undue delay (Art. 16 GDPR). Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

Right to erasure ("right to be forgotten")

You have the right to obtain from us the erasure of personal data concerning you without undue delay if one of the reasons listed in Art. 17, subs. 1, GDPR is applicable and the processing operations are not required for one of the purposes approved in Art. 17, subs. 3, GDPR.

Right to restriction of processing

You are entitled to obtain from us the restriction of the processing of personal data if one of the conditions laid down in Art. 18, subs. 1 a) to d), GDPR is met.

Right to data portability

Under the conditions set out in Art. 20, subs. 1, GDPR, you have the right to receive the personal data concerning you which you have provided to us, in a structured, commonly used and machine-readable format and the right to transmit those data to another controller without hindrance on our part. In exercising your right to data portability, you have the right to have the personal data transmitted directly by us to another controller where technically feasible.

Right to withdraw consent

If the processing is based on your consent, you have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

Right to lodge a complaint

You have the right to lodge a complaint with the supervisory authority responsible for our company. The supervisory authority responsible for our company is: Landesamt für Datenschutzaufsicht, Promenade 27 (Schloss), 91522 Ansbach, http://www.lda.bayern.de