Data protection declaration and information on any consent you may have given

1. Use of our website for information purposes

If you visit our website without sending us any information, we only process the personal data that your browser sends to our server. This is the following data that is technically required to show you our website and to ensure stability and security:

• the page you accessed
• Date and time of request
• Amount of data transferred
• Source or reference from where you got to the page
• browser you are using
• Operating system you are using
• Your IP address

The processing of your personal data takes place on the basis of Article 6 paragraph 1 letter f) DS-GVO to safeguard our legitimate interest in maintaining the proper operation of our website.

Your personal data will be deleted after 6 months, unless they are used to assert rights or to enforce claims based on measures against for the proper operation of our website. In this case, the deletion takes place immediately after the conclusion of the corresponding procedure.

2. Processing of requests

If you contact us with an inquiry or concern, we will process the personal data and information/documents you have transmitted. Regardless of how you send us your request or concern, these may include:

• Date and time of contact
• Name Data
• Contact details
• Inquiry/request data
• Submitted information/documents

The processing of your personal data and the transmitted information/documents takes place - depending on the content of your request or your request - on the basis of the consent you have given in accordance with Article 6 Paragraph 1 Letter a) GDPR to answer your request or on the basis of Article 6 Paragraph 1 Letter b) DS-GVO to carry out pre-contractual measures or on the basis of Article 6 Paragraph 1 Letter b) DS-GVO for the performance of a contract to which you are a party or on on the basis of Article 6 paragraph 1 letter f) DS-GVO to protect our legitimate interest in answering inquiries/concerns and in taking other measures in connection with the processing of inquiries/concerns.

If we provide a contact form and you contact us via this contact form, by sending your message you give your consent with the following content, about which you will be informed separately in the contact form: "I agree to the processing of my e-mail address and other personal data I have provided for the purpose of answering my message. I can revoke this consent at any time and without giving reasons with effect for the future. The legality of the processing that took place up to the point of revocation remains unaffected in the event of revocation."

You can revoke your consent at any time and without giving reasons with effect for the future. A corresponding message to the person responsible is sufficient for this, whose contact details can be found in the information on the person responsible. The legality of the processing that took place up to the point of revocation remains unaffected in the event of revocation.

Insofar as this is necessary for the processing of your request/your request, we will transmit your personal data to third parties within the framework of the legal requirements. In particular, this is the external customer support service provider, about which we inform you in point 3. In cases where your personal data is transmitted to third parties, the scope of the transmitted data is limited to the necessary minimum.

Your personal data will be deleted once your query/concern has been resolved, unless we are allowed to use the data for another processing purpose within the framework of legal requirements and in accordance with the information in this data protection declaration.

3. Performance of Contracts

If you transmit personal data to us for the purpose of concluding a contract or in connection with creating a customer account, we process the data you have transmitted to process the contract. This is your customer data (e.g. your name and address) and the contract data (e.g. information on the contractual products, documents for printing, as well as payment and delivery information).

Your personal data is processed on the basis of Article 6 (1) (b) GDPR for the performance of a contract to which you are a party.

Insofar as this is necessary for the fulfillment of the contract with you, we transfer your personal data to third parties within the framework of the legal requirements. This transmission takes place to the service providers involved in the execution of the contract. These are the providers of the processing tools we use. These are also the companies commissioned with the transport as well as the manufacturers and wholesalers commissioned with the direct delivery. Otherwise, these are the payment service providers commissioned with payment matters.

If you use the payment service provider PayPal to process payment transactions, we expressly point out that that the PayPal data protection declaration applies to all PayPal transactions: https:// www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE

For customer support, order processing and invoicing, data is transferred to non-EU countries to the service provider: Individual enterprise Beissenova Nazgul Rymbaevna, ul. Kamskaya, str. 85, of. 23, 100022 Karaganda, Kazakhstan. There are the necessary guarantees for compliance with the European data protection law when transferring data to non-EU countries without an adequate level of data protection. Processor undertakes contractually to to use personal data only in accordance with the requirements of data protection laws and to ensure the protection of the rights of the data subject. This service provider will only use the data you provide for the inquiry or processing of the contract (listed in points 2 and 3) exclusively for answering questions, fulfillment of the contract, Preparation of the graphic files used for production and creation of the invoice.

In cases where your personal data is transmitted to third parties, the scope of the transmitted data is limited to the necessary minimum.

Your personal data will be deleted after the tax and commercial retention periods of 6 or 10 years have expired, unless we are allowed to transfer the data to someone else Processing purpose within the framework of the legal requirements and according to the information in this data protection declaration.

4. Advertising via newsletter

If you register for our newsletter, we process the e-mail address you provide - and any other personal data you provide also transmit these - in order to send you information about our offers by email. In this respect, only the indication of your email address is obligatory. If you voluntarily submit further personal data, we may process this data, to address you personally in the newsletter.

If you register for our newsletter, you give your consent with the following content: "I agree, to be informed about interesting offers by e-mail and therefore agree to the processing of my e-mail address and others from me communicated personal data for the purpose of sending the newsletter. I can revoke this consent at any time and without giving reasons with effect for the future. The legality of the processing that took place up to the point of revocation remains unaffected in the event of revocation."

The registration for our newsletter takes place in the so-called double opt-in procedure. This means: After registration you will receive first an e-mail with a message about the registration for the newsletter combined with a request for confirmation of the registration. Your confirmation of registration is required in order to document the necessary consent to the sending of the newsletter and to To be able to recognize registrations to third-party e-mail addresses. In connection with the registration for the newsletter and the confirmations, the IP address as well as the date and time are logged, in order to be able to prove the granting of consent in accordance with the legal requirements.

The processing of your personal data takes place on the basis of the consent you have given in accordance with Article 6 (1) (a) GDPR.

You can revoke your consent at any time and without giving reasons with effect for the future. A corresponding message to the person responsible is sufficient for this, whose contact details can be found in the information on the person responsible. The legality of the processing that took place up to the point of revocation remains unaffected in the event of revocation.

If you revoke your consent or unsubscribe from our newsletter, your email address and any other transmitted data will be deleted immediately. unless we are allowed to continue processing the data for another processing purpose within the framework of the legal requirements and in accordance with the information in this data protection declaration.

5. Use of cookies

We may use cookies on our website so that you can use the functions we offer, to enable you to use the functions we offer to be able to analyze and, if necessary, also to be able to present advertising that is as needs-based as possible. Below we inform you about the cookies and other technologies we use.

Cookies are small files that are stored on your device and through which certain information is transmitted to us. Cookies are used to enable you to use certain websites To enable functions and to make our offer more user-friendly overall.

5.1 Technically required cookies and technologies:

The use of cookies and technologies on our website is technically necessary in order to provide you with the functions of our service that you have requested To be able to make it available and to document the consent you have given. For this reason, you cannot deselect the use of the corresponding cookies and technologies (opt-out). You can prevent the storage of cookies by setting your browser software accordingly. You can delete saved cookies via the corresponding settings. However, we would like to point out that in this In the event that not all functions of our website can be used to their full extent.

Technically required cookies are cookies that are required so that you can use the functions of our service you have requested (to carry out an order). This concerns, for example, the storage of entries in connection with the use of the shopping cart function or the storage of entries after registration in connection with the creation of a customer account.

Responsible: The processing of your personal data is carried out by us as the person responsible. The name and contact details of the person responsible (and if a data protection officer has been appointed, the contact details of the data protection officer) can be found in our provider identification / our imprint. Information on whether the cookies are set by us (first-party cookies) or set by a partner company (third-party cookies), you can find out more from the information on the individual cookies.

Processing purposes and legal basis: The processing of your personal data takes place on the basis of Article 6 Paragraph 1 Letter b) DS-GVO for the implementation of pre-contractual measures, which take place at your request as the person concerned or on the basis of Article 6 (1) (b) GDPR for the performance of a contract to which you are a party.

name/designation	vendor	Description	Runtime
ASP.NET_SessionId	art trash GmbH	Stores user status and cart contents across page views	Session
ASPXAUTH	art trash GmbH	Identifies the user and allows authentication to the server	Session

6. Use of social networks

We regularly publish our news and information on our fan pages in the social networks Twitter, Facebook, Instagram, GooglePlus, Google Maps, Youtube. If you interact with us or our posts on social networks, we only process the personal data which you have released for processing according to the settings you have chosen. If you contact us on social networks with an inquiry or concern, we will process your request as above in point 2. "Processing Requests" described. We do not send any advertising messages or similar to your accounts in the social networks.

You can find more information on the processing of personal data by the operators of social networks at:
Facebook: https://www.facebook.com/policy.php
Instagram: https://help.instagram.com/155833707900388
Twitter: https://twitter.com/de/privacy
Google services: https://policies.google.com/privacy?hl=de

7. Enforcement of our rights and defense against claims directed against us

If necessary, we process your personal data to protect our legitimate interest in enforcing our rights and in defending against claims made against us.

In this case, your personal data will be processed on the basis of Article 6 (1) (f) GDPR.

Insofar as this is necessary to safeguard our legitimate interest, we will transfer your personal data to third parties within the framework of the legal requirements. This transmission takes place to the providers of debt collection services involved or our lawyers.

In cases where your personal data is transmitted to third parties, the scope of the transmitted data is limited to the necessary minimum.

Your personal data will be deleted after the procedure has been completed, but at the earliest after the tax and commercial retention periods of 6 or 10 years have expired, unless we may continue to process the data for another processing purpose within the framework of the legal requirements and in accordance with the information in this data protection declaration.

1. Overview

In order to ensure fair and transparent processing of personal data, you as the data subject have the following rights in accordance with data protection regulations:

• The right to information according to Article 15 DS-GVO,
• the right to rectification under Article 16 GDPR,
• the right to erasure according to Article 17 GDPR,
• The right to restriction of processing under Article 18 GDPR,
• The right to data portability according to Article 20 GDPR
• The right to revoke a given consent at any time according to Art. 7 Para. 3 DS-GVO,
• The right to object to processing under Article 21 GDPR, about which we will inform you separately below
• and the right to complain to the supervisory authority in accordance with Art. 77 GDPR, about which we will inform you separately below.

2. Your right to object to processing

The processing of personal data is permitted if the processing is necessary to safeguard the legitimate interests of the person responsible or a third party, unless the interests or fundamental rights and freedoms of the data subject, which require the protection of personal data prevail, especially if the data subject is a child, Art. 6 Para. 1 Letter f) GDPR.

As the data subject, you have the right, for reasons arising from your particular situation, to object to the processing of personal data concerning you at any time, which takes place on the basis of Art. 6 Para. 1 Letter f) DS-GVO to file an objection; this also applies to profiling based on these provisions.

If you make use of your right to object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing, which outweigh your interests, rights and freedoms as the data subject, or the processing serves to assert, exercise or defend legal claims.

If we process your personal data in order to operate direct advertising, you as the data subject have the right to object at any time to the to process personal data concerning them for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct advertising. If you, as the data subject, object to the processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

3. Your right to lodge a complaint with the supervisory authority

As a data subject, without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your place of residence, your place of work or the place of the alleged infringement, if you believe that the processing of your personal data violates the requirements of the GDPR.