privacy policy
Introduction and Terms
1 GENERAL
With the operation of our website with the URL www.meleynastudios.com (hereinafter referred to as "website"), we process personal data. These are treated confidentially by us and processed in accordance with the applicable laws - in particular the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG) and the Telecommunications Telemedia Data Protection Act (TTDSG). With these data protection regulations, we would like to inform you about which personal data we collect from you, for what purposes and on what legal basis we use it and, if necessary, to whom we disclose it. In addition, we will explain to you what rights you have to protect and enforce your data protection.
2. TERMS
These data protection regulations contain technical terms that are in the DSGVO and the BDSG. For your better understanding, we would like to explain these terms in simple terms in advance:
2.1.Personal Information
"Personal data" is any information relating to an identified or identifiable person (Art. 4 No. 1 GDPR). Details of an identified person can e.g. B. the name or the e-mail address. However, personal data is also data for which the identity is not immediately apparent, but can be determined by combining your own or third-party information and thus finding out who it is. For example, a person will B. identifiable by providing their address or bank details, their date of birth or user name, their IP addresses and/or location data. All information that in any way allows conclusions to be drawn about a person is relevant here.
2.2.Processing
Art. 4 No. 2 GDPR defines “processing” as any process in connection with personal data. This applies in particular to collecting, recording, organizing, arranging, storing, adapting or changing, reading out, querying, using, disclosing, transmitting, distributing or any other form of provision, comparison or linking , the restriction, deletion or destruction of personal data.
Responsible and data protection officer
3. RESPONSIBLE
Responsible for data processing is:
Name: MELEYNASTUDIOS under Melissa Horchemer ("we")
Address: Seestrasse, 13353 Berlin
Email: contact@meleynastudios.com
4.DATA PRIVACY OFFICER
With regard to the operation of our website, we are not obliged to appoint an operational data protection officer. If you have any questions or concerns about data protection on the website, you can contact us using the aforementioned contact information.
processing frame
5. PROCESSING FRAMEWORK: WEBSITE
Within the framework of the website, we process the personal data of you listed in detail in Section IV. We only process data from you that you actively provide on the website (e.g. by filling out forms) or that you make available automatically when using our offer.
Your data will be processed exclusively by us and will not be sold, loaned or passed on to third parties. If we use the help of external service providers to process your personal data, this takes place within the framework of so-called order processing, in which we as the client are authorized to issue instructions to our contractors. To operate our website, we use the external service provider Wix.com Ltd., Nemal St. 406350671 Tel Aviv, Israel for hosting. Further information on data protection at WIX can be found here: https://de.wix.com/about/privacy. If other external service providers are used for individual processing listed in Section IV, they will be named there.
In principle, we do not transfer data to third countries and this is also not planned. We will inform you about exceptions to this principle in the processing described below. Any data transfer to third countries then takes place on the basis of the so-called EU standard contractual clauses.
The processing in detail
6. SERVER LOGFILES/ STATISTICS WIX
Each time the website is accessed, our hosting provider Wix automatically collects information that your browser transmits to the WIX server. These are also stored in the so-called Wix log files. The information includes the name of the accessed website, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider . The information is used by Wix to analyze and maintain the technical operation of the servers and the network. We have no access to these server log files. In our Wix customer area, we have rudimentary visitor statistics (number of views, countries, referrer URLs). These do not contain any personal data.
7. REGISTRATION AND PROFILE
7.1. Description of processing
You can shop in our webshop on the website as a guest or as a registered user. By registering, you conclude a free user contract with us. By registering, you will receive your own user account within the web shop. Registration takes place by filling out the registration form on the website as part of a purchase and sending it to us electronically. To register, you must provide your first name, surname, e-mail address and postal address. By clicking the "Register" button, you send us the form. You will then receive an automatic welcome email. This contains a link to confirm your email address. Your account in our web shop will only be activated after successful verification of your e-mail address by clicking on the confirmation link. As a registered user, you can shop faster and more conveniently on our website by storing your billing and delivery addresses and your preferred payment method in your user profile. This means that you do not have to re-enter your personal data for later (further) purchases.
7.2.Purpose
The processing takes place in order to be able to provide you with the functions of our website for registered users.
7.3. Legal basis
The processing is required to conclude and fulfill the free user contract (Art. 6 Para. 1 lit. b GDPR). Without providing your personal data during registration, we cannot provide our contractually owed services.
7.4. Duration of storage
The data will be automatically deleted by us upon termination of your user contract. You can terminate the user contract yourself by selecting the "Delete profile" function in the settings of your user account. Alternatively, you can also inform us by email at contact@meleynastudios.com that you no longer wish to be a registered user of our website. We will then delete your user account immediately. In addition, as a logged-in user, you can edit and remove your own details and information at any time.8. PURCHASE
8.1. Description of processing
You can shop on our website as a guest or as a registered user (see section 6.). As part of your ordering process, we process your personal data. The mandatory fields marked with an asterisk "*" in our online shop must be filled in by you. Otherwise it is not possible for us to conclude a sales contract with you and to send you the desired goods. All other details are optional. When making a purchase on our website, you can also select one of the payment methods offered (PayPal, credit card via PayPal, purchase on account via Klarna) to pay the purchase price. When completing your order, the data required for payment will be passed on to the respective payment service provider. If you shop on my website as a registered user, you can store your billing and delivery addresses, as well as your preferred payment method, in your user profile for faster and more convenient ordering from me.
In addition, your first name, last name and address will be sent to DHL or UPS as the shipping service provider to process the delivery.
If you have given your consent during the ordering process by ticking the appropriate box, I will also pass on your e-mail address to DHL or UPS so that you can be informed directly by e-mail from the shipping service provider about the current status of your order shipment .8.2.Purpose
The processing takes place for the conclusion and processing of purchase contracts and for your information via e-mail about the current status of your order shipment.8.3. Legal Basis
The processing is required to conclude and fulfill the purchase contract (Art. 6 Para. 1 lit. b GDPR). This also applies to the transfer of the data required for processing payments to the respective payment service provider and the transfer of the data required for the delivery of goods to the shipping service provider DHL or UPS. The transmission of your e-mail address for sending shipment notification e-mails is based on your consent (Art. 6 Para. 1 lit. b GDPR).8.4 Storage period and revocation of consent
Due to commercial and tax regulations, we are obliged to store your address, payment and order data for a period of ten years. However, after two years we will restrict the processing. This means that your data will then only be stored separately to comply with the statutory retention periods and will be deleted immediately after they have expired.
Consent to the transmission of your e-mail address to send DHL shipment notification e-mails is voluntary and you can revoke it at any time with a simple declaration (by e-mail to: contact@meleynastudios.com with effect for the future .8.5. Recipient
To process your payment, personal data will be passed on to one of the external payment service providers listed below and selected by you as part of your purchase:
PayPal: PayPal (Europe) S.à rl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg. PayPal reserves the right to transmit personal data to credit agencies for identity and credit checks. Further information on data protection at PayPal can be found at www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE
Credit card via PayPal: PayPal (Europe) S.à rl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg. In order to pay by credit card through PayPal, you must have a PayPal account. PayPal carries out a credit check when selecting one of the payment methods “credit card via PayPal”. Mathematical-statistical methods are used to calculate a rating with regard to the probability of a payment default (so-called calculation of a scoring value). PayPal bases its decision on the provision of the respective payment methods on the calculated scoring value. A scoring value is calculated using recognized scientific methods. Reference is also made to PayPal's data protection declaration: https://www.paypal.com/de/webapps/mpp/ua/privacy-full . Information on identity verification at PayPal and data exchange with credit agencies (credit information) can be found here: https://www.paypal.com/de/webapps/mpp/ua/creditchk
Klarna purchase on account: Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden, www.klarna.com. Further information on data protection at Klarna can be found at: www.klarna.com/de/datenschutz/
In order to carry out and process the delivery of goods, I will pass on the data required for this to the shipping service provider DHL or UPS. If you have given your consent, I will also send your email address to DHL or UPS in order to send shipment notification emails.
9.COOKIES
9.1.Description of Processing
Our website uses cookies. Cookies are small text files that are stored on the user's device when a website is visited. Cookies contain information that enables the recognition of an end device and, if necessary, certain functions of a website ( https://www.allaboutcookies.org ). We distinguish between our own cookies and external, so-called third-party cookies. So-called "session cookies" and "persistent cookies" are used on our website. "Session cookies" are automatically deleted when you end your internet session and close your browser. Persistent cookies remain stored on your end device for a longer period of time. If cookies are technically required for the operation of our site, your consent is not required. All other cookies that are not technically required are only set after you have actively consented to the use of cookies/tracking technologies via a corresponding consent tool. We use the Wix service to obtain and document consent. The consent tool saves your selection itself in a cookie on your end device. As a result, you do not have to make a decision about cookies again on a subsequent visit to our website. The following overview shows which cookies/tracking technologies are used on our website for which purpose and how long they are stored on your end device.
cookie name
purpose
storage duration
XSRF TOKEN
Used for security reasons
meeting
hs
Used for security reasons
meeting
svSession
Used in connection with user login
2 years
SSR caching
Used to indicate the system that rendered the website
1 minute
_wixCIDX
Used for system monitoring/troubleshooting
3 months
_wix_browser_sess
Used for system monitoring/troubleshooting
meeting
consent policy
Used for cookie banner parameters
12 months
smSession
Used to identify logged in website members
meeting
TS*
Used for security and anti-fraud purposes
meeting
bSession
Used to measure system effectiveness
30 minutes
fedops.logger.sessionId
Used to measure system effectiveness
12 months
wixLanguage
Used on multilingual websites to save the user's language
12 months
1.2.Purpose
We use cookies/tracking technologies to make our website more user-friendly and to offer the functions described in Section 9.1.1.3.Legal basis
Processing is necessary with regard to technically required cookies and the use of the consent tool to safeguard the overriding legitimate interests of the person responsible (Art. 6 Para. 1 lit. f GDPR in conjunction with Section 25 Para. 2 TTDSG). Our legitimate interest lies in the purpose stated in Section 9.2. When processing with regard to all other cookies/tracking technologies that are not technically necessary, the legal basis is consent (Art. 6 Para. 1 lit. a GDPR in conjunction with Section 25 Para. 1 TTDSG). Such consent is voluntary.1.4. Duration of storage, revocation of consent
Cookies are automatically deleted at the end of a session or at the end of the specified storage period. Since cookies are stored on your end device, you as the user have full control over the use of cookies. By changing the settings in your Internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been saved can be deleted. This can also be done automatically. If cookies are deactivated, deleted or restricted for our website, it may be that individual functions of our website cannot be used or can only be used to a limited extent. You can revoke any consent you have given to the use of cookies at any time in the settings of the consent tool [link settings] with effect for the future.1.5. Recipient
When using the cookies listed under Section 9.1, data is transmitted to our hosting provider Wix. If third-party cookies are used, data may be transmitted to the relevant providers of these third-party services. Under certain circumstances, data may also be transmitted to third countries outside the European Union or the European Economic Area. We provide information about the recipients of data and third-country transfers in the settings of the consent tool or in the relevant passage for the third-party service in these data protection provisions.
10.CONTACT FORM AND CONTACTING BY EMAIL
10.1. Description of processing
We have provided a contact form on our website for contacting us. In this form you will be asked to enter your email address, your name and a message for us. If you press the "Send" button, the data will be transmitted to us using SSL encryption (see Section V.). The contact form can only be sent if you confirm that you have read and understood these data protection regulations by clicking on the corresponding checkbox. You can also contact us via the e-mail address given on the website. In this case, the personal data transmitted with the e-mail will be processed by us.10.2.Purpose
By providing a contact form on our website, we would like to offer you a convenient way to get in touch with us. The data transmitted with and in the contact form or your e-mail will only be used for the purpose of processing and answering your request.10.3. Legal basis
The processing is necessary to safeguard the overriding legitimate interests of the person responsible (Article 6 (1) (f) GDPR). Our legitimate interest lies in the purpose stated in Section 9.2. If the e-mail contact is aimed at concluding or fulfilling a contract, the data will be processed to fulfill the contract (Article 6 (1) (b) GDPR).10.4. Duration of storage
We will delete the data as soon as they are no longer required to achieve the purpose for which they were collected. This is usually the case when the relevant communication with you has ended. The communication ends when it can be inferred from the circumstances that your request has been finally clarified. If legal retention periods prevent deletion, deletion will take place immediately after the statutory retention period has expired.
11.Writing
When our website is displayed, the standard fonts of your end device are replaced by fonts. This is done in order to be able to show you the text on our website in a more legible and aesthetically pleasing way. When replacing fonts, I opted for a data protection-friendly solution. And I do not integrate any external services such as Google Fonts or Adobe Fonts. Rather, I store the fonts to be replaced locally in my storage space on Wix. This has the advantage that when you visit my website, your browser does not send a request to external font replacement services and therefore no data, in particular your IP address in connection with the address of my website, is transmitted to (other) third parties. SOCIAL NETWORKS
2.1.Description of Processing
Our website does not use so-called social media plugins. The Instagram logo displayed on my website is only linked to our corresponding profile on the social network. A data transmission to the social network does not take place with the integration of the logo. If you click on the Instagram logo, you will only be redirected to the external website of the social network.
However, my profile within the social network represents data processing. If you are logged in to Instagram when you visit our Instagram profile, this information will be assigned to your user account there. If you interact with our profile, eg comment on or "like" a post, this information will also be stored in your user account. As a rule, I can also see your interactions with my profile.
On the Instagram social network, we have the option of receiving statistical data about the use of our Instagram profile via the so-called "Insights" function. These statistics are provided by Instagram. The "Insights function" is not mandatory. We cannot decide to turn this feature on or off. It is available to all operators of an Instagram business account, regardless of whether you use the insights function or not. The Instagram Insights provide us with anonymous data on the development and reach of our Instagram profile, as well as the posts, stories and videos we have posted there. In the Instagram Insights, we also receive statistical information on the place of origin, gender and age of the subscribers to our Instagram profile.
The social networks with which you communicate store your data using pseudonyms as usage profiles and use them for advertising purposes and market research. For example, you can be shown advertisements within the social network and on other third-party websites that correspond to your presumed interests. For this purpose, cookies are usually used, which the social network stores on your end device. You have the right to object to the creation of these user profiles, which you must contact the social networks directly to exercise.2.2.Purpose
We maintain our Instagram profile for the purpose of public relations and communication with customers and interested parties. We use Instagram's "Insights" function to evaluate the reach of my posts on the social network and to make them more appealing to our visitors in the future.2.3. Legal Basis
The legal basis for data processing in the context of our profile on Instagram is the safeguarding of our overriding legitimate interests (Article 6 (1) (f) GDPR). Our legitimate interest lies in the purpose stated in Section 10.2. If you are asked for your consent by the respective operator of a social network, the legal basis is Article 6(1)(a) GDPR. With regard to our presence on Instagram, data processing is otherwise based on joint responsibility in accordance with Art. 26 GDPR.2.4. Recipients and transmission to third countries
The respective social networks are operated by the companies listed below. Further information on data protection with regard to our profile on the social networks can be found in the linked data protection regulations.
Instagram: Instagram LLC, 1601 Willow Rd, Menlo Park, California 94025, USA; Privacy Policy: help.instagram.com/155833707900388/.
Instagram also processes your personal data in the USA.
13. WIX CONTENT DELIVERY NETWORK (CDN)
13.1.Description of Processing
Our website uses so-called Content Delivery Networks (CDN) via our hosting provider. CDNs mean that the loading time of images, elements, JavaScript libraries and other elements, for example, is reduced because the files are transferred from fast, local or underutilized servers of external service providers. Another advantage compared to local storage is that the files are regularly checked for security and kept up to date by the external service providers. For the implementation of some programming functions on our website, we have integrated WIX or the WIX sub-service provider with the domain https://static.parastorage.com. When you visit my website, a connection to the servers of the external services mentioned is established and various scripts and elements are loaded onto my website. This transmits to WIX or WIX's sub-service provider which website you have visited. your IP address may also be transmitted.13.2.Purpose
The processing takes place in order to shorten the loading time of my website and to be able to integrate scripts, elements and website functions quickly and securely.13.3. Legal basis
The processing is necessary to safeguard the overriding legitimate interests of the person responsible (Article 6 (1) (f) GDPR). Our legitimate interest lies in the purpose stated in Section 11.2.13.4. Recipients and transmission to third countries
By integrating the scripts, elements and website functions, your data will be transmitted to WIX or WIX’s sub-service provider with the domain https://static.parastorage.com.
Safety measures
14.Security Measures
In order to protect your personal data from unauthorized access, our website is provided with an SSL or TLS certificate. SSL stands for "Secure Sockets Layer" and TLS for "Transport Layer Security" and encrypts the communication of data between a website and the end device of the user. You can recognize active SSL or TLS encryption by a small lock logo that is displayed on the far left in the browser's address line.
Your rights
15. Rights of data subjects
With regard to the data processing described above by our website or by us, you have the following rights:
15.1. Information (Article 15 GDPR)
You have the right to request confirmation from us as to whether I am processing personal data relating to you. If this is the case, you have the right to information about this personal data and to the information listed in detail in Art. 15 GDPR under the conditions specified in Art. 15 GDPR.15.2.Correction (Article 16 GDPR)
You have the right to demand that we immediately correct incorrect personal data concerning you and, if necessary, complete incomplete personal data.15.3.Deletion (Art. 17 GDPR)
You have the right to demand that personal data relating to you be deleted immediately if one of the reasons listed in Article 17 GDPR applies, e.g. B. if your data is no longer required for the purposes we are pursuing.15.4. Restriction of data processing (Article 18 GDPR)
You have the right to request us to restrict processing if one of the conditions listed in Art. 18 GDPR is met, e.g. B. if you dispute the accuracy of your personal data, data processing will be restricted for the period that enables us to verify the accuracy of your data.15.5. Data portability (Art. 20 GDPR)
You have the right, under the conditions listed in Art. 20 GDPR, to request the surrender of the data concerning you in a structured, common and machine-readable format.15.6.Revocation of consent (Art. 7 Para. 3 GDPR)
You have the right to withdraw your consent at any time from processing based on consent. The revocation applies from the time it is asserted. In other words, it works for the future. The processing does not become unlawful retrospectively as a result of the withdrawal of consent.15.7.Complaint (Art. 77 GDPR)
If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority. You can assert this right with a supervisory authority in the EU member state of your place of residence, your place of work or the place of the alleged infringement.15.8. Ban on automated decisions/profiling (Art. 22 GDPR)
Decisions that have legal consequences for you or significantly affect you must not be based solely on automated processing of personal data, including profiling. We inform you that we do not use automated decision-making, including profiling, with regard to your personal data.15.9. Right to object (Art. 21 GDPR)
If we process your personal data on the basis of Art. 6 Para. 1 lit. f GDPR (to protect overriding legitimate interests), you have the right to object to this under the conditions listed in Art. 21 GDPR. However, this only applies if there are reasons that arise from your particular situation. After an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms. We also do not have to stop processing if it serves to assert, exercise or defend legal claims. In any case - regardless of a particular situation - you have the right to object at any time to the processing of your personal data for direct advertising.
Status: March 2022