Privacy Policy
 
Thank you very much for visiting our website. We appreciate your trust and take the protection of your personal data very seriously. We take all necessary steps to protect the personal data you make available, and to comply with the applicable national and European Data Protection Regulation. Below we will inform you for what intent and purpose and based on what law your data is processed, which third parties they are shared with, for how long they will be stored and what rights you have.
 
Table of Content
  • Preface
    • Scope of application
    • Data security officials
  • Processing your data
    • Website
    • Use of cookies
    • Social Plugins
    • Newsletter
    • Contact form and email contact
    • Online Shop
    • Competitions
    • Facebook Pixel
  • Your rights
    • The right to be informed
    • Correction, deletion, limitation of processing and transferability of data
    • The right of objection
    • Withdrawal of consent
    • Regulating authority
 A. Preface
 
1. Scope of application
  
This privacy policy applies to www.livingcrafts.de, a website run by Living Crafts GmbH & Co. KG, Germany.
 
2. Data security officials
  
Living Crafts GmbH & Co. KG, Schlesier Straße 11, D-95152 Selbitz (Germany), email: info@livingcrafts.de, is responsible for your personal data. You can reach our data security officials electronically at datenschutz@livingcrafts.de or by post at Data Protection Officer c/o Living Crafts GmbH & Co. KG, Schlesier Straße 11, D-95152 Selbitz (Germany).
 
B. Processing your data
 
1. Website
 
Description of how we process data
  
Every time someone visits our web page, our system automatically collects data and information about the computer system that is being used. The following data is being collected:
 
(1) Information about the browser type and the version used
(2) The operating system of the user
(3) The IP address of the user
(4) The date and time of accessing our website
(5) The website from which the system of the user finds our home page
(6) The websites that are accessed by the system of the user from our home page
(7) The transferred data volume
 
The IP address is stored via the web server log file of our system. The data is not stored together with other personal information of the user.
 
Purpose of processing data and legal basis
   
It is necessary for our system to temporarily store the IP address so that it can deliver our web page to the computer of the user. For this purpose, the IP address of the user must be stored for the duration of the session.

Log files are stored to ensure that the website works properly and to be able to respond to investigative authorities in case of suspected fraud. Furthermore, the data is used to optimise our website and to ensure the safety of our information systems. There is no evaluation of that data for marketing purposes in connection with this.
 
The legal basis for temporarily storing the data is Art. 6 Sec. 1 lit. f of the General Data Protection Regulation (hereinafter called General Data Protection Regulation, GDPR). The legitimate interest in processing data pursuant to Art. 6 Sec. 1 lit. f of the GDPR is based on the need to ensure the functionality of our website.
 
Recipient of data and duration of storage

The data is not passed along to third parties, and it is deleted once is no longer needed for the purpose it was collected for. In the case of collecting data so that our website can be made available to the user, this occurs once a session is finished.

In the case of storing data in log files, those are deleted after a period of 6 months at the latest. It is possible to store data beyond that period. In this case, the IP addresses of the users are deleted or pseudonymised so that it is no longer possible to match them with a given (computer) client.
 
Possibility to object to use of data and to have it deleted

Collecting data to make the website available and the storage of data in log files is absolutely necessary to operate our home page. Hence, there is no need for the user to object to it.
 
2. Use of cookies
 
Description of data processing
  
Our website uses cookies. Cookies are text files that are saved in the internet browser or by the internet browser of the computer system of the user. Whenever a user visits a website, a cookie can be stored in the operating system of the user. This cookie contains a typical number of characters that make it possible to clearly identify the browser when that web page is revisited.
 
a. Technically necessary cookies
 
We place cookies in order to make our website more user-friendly. Some components of our internet page make is necessary that the calling browser can be identified for the user login even after changing pages.
 
b. Performance Cookies
 
Furthermore, we use cookies on our website that make it possible to analyse the browsing behaviour of our users. The user data thus collected is pseudonymised through technical provisions. Hence, it is no longer possible to match the data with the calling user. This data is not stored together with other personalised user data. When a user visits our website, a banner informs them about the use of cookies for analytical purposes, and they are thus informed about the privacy policy at hand. In connection with this, there is a tip on how they can prevent cookies from being stored by changing their browser settings. When visiting our website, the user is informed about the use of cookies for analytical purposes, and their consent is requested for the processing of personal data in this context. In connection with this, they are also pointed to this privacy policy.
c. Google Analytics und Google AdSense
For our website, we use Google Analytics and Google AdSense, both web analysis services of Google Inc. ("Google”). Google uses cookies that are stored on your computer.   
 
Processing purpose and legal basis

a. Technisch notwendige Cookies

The purpose of using technically necessary cookies is to make using websites simpler for the user. Some functionalities of our internet page cannot be offered if cookies are not used. They require that a browser can be recognised even after changing pages. We need cookies for the following applications:

(1) The shopping cart

(2) Signing into a user account

The user data collected by technically necessary cookies is not used to create user profiles. Art. 6 Sec. 1 lit. f of the GDPR forms the legal basis for processing personalised data by using cookies. The above-mentioned purpose describes our legitimate interest in processing personalised data pursuant to Art. 6 Sec. 1 lit. f of the GDPR.

b. Performance Cookies

The use of analysis cookies serves the purpose of improving the quality of our website and its contents. Analysis cookies show us how our website is used; they enable us to optimise our offers continuously.

The legal basis for processing personalised data by using technically necessary cookies is Art. 6 Sec. 1 lit. f of the GDPR. The legal basis for processing personalised data by using cookies for data analysis purposes is the consent of the user given for this reason, see Art. 6 Sec. 1 lit. a of the GDPR.

c. Google Analytics and Google AdSense

The purpose of the cookies used by Google Analytics and AdSense is to analyse how you use our website. Google will use this information on our behalf in order to analyse how our online offers are used, to compile reports about your activities within such an online offer, and to provide us with other services related to the use of our online offer and the use of the internet. It is possible to create pseudonymised user profiles using the processed data. We use Google Analytics and AdSense only for activated IP anonymisation. This means the IP address of the user is shortened by Google for member states of the European Union or other nations that participate in the Agreement with the European Economic Area (EEA). Only in exceptional cases is the full IP address transmitted to a Google server in the US to be shortened there. The IP address transmitted by the browser of the user is not merged with other data from Google. The legal basis for the processing of data is the consent of the user pursuant to Art. 6 Sec. 1 lit. a of the GDPR as well as Art. 6 Sec. 1 lit. f of the GDPR. The need-based design of our website constitutes the legitimate interest in processing personalised data pursuant to Art. 6 Sec. 1 lit. f of the GDPR.

Recipient of data and duration of storage
  
The data about how our online offers are used, which is generated by Google Analytics and AdSense cookies, is typically transmitted to a server in the US and stored there by Google. We do not pass along to third parties any other pieces of information generated by technically necessary cookies or performance cookies. User data is deleted after 14 months at the latest.
 
Possibility to object to use of data and to have it deleted
  
a. Cookies
 
As a user, you have control over the use of cookies on your computer. By changing the settings of your internet browser, you can deactivate or limit the transmission of cookies. Previously stored cookies can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it is possible that not all of the functionalities of our website work in their entirety. It is possible to manage many online advertisement cookies of different companies via the American website http://www.aboutads.info/choices or via the European website http://www.youronlinechoices.com/uk/your-ad-choices/. The transmission of flash cookies cannot be managed via the browser settings. They can, however, be blocked by changing the Flash Player settings.
 
b. Google Analytics und Google Ad Sense
  • You can object to the web analysis by Google Analytics and AdSense by setting an opt-out cookie that instructs Google to not store or use your data for web analysis purposes.
    Please note that in this case, the web analysis is only prevented for as long as the opt-out cookie is stored in the browser. If you wish to place the opt-out cookie now, please click here. 
  • However, you can also prevent the storing of cookies used for creating profiles by adjusting the settings in your browser Software.
  • Depending on the browser you use, you can install a browser plugin that will prevent tracking. Please click here and install the browser plugin that you can find there.
 
3. Social Plugins
 
Description of data processing
 
On our website, there are buttons that allow for interaction with so-called social media networks. You can activate those social plugins ("Plugins”); activating them will result in transmitting data - in this case to the social media provider, in particular, the address of the website where the activated plugin is found, the date and time when the website was accessed, information about the browser, and the operating system used as well as your current IP address. If you are logged into the respective network at the time of activating the plugin, the plugin can use the above-mentioned data to identify your username and possibly your real name.
Our online offer uses plugin of social networks like facebook.com. The plugins can be identified with one of the Facebook logos (e.g. a white "f” on a blue tile, terms such as "like” or the "thumbs-up” symbol) or they can be marked as "Facebook Social Plugin”. The list and layout of the Facebook Social Plugin can be found at: https://developers.facebook.com/docs/plugins/. 
 
Processing purpose and legal basis
 
You can find out why and how much data is collected and how it is further processed and used by Facebook in the privacy policy of Facebook at https://www.facebook.com/about/privacy/. If a user used a functionality of an online offer that has such a plugin, their device connects directly with the servers of Facebook. Facebook directly transmits the content of the plugin to the device of the user; after that the plugin incorporates that content into the online offer. It is possible to create user profiles from data thus processed. Therefore, we cannot influence the amount of data that Facebook collects with this plugin, we can only inform users based on what we know. By incorporating plugins, Facebook received the information that a user has visited the page of a given online offer. If the user is logged into Facebook, Facebook can link this visit to the user’s Facebook account. If the user interacts with the plugin, for example if they hit the Like button or leave a comment, this information is transferred directly from their device to Facebook where it is stored. If a user is not a member of Facebook, it is still possible for Facebook to find and store their IP address. According to Facebook, only an anonymised IP address is stored (for users) in Germany. The legal basis for using the Facebook plugin is the legitimate interest in data processing pursuant to Art. 6 Sec. 1 lit. f of the GDPR. Making a comprehensive offer available on our website constitutes the legitimate interest.
 
Recipient of data and duration of storage
 
Pursuant to the privacy policy of Facebook (Facebook Ireland Ltd., 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland) data is collected within the group or shared with third parties. Information gathered in the European Economic Area (EEA) can be transmitted to other countries outside of the EEA for the purposes described in the guidelines. Facebook indicates (1) that it uses standard contractual clauses approved by the European Commission; (2) that it takes other steps pursuant to EU legislation, and (3) that it asks for your consent to legitimise the transfer of data from the EEA to the US and other nations. Facebook says it stores the data for as long as it is necessary to make products and services available to its users and other people. All pieces of information connected with user accounts remains with Facebook until an account is deleted, unless Facebook does not need the data anymore to offer products and services.
 
Possibility to object to use of data and to have it deleted
 
At https://www.facebook.com/about/privacy, you can find details about how you can manage your content and information on Facebook. Other settings, e.g. how you can object to the use of data for advertisement purposes can be found in your Facebook profile settings: https://www.facebook.com/settings?tab=ads.
 
4. Newsletter   
Description of data processing
 
On our website, you can subscribe to our free newsletter with or without a user profile. When you subscribe to the newsletter, the data from the entry mask is transferred to us. The only information that is mandatory is your email address; you may add your title, first and last name as well as your date of birth if you already have a user account. In addition, we store the IP address of the calling computer and the date and time of registration.
To be able to process any data, the registration procedure requires a double opt-in from you; you will also be informed about this privacy policy. The data is used exclusively for the distribution of our newsletter.
 
Whenever you purchase goods or services form our website, and store your email address for this purpose, we may use it to send you newsletters in the future. In such a case, the newsletter will only contain direct advertisement for similar products or services. The data is used exclusively for the distribution of our newsletter.
 
Processing purpose and legal basis
 
The collection of other personalise data as part of the registration process is meant to prevent the abuse of services or of the email address used. The legal basis for processing the data entered by the user when subscribing to the newsletter is their consent pursuant to Art. 6 Sec. 1 lit. a of the GDPR, and for customers of the Online Shop, it is Art. 7 Sec. 3 of the Act Against Unfair Competition (UWG). The email address of the user is needed to deliver the newsletter. 
 
Recipient of data and duration of storage
 
The data is passed along to our distribution service provider for the purpose of sending out our newsletter; it is deleted as soon as it is no longer needed to fulfil this purpose. Hence, the email address of the user is stored for as long as the subscription to the newsletter is active. If a user terminates their subscription to the newsletters, the data is deleted after one year. Other personalised data collected as part of the subscription process is generally deleted after a period of 90 days.
 
Possibility to object to use of data and to have it deleted
 
The user can cancel their subscription to the newsletter at any time. For this purpose, there is a corresponding link in each newsletter. This also makes it possible to withdraw one’s consent for the storage of any personalised data collected in the subscription process.
 
5. Contact form and email contact
 
Description and scope of data processing
 
On our web page, there is a contact form that can be used to get in touch with us electronically. If a user makes use of this option, the data they enter into the mask is transmitted to us and stored. This includes the following data: the topic, name and email address as well as details about the question, all of which is mandatory; a phone number is not required. At the point of sending the form, the following data is stored: the IP address of the user as well as the date and time of the registration. As part of the sending process, we require the consent of the user to be able to process their data; they are also pointed to this privacy policy.
Alternatively, they can contact us via the email address provided on our website. In this case, the personalised data of the user contained in the e-mail is transmitted to us.
In connection with this, no data is passed along to third parties. The data is solely used for processing that conversation.
 
Processing purpose and legal basis
 
The purpose of processing personalised data from the entry mask is solely used to respond to the correspondence. When an email is sent to us, it warrants the necessary legitimate interest in processing such data.
Other personalised data that is processed when the email is sent, is meant to prevent the abuse of the contact form, and to ensure the protection of our information technology systems.
Art. 6 Sec. 1 lit. a of the GDPR is the legal basis for processing data if the user has given their consent. The legal basis for processing data that is part of sending an email is Art. 6 Sec. 1 lit. f of the GDPR. If the sending of an email is meant to finalise a contract, Art. 6 Sect. 1 lit. b of the GDPR constitutes an additional legal basis for processing such data.
 
Recipient of data and duration of storage
 
The data is not passed along to third parties; it is deleted as soon as it is no longer needed to fulfil its purpose. In the case of personalised data from the entry mask of the contact form and of data sent by email, this applies if a given conversation with a user is finished. A conversation is deemed finished if circumstances indicate that the subject matter at hand has been fully addressed and handled. Data, which is collected at the point of sending the form or email, will be deleted within a period of 90 days at the latest.
 
Possibility to object to use of data and to have it deleted
 
User can withdraw their consent to the processing of their data at any time. If a user contacts us via email, they can object to the storage of personalised data at any time. In that case, the conversation will be discontinued. Objections need to be sent to info@livingcrafts.de. In such cases, all personalised data that was stored when users got in touch with us, will be deleted.
 
6. Online Shop
 
Description and scope of data processing
 
You can log into our Online Shop with your email and password, or register as a new customer with the following details: title, name, street and house number, postal code, city, country, email address and password. You may also add your date of birth, phone and fax numbers and indicate "how you found out about Living Crafts”. Every time you log in, your IP address and the date and time are stored. After entering your details, you will need to confirm them and give your consent for the following items via a so-called double opt-in feature:
 
( ) I herewith confirm that my details are correct and that I am at least 18 years old.
( ) I consent to Living Crafts using the data stored in my customer account to send me personalised advertisement and offers as well as a birthday surprise in the form of a newsletter.
 
 I furthermore consent to my pseudonymised user data being processed for market research and internal statistical purposes. I have been informed that I have the right to withdraw my consent at any time without this having an effect on the legality of the processing of my data based on my consent up until it has been withdrawn.
 
Further explanations can be found in our privacy policy (Link).
 
You can pay for the goods you have ordered by direct debit (SEPA), payment in advance, cash on delivery (COD), PayPal, instant transfer or credit card; the data needed for handling the payment will be transmitted directed to the respective provider of your preferred method of payment.
 
Processing purpose and legal basis
 
Your data is processed to make your customer account available to you; to handle your online purchases; to answer questions you may have about our products or for complaints; for checking the receipt of payments; sending our newsletter; internal statistical analyses; and for sending customised advertisement and notifications about our General Terms and Conditions or our Privacy Policy. Art. 6 Sec. 1 lit. b of the GDPR as well as possibly your consent given pursuant to Art. 6 Sec. 1 lit. a of the GDPR form the legal basis for processing your data.
 
Recipient of data and duration of storage
 
If needed, we will pass your anonymised data along to print media and mail order companies for several hours (without your name or address or other contact details) for external analysis purposes. Your basic details will be stored for the entire lifespan of your customer account. By law, we are obligated to be able to show data about your purchases for a period of ten years. Once that time expires, such data is deleted.
 
Possibility to object to use of data and to have it deleted
 
At any time, you can withdraw your consent by sending an email to info@livingcrafts.de or by mail; the postal address is Living Crafts GmbH & Co. KG, Schlesier Straße 11, D-95152 Selbitz (Germany); the withdrawal will then take immediate effect.
 
7. Competitions
 
Description and scope of data processing
 
From time to time, we offer you the opportunity to take part in one of our competitions. The personalised data you would send to us as part of such a competition is solely used for handling that activity (in the case of competitions, for example to identify the winner, to notify them, and to send them the prize).
 
Purpose of processing data and legal basis
 
In the case of competitions, we use your data to notify you about the winner and - if you have given your consent - to send you advertisement about our offers, but also for internal statistical analyses. Detailed tips may be found in the eligibility requirements for each competition. To be eligible to participate, you must be 16 or older. Art. 6 Sec. 1 lit. a (a separate consent) and/or Art. 6 Sec. 1 lit. b of the GDPR form the legal basis for processing your data.
 
Recipient of data and duration of storage
 
The data collected for the purpose of participating in a competition is deleted after it is over, unless you have given us your consent to process your data beyond the Competition.
  
Possibility to object to use of data and to have it deleted
 
As a participant, you have the opportunity to withdraw your consent to the processing of your personalised data. You can object to the storage of personalised data at any time. You will need to send your objection to info@livingcrafts.de. In that case, all personalised data that was stored in the process of contacting us will be deleted.
 
8. Facebook Pixel
Description of how we process data

We use the remarketing functionality "Custom Audience” of Facebook, called Facebook Pixel.
 
Purpose of processing data and legal basis
 
Using Custom Audience we can directly attract the attention of those visiting our website when they go to Facebook. For this purpose, we have integrated the remarketing tag of Facebook (Facebook Pixel) into our website. Through Facebook Pixel, a connection is established between our website and the Facebook servers. This way, Facebook receives details about which of our pages you have visited. Facebook then matches those details with your  Facebook account. The legal basis for processing data this way is Art. 6 Sec. 1 f of the General Data Protection Regulation (defined as the weighing of interests, based on the interest of Living Crafts and Facebook to provide advertisement that is tailored to the interests of the recipient).
 
Recipient of data and duration of storage

According to the privacy policy of Facebook (Facebook Ireland Ltd., 4 Grand Canal Square
Grand Canal Harbour, Dublin 2 Ireland), all data is shared within the group of companies or third parties. Data that is collected within the  European Economic Area ("EEA”) can be transmitted to countries outside of the EEA for the purposes outlined in the privacy policy. Facebook indicates (1) that it uses standard contractual clauses approved by the European Commission; (2) that it takes other steps pursuant to EU legislation; and (3) that it asks for your consent to legitimise the transfer of data from the EEA to the US and other nations.

Facebook states that it stores such data for as long as it is necessary to make products and services available to its users and other people. All pieces of information connected with user accounts remain with Facebook until an account is deleted, unless Facebook does not need the data anymore to offer products and services.

Possibility to object to use of data and to have it deleted

At https://www.facebook.com/about/privacy, you can find details about how you can manage your content and information on Facebook. If you do not wish for Facebook to match all data thus collected with your Facebook account, you can deactivate the remarketing functionality here. To do so, you will need to log into your Facebook account.

 
C. Your rights
 
If the legal prerequisites are fulfilled, you have the rights listed below pursuant to Art. 13 Sec. 2, 15 to 22 of the GDPR:   
 
1. The right to be informed
 
You have the right to be informed by us why and based on what legal guidelines we store personalised data; what categories they it is stored in; whom we disclosed the data to; and for how long we plan to store it. Please contact us directly at info@livingcrafts.de if you wish to make use of your right to be informed.
  
 
2. Correction, deletion, limitation of processing and transferability of data
 
Furthermore, if the legal requirements are fulfilled, you have the right to demand that your data be corrected or completed if it is incorrect or incomplete; for it to be deleted; or to only be processed or transmitted to a certain extent.
 
3. The right of objection
 
At any time, you have the right to object to the processing of your personalised data pursuant to Art. 6 Sec. 1 lit. e or f of the GDPR if your own special situation warrants it; this also applies to profiling done on the basis of the above-mentioned directives.
 
4. Withdrawal of consent
 
You have the right to withdraw your declaration of consent for data protection purposes at any time. The withdrawal of your consent shall not have an effect on the legality of data processed based on your consent up until it has been withdrawn.
 
5. Aufsichtsbehörde
 
Without prejudice to other administrative provisions or judicial remedies at a regulatory authority, particularly in the member state of your residence, or at the location of the suspected breach of the law, you have the right to complain - if you are of the opinion that the processing of personalised data is in breach of the GDPR. The regulatory authority at which a complaint has been filed shall update the claimant about the current status and the results of the complaint, including the possibility of judicial remedies pursuant to Art. 78 of the GDPR. The address for the regulatory authority responsible for our company is Bayerisches Landesamt für Datenschutzaufsicht, PF 606, 91511 Ansbach, email: poststelle@lda.bayern.de.
 
The German language version will take precedence over translations into other languages.
Updated on 25.05.2018

News
Receive current LIVING CRAFTS offers and news directly via e-mail. You’ll always be up-to-date with our free Newsletter.
join us on facebook
LivingCrafts GmbH & Co. KG
Imprint
Free shipping from 150  €
Valid for Germany and the European Union
close
In order to optimally design our website for you and to continuously improve it, we use cookies. By giving your consent you agree to the use of cookies. For more information about cookies, please see our privacy policy.