We, ELBE CREATIVE, are pleased about your visit to our website. In the following provisions, we will inform you about the type, scope and purposes of the collection and use of your personal data on this website. Personal data is all information relating to an identified or identifiable natural person. This includes in particular your name, your address and your e-mail address.
Data Processing to Provide Website Contents
With each access to contents of our website connection data are transferred to our web server.
These connection data include:
- the IP address (Internet Protocol address) of the respective user,
- the date and time of the request,
- the referrer URL,
- device numbers such as UDID (Unique Device Identifier) and comparable device numbers, device information (e.g. device type) and
- the browser type / version.
These connection data are not used to draw conclusions about the user’s identity or are combined with data from other data sources, but serve to provide the website. The legal basis for the processing of your data is Art. 6(1)(1)(f) GDPR.
Processing of Data on Initiative
The use of our website is in general possible without providing personal data. You are neither obliged to visit this website nor to provide any personal data. The provision of personal data is also not necessary for the conclusion of a contract. If you do not provide us with personal data, you may not be able to use individual functionalities of this website. Other than that, there will be no consequences for you.
We process your personal data when you use the following service offered by us:
If you contact us via our contact form, your entries will be stored so that they can be used to process your enquiry.
The legal basis for the processing of your data is generally based on Art. 6(1)(1)(f) GDPR. Our legitimate interest is then to answer your inquiry.
In the case of the implementation of pre-contractual measures, the legal basis is Art. 6(1)(1)(b) GDPR.
Data Processing for the demand – oriented design of the Website
In order to make the use of our website as pleasant as possible and for advertising purposes, we use so-called web tracking systems. Cookies are usually used, i.e. small text files that are sent from a web server to your browser and stored on your computer’s hard drive. This enables us to recognise the device you are using when you visit the website again. Most browsers are set to automatically accept cookies. You can deactivate the storage of cookies in your browser and have the possibility to delete them from your hard disk at any time. However, you can also use your browser to only prevent certain cookies from being set (e.g. cookies from third parties), for example if you want to prevent web tracking. Please refer to your browser’s help function for more information.
We would like to point out that you can also install a plugin in your browser to protect your privacy, which offers the possibility to prevent tracking – e.g. AdBlock, Ghostery or NoScript (please note the data protection policies of the respective plugin provider).
Finally, we would like to point out that if cookies are deactivated, not all functions of this website may be used in full.
The legal basis for the processing of your data in accordance with Section 3. is Art. 6 (1)(1)(f) GDPR. Our legitimate interest is the demand-oriented design of the website. If you would like further information on the weighing of interests, please contact our data protection officer (see Section 8.)
Our website does not use the tracking tool “Google Analytics” from the provider Google LLC. (Google), 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.
Our website uses “Google Fonts” from Google to display fonts uniformly. When you call up a page, your browser loads the required fonts into your browser cache to display texts and fonts correctly. Among other things, your IP address is transmitted to the Google servers. If your browser does not support Google Fonts, standard fonts are used.
Social Networks and Embedded Vimeo Videos
Our website contains embedded videos of the streaming service YouTube as well as links to social networks (Facebook, Instagram, LinkedIn). These services are operated exclusively by third party providers. If you follow the links or play videos, information may be transferred to these providers. When you visit our site, no personal data will be passed on. Only if you click on one of the Social buttons, data will be transferred to the respective provider. The purpose and scope of the data collection and the further processing and use of the data by the provider as well as their respective rights and setting options for the protection of your privacy can be found in the data protection information of the respective provider. You can find them here:
Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA
Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025, USA
YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA
represented by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Irland
Data Transfer to Third Parties
We will only pass on your personal data to third parties if:
- you have given your clear consent pursuant to Art. 6(1)(1)(a) GDPR,
- the passing on is necessary according to Art. 6 (1)(1)(b) GDPR for the fulfilment of a contract with you or for the execution of pre-contractual measures, which take place on request of them,
- it is necessary for the fulfilment of a legal obligation pursuant to Art. 6 (1)(1)(c) GDPR and/or
- it is necessary for asserting, exercising or defending legal claims pursuant to Art. 6(1)(1)(f) GDPR and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data.
Data Transfer to Countries outside the EU
To the extent necessary for our purposes, we also transfer your data to recipients outside the EU if it is ensured that the recipient of the data guarantees an appropriate level of data protection and that there are no other interests worthy of protection against the transfer of the data.
Duration for which Personal Data are stored /Criteria for determining the Duration
Your personal data will be deleted by us as soon as they are no longer necessary for the aforementioned purposes of processing, in the event of an objection if there are no opposing grounds of ELBE CREATIVE worthy of protection or in the event of a revocation if there remains no other legal basis for data processing. In certain cases, e.g. if there is a legal obligation to store your personal data, however, they are not deleted immediately, but initially blocked. For example, the retention period for messages with business content via the contact form can be ten years.
Security Measure to protect your personal data
We protect your data by technical and organisational measures against unauthorised access, loss or destruction. Our security measures are continuously improved in line with technological developments. Our employees and all persons involved in data processing are obliged to comply with data protection laws and the confidential handling of personal data. Our employees are trained accordingly.
To protect the personal data of our users, we use a secure online transmission procedure, the so-called “Secure Socket Layer” (SSL) transmission. You can recognise this by the fact that an “s” (“https://”) or a green, closed lock symbol is added to the address component http://. By clicking on the icon you will receive information about the SSL certificate used. The display of the symbol depends on the browser version you are using. SSL encryption guarantees the encrypted and complete transmission of your data.
Within the framework of legal requirements, you can exercise the following rights:
- Confirmation whether personal data concerning you is processed by ELBE CREATIVE.
- Access to these data and the circumstances of the processing.
- Correction if data is incorrect.
- Erasure, insofar as there is no justification and no obligation to keep the data (any more) for the processing.
- Restriction of processing in special cases provided for by law.
- Objection in the case of data processing on the basis of Art. 6(1)(f) GDPR.
- Transmission of your personal data – if you have provided it – to you or a third party in a structured, common and machine-readable format.
If the processing of your personal data is based on your consent, you have the right to revoke your consent at any time, with the consequence that the processing of your personal data will become inadmissible for the future. However, this does not affect the legality of the processing carried out on the basis of the consent until revocation.
Please address your specific request to our data protection officer in writing or by e-mail, with a clear possibility of identifying yourself:
Franziska Gandert, firstname.lastname@example.org
Stora Fränningevägen 76
275 68 Vollsjö, Sweden
Finally, we would like to draw your attention to your right of appeal to the supervisory authority.
No automated individual Decision-Making
We do not use your personal data for automated individual decisions.
Amendment of the Data Protection Policy
New legal requirements, business decisions or technical developments may require changes to our data protection policy. The data protection policy will then be adapted accordingly. You can always find the latest version on our website.