DATA PROTECTION INFORMATION
I. Information about the processing of your data in accordance with Art. 13 of the General Data Protection Regulation (GDPR)
1. Controller and data protection officer
The controller responsible for this website is
Gesine Tosin
about bookshop
Linienstr. 151
10115 Berlin.
You can contact the data protection officer by email at
info@about-bookshop.de
or at the following address
about bookshop
Linienstr. 151
10115 Berlin
2. Data processed for the provision of the website and the creation of log files
a. What data is processed and for what purpose?
Each time you access content on the website, data that may allow identification is temporarily stored. The following data is collected:
– Date and time of access
– IP address
– Host name of the accessing computer
– Website from which the website was accessed
– Websites accessed via the website
– Page visited on our website
– Notification of whether the retrieval was successful
– Amount of data transferred
– Information about the browser type and version used
– Operating system
The temporary storage of data is necessary for the process of visiting a website in order to enable the website to be delivered. Further storage in log files is carried out to ensure the functionality of the website and the security of the information technology systems. These purposes also constitute
our legitimate interest in data processing.
b. On what legal basis is this data processed?
The data is processed on the basis of Art. 6 (1) (f) GDPR.
c. Are there other recipients of the
personal data besides the controller?
The website is hosted by Hetzner GmbH. The
host receives the above-mentioned data as a processor.
d. How long is the data stored?
The data is deleted as soon as it is no longer necessary for the purpose for which it was collected. In the case of the provision of the website,
this is the case when the respective session has ended. The log files are stored for a maximum of 24 hours and are accessible directly and exclusively to administrators. After that, they are only indirectly available via the reconstruction of backup tapes and
are permanently deleted.
3. Rights of data subjects
a. Right to information
You can request information about your personal data that we process in accordance with Art. 15 GDPR.
b. Right to object
You have the right to object for specific reasons (see point II).
c. Right to rectification
If the information concerning you is no longer accurate, you can request rectification in accordance with Art. 16 GDPR. If your data is incomplete, you can request that it be completed.
d. Right to erasure
You may request the erasure of your personal data in accordance with Art. 17 GDPR.
e. Right to restriction of processing
You have the right to request a restriction on the
processing of your personal data in accordance with Art. 18 GDPR.
f. Right to lodge a complaint
If you believe that the processing of your personal data
violates data protection law, you have the right under Art. 77(1) GDPR to lodge a complaint with a data protection supervisory authority of your choice.
g. Right to data portability
If the conditions of Art. 20 (1) GDPR
are met, you have the right to have data that we process automatically on the basis of your
consent or in fulfillment of a contract handed over to you or to a third party. The collection of data for the provision of the website and the storage of log files are essential for the operation of the website. They are therefore not based on consent pursuant to Art. 6 (1) (a) GDPR or on a contract pursuant to Art. 6 (1) (b) GDPR, but are justified pursuant to Art. 6 (1) (f) GDPR. The requirements of Art. 20 (1) GDPR are therefore not met in this respect.
II. Right to object pursuant to Art. 21(1) GDPR
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Art. 6(1)(f) GDPR. The controller will then no longer process the personal data unless it can demonstrate compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the data subject, or the processing serves to assert, exercise, or defend legal claims. The collection of data for the provision of the website and the storage of log files are essential for the operation of the website.
