Privacy

1 INTRODUCTION

We, 
MT.DERM GmbH 
Blohmstrasse 37-61 
12307 Berlin 
are the operators (hereinafter referred to as “we” or “operators”) of the website 
shop.cheyennetattoo.com (hereinafter referred to as “website”) and the services offered on it, and are therefore responsible for the collection, processing, and use of personal data within the meaning of the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG-neu), and the Telemedia Act (TMG). 
The principle of data minimization is very important to us, even when collecting data. We collect and process personal data only to the extent that you have given us your consent, or the legislator expressly permits or requires us to do so. In the following, we explain what data we collect, how we use it, and what rights you have with regard to the use of your data. 

2 SECURITY 

The data entered on our website is encrypted (using state-of-the-art technology) and 
transmitted to our servers via the Internet. 
We secure our website and other systems against loss, destruction, access, modification, or distribution of your data by unauthorized persons through technical and organizational measures. Our security measures are continuously improved in line with technological 
developments. 

3 COLLECTION, STORAGE, AND USE OF PERSONAL DATA 

3.1 Personal data 

The term “personal data” defines individual details about the personal or factual circumstances of an identified or identifiable natural person (data subject). This includes, for example, your real name, your address, your telephone number, or your date of birth. 
3.2 Collection, processing, and use of personal data 
When collecting, processing, and using personal data, we strictly adhere to the legal provisions of the General Data Protection Regulation, the Federal Data Protection Act, and the Telemedia Act. 
We collect, store, and process your data for the entire handling of complaints, for the 
performance and improvement of our services, for technical administration, for the 
improvement of our products and services, and for our own marketing purposes. 
When you use the website for informational purposes only, i.e., if you do not register or 
otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security 
(the legal basis is Art. 6 (1) (f) GDPR): 
• IP address 
• Date and time of the request 
• Time zone difference to Greenwich Mean Time (GMT) 
• Content of the request (specific page) 
• Access status/HTTP status code 
• Amount of data transferred in each case 
• Website from which the request originates 
• Browser 
• Operating system and its interface 
• Language and version of the browser software. 
For the processing of complaints, we collect your last name, first name, address, country, 
telephone number, email address, IP address, and gender. 
If you contact us by email or contact form, we will store your email address and the other information provided in the form. This is done for the purpose of responding to you or, if necessary, contacting you again at a later date regarding the subject of your inquiry. 
Once your inquiry has been fully processed, your data will be blocked for further use and deleted after the expiry of the periods stipulated by tax and commercial law, unless you have expressly consented to the further use of your data. 

3.3 Children 

People under the age of 18 should not transmit any personal data to us without the consent of their parents or legal guardians. We do not request personal data from children and young people, do not collect it, and do not pass it on to third parties. 

3.4 Storage period 

Personal data provided to us via our website will only be stored until the purpose for which it was entrusted to us has been fulfilled. Insofar as commercial and tax law retention periods must be observed, the storage period for certain data may be up to 10 years or longer. 

3.5 Disclosure of data/transfer to third parties 

In some cases, we use external service providers to process your data. These have been 
carefully selected and commissioned by us, are bound by our instructions, and are regularly monitored. 
Your personal data will only be passed on to third parties or otherwise transferred if this is necessary for the purpose of contract processing or billing, or if you have given your prior consent. In the context of complaints, for example, the service providers we use (such as logistics companies) receive the data necessary for order processing. The data passed on in this way may only be used by our service providers to fulfill their tasks. Any other use of the information is not permitted and does not occur at any of the service providers we entrust with this task. 
Without your consent, we will not sell your data to third parties or pass it on in any other way. The only exceptions to this are where there is a legal obligation to do so (e.g., providing information to certain authorities in the course of their legal duties) or where this is necessary to enforce our rights, in particular to enforce claims arising from the contractual relationship with you. 

3.6 Storage of log file 

Each time you visit our website, your access is recorded (access log). The recording is 
automated and anonymized. This means that the personal data collected (e.g., IP address) is modified in such a way that the individual details about personal or factual circumstances can no longer be attributed to a specific or identifiable natural person or can only be attributed with a disproportionate amount of time, cost, and effort. 
The stored log files are used to further improve our website and the services offered, as well as to better manage server capacity. 

4 NEWSLETTER 

With your consent, you can subscribe to our newsletter, which we use to inform you about us, our work, projects, campaigns, and offers. 
We use the double opt-in procedure for registration for our newsletter. This means that after you register, we will send an email to the email address you provided, asking you to confirm that you wish to receive the newsletter. If you do not confirm your registration within [24 hours], your information will be blocked and automatically deleted after one month. In addition, we store our IP addresses and the times of registration and confirmation. The purpose of this procedure is to verify your registration and, if necessary, to investigate any possible misuse of your personal 
data. If you would like to receive the newsletter, we need a valid email address from you as well as information that allows us to verify that you are the owner of the email address provided or that the owner agrees to receive the newsletter. You can also provide us with your first and last name and other information as requested on the online form. No further data is collected. After your confirmation, we will store your email address for the purpose of sending the newsletter. The legal basis is Art. 6 (1) (a) GDPR. 
This data is used only for sending newsletters and is not passed on to third parties. When you subscribe to the newsletter, we store your IP address and the date of registration. This storage serves solely as proof if a third party misuses an email address and registers to receive the newsletter without the knowledge of the authorized person. You can revoke your consent to the storage of data, your email address, and its use for sending the newsletter at any time. You can revoke your consent via a link in the newsletters themselves or by contacting us using the contact details below. 

5 WEB ANALYSIS SERVICES 

5.1 Google Analytics

 This website uses Google Analytics, a web analysis service provided by Google Inc. (“Google”). Google Analytics uses “cookies,” which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, if IP anonymization is activated on this website, your IP address will be truncated by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and 
to provide other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You may refuse the use of cookies by selecting the appropriate settings on your browser software; however, please note that if you do this, you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available under the following link. 
You can prevent Google Analytics from collecting data by clicking on the following link. An optout cookie will be set up to prevent future collection of your data when you visit this website: 
Disable Google Analytics. 
We use Google Analytics to analyze and regularly improve the use of our website. The statistics obtained enable us to improve our offer and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Art. 6 (1) (f) GDPR. 
For more information on terms of use and data protection, please visit http://www.google.com/analytics/terms/de.html or http://www.google.de/intl/de/policies/. We would like to point out that on this website, Google Analytics has been extended by the code “anonymizeIp” to ensure anonymous collection of IP addresses (so-called IP masking). 

5.2 Use of the Facebook pixel (Facebook Custom Audiences) 

We use the so-called “Facebook pixel” from Facebook Inc. (‘Facebook’) on our website. This allows users of our website to be provided with interest-based advertisements (“Facebook ads”) when visiting the social network Facebook or other websites that also use this process. The Facebook pixel automatically establishes a direct connection between your browser and the Facebook server. We have no influence on the scope and further use of the data collected by Facebook through the use of this tool and therefore inform you according to our state of knowledge: By integrating the Facebook pixel, Facebook receives the information that you have clicked on an ad from us or visited the corresponding page of our website. If you are registered with a Facebook service, Facebook can assign the visit to your account. Even if you are not registered with Facebook or have not logged in, it is possible that the provider may obtain and 
store your IP address and other identifying features. By using the Facebook pixel, we aim to display Facebook ads placed by us only to Facebook users who have also shown an interest in our website. With the help of the Facebook pixel, we want to ensure that our Facebook ads correspond to the potential interests of users and do not appear intrusive. Furthermore, with the help of the Facebook pixel, we can track the effectiveness of Facebook ads for statistical purposes by seeing whether users were redirected 
to our website after clicking on a Facebook ad. The legal basis for the use of the Facebook pixel is Art. 6 (1) (f) GDPR. 
You can object to the use of the Facebook pixel at any time by clicking on the link Deactivate Facebook Pixel. 
Third-party information: Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; 
http://www.facebook.com/policy.php; further information on data collection: 
http://www.facebook.com/help/186325668085084 
http://www.face-book.com/about/privacy/your-info-on-other#applicationssowie 
http://www.face-book.com/about/privacy/your-info#everyoneinf. 

6 SOCIAL PLUG-INS AND INTEGRATION OF YOUTUBE VIDEOS 

6.1 Social plug-ins 

We do not use plug-ins from social networks, known as “social plug-ins,” on our website. The social network icons on the website are merely links to the respective services. 

6.2 YouTube videos 

We use YouTube to embed videos. The videos have been embedded in extended data protection mode. Like most websites, YouTube also uses cookies to collect information about visitors to its website. YouTube uses these cookies to collect video statistics, prevent fraud, and improve user friendliness, among other things. This also leads to a connection being established with the Google DoubleClick network. When you start the video, this may trigger further data processing operations. We have no influence over this. For more information about data protection on YouTube, please refer to their privacy policy at: http://www.youtube.com/t/privacy_at_youtube 

7 RIGHT TO OBJECT, INFORMATION, CORRECTION, CORRECTION, AND DELETION OF DATA 

You have the right to obtain information about the personal data stored about you and the right to correct inaccurate data, as well as to block, complete, and delete it. 
You may object to the use of your data for the before mentioned purposes at any time with effect for the future without incurring any costs other than the transmission costs according to the basic rates. 
Upon request, we will provide you with a copy of your personal data in a structured, commonly used, and machine-readable format. 
For information about your personal data, to request the correction of inaccurate data or its blocking or deletion, to exercise your right of objection, or for further questions about the use of your personal data, please contact: 
MT.DERM GmbH 
Privacy Policy 
Blohmstrasse 37-61 
12307 Berlin 
datenschutz@mtderm.de 

8 COMPLAINTS TO THE SUPERVISORY AUTHORITY 

In accordance with Art. 77 GDPR, data subjects have the right to lodge a complaint with the competent supervisory authority if they believe that the processing of their personal data is unlawful. The competent supervisory authority is the Berlin Commissioner for Data Protection and Freedom of Information. 

9 DISCLAIMER 

All information contained on this website has been checked with great care. However, we cannot guarantee that the content of our own websites is correct, complete, and up to date at all times. We exclude liability for external links that refer to third-party websites. 

10 MOBILE DEVICES 

The provisions of this privacy policy also apply to mobile access and the use of mobile devices. 

11 CHANGES TO THE PRIVACY POLICY 

We reserve the right to amend our privacy policy if this is necessary due to changes in security and data protection measures. We therefore recommend that you visit this page regularly to familiarize yourself with the privacy policy.