Privacy Policy

1. Data Protection at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data are all data by which you can be personally identified. Detailed information on data protection can be found in our privacy policy below.

Data Collection on This Website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You can find their contact details in the “Note on the Responsible Party” section of this privacy policy.

How do we collect your data?

Your data are collected partly because you provide them to us. This can be data that you enter into a contact form, for example.

Other data are collected automatically or after your consent when you visit the website by our IT systems. These are primarily technical data (e.g., web browser, operating system, or time of page access). The collection of this data happens automatically as soon as you enter this website.

What do we use your data for?

Some of the data is collected to ensure the error-free provision of the website. Other data may be used to analyze your user behavior. If contracts are concluded or initiated via the website, the transmitted data are also processed for contract offers, orders, or other service requests.

What rights do you have regarding your data?

You have the right at any time to receive, free of charge, information about the origin, recipients, and purpose of your stored personal data. You also have the right to request correction or deletion of these data. If you have given consent to data processing, you can revoke this consent at any time for the future. You also have the right to request the restriction of processing of your personal data under certain circumstances. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

For this and any further questions on the subject of data protection, you can contact us at any time.

Analytics Tools and Third-Party Tools

When you visit this website, your surfing behavior may be statistically evaluated. This is mainly done using so-called analytics programs.

Detailed information on these analytics programs can be found in the following privacy policy.

2. Hosting

We host the content of our website with the following provider:

External Hosting

This website is hosted externally. The personal data collected on this website are stored on the servers of the hosting provider(s). This may include IP addresses, contact inquiries, meta and communication data, contract data, contact details, names, website accesses, and other data generated via a website.

External hosting is carried out for the purpose of fulfilling the contract with our prospective and existing customers (Art. 6 (1) lit. b GDPR) and in the interest of a secure, fast, and efficient provision of our online offering by a professional provider (Art. 6 (1) lit. f GDPR). If appropriate consent has been obtained, processing is carried out exclusively on the basis of Art. 6 (1) lit. a GDPR and § 25 (1) TDDDG, insofar as the consent covers the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of TDDDG. Consent can be revoked at any time.

Our hosting provider(s) will process your data only to the extent necessary to fulfill their performance obligations and will follow our instructions regarding these data.

We use the following hosting provider:

Hostpoint AG
Neue Jonastrasse 60
8640 Rapperswil-Jona
Switzerland

Order Processing

We have concluded a data processing agreement (DPA) for the use of the above service. This is a legally required agreement under data protection law, which ensures that the processor processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

3. General Notes and Mandatory Information

Data Protection

The operators of these pages take the protection of your personal data very seriously. We handle your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.

When you use this website, various personal data are collected. Personal data are data with which you can be personally identified. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this happens.

Please note that data transmission on the Internet (e.g., when communicating by e-mail) may have security gaps. Complete protection of data from third-party access is not possible.

Note on the Responsible Party

The responsible party for data processing on this website is:

STOFFELS(C)ONCEPTION GmbH
Veia da Runcs 25
7440 Andeer
Switzerland

Represented by:
Felix Stoffel

Phone: 079 901 19 71
E-Mail: info@structuristicart.community

The responsible party is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data (e.g., names, e-mail addresses, etc.).

Data Retention

Unless a more specific retention period is specified within this privacy policy, your personal data remain with us until the purpose for processing the data no longer applies. If you assert a legitimate request for deletion or revoke consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g., tax or commercial law retention periods); in the latter case, deletion occurs after those reasons no longer apply.

General Notes on Legal Bases of Data Processing on This Website

If you have consented to data processing, we process your personal data on the basis of Art. 6 (1) lit. a GDPR or Art. 9 (2) lit. a GDPR if special categories of data according to Art. 9 (1) GDPR are processed. In the case of explicit consent for the transfer of personal data to third countries, data processing also takes place on the basis of Art. 49 (1) lit. a GDPR. If you consent to the storage of cookies or access to information on your device (e.g., via device fingerprinting), data processing additionally occurs on the basis of § 25 (1) TDDDG. Consent can be revoked at any time. If your data are required for contract performance or pre-contractual measures, we process your data on the basis of Art. 6 (1) lit. b GDPR. Furthermore, we process your data on the basis of Art. 6 (1) lit. c GDPR if required for legal obligations. Data processing may also occur on the basis of our legitimate interest according to Art. 6 (1) lit. f GDPR. The specific legal bases are explained in the following sections of this privacy policy.

Recipients of Personal Data

In the course of our business activities, we work with various external parties. In some cases, it is necessary to transfer personal data to these external parties. We only pass on personal data to external parties if this is necessary for contract fulfillment, if we are legally obliged to do so (e.g., disclosure to tax authorities), if we have a legitimate interest according to Art. 6 (1) lit. f GDPR in the disclosure, or if another legal basis permits the data transfer. When using processors, we only transfer our customers’ personal data on the basis of a valid data processing agreement. In the event of joint processing, a joint processing agreement is concluded.

Withdrawal of Your Consent to Data Processing

Many data processing operations are only possible with your explicit consent. You can revoke consent you have given at any time. The legality of the data processing carried out up to the withdrawal remains unaffected.

Right to Object in Special Cases and to Direct Marketing (Art. 21 GDPR)

IF DATA PROCESSING IS BASED ON ART. 6 (1) LIT. E OR F GDPR, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT, FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, TO THE PROCESSING OF YOUR PERSONAL DATA; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE LEGAL BASIS FOR THE PROCESSING CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS OR FOR THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS (OBJECTION ACCORDING TO ART. 21 (1) GDPR).

IF YOUR PERSONAL DATA ARE PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH ADVERTISING; THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING (OBJECTION ACCORDING TO ART. 21 (2) GDPR).

Complaint to the Competent Supervisory Authority

In the event of violations of the GDPR, data subjects have a right to lodge a complaint with a supervisory authority, particularly in the Member State of their usual residence, place of work, or place of the alleged infringement. This right to complain exists without prejudice to any other administrative or judicial remedy.

Right to Data Portability

You have the right to receive the personal data we process based on your consent or contract in a structured, commonly used, and machine-readable format and to transmit those data to another controller. If you request direct transmission of the data to another controller, this will only be done to the extent technically feasible.

Right to Access, Rectification, and Erasure

You have at any time the right to receive free information about your stored personal data, its origin and recipients, and the purpose of data processing, and where applicable, a right to rectification or deletion of these data in accordance with applicable law. For this and any further questions on the subject of personal data, you can contact us at any time.

Right to Restriction of Processing

You have the right to request restriction of the processing of your personal data. You can contact us at any time for this purpose. The right to restriction of processing exists in the following cases:

  • If you contest the accuracy of your personal data stored by us, we generally need time to verify this. During the verification period, you have the right to request restriction of the processing of your personal data.
  • If the processing of your personal data was/is unlawful, you can demand restriction of processing instead of erasure.
  • If we no longer need your personal data but you need it for the establishment, exercise, or defense of legal claims, you have the right to request restriction of processing instead of erasure.
  • If you have objected under Art. 21 (1) GDPR, a balancing of interests must be carried out. As long as it is not yet clear whose interests prevail, you have the right to request restriction of processing of your personal data.

If you have restricted processing of your personal data, such data may only be processed—with the exception of storage—with your consent or for the establishment, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or a Member State.

SSL or TLS Encryption

For security reasons and to protect the transmission of confidential content (e.g., orders or inquiries you send to us as site operator), this site uses SSL or TLS encryption. You can recognize an encrypted connection by the change in your browser’s address line from “http://” to “https://” and by the lock symbol in your browser line.

When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

4. Data Collection on This Website

Cookies

Our websites use so-called “cookies.” Cookies are small data packets and cause no damage to your device. They are either stored temporarily for the duration of a session (session cookies) or permanently (persistent cookies) on your device. Session cookies are automatically deleted after your visit. Persistent cookies remain stored on your device until you delete them yourself or your browser deletes them automatically.

Cookies may come from us (first-party cookies) or from third parties (so-called third-party cookies). Third-party cookies enable the integration of certain services from third parties within web pages (e.g., cookies for handling payment services).

Cookies have various functions. Many cookies are technically necessary because certain website functions would not work without them (e.g., shopping cart function or video display). Other cookies can be used to evaluate user behavior or for advertising purposes.

Cookies that are necessary for conducting the electronic communication process, providing certain functions desired by you (e.g., shopping cart function), or optimizing the website (e.g., cookies to measure web audience) are stored on the basis of Art. 6 (1) lit. f GDPR if no other legal basis is specified. The website operator has a legitimate interest in storing cookies for the error-free and optimized provision of their services. If consent to the storage of cookies and comparable recognition technologies has been requested, processing is carried out exclusively on the basis of this consent (Art. 6 (1) lit. a GDPR and § 25 (1) TDDDG); consent can be revoked at any time.

You can set your browser to inform you about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or generally, and activate automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.

Which cookies and services are used on this website can be found in this privacy policy.

Consent with Usercentrics

This website uses Usercentrics consent technology to obtain and document your consent for the storage of certain cookies on your device or the use of certain technologies in compliance with data protection laws. The provider of this technology is Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Website: https://usercentrics.com/de/ (“Usercentrics”).

When you enter our website, the following personal data are transmitted to Usercentrics:

  • Your consent(s) or the withdrawal of your consent(s)
  • Your IP address
  • Information about your browser
  • Information about your device
  • Time of your visit to the website
  • Geolocation

Usercentrics also stores a cookie in your browser to assign your given consents or their withdrawal. The collected data are stored until you request deletion, delete the Usercentrics cookie yourself, or the purpose for data storage no longer applies. Mandatory statutory retention periods remain unaffected.

The Usercentrics banner on this website was configured using eRecht24. You can recognize this by the eRecht24 logo appearing in the banner. To display the eRecht24 logo, a connection is made to the eRecht24 image server, transmitting the IP address in anonymized form in the server logs. The eRecht24 image server is located in Germany with a German provider. The banner itself is provided exclusively by Usercentrics.

Usercentrics is used to obtain the legally required consents for the use of certain technologies. The legal basis for this is Art. 6 (1) lit. c GDPR.

Order Processing

We have concluded a data processing agreement (DPA) for the use of the above service. This is a legally required agreement under data protection law, which ensures that the processor processes personal data of our website visitors only according to our instructions and in compliance with the GDPR.

Server Log Files

The provider of the pages automatically collects and stores information in so-called server log files that your browser automatically sends to us. These are:

  • Browser type and browser version
  • Operating system used
  • Referrer URL
  • Hostname of the accessing computer
  • Time of the server request
  • IP address

These data are not merged with other data sources.

The collection of these data is based on Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in the technically error-free display and optimization of their website – for this, server log files must be recorded.

Contact Form

If you send us inquiries via the contact form, your details from the inquiry form, including the contact data you provide there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not share this data without your consent.

Processing of this data is carried out on the basis of Art. 6 (1) lit. b GDPR if your inquiry is related to the performance of a contract or is necessary for pre-contractual measures. In all other cases, processing is based on our legitimate interest in effectively processing inquiries addressed to us (Art. 6 (1) lit. f GDPR) or on your consent (Art. 6 (1) lit. a GDPR), if requested; consent can be revoked at any time.

The data you enter in the contact form remain with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies (e.g., after your inquiry has been processed). Mandatory legal requirements – in particular retention periods – remain unaffected.

Inquiries by Email, Telephone, or Fax

If you contact us by email, telephone, or fax, your inquiry, including all resulting personal data (name, inquiry), will be stored and processed by us for the purpose of handling your request. We do not share this data without your consent.

Processing of this data is carried out on the basis of Art. 6 (1) lit. b GDPR if your inquiry is related to contract performance or necessary for pre-contractual measures. In all other cases, processing is based on our legitimate interest in effectively processing inquiries addressed to us (Art. 6 (1) lit. f GDPR) or your consent (Art. 6 (1) lit. a GDPR), if requested; consent can be revoked at any time.

The data transmitted by you via contact inquiries remain with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies (e.g., after your request has been processed). Mandatory legal requirements – in particular statutory retention periods – remain unaffected.

5. Social Media

Instagram

Functions of the Instagram service are integrated into this website. These functions are offered by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.

If the social media element is active, a direct connection is established between your device and the Instagram server. Instagram thus receives information about your visit to this website.

If you are logged into your Instagram account, you can link the contents of this website to your Instagram profile by clicking the Instagram button. As a result, Instagram can assign your visit to this website to your user account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the data transmitted or its use by Instagram.

The use of this service is based on your consent according to Art. 6 (1) lit. a GDPR and § 25 (1) TDDDG. Consent can be revoked at any time.

To the extent that personal data are collected on our website and transmitted to Facebook or Instagram using the tool described here, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, are jointly responsible for this data processing (Art. 26 GDPR). Joint responsibility is limited exclusively to data collection and transmission to Facebook or Instagram. Processing by Facebook or Instagram after transmission is not part of the joint responsibility. The obligations we share have been recorded in a joint processing agreement. The text of the agreement can be found at: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing the data protection information when using the Facebook or Instagram tool and for the data protection-compliant implementation of the tool on our website. Facebook is responsible for the data security of the Facebook or Instagram products. Data subject rights (e.g., requests for information) regarding data processed by Facebook or Instagram can be asserted directly with Facebook. If you assert data subject rights with us, we are obliged to forward them to Facebook.

Data transfers to the USA are based on the standard contractual clauses of the European Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://privacycenter.instagram.com/policy/, and https://de-de.facebook.com/help/566994660333381.

Further information can be found in Instagram’s privacy policy: https://privacycenter.instagram.com/policy/.

The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA to ensure compliance with European data protection standards in US data processing. Every company certified under the DPF undertakes to comply with these data protection standards. More information can be obtained from the provider at: https://www.dataprivacyframework.gov/participant/4452.

6. Analytics Tools and Advertising

WP Statistics

This website uses the analytics tool WP Statistics to statistically evaluate visitor accesses. The provider is Veronalabs, Tatari 64, 10134 Tallinn, Estonia (https://veronalabs.com).

With WP Statistics, we can analyze the use of our website. WP Statistics collects, among other things, log files (IP address, referrer, browsers used, user origin, search engines used) and actions performed by website visitors (e.g., clicks and views).

The data collected with WP Statistics are stored exclusively on our own server.

The use of this analytics tool is based on Art. 6 (1) lit. f GDPR. We have a legitimate interest in anonymized analysis of user behavior to optimize both our web offering and our advertising. If appropriate consent has been obtained, processing is carried out exclusively on the basis of Art. 6 (1) lit. a GDPR and § 25 (1) TDDDG, insofar as consent covers the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of TDDDG. Consent can be revoked at any time.

IP Anonymization

We use WP Statistics with anonymized IP. Your IP address is shortened so that it can no longer be directly associated with you.

7. eCommerce and Payment Providers

Processing of Customer and Contract Data

We collect, process, and use personal customer and contract data to establish, define the content of, and modify our contractual relationships. Personal data about the use of this website (usage data) are collected, processed, and used only to the extent necessary to enable the user to use the service or to bill for it. The legal basis for this is Art. 6 (1) lit. b GDPR.

The collected customer data are deleted after completion of the order or termination of the business relationship and expiration of any statutory retention periods. Statutory retention periods remain unaffected.