Data Protection

Data Protection Information according to GDPR

Below you will find information on how and for what purpose your data is processed when visiting the website https://fenfencreations.com.

1. Name and contact details of the controller and the company data protection officer

This data protection information applies to all data processing operations carried out via our website by the following controller: FenFenCreations Bahnhofstraße 10b D-15517 Fürstenwalde/Spree Email: info@fenfencreations.com

The company data protection officer of FenFenCreations can be reached at the above address, attn. Ms. Madej.

2. Collection and storage of personal data as well as type and purpose of their use

2.1 Visiting the website When you access our website XXX, information is automatically sent to the server of our website by the browser used on your end device. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until automated deletion:

• IP address of the requesting computer,
• Date and time of access,
• Name and URL of the retrieved file,
• Website from which access is made (referrer URL),
• Browser used and, if applicable, the operating system of your computer as well as the name of your access provider.

We process the above-mentioned data for the following purposes:

• Ensuring a smooth connection setup of the website,
• Ensuring convenient use of our website,
• Evaluation of system security and stability, as well as
• For other administrative purposes.

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest follows from the purposes listed above for data collection. In no case do we use the collected data for the purpose of drawing conclusions about your person.

Additionally, we use cookies and analysis services when visiting our website. Further explanations can be found under section XXX of this privacy policy.

2.2 Use of our contact form For inquiries of any kind, we offer you the opportunity to contact us via a form provided on the website. Providing a valid email address is required so that we know who the inquiry comes from and to be able to respond to it. Further information can be provided voluntarily. The data processing for the purpose of contacting us is carried out in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR based on your voluntarily given consent. The personal data collected by us for the use of the contact form will be automatically deleted after your request has been processed.

3. Disclosure of data Your personal data will not be transferred to third parties for purposes other than those listed below. We only pass on your personal data to third parties if:

• You have given your express consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR,
• The transfer pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR is necessary to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data,
• In the event that there is a legal obligation to pass on the data pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR, as well as
• This is legally permissible and required under Art. 6 para. 1 sentence 1 lit. b GDPR for the processing of contractual relationships with you.

4. Cookies

We use cookies on our site. These are small files that your browser automatically creates and that are stored on your end device (laptop, tablet, smartphone, etc.) when you visit our site. Cookies do not harm your device, do not contain viruses, trojans, or other malware. The cookie stores information that results in each case in connection with the specific end device used. However, this does not mean that we immediately become aware of your identity. The use of cookies serves on the one hand to make the use of our offer more pleasant for you. For example, we use so-called session cookies to recognize that you have already visited individual pages of our website. These are automatically deleted after leaving our site. In addition, we also use temporary cookies to optimize user-friendliness, which are stored on your end device for a specific, defined period of time. If you visit our site again to use our services, it is automatically recognized that you have already been with us and which entries and settings you have made so that you do not have to enter them again. On the other hand, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer for you. These cookies enable us to automatically recognize that you have already visited our site when you visit it again. These cookies are automatically deleted after a defined period of time. The data processed by cookies is required for the purposes mentioned to safeguard our legitimate interests and those of third parties pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR. Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a message always appears before a new cookie is created. However, the complete deactivation of cookies can lead to the fact that you cannot use all functions of our website.

5. Analysis tools and tracking tools

The tracking measures listed below and used by us are carried out on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR. With the tracking measures used, we want to ensure a needs-based design and continuous optimization of our website. On the other hand, we use tracking measures to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer for you. These interests are to be regarded as legitimate within the meaning of the aforementioned provision. The respective data processing purposes and data categories can be found in the corresponding tracking tools.

a) Google Analytics

b) Google Adwords Conversion Tracking

c) Matomo

5. Analysis tools and tracking tools (continued)

a) Google Analytics For the purpose of needs-based design and continuous optimization of our pages, we use Google Analytics, a web analytics service provided by Google Inc. (https://www.google.com/intl/en/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter “Google”). In this context, pseudonymized user profiles are created and cookies (see section 4) are used. The information generated by the cookie about your use of this website such as

• Browser type/version,
• Operating system used,
• Referrer URL (the previously visited page),
• Host name of the accessing computer (IP address),
• Time of the server request,

are transmitted to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on website activity, and to provide other services related to website activity and internet usage for the purposes of market research and the design of these websites according to requirements. This information may also be transferred to third parties if required by law or if third parties process this data on behalf of the company. Under no circumstances will your IP address be merged with other Google data. IP addresses are anonymized so that assignment is not possible (IP masking). You can prevent the installation of cookies by setting your browser software accordingly; however, we would like to point out that in this case, you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link: (https://tools.google.com/dlpage/gaoptout?hl=en). As an alternative to the browser plug-in, especially for browsers on mobile devices, you can also prevent Google Analytics from collecting data by clicking on this link. An opt-out cookie will be set to prevent the collection of your data on future visits to this site. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again. Further information on data protection in connection with Google Analytics can be found, for example, in the Google Analytics Help (https://support.google.com/analytics/answer/6004245?hl=en).

b) Google Adwords Conversion Tracking To statistically record the use of our website and to evaluate it for the purpose of optimizing our website for you, we also use Google Conversion Tracking. In doing so, Google Adwords will set a cookie (see section 4) on your computer if you have reached our website via a Google ad. These cookies lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of the website of an Adwords customer and the cookie has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to this page. Each Adwords customer receives a different cookie. Cookies can therefore not be tracked across Adwords customers’ websites. The information collected using the conversion cookie is used to generate conversion statistics for Adwords customers who have opted for conversion tracking. Adwords customers see the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they will not receive information that personally identifies users. If you do not wish to participate in tracking, you can refuse the setting of a cookie required for this – for example, via browser settings that generally deactivate the automatic setting of cookies. You can also deactivate cookies for conversion tracking by setting your browser to block cookies from the domain “www.googleadservices.com“. Google’s privacy policy on conversion tracking can be found here (https://services.google.com/sitestats/en.html).

c) Matomo We use the open-source software Matomo for the analysis and statistical evaluation of the use of the website. For this purpose, cookies (see section 4) are used. The information generated by the cookie about the use of the website is transmitted to our servers and summarized in pseudonymous user profiles. The information is used to evaluate the use of the website and to enable a needs-based design of our website. The information will not be passed on to third parties. Under no circumstances will the IP address be associated with other user-related data. IP addresses are anonymized so that an assignment is not possible (IP masking). Your visit to this website is currently being recorded by the Matomo web analysis. Click here (https://matomo.org/docs/privacy/) to prevent your visit from being recorded.

6. Social Media Plugins

We use social media plugins of the social networks Facebook, Twitter, and Instagram on our website based on Article 6(1)(f) GDPR to make our company better known. The underlying promotional purpose is to be considered a legitimate interest within the meaning of the GDPR. The responsibility for data protection-compliant operation lies with their respective providers. We integrate these plugins into our website using the two-click method to protect visitors to our website as much as possible.

a) Facebook Social media plugins from Facebook are used on our website to make their use more personal. We use the “LIKE” or “SHARE” button for this purpose. This is an offer from Facebook.

When you visit a page of our website that contains such a plugin, your browser establishes a direct connection to the Facebook servers. The content of the plugin is transmitted directly to your browser by Facebook and integrated into the website.

By integrating the plugins, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook account or are not currently logged into Facebook. This information (including your IP address) is transmitted directly from your browser to a Facebook server in the USA and stored there.

If you are logged in to Facebook, Facebook can directly associate your visit to our website with your Facebook account. If you interact with the plugins, for example by clicking the “LIKE” or “SHARE” button, the corresponding information is also transmitted directly to a Facebook server and stored there. The information is also published on Facebook and displayed to your Facebook friends.

Facebook may use this information for the purposes of advertising, market research, and the design of Facebook pages to meet your needs. To do this, Facebook creates usage, interest, and relationship profiles, e.g., to evaluate your use of our website with regard to the advertisements displayed to you on Facebook, to inform other Facebook users about your activities on our website, and to provide further services associated with the use of Facebook.

If you do not want Facebook to associate the information collected through our website with your Facebook account, you must log out of Facebook before visiting our website.

Please refer to Facebook’s privacy policy (https://www.facebook.com/about/privacy/) for the purpose and scope of data collection and further processing and use of the data by Facebook, as well as your rights and settings options to protect your privacy.

b) Twitter Plugins of the short message network Twitter Inc. (Twitter) are integrated into our internet pages. You can recognize the Twitter plugins (tweet buttons) by the Twitter logo on our site. An overview of tweet buttons can be found here (https://about.twitter.com/resources/buttons).

When you visit a page of our website that contains such a plugin, a direct connection is established between your browser and the Twitter server. Twitter receives the information that you have visited our site with your IP address. If you click on the Twitter “tweet button” while logged into your Twitter account, you can link the contents of our pages to your Twitter profile. This allows Twitter to associate your visit to our pages with your user account. We would like to point out that, as the provider of these pages, we do not have any knowledge of the content of the transmitted data or its use by Twitter.

If you do not want Twitter to be able to assign visits to our pages, please log out of your Twitter user account.

You can find further information in Twitter’s privacy policy (https://twitter.com/privacy).

c) Instagram Our website also uses so-called social plugins (“plugins”) from Instagram, which is operated by Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA (“Instagram”).

The plugins are marked with an Instagram logo, for example in the form of an “Instagram camera.”

When you visit a page of our website that contains such a plugin, your browser establishes a direct connection to Instagram’s servers. Instagram sends the content of the plugin directly to your browser and integrates it into the page. This integration informs Instagram that your browser has accessed the corresponding page of our website, even if you do not have an Instagram profile or are not currently logged in to Instagram.

This information (including your IP address) is sent directly from your browser to an Instagram server in the USA and stored there. If you are logged in to Instagram, Instagram can immediately associate your visit to our website with your Instagram account. If you interact with the plugins, for example by pressing the “Instagram” button, this information is also sent directly to an Instagram server and stored there. The information is also published on your Instagram account and displayed to your contacts.

If you do not want Instagram to associate the information collected through our website directly with your Instagram account, you must log out of Instagram before visiting our website. For more information, please refer to Instagram’s privacy policy (https://help.instagram.com/155833707900388).

7. Rights of the data subject

You have the right:

• to request information about your personal data processed by us in accordance with Article 15 GDPR. In particular, you may request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the envisaged storage period, the existence of the right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the source of your data, if it was not collected by us, and the existence of automated decision-making, including profiling, and, if applicable, meaningful information about the logic involved;
• pursuant to Article 16 GDPR, to demand the rectification of inaccurate or incomplete personal data stored by us without undue delay;
• pursuant to Article 17 GDPR, to demand the erasure of your personal data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims;
• pursuant to Article 18 GDPR, to demand the restriction of processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you oppose its erasure and we no longer need the data, but you require it for the establishment, exercise or defense of legal claims or you have objected to processing pursuant to Article 21 GDPR;
• pursuant to Article 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request its transmission to another controller;
• pursuant to Article 7(3) GDPR, to withdraw your consent to us at any time. As a result, we may no longer continue the data processing based on this consent in the future; and
• pursuant to Article 77 GDPR, to lodge a complaint with a supervisory authority. As a rule, you

8. Right to Object

If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 para. 1 s. 1 lit. f GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, provided that there are reasons for this arising from your particular situation or if the objection is directed against direct marketing. In the latter case, you have a general right to object, which we will implement without specifying a particular situation.

If you wish to exercise your right of withdrawal or objection, simply send an email to XXX.

9. Data Security

Within the website visit, we use the widespread SSL (Secure Socket Layer) method in conjunction with the highest encryption level supported by your browser. As a rule, this is a 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser. We also use suitable technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

10. Updating and Changing this Privacy Policy

This privacy policy is currently valid and dated March 2024. Due to the ongoing development of our website and offerings or due to changes in legal or regulatory requirements, it may be necessary to amend this privacy policy. The current privacy policy can be accessed and printed by you at any time on our website at XXX.