DeutschPrivacy Policy
Important legal information and terms for using this website, digital products and related services.
1. General Information
The protection of your personal data is important to us. In this privacy policy, we inform you about which personal data we process on this website, for what purposes this is done and on which legal basis the processing takes place.
Personal data means any information that can be used to personally identify you.
2. Controller
The controller responsible for data processing on this website is:
Jakob Sahner Fotografie / Jakob Sahner Astrofotografie
Schillerstraße 4
79379 Müllheim
Germany
Phone: +49 (0) 1517 0226733
Email: sahner.jakob@gmail.com
3. Hosting
This website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany.
When this website is accessed, the hosting provider processes technically required data, in particular server log data such as IP address, date and time of access, browser type, operating system, referrer URL as well as accessed files and pages.
This processing is carried out for the technically secure, stable and error-free provision of the website on the basis of Art. 6 (1) lit. f GDPR.
If a data processing agreement has been concluded with the hosting provider, the processing is additionally carried out within the framework of this agreement.
4. IONOS WebAnalytics
This website uses IONOS WebAnalytics for the statistical evaluation of visitor access.
In the context of IONOS WebAnalytics, the following data in particular may be processed:
- Referrer
- Requested page or file
- Browser type and browser version
- Operating system used
- Device type used
- Time of access
- IP address in anonymized form
The processing is carried out for statistical analysis and technical optimization of our website on the basis of Art. 6 (1) lit. f GDPR, provided that the service is used without access to end devices requiring consent. Where consent is required, the processing is carried out on the basis of Art. 6 (1) lit. a GDPR and § 25 TDDDG.
5. Legal Bases for Processing
We process personal data in particular on the basis of the following legal bases:
- Art. 6 (1) lit. a GDPR, if you have given your consent
- Art. 6 (1) lit. b GDPR, for the performance of a contract or in order to take steps prior to entering into a contract
- Art. 6 (1) lit. c GDPR, for compliance with legal obligations
- Art. 6 (1) lit. f GDPR, for the purposes of legitimate interests
Where consent is required for storing information on your device or for accessing information already stored on your device, this is carried out on the basis of § 25 TDDDG.
6. Storage Period
Unless a more specific storage period is stated in this privacy policy, we store personal data only for as long as necessary for the respective processing purposes.
Where statutory retention obligations apply, data will be deleted after expiry of the relevant statutory retention periods.
7. Your Rights
Within the scope of the statutory provisions, you have the following rights in particular:
- Right of access
- Right to rectification
- Right to erasure
- Right to restriction of processing
- Right to data portability
- Right to object to certain processing activities
- Right to withdraw consent with effect for the future
- Right to lodge a complaint with a data protection supervisory authority
8. SSL / TLS Encryption
For security reasons and to protect confidential content, this website uses SSL or TLS encryption.
9. Cookies and Consent Management
Our website uses cookies and comparable technologies. Some of these are technically necessary, while others are used for displaying external content, statistical analysis or securing forms.
Where legally required, we obtain your consent before using cookies and technologies that are not technically necessary via a consent tool. The processing is then carried out on the basis of Art. 6 (1) lit. a GDPR and § 25 (1) TDDDG. Technically necessary cookies may be used on the basis of Art. 6 (1) lit. f GDPR and, where applicable, § 25 (2) TDDDG.
Borlabs Cookie
We use Borlabs Cookie to manage and document consent.
In particular, it stores whether and for which categories of cookies or services you have given your consent. This storage serves the legally compliant documentation and management of your consent.
The legal basis is Art. 6 (1) lit. c GDPR and, additionally, Art. 6 (1) lit. f GDPR.
10. Contact / Contact Form
If you send us inquiries via the contact form, we process the information you provide, including your contact details, in order to handle your inquiry and any follow-up questions.
The processing is carried out on the basis of Art. 6 (1) lit. b GDPR if your inquiry is related to a contract or a pre-contractual request, or on the basis of Art. 6 (1) lit. f GDPR due to our legitimate interest in processing incoming inquiries.
Contact by Email or Phone
If you contact us by email or phone, we process the data you provide in order to handle your inquiry.
The processing is also carried out on the basis of Art. 6 (1) lit. b GDPR or Art. 6 (1) lit. f GDPR.
11. Customer Account and Orders
If you place an order through our shop or create a customer account, we process the personal data required for this purpose, in particular:
- First and last name
- Billing address and, if applicable, shipping address
- Email address
- Order data
- Payment information, insofar as this is required for payment processing
- Any additional voluntary information
The processing is carried out for the performance of the contract, order processing, provision of purchased products, invoicing and compliance with legal obligations on the basis of Art. 6 (1) lit. b and lit. c GDPR.
12. Digital Products, Downloads and License Keys
We mainly sell digital products through our shop, in particular software, download products and license keys.
For contract processing, we process personal data in particular for:
- Providing digital products
- Sending or enabling download links
- Creating, assigning and managing license keys
- Assigning purchases to email addresses or customer accounts
- Checking license requests from the plugin
- Preventing misuse
- Technical and contractual processing
In particular, the following data may be processed:
- Name
- Email address
- Order number
- Product and license information
- Time of provision, activation or download
- License information transmitted by the plugin
- Technical information, insofar as this is required for license management, verification of contractual use or responding to plugin requests
The processing is carried out on the basis of Art. 6 (1) lit. b GDPR.
License Management via LMFWC
We use a license management tool within our WooCommerce system on our own server to create and manage license keys.
Within the scope of this license management, order, customer, license and activation data may be processed insofar as this is necessary for providing, checking and managing the purchased license.
If the plugin sends a license check or another license request to our server, the data transmitted in this process is processed to verify the validity of the license and to technically respond to the request.
13. Physical Products and Shipping
In addition to digital products, we also sell a limited range of physical products, in particular calendars.
If you order physical products, we process your data for order and shipping processing. This may include, in particular, your name, billing and shipping address, email address and order-related information.
Where necessary for delivery, we pass on the required data to the shipping service provider used.
The processing is carried out on the basis of Art. 6 (1) lit. b GDPR.
14. Payment Processing
We use external payment service providers for payment processing. The data required for payment is transmitted to the provider selected by you.
The processing is carried out on the basis of Art. 6 (1) lit. b GDPR.
PayPal
If you choose PayPal as your payment method, payment processing is carried out by:
PayPal (Europe) S.à r.l. et Cie, S.C.A.
22-24 Boulevard Royal
L-2449 Luxembourg
Stripe
If you use Stripe or payment methods provided through Stripe, such as credit card, Apple Pay or Google Pay, payment processing is carried out by:
Stripe Payments Europe, Ltd.
1 Grand Canal Street Lower
Grand Canal Dock
Dublin
Ireland
Depending on the selected payment method, the data required for payment processing is transmitted to Stripe and, where applicable, to other parties involved in the payment.
Further information can be found in the privacy notices of the respective payment service providers.
15. Newsletter
We currently do not use active newsletter mailing. In the future, we plan to use Brevo for newsletter distribution.
As soon as a newsletter is actually offered, this privacy policy should be updated accordingly, in particular with regard to:
- Registration data
- Double opt-in
- Newsletter service provider Brevo
- Any opening and click tracking
- Legal basis and withdrawal
As long as no active newsletter mailing takes place, no processing for newsletter purposes is carried out in this respect.
16. Embedded YouTube Videos
Videos from YouTube may be embedded on our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
When you access a page with an embedded YouTube video, a connection to Google or YouTube servers may be established. Personal data, in particular IP address and usage data, may be processed in this process.
Where cookies or comparable technologies are used for embedding or playing YouTube videos, this only takes place after your consent on the basis of Art. 6 (1) lit. a GDPR and § 25 (1) TDDDG.
17. Google reCAPTCHA
We use Google reCAPTCHA to protect our forms from abusive automated submissions. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
reCAPTCHA can be used to check whether entries are made by a human or by an automated program. Technical data such as IP address, browser information, mouse movements, time spent on the page or other usage data may be processed.
Where reCAPTCHA stores or reads information on the end device, this is carried out on the basis of the applicable legal requirements, in particular § 25 TDDDG. Further processing of personal data is carried out on the basis of Art. 6 (1) lit. f GDPR to protect our website from misuse or, where technically and legally required, on the basis of your consent pursuant to Art. 6 (1) lit. a GDPR.
18. Data Transfers to Third Countries
Where data is transferred to countries outside the European Union or the European Economic Area when using individual services, this is carried out only within the framework of the legal requirements.
In its privacy information, Google refers to its participation in the EU-US Data Privacy Framework for Google LLC and certain US subsidiaries.
19. Data Processing Agreements
Where we use external service providers who process personal data on our behalf, we conclude data processing agreements with them pursuant to Art. 28 GDPR where required.