Data Controller
The data controller responsible for processing data on this website and in the context of business activities is:
Masoumeh Shariatnaseri
Saturnweg 9A, 22391 Hamburg
Collection and Processing of Personal Data
When you visit my website, engage in business with me, or use my services, personal data is processed. The data collected is either required to carry out these activities or is provided voluntarily.
a) Data Processing on the Website
Every time the website is accessed, certain data (such as IP address, date and time of access, browser used, etc.) is automatically collected by the hosting provider. This data is used solely to ensure the smooth operation of the website and improve its content. No assignment to specific individuals occurs.
Legal basis: Article 6(1)(f) GDPR (legitimate interest in technical functionality).
b) Orders in the Online Shop / Other Channels
When an order is placed through my online shop, in person, or by phone, the following data is processed:
• Name, address, email address, telephone number (optional)
• Payment details (depending on the payment method chosen)
This data is necessary to conclude and fulfill the purchase contract.
Legal basis: Article 6(1)(b) GDPR (performance of a contract).
c) Login Area
On my website, users can create a customer account. The following data is processed:
• Name or username chosen by the user
• Password
This data is required to provide access to the user area and facilitate recurring transactions.
Legal basis: Article 6(1)(b) GDPR (performance of a contract).
d) Contact via Email or Phone
If you contact me by email or phone, personal data may be processed to handle and respond to your inquiry. This typically includes the following data:
• Email address and the content of your message (if contacting by email)
• Name, telephone number, and any other personal data provided during the phone call
The processing of this data is for the purpose of responding to your inquiry.
Legal basis: Article 6(1)(b) GDPR (pre-contractual or contractual measures) or Article 6(1)(f) GDPR (legitimate interest in responding to inquiries).
e) Newsletter
If you subscribe to my newsletter, I will use your email address to send you regular updates about my products, activities, and special offers. This requires your explicit consent, provided through a double opt-in process.
You may revoke your consent at any time by using the unsubscribe link at the end of each newsletter or by contacting me directly.
Legal basis: Article 6(1)(a) GDPR (consent).
f) Payment via PayPal
I offer PayPal as a payment method. If you choose PayPal, your name, delivery address, email address, phone number, and IP address, along with the payable amount, will be transferred to PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg) for authorization of the payment.
Legal basis: Article 6(1)(b) GDPR (contract fulfillment).
Please note that PayPal is subject to its own privacy terms, which are available on PayPal's website.
Sharing of Data
Personal data is shared with third parties only if necessary for contract fulfillment (e.g., IT service providers, shipping companies) or if there is a legal obligation (e.g., lawyers, auditors).
In these cases, data is transferred on the basis of Article 6(1)(b) or (c) GDPR.
For payment processing in the online shop, I work with external payment service providers (PayPal, credit card providers). These providers receive the necessary payment data (e.g., name, invoice amount, payment details) solely for the purpose of processing the payment.
Data Retention
Personal data is retained only for as long as necessary to fulfill the respective purposes or to comply with legal obligations. Data related to orders is retained for the duration of the statutory retention periods.
Your Rights as a Data Subject
You have the following rights concerning your personal data:
• Right of access under Article 15 GDPR
• Right to rectification under Article 16 GDPR
• Right to erasure under Article 17 GDPR
• Right to restriction of processing under Article 18 GDPR
• Right to object to processing under Article 21 GDPR
• Right to withdraw consent under Article 21 GDPR
• Right to data portability under Article 20 GDPR
You also have the right to lodge a complaint with a supervisory authority if you believe the processing of your personal data is not lawful. The responsible supervisory authority for my activities is:
The Hamburg Commissioner for Data Protection and Freedom of Information
Ludwig-Erhard-Str. 22, 7th Floor
20459 Hamburg
Phone: 040 / 428 54 - 4040
Fax: 040 / 428 54 - 4000
Email:
Website: https://datenschutz-hamburg.de
Security
Appropriate technical and organizational security measures are in place to protect your personal data from loss, misuse, or unauthorized access.
Changes to the Privacy Policy
I reserve the right to amend this privacy policy to reflect changes in legal regulations or in my services. The current version is available on my website.
For newsletter delivery, I use an external service provider ([provider's name], [provider's address]). Your email address is shared with this provider for the sole purpose of sending the newsletter on my behalf, and a data processing agreement under Article 28 GDPR is in place to ensure compliance with applicable data protection regulations.
