Data protection

1) Information about the collection of personal data and contact details of the person responsible

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following we will inform you about the handling of your personal data when using our website. Personal data are all data with which you can be personally identified.

1.2 The controller of data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is House of Textile Arts e.K., Bahnhofstrasse 5, 59964 Medebach, Germany, Tel.: +49 2982 930 60 20, Fax: +49 2982 930 60 21, E-Mail: hota@housetextilearts.com. The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the person responsible), this website uses an SSL or SSL protocol. TLS encryption. You can recognize an encrypted connection by the character string “https: //” and the lock symbol in your browser line.

2) Data collection when you visit our website

If you only use our website for informational purposes, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called “server log files”). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:

• Our visited website
• Date and time at the time of access
• Amount of data sent in bytes
• Source / reference from which you came to the page
• Browser used
• Operating system used
• IP address used (if applicable: in anonymous form)

The processing takes place in accordance with Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files retrospectively if there are concrete indications of illegal use.

3) Hosting & Content Delivery Network

IONOS
On our website we use a so-called Content Delivery Network (“CDN”) from &1 IONOS Internet SE, Elgendorfer Str. 57, 56410 Montabaur (“IONOS”). A content delivery network is an online service that is used to deliver large media files in particular (such as graphics, page content or scripts) through a network of regionally distributed servers connected via the Internet. Using the Content Delivery Network from IONOS helps us to optimize the loading speed of our website.
The processing takes place in accordance with Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in a secure and efficient provision, as well as improvement of the stability and functionality of our website.
We have concluded an order processing contract with IONOS, which obliges IONOS to protect the data of our website visitors and not to pass it on to third parties. For more information, please see the IONOS privacy policy at: https://www.ionos.de/terms-gtc/terms-privacy

4) cookies

In order to make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your end device and enable us or our partner companies (third-party cookies) to recognize your browser on your next visit (persistent cookies). If cookies are set, they collect and process certain user information such as browser and location data as well as IP address values on an individual basis. Persistent cookies are automatically deleted after a specified period, which can vary depending on the cookie.

If personal data is also processed by individual cookies implemented by us, the processing takes place in accordance with Art. 6 Para. 1 lit. b GDPR either for the execution of the contract or according to Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.

We may work with advertising partners who help us to make our website more interesting for you. For this purpose, cookies from partner companies are also stored on your hard drive when you visit our website (third-party cookies). If we work together with the aforementioned advertising partners, you will be informed individually and separately about the use of such cookies and the scope of the information collected in each case within the following paragraphs.

Please note that you can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of every browser, which explains how you can change your cookie settings. You can find these for the respective browser under the following links:

Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/temporäres-zulassen-von-cookies-und-website-daten-in-microsoft-edge-597f04f2-c0ce-f08c-7c2b-541086362bd2
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: http://support.google.com/chrome/bin/answer.py?hl=en&hlrm=en&answer=95647
Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
Opera: http://help.opera.com/Windows/10.20/de/cookies.html

Please note that if you do not accept cookies, the functionality of our website may be restricted.

5) contact

When you contact us (e.g. using the contact form or email), personal data is collected. Which data is collected when a contact form is used can be seen from the respective contact form. These data are stored and used exclusively for the purpose of answering your request or for establishing contact and the associated technical administration. The legal basis for processing this data is our legitimate interest in answering your request in accordance with Art. 6 Para. 1 lit. f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 Para. 1 lit. b GDPR. Your data will be deleted after your request has been processed. This is the case if it can be inferred from the circumstances that the matter in question has been finally clarified and provided that there are no statutory retention requirements.

6) Use of customer data for direct advertising

– Newsletter dispatch via rapidmail
Our e-mail newsletters are sent via the technical service provider rapidmail GmbH, Augustinerplatz 2, 79098 Freiburg (“rapidmail”), to whom we pass on the data you provided when you registered for the newsletter. This transfer takes place in accordance with Art. 6 Para. 1 lit. f GDPR and serves our legitimate interest in using an effective, secure and user-friendly newsletter system. The data you enter for the purpose of receiving the newsletter (e.g. e-mail address) will be stored on rapidmail’s servers in Germany.
rapidmail uses this information to send and statistically evaluate the newsletter on our behalf. For the evaluation, the e-mails sent contain so-called web beacons or tracking pixels, which represent one-pixel image files that are stored on our website. In this way it can be determined whether a newsletter message has been opened and which links have been clicked. With the help of so-called conversion tracking, it can also be analyzed whether a previously defined action (e.g. purchase of a product on our website) has taken place after clicking the link in the newsletter. Technical information is also recorded (e.g. time of access, IP address, browser type and operating system). The data is collected exclusively in pseudonymised form and is not linked to your other personal data; direct personal reference is excluded. This data is used exclusively for the statistical analysis of newsletter campaigns. The results of these analyzes can be used to better adapt future newsletters to the interests of the recipients.
If you want to object to the data analysis for statistical evaluation purposes, you have to unsubscribe from the newsletter.
We have concluded an order processing contract with rapidmail in which we oblige rapidmail to protect our customers’ data and not to pass them on to third parties.
For more information on rapidmail’s data protection, please refer to rapidmail’s privacy policy: https://www.rapidmail.de/datenschutz

7) Rights of the data subject

7.1  The applicable data protection law grants you the following data subject rights (rights of information and intervention) vis-à-vis the person responsible with regard to the processing of your personal data, whereby reference is made to the legal basis given for the respective exercise requirements:

• Right to information according to Art. 15 DSGVO;
• Right to rectification pursuant to Art. 16 DSGVO;
• Right to erasure pursuant to Art. 17 DSGVO;
• Right to restriction of processing pursuant to Art. 18 DSGVO;
• Right to information pursuant to Art. 19 GDPR;
• Right to data portability according to Art. 20 DSGVO;
• Right to revoke consent given in accordance with Art. 7 Para. 3 GDPR;
• Right to lodge a complaint pursuant to Art. 77 GDPR.

7.2  RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR MAIN LEGITIMATE INTEREST, YOU HAVE THE EVERY TIME TO PROCESS YOUR PERSONAL DATA ON THE BASIS OF A CONSIDERATION OF YOUR SPECIFIC SITUATION.
IF YOU MAKE USE OF YOUR RIGHT TO OBJECT, WE WILL END THE PROCESSING OF THE DATA AFFECTED. FURTHER PROCESSING IS RESERVED IF WE CAN PROVE COMPULSORY REASONS FOR THE PROCESSING, THAT OUTSIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING OR EXPRESSION OF THE EXPRESSION APPLIES.

IF YOUR PERSONAL DATA ARE PROCESSED BY US FOR DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA FOR THE PURPOSE OF SUCH ADVERTISING. YOU CAN OBJECT AS DESCRIBED ABOVE.

IF YOU MAKE USE OF YOUR RIGHT TO OBJECT, WE WILL END THE PROCESSING OF THE DATA CONCERNED FOR DIRECT ADVERTISING PURPOSES.

8) Duration of storage of personal data

The duration of the storage of personal data is based on the respective legal basis, the processing purpose and – if relevant – additionally based on the respective statutory retention period (e.g. commercial and tax retention periods).

When processing personal data on the basis of express consent in accordance with Art. 6 Para. 1 lit. a GDPR, this data is stored until the person concerned revokes his consent.

Are there statutory retention periods for data that are required within the framework of legal or similar obligations on the basis of Art. 6 Para. 1 lit. b GDPR are processed, this data is routinely deleted after the retention period has expired, provided that it is no longer required for contract fulfillment or contract initiation and / or we have no legitimate interest in further storage.

When processing personal data on the basis of Art. 6 Para. 1 lit. f GDPR, this data is stored until the person concerned exercises his right of objection in accordance with Art. 21 Para. 1 GDPR, unless we can demonstrate compelling legitimate reasons for the processing that outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.

When processing personal data for the purpose of direct advertising on the basis of Art. 6 Para. 1 lit. f GDPR, this data is stored until the person concerned exercises his right of objection in accordance with Art. 21 Para. 2 GDPR.

Unless otherwise stated in the other information in this declaration about specific processing situations, stored personal data will otherwise be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.