1. Data Protection at a Glance

General Notes

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified. Detailed information on data protection can be found in our privacy policy set out below.

Data Collection on this Website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. Their contact details can be found under “Note on the Responsible Body” in this privacy policy.

How do we collect your data?

On the one hand, your data is collected when you provide it to us (e.g. via a contact form). Other data is collected automatically or with your consent when you visit the website by our IT systems. This is mainly technical data (e.g. browser, operating system, time of access). This collection happens automatically when you enter the site.

What do we use your data for?

Some of the data is collected to ensure error-free provision of the website. Other data may be used to analyze user behavior.

What rights do you have regarding your data?

You have the right to obtain, free of charge, information at any time about the origin, recipients, and purpose of your stored personal data. You also have the right to request the rectification or deletion of this data. If you have given consent to data processing, you may revoke this consent at any time for the future. You also have the right to request restriction of processing in certain circumstances, and you may lodge a complaint with the competent supervisory authority. For further questions on data protection you can contact us at any time.

2. Hosting

External Hosting

This website is hosted by an external service provider (host). Personal data collected on this website is stored on the servers of the host. This may include, in particular, IP addresses, contact requests, meta and communication data, contract data, contact details, names, website access, and other data generated via a website.

Use of the host is for the purpose of fulfilling contractual obligations with potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of a secure, fast, and efficient provision of our online offering by a professional provider (Art. 6(1)(f) GDPR). Where consent has been requested, processing is carried out solely on the basis of Art. 6(1)(a) GDPR and §25(1) TTDSG, insofar as consent covers storage of cookies or access to information on the user’s device. Consent can be withdrawn at any time.

Our host will only process your data to the extent necessary to fulfill its performance obligations and follow our instructions regarding this data.

We use the following host: Squarespace

3. General Notes and Mandatory Information

Data Protection

The operators of this website take the protection of your personal data very seriously. We treat your data confidentially and in accordance with statutory data protection regulations and this privacy policy.

When you use this website, various personal data are collected. Personal data is data that can personally identify you. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this happens.

We note that data transmission on the Internet (e.g. communication by email) may have security gaps. Complete protection of data from access by third parties is not possible.

Note on the Responsible Body

The responsible body for data processing on this website is:

Jeehye Song
Ackerstr. 197
40233 Düsseldorf
Email: jeehyesong.atelier@gmail.com

The responsible body is the natural or legal person who alone or jointly decides on the purposes and means of processing personal data (e.g. names, email addresses, etc.).

Storage Duration

Unless a more specific retention period is specified in this privacy policy, your personal data will remain with us until the purpose for processing ceases. If you request deletion or revoke consent, your data will be deleted unless there are other legally permissible grounds for storage (e.g. retention obligations under tax or commercial law).

Legal Basis for Data Processing

If you have consented, we process your data on the basis of Art. 6(1)(a) GDPR (and Art. 9(2)(a) GDPR for special categories of data). For express consent to transfer to third countries, processing is on Art. 49(1)(a) GDPR. For cookies/device information: §25(1) TTDSG.

Contract performance/pre-contract measures: Art. 6(1)(b) GDPR.

Legal obligations: Art. 6(1)(c) GDPR.

Legitimate interest: Art. 6(1)(f) GDPR.

Transfer to the USA and Third Countries

We use tools from providers based in the USA or other third countries. When active, your personal data may be transferred there. We cannot guarantee EU-comparable data protection in such countries. For example, US companies are required to hand over personal data to authorities. We have no influence over such processing.

Revocation of Consent

You may revoke your consent at any time. The legality of data processing prior to revocation remains unaffected.

Right to Object under Art. 21 GDPR

You may object to processing based on Art. 6(1)(e/f) GDPR at any time on grounds arising from your particular situation. If we process data for direct marketing, you may object at any time; in this case your data will no longer be used for such purposes.

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority in the EU.

Right to Data Portability

You have the right to receive data you provided to us in a machine-readable format and to request transfer to another controller, where technically feasible.

SSL/TLS Encryption

This site uses SSL/TLS encryption for security. You can recognize an encrypted connection by the browser address bar (“https://”) and lock symbol.

Right of Access, Deletion, Rectification

Within applicable law, you may request information about your stored data, its origin, recipients, purpose of processing, and rectification or deletion.

Right to Restriction of Processing

You may request restriction of processing under certain conditions (e.g. while accuracy is being verified, if processing is unlawful, or pending resolution of an objection).

Objection to Marketing Emails

We hereby object to the use of contact details published under the imprint obligation for sending unsolicited advertising.

4. Data Collection on this Website

Contact Form

If you send us inquiries via the contact form, the information you provide including your contact details will be stored to process your request and possible follow-up questions. We do not share this without your consent.

Processing is based on Art. 6(1)(b) GDPR if related to contract performance, otherwise on our legitimate interest (Art. 6(1)(f) GDPR) or your consent (Art. 6(1)(a) GDPR). Data remains until you request deletion, revoke consent, or the purpose ceases.

5. Social Media – Instagram

Functions of the service Instagram are embedded. Provider: Meta Platforms Ireland Ltd., Dublin.

If the element is active, a direct connection to Instagram servers is established. If logged in, Instagram can assign the visit to your account.

If consent is given: basis Art. 6(1)(a) GDPR/§25 TTDSG. Otherwise: Art. 6(1)(f) GDPR (interest in visibility).

We and Meta are joint controllers for data collection/transfer (Art. 26 GDPR). Agreement text: https://www.facebook.com/legal/controller_addendum.

Data transfer to the USA is based on EU Commission Standard Contractual Clauses. More info: https://help.instagram.com/519522125107875.

Instagram’s privacy policy: https://instagram.com/about/legal/privacy/.

6. Newsletter

If you wish to receive the newsletter, we require an email address and confirmation you are the owner. Data is used only for sending the requested information. Consent basis: Art. 6(1)(a) GDPR. You may revoke at any time (e.g. via “unsubscribe” link).

Stored until you unsubscribe. Addresses may be blacklisted to prevent future mailings.

Disclaimer

Liability for Content

As a service provider we are responsible under §7(1) TMG for own content. Under §§8–10 TMG we are not obliged to monitor transmitted/stored third-party info. Liability only from knowledge of unlawful activity. Upon notification, we remove such content immediately.

Liability for Links

Our site contains links to third-party websites. We have no influence on their content. Responsibility lies with the respective provider. At time of linking, no illegal content was evident. Permanent monitoring without concrete suspicion is unreasonable. On becoming aware of infringements, we will remove such links.

Copyright

Content on these pages is subject to German copyright law. Reproduction, editing, distribution outside copyright limits requires written consent. Downloads/copies permitted only for private, non-commercial use. Where content is not created by us, third-party copyrights are respected.

Source: https://www.e-recht24.de