1. Introduction
The use of this website may involve the processing of personal data. In order to make these processing operations comprehensible to you, we would like to provide you with an overview of these processing operations in the following information. To ensure fair processing, we would also like to inform you about your rights under the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
2. Name and Contact Details of the Responsible Person
If you have any questions or suggestions regarding this information, or if you would like to contact us about asserting your rights, please direct your inquiry to:
Stella Digital Creations – Marija Peković Heckert
Marta-Schanzenbach-Weg 3
77694 Kehl
E-mail: office@stelladigitalcreations.com
Phone number: +49 151 423 905 74
3. General information on data processing, legal basis and storage period
3.1 General information on data processing
We process personal data in compliance with the relevant data protection regulations, in particular the GDPR and the BDSG. Data processing by us only takes place on the basis of legal permission. When you use this website, we process personal data only with your consent (Art. 6 (1) a) GDPR), for the performance of a contract to which you are a party, or at your request for the performance of pre-contractual measures (Art. 6 (1) b) GDPR), for compliance with a legal obligation (Art. 6(1)(c) GDPR) or if the processing is necessary to protect our legitimate interests or the legitimate interests of a third party, unless your interests or fundamental rights and freedoms which require the protection of personal data override (Art. 6(1)(f) GDPR).
3.2 Storage Period
Unless otherwise stated in the following notes, we only store the data for as long as is necessary to achieve the processing purpose or to fulfil our contractual or legal obligations. Such legal retention obligations may arise in particular from commercial or tax law regulations.
3.3 Automated data processing of the server
3.3.1 Processing of server log files
During the purely informative use of our website, general information that your browser transmits to our server is initially stored automatically (i.e. not via registration). This includes by default: browser type/version, operating system used, page accessed, the previously visited page (referrer URL), IP address, date and time of the server request and HTTP status code. The processing is carried out to protect our legitimate interests and is based on the legal basis of Art. 6 (1) (f) GDPR. This processing serves the technical administration and security of the website. The stored data is deleted unless there is a justified suspicion of unlawful use based on concrete indications and further examination and processing of the information is necessary for this reason.
3.3.2 Processing of information submitted by users
Users have the option of sending us data via the forms provided on our website. These were created with the contact form provider Jotform (Jotform Inc) and hosted on its servers. They are embedded as external content on our website. However, explicit consent (opt-in) is required for this. In the event that website users do not consent to this, the corresponding content will be blocked. For data processing through user information, a distinction must be made between two forms of contact forms that we offer on this website.
3.3.2.1 Contact Form
Users have the option of contacting us via a contact form. The data provided will be stored by Jotform Inc. on European servers in Frankfurt a.M. (Germany). The user retains the ownership rights to the data provided. All user data provided there is furthermore encrypted and can only be viewed by Stella Digital Creations via a key generated specifically for this purpose. This data will not be passed on to third parties. All data sent via the contact form will be automatically deleted after 12 months at the latest, unless otherwise required by law (e.g. commercial and tax law requirements). For all such personal data that is not subject to such legal regulations, the user can also contact us individually to have the personal data deleted. For further information, see www.jotform.com/privacy. Before sending the data, the user must accept our data protection policies.
3.3.2.2 Order forms in the context of our services “EasyTranslate”, “TranslateNow!”, “TranslateNow!+”, “EasyProofread”, “ProofreadNow!”, “ProofreadNow!+”
In order to make use of our above-mentioned instant services, the user must enter the required data in the corresponding form. The data provided will be stored by Jotform Inc. on European servers in Frankfurt a.M. (Germany). The user retains the ownership rights to the data provided. All user data provided there is also encrypted and can initially only be viewed by Stella Digital Creations via a key generated specifically for this purpose.
PayPal
Such data provided via the JotForm form that is relevant for invoicing (name/company, address, tax identification numbers if applicable, e-mail address, order scope and price, etc. of the service recipient) is manually forwarded by Stella Digital Creations to our payment service provider PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A.), which we have commissioned for payment processing, on the legal basis of Art. 6 (1) lit. b GDPR. These are also stored by PayPal. On this basis, invoices are created via the tools and services of the aforementioned payment service provider, transmitted to the service recipient and payments are managed. Only the data protection provisions and general terms and conditions of PayPal (Europe) S.à r.l. et Cie, S.C.A. apply here.
Why does PayPal store personal data?
PayPal stores personal data when it is necessary to comply with our legal or regulatory obligations and for business reasons. PayPal stores personal data for longer periods than required by law when it is in PayPal’s legitimate business interest to do so and is not prohibited by law. When closing a PayPal account, PayPal may take steps to mask personal data and other information. However, PayPal reserves the right to retain and access the data for as long as necessary to comply with applicable law. The use and disclosure of such personal data will continue to be in accordance with PayPal’s Privacy Policy.
We do not collect any data ourselves regarding your payment methods (e.g. credit card numbers, etc.). Such data is collected directly by PayPal and processed solely on PayPal’s terms.
For more information, please consult PayPal’s privacy policy.
All data is automatically deleted from the JotForm servers after 12 months. This implies that all data not directly relevant to billing will also be automatically deleted after 12 months. Users can request the deletion of such data at any time.
Those data that are directly related to invoicing and have therefore been passed on to PayPal are stored and managed in compliance with the legal (especially commercial and tax) provisions by Stella Digital Creations within the framework of the services and tools provided by PayPal. The use of this data by PayPal beyond this is regulated in PayPal’s privacy policy.
Before submitting the data within the framework of the forms belonging to the above-mentioned services, the user must agree to the data transfer to JotForm and PayPal, as regulated in these data protection provisions. It is not possible to use the above-mentioned services without consenting to the data transfer to JotForm or PayPal.
4. Cookies
We use cookies on our website. Cookies are small text files that are stored by your browser when you visit a website. This identifies the browser used and can be recognised by our web server. In particular, we use permanent cookies (“persistent cookies”) to analyse our website. These cookies are automatically deleted after a specified period of time, which may vary depending on the cookie. If this use of cookies results in the processing of personal data, this is based on the legal basis of Art. 6 (1) f) GDPR. This processing serves our legitimate interest in making our website more user-friendly, effective and secure. You can delete the cookies in the security settings of your browser at any time. You can generally object to the use of cookies through your browser settings.
Website Tracking Providers
Jetpack Site Stats is a service for creating detailed statistics about user behaviour on the website. No cookies in the technical sense are placed on the user or client, but technical and personal data such as the IP address is transmitted from the client to the service provider’s server to enable the use of the service. This information can be used to track the user on this website and to link the collected data of multiple page views on this website.
Social Plug-ins
WordPress Emoji is an emoji set loaded from wordpress.org. No cookies in the technical sense are set on the customer or user, but technical and personal data such as the IP address are transmitted from the user to the service provider’s server to enable the use of the service.
WordPress Comments
WordPress Comments: WordPress as a content management system offers the possibility to write comments under blog posts and similar content. The cookie stores the name, email address and website of a commenter in order to display them again if the commenter wants to write another comment on this website (currently not in use).
Third party content
JotForm: JotForm is a tool that can be used to create contact forms in a GDPR compliant manner. However, while you can contact Stella Digital Creations by other means (post, email, telephone), the use of JotForms content is required in order to access the services mentioned in point 3.3.2.2 above. JotForm collects and stores the form responses you submit, in some cases using third party providers such as Amazon Web Services or Google Cloud, on behalf of Stella Digital Creations. However, all data is stored and encrypted on servers within the European Union in a GDPR compliant manner. The user retains ownership of the data and Stella Digital Creations manages the data provided. Only Stella Digital Creations can access the data provided via the personal key. Stella Digital Creations automatically deletes all submitted data after 12 months, with the exception of those data that are directly required for invoicing purposes. These will be kept in accordance with German law. You can also demand Stella Digital Creations at any time to request the deletion of data that is not affected by specific legal provisions. For further information, please consult the data protection provisions of JotForm. In the context of the use of the services mentioned under point 3.3.2.2, certain data relevant to invoicing will be passed on to our payment service provider PayPal. For further information, please consult point 3.3.2.2 of this privacy policy.
5. Rights of the data subjects, right of appeal
5.1 Your rights
As a data subject, you have the right to assert your data subject rights against us. In particular, you have the following rights:
- In accordance with Art.15 GDPR and § 34 BDSG, you have the right to request information about whether and, if so, to what extent we are processing personal data relating to you or not.
- You have the right to demand that we correct your data in accordance with Art. 16 GDPR.
- You have the right to demand that we delete your personal data in accordance with Art. 17 GDPR and § 35 BDSG.
- You have the right to have the processing of your personal data restricted in accordance with Art. 18 GDPR.
- You have the right, in accordance with Article 20 of the GDPR, to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format and to transfer this data to another controller.
- In accordance with Art. 21(1) GDPR, you have the right to object to any processing based on the legal basis of Art. 6(1)(e) or (f) G. DPRIf we process personal data about you for the purpose of direct marketing, you may object to this processing pursuant to Article 21 (2) and (3) of the GDPR.
If you have given us separate consent for data processing, you may revoke this consent at any time in accordance with Art. 7 (3) GDPR. Such a revocation does not affect the lawfulness of the processing that was carried out on the basis of the consent until the revocation.
5.2 Complaint to a supervisory authority
If you are of the opinion that a processing of personal data concerning you violates the provisions of the GDPR, you have the right to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR.