Data privacy

We, SCH Fashiondesign GmbH & Co. KG, inform you with this data privacy statement about which personal data is collected, processed and used in the context of our online offering when you use our website and the services we offer. We also inform you about the rights to which you are entitled and the technical and organisational measures we have taken to protect your personal data.

1. Responsible party
The controller for data processing within the meaning of the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG) is

SCH Fashiondesign GmbH & Co. KG
Heerdter Sandberg 32
40549 Duesseldorf
Telephone: +49 (0)211 40 58 180
E-mail: info@steffenschraut.com

2. Data processing
The way in which we process your personal data depends on whether you only access our website to obtain information about us and our products, or whether you make use of the offers that necessitate the provision of further data, such as the contact options on the website and our newsletter subscription service.

2.1 Data processing when you visit our website

Every time you access our website, we collect the following information about your computer:
• Referrer URL, i.e. the website you visited before our website
• Requested website or file
• Browser type and version
• Operating system
• Device type
• Time of access
• IP address in anonymized form to determine the access location.

Your computer’s IP address is only stored for the duration of your visit to the website. It is then immediately erased or anonymized by way of abbreviation.

2.2 Data processing when you subscribe to our newsletter

You can subscribe to our newsletter on the website. The newsletter is only sent to your email address with your express consent. You will need to provide your email address to subscribe. The newsletter will not be sent to you until you have entered your email address in the registration form on our website and clicked on the link contained in the subsequent notification email, thereby confirming your identity and your intent to activate the newsletter service.
To send the newsletter to you, we store your email address as well as the date and time of your subscription. We also store data about your interaction with our newsletter.
You can unsubscribe from the newsletter at any time via the link that is provided in each newsletter. Alternatively, you can send an email to info@steffenschraut.com.
In this case, we will store your unsubscription notice to prevent any more newsletters being sent to you.
We store your data for as long as it is required for the intended purpose.

2.3 Data processing when you contact us

When you contact us via our website, we collect and store your email address and, if applicable, the other contact details that you provide to us in the course of our communication, such as your landline or cell phone number or your address. We also store the content of the initial communication and any further communications.

We store this data for the duration of the response to your inquiries and then erase it if and to the extent that there are no legal retention periods to be complied with. In this case, we restrict data processing after the end of communication and erase the data when the retention periods have expired.

3. Data processing purposes

We process your personal data for the following purposes:

3.1 Website use

We use the data collected during your visit to our website for the operation of our website, in particular to make the website accessible, to detect and eliminate any technical problems or errors that may occur, to monitor website traffic, to adapt or improve the user experience, and to prevent and, if necessary, prosecute the misuse of our website.

3.2 Newsletter subscription

We use the data collected, stored and processed in conjunction with a newsletter subscription to send the newsletter to you and, if you revoke your consent, to stop sending the newsletter to you.

3.3 Contacting us/ responding to inquiries

We use the data collected by us when you contact us to answer your inquiries until the end of our correspondence.

4. Legal bases

The data is processed in accordance with the following legal bases:

4.1 Website use

The legal basis for the processing of data collected and processed when you visit our website is Art. 6 (1) f) GDPR in conjunction with our legitimate interest in the provision, improvement, stability and security of our website.

4.2 Newsletter subscriptions

The legal basis for storing your data in the context of newsletter subscriptions is, on the one hand, your consent to the newsletter being sent in accordance with Art. 6 (1) a) GDPR and, on the other hand, our legitimate interest in accordance with Art. 6 (1) f) GDPR in preventing misuse and ensuring that no more newsletters are sent to you after you unsubscribe.

4.3 Contacting us/ responding to inquiries

The legal basis for the processing of your data is our legitimate interest in responding to your inquiries as defined in Art. 6 (1) f) GDPR.

5. Information about cookies and targeting/ consent management tool

5.1 General information

We use cookies to collect and store information about your use of our website. These are small text files that are placed on your computer which store settings and data that are shared with our system via your browser. A cookie will usually contain the name of the domain from which the cookie data were sent, as well as information on the age of the cookie and an alphanumeric identifier. Cookies help our systems to recognize the user’s device and make any default settings immediately available.
You can use our website without cookies. Most Web browsers are configured to automatically accept cookies. However, you can deactivate this feature in your browser settings. You can use your browser’s help functions for this. Please remember that you may not be able to use all the functions of this website to their full extent if you change your browser settings to prevent cookies from being saved.

5.2 Cookies used

We only use cookies on our website if your browser settings allow cookies and you consent to the use of cookies before visiting the website.

In this case, the following cookies are used:

borlabs cookies to store the user settings selected in the Borlabs Cookie Box. These cookies are stored for one year.

WPML Cookie – _icl_*,wp-wpml_* to store the current site language. These cookies are deleted after one day.

5.3 Consent management tool

We use WordPress as our consent management tool and Borlabs Cookie for cookie management.

6. Data security

Your personal data will be processed exclusively in data centers located in Germany, unless otherwise stated in this privacy policy.
We safeguard our website and systems against the loss, destruction, access, modification and dissemination of your data by unauthorized persons by way of appropriate technical and organizational measures. In particular, we transmit your personal data in encrypted form using the TLS (Transport Layer Security) coding system. TLS is a common and secure standard for encrypted data transmission. Our security technology is regularly optimized and upgraded to reflect the state-of-the-art.

7. Transfer of your personal data

We have engaged the IT service provider Ionos to host and operate our website on the basis of a data processing contract as referred to in Art. 28 (3) GDPR.
Otherwise, we do not transfer your personal data to third parties, unless you have consented to the transfer of your data or we are entitled or required by law or in connection with a court order or official regulation to transfer the data. This may include, in particular, the disclosure of information for law enforcement purposes, to prevent threats or to enforce intellectual property rights.

8. Third party websites and data privacy

Our website contains links to third party websites. We have no influence over the content of such linked external websites and therefore assume no responsibility or warranty for third party website content and/or the data protection regulations applicable to such websites. The providers or operators of these websites are responsible for their content.
In addition, our website contains links to the social media platforms Meta and Instagram, Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. You will only be redirected to these platforms’ services if you click on the links. Only then will your data be sent to the respective providers. No information is exchanged between you and the platform providers unless you click on the links. Further information about how these platforms collect and use your personal data can be found in the providers’ terms of use, privacy policies and cookie notices.
For that reason, please read the third party providers’ privacy policies before transferring personal data to these websites.

9. Amendments to this privacy policy

We reserve the right to amend this privacy policy at any time with future effect. The latest version is always published on the website. Please visit the website regularly to review the current privacy policy.

10. Your rights and contact options

You have the following rights with regard to the processing of your personal data:

10.1 Revocation of consent to data processing

If and to the extent that you have given us consent for certain data processing operations, you can revoke this consent at any time in accordance with Art. 7 (3) GDPR. All you need to do is send an informal message to us by email. The legality of the data processing up to the revocation remains unaffected by the revocation.

10.2 Right to obtain information

You have the right under Art. 15 GDPR to obtain information from us about the personal data concerning you that we process.

10.3 Rectification, erasure, restriction of processing

You also have the right under Art. 16 GDPR to have your personal data rectified in the event of errors or to have it erased or to have the processing of the data restricted if and to the extent it is no longer required, Art. 17 and 18 GDPR.

10.4 Data portability

You have the right to request us to send the personal data concerning you, which you have provided to us in the context of a contractual relationship, in a structured, commonly used, machine-readable and interoperable format, if you have provided the data with your consent or if the processing of this data is necessary for the performance of the contract or if the processing is carried out by automated means. This does not apply if we process the data because we are legally required to do so.

10.5 Right to object

Under Art. 21 (1) GDPR you have the right to object, on grounds relating to your particular situation, to our processing of personal data concerning you in connection a legitimate interest of ours. In this case, we will no longer process the data for this purpose, unless our interests in such processing take precedence over your interests and rights, or the processing is required for the establishment, exercise or defense of legal claims or a longer retention period is mandatory by law. In these cases, the processing of your personal data is restricted and it will be erased in accordance with data protection regulations after the retention periods have expired or a legal dispute has been finally and conclusively resolved.

If you object to the processing of data for the purpose of direct marketing, we will stop the processing immediately. In this case, it is not necessary to specify a particular situation.

10.6 Asserting your rights

You can assert your aforementioned rights directly against us as the controller using the contact details provided at the beginning of this document.

11. Right to lodge a complaint

Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data. You can contact the supervisory authority that is responsible for your region or our region.
The data protection supervisory authority responsible for us is:

NRW Westphalian State Commissioner for Data Protection and Freedom of Information
Kavalleriestr. 2-4
40213 Duesseldorf
Tel.: +49 (0)221 38424-0
Fax: + 49 (0)211 38424-999
Email: poststelle@ldi.nrw.d