PRIVACY POLICY

Data Protection Statement of www.saltymindss.com

Thank you for visiting our website and taking an interest in our company. We would like you to know that we take the protection of your personal data very seriously.
We process your data in compliance with the applicable legal specifications regarding the protection of personal data, in particular the EU General Data Protection Regulation (EU GDPR) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.
The purpose of this Data Protection Statement is to provide you with comprehensive information about the purposes for which we process your personal data, who we share it with, what rights you have in relation to that data and everything else we think it’s important for you to know.

1. What is personal data?
Personal data is any information that makes it possible to identify a living individual, directly or indirectly (including, but not limited to, your name, date of birth, address, phone number, email address as well as your IP address).

2. Who is the controller?
2.1. It is important that you understand who is responsible for keeping your data safe. Our company is the “controller” of all personal data collected and used for the purposes set out in this Privacy Policy. This means that we are responsible for deciding how and why your data is used and for ensuring that your data is handled legally and safely.

2.2. If you have questions on how data is processed in our company, please contact info@saltymindss.com

3. Categories of data

Which data we process is determined by the relative context.
More specifically:
3.1. We collect and process the following data when you visit our website:
1. The name of your internet service provider
2. Information about the website from which you reach our site
3. The web browser and operating system you are using
4. The IP address allocated by your internet service provider
5. The files requested, data volume transferred, and downloads/file export

3.2. We collect and process the following data when you submit a contact enquiry:
1. Name
2. Surname
3. Email address
4. Telephone number
5. Message

3.3. We collect and process the following data for newsletters:
1. Email address
2. Analytical data from the newsletter evaluation

3.4. When visiting our shop and buying our products, you are asked to fill out a contact form, giving us your consent to collect and process the following data:
1. Name
2. Surname
3. Address
4. Postal Code
5. Telephone Number
6. Email address
for marketing purposes, informing you of ongoing promotions and sending you greeting cards as a thank you for your interest in our company.

4. Sources and origin of data
4.1. Contact form (Art. 6 Para. 1 lit. a, b GDPR)
Our website contains a contact form that can be used to make contact electronically. If you write to us using the contact form, we process the personal data you provide in the contact form in order to make contact and respond to your questions and requests.
The principle of data economy and data reduction is taken into account here, in that you only need to provide the data that we need in order to make contact with you. This comprises your email address, first name, surname, subject, and the message field itself. In addition, your IP address is processed for reasons of technical necessity and legal safeguarding.
If you contact us by email, we will process the personal data you provide in the email purely for the purpose of processing your enquiry.

4.2. Newsletters (Art. 6 Para. 1 lit. a GDPR)
You can subscribe to a free-of-charge newsletter on our website. The email address provided during newsletter registration will be used for sending the personalized newsletter, promotional offers, press release, events etc. in order to improve your customer experience. To that end, we guarantee to not bombard your inbox with irrelevant emails and to offer as much of a customized content as possible.

The principle of data economy and data reduction is taken into account here, as only the email address is identified as a mandatory field. When you subscribe to the newsletter, your IP address will also be processed for reasons of technical necessity and legal safeguarding.
You may of course end your subscription at any time without stating any reason for doing so, using the unsubscribe option provided in the newsletter, or sending an email to info@saltymindss.com, thereby revoking your consent.
We will respond to this request within three working days.
4.3. Advertising purposes for existing customers (Art. 6 Para. 1 lit. f GDPR)
Our company is interested in maintaining its customer relationship with you, and sending you information and offers relating to our products/services (catalogues and newsletters, press release and events). We process your data for these reasons, in order to send you appropriate information and offers by email and telephone.

If you do not wish us to do so, you can object to the use of your personal data for the purposes of direct advertising at any time; this also applies for profiling in as far as it is associated with direct advertising. If you submit an objection, we will no longer process your data for this purpose.

The objection can be provided free-of-charge, in any form, and without stating reasons; you can submit your objection by emailing info@saltymindss.com, and we will respond to your request within three working days.

5. Your rights as a data subject
5.1. Firstly we would like to inform you of your rights as a data subject. These rights are standardized in Articles 15-22 of the European Union General Data Protection Regulation (GDPR).
This includes:
1. The right to access (Art. 15 GDPR)
2. The right to erasure (Art. 17 GDPR)
3. The right to rectification (Art. 16 GDPR)
4. The right to data portability (Art. 20 GDPR)
5. The right to restriction of processing (Art. 18 GDPR)
6. The right to object to processing (Art. 21 GDPR)

5.2. Your rights under data protection law are set out in detail below:

a. The right to access
You shall have the right to be informed and verify the legitimacy of the processing. So, you shall have the right to access the data collected and get additional information concerning its processing.

b. The right to erasure
You shall have the right to request the deletion of your personal data while we process it with your consent or in order to protect our legitimate interests. In all other cases (e.g. where there is a contract, an obligation required by law to process personal data, public interest), this right is subject to specific restrictions or ceases to exist as the case may be.

c. The right to rectification
You have the right to have any incorrect personal data corrected, updated, completed if it’s incomplete or amended, by contacting info@saltymindss.com.

d. The right to data portability
You shall have the right to receive your personal data free of charge in a format that allows you to access, use, and edit them with commonly used editing methods. You shall also have the right to ask us, if technically feasible, to transfer the data directly to another controller. This right applies for the data you have provided to us and its processing is carried out by automated means based on your consent or the enforcement of a relevant contract.

e. The right to restriction of processing
You shall have the right to obtain from the controller restriction of processing where one of the following applies: (a) when you contest the accuracy of the personal data, for a period enabling the controller to verify the accuracy of the personal data; (b) when you oppose the erasure of the personal data and request the restriction of their use instead; (c) when your personal data are no longer required for the purposes of processing, but they are required for the establishment, exercise or defence of legal claims; (d) when you object to processing pending the verification whether the legitimate grounds concerning the controller override those of you.

f. The right to object to processing:
You shall have the right to object at any time to the processing of your personal data where, as described above, it is necessary for the purposes of legitimate interests we seek as controllers, as well as for processing for direct marketing and consumer profile training.
In the context of rights to object, please note the following:
In the event that we process your data for the purpose of legitimate interests, you may at any time object to this processing on grounds relating to your particular situation; this also applies for any profiling supported by these provisions.
We will then no longer process your personal data unless we are able to demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if processing services the establishment, exercise or defence of legal claims.
If we process your personal data for the purpose of direct advertising, you have the right to object to this data processing at any time without stating reasons. The same also applies for any profiling insofar as it is associated with the direct advertising.
If you object to processing for the purposes of direct advertising, we will no longer process your personal data for these purposes. Making an objection is free of charge and can be done via submission to info@saltymindss.com and we will process your request within three working days.

g. The right to revoke consent
When processing is based on consent, you have the right to withdraw your consent freely. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
—————————————————————————————————————-
In order to assert these rights, please contact info@saltymindss.com. The same applies if you have questions on how data is processed in our company.
You are also entitled to lodge complaints with a supervisory authority for data protection.

6. Purposes and legal bases of data processing
When processing your personal data, the provisions of GDPR and all other applicable data protection law are complied with. The legal basis for data processing arises in particular from Art. 6, GDPR.

We use your data for initiating business; fulfilling contractual and legal obligations; implementing the contractual relationship; offering products and services; and strengthening the customer relationship, which may also include analysis for the purpose of marketing and direct advertising.
Your consent also represents a permission instruction under data protection law. We hereby inform you of the purposes of data processing and your right to object.

7. Disclosure to third parties / data recipients
7.1. We will only disclose your data to third parties in the framework of legal provisions or in the event of corresponding consent. Otherwise we will not disclose your data to third parties unless we are required to do so due to compulsory legal stipulations (disclosure to external bodies such as supervisory authorities or law enforcement authorities).

7.2. Within our company, we ensure that only individuals who require your data to fulfill contractual and legal obligations receive access to that data.

7.3. In many cases, service providers support our departments in performing their tasks. In these cases our company remains the data controller instructing the purpose and ends to which the service providers can process the data. The necessary data protection contracts have been concluded with all service providers, in order to ensure that data processing is conducted within the legal framework and that every natural person can freely exercise the rights he/she is entitled to.

8. Storage time
For marketing purposes, your personal data is retained until your consent is withdrawn. This can be done by you at any time. Withdrawal of consent does not affect the legality of consent-based processing in the period before its revocation.

9. Secure transfer of your data
We implement appropriate technical and organizational measures for the best possible protection of the data we store against accidental or deliberate manipulation, loss, destruction, or access by unauthorized individuals. Data exchange from and to our web server is encrypted in every case.

In any event, the way the internet functions and the fact that it is accessible to anyone cannot assure that unauthorized third parties will never be able to violate the applicable technical and organizational measures by gaining access to personal data and possibly using these for unauthorized and/or unlawful purposes.

10. Profiling
The term “profiling” implies an automated form of processing carried out on personal data in order to evaluate certain personal aspects of a natural person, in particular to analyze or predict aspects concerning that natural person’s behavior, personal preferences, location or movements.

We would like to inform you that profiling can occur for marketing purposes on the basis of your consent to receiving our newsletters concerning our services and offers, in order for us to create personalized content adapted to your preferences and interests.

11. Links to other providers
Our website might also – clearly and identifiably – include links to websites operated by other companies. Where links to other providers’ websites are provided, we have no influence over their content. For this reason, no guarantee can be provided and no liability can be accepted for this content. The respective provider or operator of the relevant pages is responsible for the content of these pages.

At the time that the link is placed, the linked pages are checked for possible legal violations and identifiable infringements of the law. No legal content was identifiable at the time that the link was placed. However, constant monitoring of the content of the linked pages is unreasonable without specific indication of an infringement of the law. In the event of infringements of the law becoming known, links of this type will be removed without delay.