Privacy policy

Responsible: Oliver Andel | info@olan-galerie.com

1. Basic information on data processing and legal bases

1.1. This Privacy Policy sets out to clarify the nature, scope and purpose of the processing of personal information within our online offering and the related websites, features and content (collectively referred to as “online offer” or “website”). The privacy policy applies regardless of the domains, systems, platforms, and devices (such as desktop or mobile) on which the online offering is being run.

1.2. The terms used, such as “Personal data” or their “processing”, we refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR).

The personal data of users processed in the context of this online offer includes usage data (e.g., the visited web pages of our online offering) and content data (e.g., entries in the contact form).

1.3. The term “user” covers all categories of persons affected by data processing. These include our business partners, customers, interested parties and other visitors to our online offer. The terms used such as “Users” are to be understood gender-neutral.

1.4. We process personal data of users only in compliance with the relevant data protection regulations. This means that users’ data will only be processed if there is a legal permit. That is, especially if the data processing for the provision of our contractual services (e.g. processing of orders) as well as online services required or required by law, the consent of the user exists, as well as our legitimate interests i.e. interest in the analysis, optimization and economic operation and security of our online offer within the meaning of Art. 6 (1) lit. GDPR, in particular in the range measurement, creation of profiles for advertising and marketing purposes as well as collection of access data and use of third-party services.

1.5. Please note that the legal basis of the consents Art. 6 para. 1 lit. a. and Art. 7 GDPR, the legal basis for the processing for the performance of our services and the performance of contractual measures Art. 6 para. 1 lit. b. GDPR, the legal basis for processing in order to fulfill our legal obligations Art. 6 para. 1 lit.c. GDPR, and the legal basis for processing in order to safeguard our legitimate interests Art. 6 para. 1 lit. f. GDPR is.

2. Safety measures

2.1. We take organizational, contractual and technical security measures in accordance with the state of the art to ensure that the provisions of data protection laws are adhered to and in order to protect the data processed by us against accidental or intentional manipulation, loss, destruction or against access by unauthorized persons. One of the security measures is the encrypted transfer of data between your browser and our server.

3. Disclosure of data to third parties and third party providers

3.1. A transfer of data to third parties is only within the scope of legal requirements. We only pass on the data of the users to third parties if, for example, based on Art. 6 para. 1 lit. b) GDPR is required for contract purposes or based on legitimate interests in accordance with Art. Art. 6 para. 1 lit. f. GDPR on the economical and effective operation of our business operations.

3.2. If we use subcontractors to provide our services, we will take appropriate legal precautions and appropriate technical and organizational measures to protect personal data in accordance with applicable law.

3.3. If, within the framework of this Privacy Policy, content, tools or other means are used by other providers (collectively referred to as “third party providers”) and their registered office is located in a third country, it is to be assumed that data will be transferred to the countries of residence of the third party providers. Third countries are countries in which the GDPR is not a directly applicable law, i.e. basically countries outside the EU or the European Economic Area. The transfer of data to third countries occurs either when there is an adequate level of data protection, user consent or other legal authorization.

4. Contact

4.1. When contacting us (via contact form or e-mail), the information provided by the user to process the contact request and its processing acc. Art. 6 para. 1 lit. b) GDPR processed.

5. Comments and posts

5.1. If users leave comments or other contributions, their IP addresses are based on our legitimate interests within the meaning of Art. 6 para. 1 lit. f. GDPR stored for 7 days.

5.2. This is for our own safety, if someone leaves illegal content in comments and contributions (insults, prohibited political propaganda, etc.). In this case, we ourselves can be prosecuted for the comment or post and are therefore interested in the identity of the author.

6. Collection of access data and log files

6.1. Based on our legitimate interests within the meaning of Art. 6 para. 1 lit. f. GDPR Data on every access to the server on which this service is located (so-called server log files). The access data includes name of the retrieved web page, file, date and time of retrieval, amount of data transferred, message about successful retrieval, browser type and version, the user’s operating system, referrer URL (the previously visited page), IP address and the requesting provider.

6.2. Logfile information is stored for security purposes (for example, to investigate abusive or fraudulent activities) for a maximum of seven days and then deleted. Data whose further retention is required for evidential purposes shall be exempted from the cancellation until final clarification of the incident.

7. Cookies & Audience Reach Measurement

7.1. Cookies are information transmitted from our web server or third-party web servers to users’ web browsers and stored there for later retrieval. Cookies can be small files or other types of information storage.

7.2. We use “session cookies” that are only stored for the duration of the current visit to our online presence (for example, to enable the storage of your login status or the shopping cart function and thus the use of our online offer at all). In a session cookie, a randomly generated unique identification number is stored, a so-called session ID. In addition, a cookie contains information about its origin and the retention period. These cookies cannot save any other data. Session cookies will be deleted if you have finished using our online offer and when you have for example logged out or closed the browser.

7.3. The use of cookies in the context of pseudonymous range measurement informs users in the context of this privacy policy.

7.4. If users do not want cookies stored on their computer, they will be asked to disable the option in their browser’s system settings. Saved cookies can be deleted in the system settings of the browser. The exclusion of cookies can lead to functional restrictions of this online offer.

7.5. You may opt for the use of cookies for audience reach measurements and promotional purposes through the Network Advertising Initiative’s opt-out page (http://optout.networkadvertising.org/) and the US website (http://www.aboutads.info/choices ) or the European website (http://www.youronlinechoices.com/uk/your-ad-choices/).

8. Integration of services and contents of third parties

8.1. Based on our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 (1) lit. GDPR), we make use of content or services offered by third-party providers in order to provide their content and services , such as Include videos or fonts (collectively referred to as “content”). This always presupposes that the third-party providers of this content perceive the IP address of the users, since they could not send the content to their browser without the IP address. The IP address is therefore required for the presentation of this content. We endeavor to use only content whose respective providers use the IP address solely for the delivery of the content.

Third parties may also use so-called pixel tags (invisible graphics, also referred to as “web beacons”) for statistical or marketing purposes. The “pixel tags” can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user’s device and may include, but is not limited to, technical information about the browser and operating system, referring web sites, visit time, and other information regarding the use of our online offer.

8.2. The following presentation provides an overview of third-party providers as well as their contents, as well as links to their data protection statements, which contain further information on the processing of data and, for already mentioned here, contradictory possibilities (so-called opt-out) contain:

Cookie Notice Plugin "Cookie Consent by Insites" by Silktide Ltd., The integration of Cookie Consent is done by a server call on Cloudflare, Inc, https://www.cloudflare.com/ (usually in the US). Privacy: https://www.cloudflare.com/security-policy/.

9. Rights of users

9.1. Users have the right, upon request, to receive information free of charge about the personal data that we have stored about them.

9.2. In addition, Users shall have the right to correct inaccurate data, limit the processing and deletion of their personal data, if applicable, assert their rights to data portability and, in the event of unlawful processing, file a complaint with the appropriate regulatory authority.

9.3. Likewise, users can revoke consent, generally with implications for the future.

10. Deletion of data

10.1. The data stored with us are deleted as soon as they are no longer necessary for their purpose and the deletion does not conflict with any statutory storage requirements. Unless the users’ data are deleted because they are required for other and legally permitted purposes, their processing will be restricted. This means that the data is blocked and not processed for other purposes. This applies, for example for data of users who must be kept for commercial or tax reasons.

10.2. According to legal requirements, storage takes place for 6 years in accordance with § 257 (1) HGB/=Commercial Code (trading books, inventories, opening balance sheets, annual accounts, trade letters, accounting documents, etc.) and for 10 years pursuant to § 147 (1) AO (books, records, management reports, Accounting documents, commercial and business letters, documents relevant for taxation, etc.).

11. Right of objection

Users may object to the processing of their personal data in accordance with legal requirements at any time. The objection may in particular be made against processing for direct marketing purposes.

12. Changes to the privacy policy

12.1. We reserve the right to change the privacy policy in order to adapt it to changed legal situations, or to changes in the service and data processing. However, this only applies to declarations of data processing. If users’ consent is required or elements of the privacy policy contain provisions of the contractual relationship with the users, the changes will only be made with the consent of the users.

12.2. Users are requested to inform themselves regularly about the content of the privacy policy.