PRIVACY POLICY

1. Data Controller

The Data Controller within the meaning of the General Data Protection Regulation (GDPR) is:

RediShade Europe
Pavlo Smirnov
Fürstenbergallee 8
76532 Baden-Baden
Germany
E-Mail: pavel@redishade.eu

2. General Information on Data Processing

We process personal data exclusively in accordance with the General Data Protection Regulation (GDPR) and the German Telecommunications-Digital Services Data Protection Act (TDDDG).
Personal data means any information relating to an identified or identifiable natural person.
Data Processing is carried out only to the extent necessary to provide a functional website and our content and services.

3. Hosting

Our website is hosted by Wix.com.
Provider:
Wix.com Ltd.
Nemal St. 40
6350671 Tel Aviv
Israel

Wix may store data in data centers located in the EU, Israel, or the United States.
For Israel, an adequacy decision of the European Commission pursuant to Art. 45 GDPR is in place.
If personal data is transferred to the United States, such transfer is based on the EU–US Data Privacy Framework (DPF), provided that the data recipient is appropriately certified, or on the basis of the Standard Contractual Clauses (SCCs) of the European Commission pursuant to Art. 46 GDPR.
We have concluded a Data Processing Agreement (DPA) with Wix in accordance with Art. 28 GDPR.
The legal basis for the processing is Art. 6(1)(f) GDPR.
Our Legitimate Interest lies in the secure, stable, and efficient provision of our website. A balancing of interests has been carried out.
Further information can be found in Wix’s privacy policy:
https://de.wix.com/about/privacy

4. Data Collection When Visiting the Website

4.1 Server Log Files

When accessing our website, the following data is automatically collected:

• IP address

• Date and time of the request

• Browser type and browser version

• Operating system

• Referrer URL

• Hostname of the accessing computer

This data is technically necessary to correctly deliver the website and to ensure system security.
Legal basis: Art. 6(1)(f) GDPR.
Our Legitimate Interest lies in the technically error-free presentation and security of the website.
Log data is automatically deleted no later than 14 days after collection, unless security-related reasons require longer storage.
This data is not combined with other data sources.

4.2 Cookies

Our website uses exclusively technically necessary cookies that are required for the operation and basic functionality of the website.
The storage of these cookies is carried out on the basis of § 25(2) TDDDG in conjunction with Art. 6(1)(f) GDPR and in compliance with the ePrivacy Directive (Directive 2002/58/EC).
Should additional cookies (e.g., analytics or marketing cookies) be used in the future, this will occur exclusively on the basis of your explicit consent pursuant to § 25(1) TDDDG and Art. 6(1)(a) GDPR.

5. Contact by E-Mail or Telephone

If you contact us by e-mail or telephone, we process the personal data you provide (e.g., name, e-mail address, telephone number, content of the request) for the purpose of handling your inquiry.
Legal basis:

• Art. 6(1)(b) GDPR, if the request is related to a contract or pre-contractual measures.

• Art. 6(1)(f) GDPR for other inquiries (Legitimate Interest in effective communication).

Your data will be deleted as soon as the purpose of the processing ceases to apply, unless statutory retention obligations exist. Statutory retention periods under German commercial and tax law (HGB and AO) generally amount to 6 or 10 years.

6. No Online Sales

No online orders or transactions are processed via this website. Contracts and purchases are concluded exclusively outside of this website through individual agreement.

7. Categories of Recipients

Your personal data will only be disclosed:

• to technical service providers (e.g., hosting providers),

• if required by law,

• or if necessary for the performance of a contract.

No further disclosure to third parties takes place.

8. Obligation to Provide Data

The provision of your personal data is neither legally nor contractually required. However, without providing certain data, it may not be possible to process your inquiry or conclude a contract.

9. Storage Period

We store personal data only as long as necessary for the respective purpose or as required by statutory retention obligations. After the purpose ceases to apply or statutory periods expire, the data will be deleted.

10. Your Rights as a Data Subject

Within the framework of the applicable legal provisions, you have the following rights:

• Right of Access (Art. 15 GDPR)

• Right to Rectification (Art. 16 GDPR)

• Right to Erasure (Art. 17 GDPR)

• Right to Restriction of Processing (Art. 18 GDPR)

• Right to Data Portability (Art. 20 GDPR)

• Right to Withdraw Consent (Art. 7(3) GDPR)

• Right to Object (Art. 21 GDPR): If processing is based on Art. 6(1)(f) GDPR, you have the right to object at any time, on grounds relating to your particular situation.

11. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR).
Competent authority for us:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
(State Commissioner for Data Protection and Freedom of Information Baden-Württemberg)
Lautenschlagerstraße 20
70173 Stuttgart
Germany

Alternatively, you may contact the supervisory authority at your habitual residence.

12. Data Security

For security reasons and to protect the transmission of confidential content, this website uses SSL or TLS encryption.

13. No Automated Decision-Making

No automated decision-making or profiling pursuant to Art. 22 GDPR takes place on this website.