Privacy Policy
1. Data Protection at a Glance
**General Information**
The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data includes all data that can be used to personally identify you. For detailed information on data protection, please refer to our privacy policy below.
**Data Collection on Our Website**
**Who is responsible for the data collection on this website?**
The data processing on this website is carried out by the website operator:
Sebastian Lange
Werderstraße 2
17268 Templin
Phone: +49 172 58 70 694
Email: studio@jessandsebastian.com
**How do we collect your data?**
Your data is collected in part by you providing it to us. This could be, for example, data you enter in a contact form.
Other data is collected automatically by our IT systems when you visit the website. This data is primarily technical data (e.g., internet browser, operating system, or time of page access). The collection of this data occurs automatically as soon as you enter our website.
**What do we use your data for?**
Some of the data is collected to ensure the website is provided without errors. Other data may be used to analyze your user behavior.
**What rights do you have regarding your data?**
You have the right to receive information about the origin, recipient, and purpose of your stored personal data at any time free of charge. You also have the right to request the correction, blocking, or deletion of this data. For this, as well as for further questions on the subject of data protection, you can contact us at any time at the address given in the legal notice. Furthermore, you have the right to lodge a complaint with the relevant supervisory authority.
**Analysis Tools and Third-Party Tools**
When you visit our website, your browsing behavior may be statistically analyzed. This is mainly done with cookies and so-called analysis programs. The analysis of your browsing behavior is usually anonymous; your browsing behavior cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. Detailed information can be found in the following privacy policy.
You can object to this analysis. We will inform you about the objection options in this privacy policy.
2. General Information and Mandatory Details
**Data Protection**
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and according to the statutory data protection regulations and this privacy policy.
When you use this website, various personal data is collected. Personal data is data that can be used to personally identify you. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.
We would like to point out that data transmission over the internet (e.g., when communicating via email) can have security gaps. Complete protection of data against access by third parties is not possible.
**Information About the Responsible Party**
The responsible party for data processing on this website is:
Sebastian Lange
Werderstraße 2
17268 Templin
Phone: +49 172 58 70 694
Email: studio@jessandsebastian.com
The responsible party is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data (e.g., names, email addresses, etc.).
**Revocation of Your Consent to Data Processing**
Many data processing operations are only possible with your explicit consent. You can revoke consent you have already given at any time. An informal email making this request is sufficient. The legality of the data processing carried out before the revocation remains unaffected by the revocation.
**Right to Data Portability**
You have the right to have data that we process automatically based on your consent or in fulfillment of a contract handed over to you or a third party in a commonly used, machine-readable format. If you request the direct transfer of data to another responsible party, this will only be done to the extent technically feasible.
**SSL or TLS Encryption**
For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the address line of the browser changing from “http://” to “https://” and the lock symbol in your browser line.
**Encrypted Payment Transactions on This Website**
If you are required to submit your payment details (e.g., account number for direct debit) after entering into a fee-based contract, these data are necessary for payment processing.
Payment transactions using common payment methods (Visa/MasterCard, direct debit) are carried out exclusively via an encrypted SSL or TLS connection. You can recognize an encrypted connection by the browser’s address line switching from "http://" to "https://" and by the lock icon in your browser line.
When SSL or TLS encryption is activated, the payment data you transmit to us cannot be read by third parties.
**Information, Blocking, Deletion**
Within the scope of the applicable legal provisions, you have the right at any time to obtain free information about your stored personal data, their origin and recipient, and the purpose of data processing, and, if applicable, a right to correction, blocking, or deletion of this data. For this, as well as for further questions on personal data, you can contact us at any time at the address provided in the legal notice.
**Objection to Promotional Emails**
We hereby object to the use of contact details published as part of the legal notice obligation for sending unsolicited promotional and informational materials. The operators of these pages expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, for example through spam emails.
3. Data Collection on Our Website
**Cookies**
Our internet pages partly use so-called cookies. Cookies do not harm your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, effective, and secure. Cookies are small text files that are stored on your computer and saved by your browser.
Most of the cookies we use are so-called "session cookies." They are automatically deleted at the end of your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognize your browser on your next visit.
You can configure your browser to inform you about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for specific cases or in general, and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be limited.
Cookies necessary for carrying out the electronic communication process or for providing certain functions you request (e.g., shopping cart function) are stored based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in storing cookies for the technically error-free and optimized provision of its services. Insofar as other cookies (e.g., cookies for analyzing your browsing behavior) are stored, these are treated separately in this privacy policy.
**Server Log Files**
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
- Browser type and browser version
- Operating system used
- Referrer URL
- Hostname of the accessing computer
- Time of the server request
- IP address
These data will not be combined with other data sources.
The basis for data processing is Art. 6(1)(f) GDPR, which allows the processing of data for the fulfillment of a contract or pre-contractual measures.
**Contact Form**
If you send us inquiries via the contact form, your details from the inquiry form, including the contact data you provided there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on this data without your consent.
The processing of the data entered into the contact form is based exclusively on your consent (Art. 6(1)(a) GDPR). You can revoke this consent at any time. An informal notification by email to us is sufficient. The legality of the data processing carried out before the revocation remains unaffected by the revocation.
The data you enter in the contact form will remain with us until you request its deletion, revoke your consent to storage, or the purpose for storing the data no longer applies (e.g., after your request has been fully processed). Mandatory statutory provisions—especially retention periods—remain unaffected.
**Registration on This Website**
You can register on our website to use additional features offered on the site. The input data is used only for the purpose of using the respective offer or service for which you have registered. The mandatory information requested during registration must be provided in full. Otherwise, we will reject the registration.
For important changes, such as those related to the scope of the offer or technically necessary modifications, we use the email address specified during registration to inform you accordingly.
The data entered during registration is processed based on your consent (Art. 6(1)(a) GDPR). You can revoke your consent at any time. An informal notification by email to us is sufficient. The legality of the data processing already carried out remains unaffected by the revocation.
The data collected during registration will be stored by us as long as you are registered on our website and will be deleted afterward. Statutory retention periods remain unaffected.
**Registration with Facebook Connect**
Instead of registering directly on our website, you can use Facebook Connect. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
If you choose to register via Facebook Connect and click on the "Login with Facebook" or "Connect with Facebook" button, you will be automatically redirected to Facebook's platform. There, you can log in with your Facebook credentials. By linking your Facebook profile to our website or services, we gain access to certain data stored on your Facebook account. This primarily includes:
- Facebook name
- Facebook profile picture and cover photo
- Email address stored on Facebook
- Facebook ID
- Facebook friends list
- Facebook Likes
- Date of birth
- Gender
- Country
- Language
These data are used to set up, provide, and personalize your account.
For more information, refer to Facebook's Terms of Service and Privacy Policy, which you can find at: https://de-de.facebook.com/about/privacy/ and https://www.facebook.com/legal/terms/
**Comment Function on This Website**
When you use the comment feature on this site, not only your comment is stored, but also the time the comment was created, your email address, and, if you do not post anonymously, the username you have chosen.
**Storing the IP Address**
Our comment function stores the IP addresses of users who leave comments. Since we do not review comments before they are published, we need this data to be able to take action against the author in cases of legal violations like insults or propaganda.
**Subscribing to Comments**
As a user, you can subscribe to comments after registering. You will receive a confirmation email to verify that you are the owner of the provided email address. You can unsubscribe from this feature at any time via a link in the notification emails. The data entered during subscription to comments will be deleted if you cancel the subscription. If you have provided these data for other purposes elsewhere (e.g., newsletter sign-up), they remain stored.
**Retention of Comments**
The comments and associated data (e.g., IP address) are stored and remain on our website until the content related to the comment is fully deleted or the comments must be removed for legal reasons (e.g., offensive comments).
**Legal Basis**
The storage of comments is based on your consent (Art. 6(1)(a) GDPR). You can revoke your consent at any time by sending an informal email to us. The legality of the data processing already carried out remains unaffected by the revocation.
**Processing Data (Customer and Contract Data)**
We collect, process, and use personal data only to the extent necessary for establishing, structuring, or modifying the legal relationship (inventory data). This is based on Art. 6(1)(b) GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures. We collect, process, and use personal data regarding the use of our website (usage data) only to the extent necessary to enable the user to utilize the service or to bill the user.
The collected customer data will be deleted after the completion of the order or the termination of the business relationship. Statutory retention periods remain unaffected.
**Data Transfer During Contract Conclusion for Online Shops, Retailers, and Goods Shipping**
We only transmit personal data to third parties if this is necessary for contract processing, such as to the companies responsible for delivering the goods or the credit institution responsible for payment processing. Any further transmission of data does not occur, or it only takes place if you have explicitly agreed to the transmission. Your data will not be shared with third parties without your explicit consent, for example, for advertising purposes.
The legal basis for data processing is Art. 6(1)(b) GDPR, which allows the processing of data for the fulfillment of a contract or pre-contractual measures.
**Data Transfer During Contract Conclusion for Services and Digital Content**
We only transmit personal data to third parties if this is necessary for contract processing, such as to the credit institution responsible for payment processing.
Any further transmission of data does not occur, or it only takes place if you have explicitly agreed to the transmission. Your data will not be shared with third parties without your explicit consent, for example, for advertising purposes.
The legal basis for data processing is Art. 6(1)(b) GDPR, which allows the processing of data for the fulfillment of a contract or pre-contractual measures.
4. Social Media
**Facebook Plugins (Like & Share Button)**
Our pages integrate plugins from the social network Facebook, provider Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. You can recognize the Facebook plugins by the Facebook logo or the "Like Button" ("Gefällt mir") on our site. An overview of the Facebook plugins can be found here: [https://developers.facebook.com/docs/plugins/](https://developers.facebook.com/docs/plugins/).
When you visit our pages, a direct connection between your browser and the Facebook server is established via the plugin. Facebook thereby receives the information that you have visited our site with your IP address. If you click the Facebook "Like Button" while you are logged into your Facebook account, you can link the content of our pages to your Facebook profile. This allows Facebook to associate your visit to our pages with your user account. We point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by Facebook. For more information, see Facebook's privacy policy at: [https://de-de.facebook.com/policy.php](https://de-de.facebook.com/policy.php).
If you do not want Facebook to associate your visit to our pages with your Facebook user account, please log out of your Facebook account.
**Twitter Plugin**
Our pages include functions of the service Twitter. These functions are offered by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. By using Twitter and the "Re-Tweet" function, the websites you visit are linked to your Twitter account and made known to other users. Data is also transferred to Twitter. We point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by Twitter. For more information, see Twitter's privacy policy at: [https://twitter.com/privacy](https://twitter.com/privacy).
You can change your privacy settings on Twitter in your account settings at: https://twitter.com/account/settings
**Google+ Plugin**
Our pages use functions of Google+. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
**Collection and Sharing of Information:** The Google+ button allows you to publish information worldwide. The Google+ button gives you and others personalized content from Google and its partners. Google stores both the information that you have given +1 for content and information about the page you viewed when you clicked +1. Your +1 can appear as a reference along with your profile name and photo in Google services, such as in search results or in your Google profile, or elsewhere on websites and ads on the internet.
Google records information about your +1 activities to improve Google's services for you and others. To use the Google+ button, you need a globally visible, public Google profile that must at least contain the name chosen for the profile. This name is used in all Google services. In some cases, this name can also replace another name that you have used when sharing content via your Google account. The identity of your Google profile can be shown to users who know your email address or have other identifying information about you.
**Use of Collected Information:** In addition to the uses mentioned above, the information you provide is used in accordance with the applicable Google privacy policies. Google may publish summarized statistics about users' +1 activities or share them with users and partners, such as publishers, advertisers, or affiliated websites.
**Instagram Plugin**
Our pages integrate functions of the Instagram service. These functions are provided by Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA.
If you are logged into your Instagram account, you can link the content of our pages to your Instagram profile by clicking the Instagram button. This allows Instagram to associate your visit to our pages with your user account. We point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by Instagram.
For more information, see Instagram's privacy policy at: https://instagram.com/about/legal/privacy/
**Tumblr Plugin**
Our site uses buttons from the Tumblr service. The provider is Tumblr, Inc., 35 East 21st St, 10th Floor, New York, NY 10010, USA.
These buttons allow you to share a post or page on Tumblr or follow the provider on Tumblr. When you visit one of our sites with a Tumblr button, your browser establishes a direct connection with Tumblr’s servers. We have no control over the amount of data Tumblr collects and transmits using this plugin. Currently, the IP address of the user and the URL of the respective website are transmitted.
For more information, please refer to Tumblr's privacy policy: https://www.tumblr.com/policy/de/privacy
**Pinterest Plugin**
We use social plugins from the social network Pinterest, operated by Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103-490, USA ("Pinterest").
When you visit a page that contains such a plugin, your browser establishes a direct connection to Pinterest’s servers. The plugin sends log data to Pinterest’s server in the USA. This log data may include your IP address, the address of the visited websites that also contain Pinterest functions, browser type and settings, date and time of the request, your use of Pinterest, and cookies.
For more information about the purpose, scope, and further processing and use of your data by Pinterest, as well as your rights and privacy protection options, please refer to Pinterest's privacy policy: https://about.pinterest.com/de/privacy-policy
5. Analysis Tools and Advertising
**Google Analytics**
This website uses functions of the web analysis service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses "cookies," which are text files stored on your computer to analyze your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.
The storage of Google Analytics cookies is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in analyzing user behavior to optimize both its web offer and its advertising.
**IP Anonymization**
We have enabled IP anonymization on this website. This means your IP address will be truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before transmission to the USA. Only in exceptional cases will the full IP address be sent to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide further services related to website and internet usage to the website operator. The IP address transmitted by your browser within Google Analytics will not be merged with other Google data.
**Browser Plugin**
You can prevent the storage of cookies by adjusting your browser software settings. However, please note that you may not be able to use all the features of this website to their full extent. Additionally, you can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing the browser plugin available at: https://tools.google.com/dlpage/gaoptout?hl=de
**Opt-Out of Data Collection**
You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set that prevents the collection of your data on future visits to this website: [Google Analytics deaktivieren](https://tools.google.com/dlpage/gaoptout?hl=de).
For more information on how Google handles user data in Google Analytics, see Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de
**Data Processing Agreement**
We have signed a data processing agreement with Google and fully implement the strict requirements of German data protection authorities when using Google Analytics.
**Demographic Features in Google Analytics**
This website uses the “demographic features” function of Google Analytics. This allows reports to be generated that include information about the age, gender, and interests of site visitors. This data is sourced from Google’s interest-based advertising and from visitor data from third parties. This data cannot be attributed to any specific person. You can disable this feature at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as outlined in the section “Opt-Out of Data Collection.”
**Google reCAPTCHA**
We use "Google reCAPTCHA" (referred to as "reCAPTCHA") on our websites. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").
The purpose of reCAPTCHA is to verify whether data entry on our websites (e.g., in a contact form) is made by a human or by an automated program. To achieve this, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis starts automatically as soon as the website visitor enters the site. To perform the analysis, reCAPTCHA evaluates various pieces of information (e.g., IP address, duration of the website visit, or mouse movements made by the user). The data collected during the analysis is sent to Google.
The reCAPTCHA analysis runs entirely in the background. Website visitors are not notified that an analysis is taking place.
Data processing is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in protecting its web offerings from abusive automated spying and SPAM.
For more information on Google reCAPTCHA and Google’s privacy policy, please visit: https://www.google.com/intl/de/policies/privacy/ and https://www.google.com/recaptcha/intro/android.html
6. Plugins and Tools
**YouTube**
Our website uses plugins from the YouTube service, operated by YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
When you visit one of our pages with a YouTube plugin, a connection to YouTube's servers is established. This informs the YouTube server about which of our pages you have visited.
If you are logged into your YouTube account, you enable YouTube to directly associate your browsing behavior with your personal profile. You can prevent this by logging out of your YouTube account.
The use of YouTube serves the purpose of presenting our online offerings attractively. This constitutes a legitimate interest under Art. 6(1)(f) GDPR.
For more information on handling user data, refer to YouTube's privacy policy: https://www.google.de/intl/de/policies/privacy
**Google Web Fonts**
This site uses so-called web fonts provided by Google for uniform font representation. When a page is accessed, your browser loads the required web fonts into its browser cache to correctly display texts and fonts.
For this purpose, the browser you use must connect to Google's servers. This informs Google that our website has been accessed via your IP address. The use of Google Web Fonts is done in the interest of a consistent and attractive presentation of our online offerings, which constitutes a legitimate interest under Art. 6(1)(f) GDPR.
If your browser does not support web fonts, a standard font from your computer will be used.
For more information on Google Web Fonts, visit [https://developers.google.com/fonts/faq](https://developers.google.com/fonts/faq) and Google’s privacy policy: https://www.google.com/policies/privacy/
**Google Maps**
This site uses the Google Maps service via an API. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
To use the features of Google Maps, it is necessary to store your IP address. This information is usually transmitted to a Google server in the USA and stored there. The provider of this site has no control over this data transmission.
The use of Google Maps is done in the interest of an attractive presentation of our online offerings and the easy location of the places specified on the website. This constitutes a legitimate interest under Art. 6(1)(f) GDPR.
For more information on handling user data, refer to Google's privacy policy: https://www.google.de/intl/de/policies/privacy/
7. Payment Providers
**PayPal**
On our website, we offer payment via PayPal. The provider of this payment service is PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (referred to as "PayPal").
If you choose to pay via PayPal, the payment data you enter will be transmitted to PayPal.
The transmission of your data to PayPal is based on Art. 6(1)(a) GDPR (consent) and Art. 6(1)(b) GDPR (processing to fulfill a contract). You have the option to withdraw your consent to data processing at any time. Withdrawal does not affect the legality of data processing operations carried out prior to the withdrawal.
**Notes on Data Processing in Connection with Google Analytics**
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited. If the data controller for this website is located outside the European Economic Area or Switzerland, data processing is carried out by Google LLC. Google LLC and Google Ireland Limited are collectively referred to as "Google."
Google Analytics uses "cookies," text files stored on the visitor’s computer that enable an analysis of website usage. The information generated by the cookie about the use of this website by the visitor (including the truncated IP address) is usually transmitted to a Google server and stored there.
Google Analytics is used on this website exclusively with the "_anonymizeIp()" extension. This extension ensures IP address anonymization by truncation and excludes direct personal identification. Through this extension, Google truncates the IP address within member states of the European Union or other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. The IP address transmitted by your browser within Google Analytics will not be merged with other Google data.
On behalf of the website operator, Google uses the collected information to evaluate the website usage, compile reports on website activity, and provide further services related to website and internet usage (Art. 6(1)(f) GDPR). The legitimate interest in data processing lies in optimizing this website, analyzing website usage, and adjusting content. User interests are sufficiently protected by pseudonymization.
Google LLC is certified under the Privacy Shield framework (list entry here) and ensures an adequate level of data protection based on this framework. Data linked with cookies, user identifiers (e.g., User-ID), or advertising IDs is automatically deleted after 50 months. Data that has reached its retention period is automatically deleted once a month.
The collection by Google Analytics can be prevented by adjusting the cookie settings for this website. Additionally, the collection and storage of IP addresses and data generated by cookies can be objected to at any time with future effect. The corresponding browser plugin can be downloaded and installed from: [https://tools.google.com/dlpage/gaoptout](https://tools.google.com/dlpage/gaoptout).
You can prevent the collection by Google Analytics on this website by clicking on the following link. An opt-out cookie will be set to prevent future data collection during subsequent visits to this website.
For more information on data usage by Google, settings and opt-out options, refer to Google’s privacy policy https://policies.google.com/privacy and Google’s ad settings (https://adssettings.google.com/authenticated)
**reCAPTCHA**
To protect your requests via internet forms, we use the reCAPTCHA service from Google LLC (Google). The query serves to distinguish whether the entry is made by a human or through automated, machine processing. The query includes sending the IP address and, if necessary, other data required by Google for the reCAPTCHA service to Google. Your input is transmitted to Google and further used. However, your IP address is truncated by Google within member states of the European Union or other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there. Google uses this information on behalf of the website operator to evaluate your use of this service. The IP address transmitted by your browser within the scope of reCAPTCHA is not merged with other Google data. For these data, the different data protection provisions of Google apply. Further information on Google’s privacy policies can be found at: https://policies.google.com/privacy?hl=de