General

1. Your personal data within the meaning of Art. 4 No. 1 GDPR (e.g. IP address, name, e-mail address and telephone number, payment information) will only be processed by us in accordance with the provisions of German data protection law and taking into account the European General Data Protection Regulation (GDPR ) processed. The following regulations inform you about the type, scope and purpose of the collection, processing and use of personal data.

 

2. The processing of personal data within the meaning of Art. 4 No. 2 GDPR is lawful in accordance with Art. 6 GDPR if one of the following conditions is met:

a) The data subject has given their consent to the processing of their personal data for one or more specific purposes;

 

b) the processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;

 

c) processing is necessary for compliance with a legal obligation to which the controller is subject;

 

d) processing is necessary to protect vital interests of the data subject or another natural person;

 

e) the processing is necessary for the performance of a task that is in the public interest or in the exercise of official authority that has been delegated to the controller;

 

f) processing is necessary to safeguard the legitimate interests of the person responsible or a third party, unless the interests or fundamental rights and freedoms of the data subject that require the protection of personal data prevail, in particular if the data subject is a child acts.

 

3. The processing of special personal data (e.g. health data) within the meaning of Art. 9 Para. 1 GDPR is lawful in accordance with Art. 9 Para. 2 GDPR if one of the following conditions is met:

– there is an explicit consent of the person;

– the processing is necessary for the establishment, exercise or defense of legal claims or in the case of actions by the courts in the context of their judicial work.

 

4. There is no automatic decision-making or profiling regarding personal data within the meaning of Art. 22 GDPR.

 

5. The operator ensures the security of the data in accordance with Art. 32 GDPR, taking into account the principle of proportionality, by means of suitable technical measures.

 

6. If, contrary to expectations, there is a breach of data protection, the competent supervisory authority in accordance with Art. 33 GDPR and the data subject in accordance with Art. 34 GDPR will be notified.

​

Scope

This data protection declaration only applies to our websites. If you are redirected to other sites via links on our site, please inform yourself there about the respective handling of your data.

​

Duration of data storage

The duration of the storage of the data transmitted by you depends on the legal storage obligations. In accordance with commercial and tax laws, invoices must be retained for a period of 10 years.

 

Disclosure of Data to Third Parties

Data transmitted as part of the contractual relationship will only be passed on to third parties (Art. 4 No. 10 GDPR) if you have expressly given your consent (Art. 4 No. 11 GDPR) or if the transfer is necessary to fulfill the contract. Consent can be revoked informally at any time. Data collected by visiting the website is only collected by third parties who are expressly named below.

​

Responsible in the sense of the GDPR

The person responsible within the meaning of the General Data Protection Regulation (GDPR), as well as other data protection laws applicable in the European Union and other provisions of a data protection nature is:

Serious Dreams GmbH
Dorfstrasse 8b
83703 Gmund am Tegernsee
Tel:+491522441149
email: hello(at)serious-dreams.com

 

Cookies

We use cookies on our site. These are small files that your browser creates automatically and that are stored on your end device (PC, laptop, tablet, smartphone, etc.) when you visit our site. Cookies do not damage your end device and do not contain viruses, Trojans or other malware. Information is stored in the cookie that arises in connection with the specific end device used. However, this does not mean that we are immediately informed of your identity.

On the one hand, the use of cookies serves to make the use of our offer more pleasant for you. We use so-called session cookies to recognize that you have already visited individual pages on our website. These are automatically deleted after leaving our site.

 

In addition, we also use temporary cookies to optimize user-friendliness, which are stored on your end device for a specific period of time. If you visit our site again to make use of our services, it will automatically be recognized that you have already been with us and what inputs and settings you have made so that you do not have to enter them again.

 

These cookies enable us to automatically recognize when you visit our site again that you have already been with us. These cookies are automatically deleted after a defined period of time. The data processed by cookies are required for the stated purposes to protect our legitimate interests and those of third parties in accordance with Article 6 Paragraph 1 Sentence 1 lit. f GDPR. Most browsers accept cookies automatically. However, you can configure your browser in such a way that no cookies are stored on your computer or that a message always appears before a new cookie is created. However, the complete deactivation of cookies may mean that you cannot use all the functions of our website.

​

Storage of access data in log files

You can visit our website without providing any personal information.

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

• Browser type/ browser version

• operating system used

• Referrer URL

• Host name of the accessing computer

• Time of server request

This data cannot be assigned to specific persons. This data is not merged with other data sources. We reserve the right to subsequently check this data if we become aware of specific indications of illegal use.

 

The purpose of the processing results from our legitimate interest within the meaning of Article 6 (1) sentence 1 lit. f) GDPR.

 

A contract for order processing was concluded with our hoster.

 

Instagram

Functions of the Instagram service are integrated on our website. These functions are offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. If you are logged into your Instagram account, you can link the content of our pages to your Instagram profile by clicking on the Instagram button. This allows Instagram to associate your visit to our site with your user account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or how it is used by Instagram.

 

For more information, see Instagram's privacy policy:

https://instagram.com/about/legal/privacy/

 

Comments and Ratings

When users submit ratings in the shop or other posts, their IP addresses are saved. This is done for the security of the provider in case someone writes illegal content (including insults, pornographic or protected material). In this case, the provider himself can be prosecuted for the comment or contribution and is therefore interested in the identity of the author. The collection of this data is justified by Article 6 Paragraph 1 Clause 1 Letter f) GDPR.

​

Contact form

When using the contact form offered on these pages, the information you enter is transmitted and stored for the purpose of answering your request. The data will not be passed on to third parties. The lawfulness of using the form results from Art. 6 (1) sentence 1 lit. f) GDPR.

Inquiry by email or phone

If you contact us by e-mail, telephone or fax, your inquiry including all resulting personal data (name, enquiry) will be stored and processed by us for the purpose of processing your request. We do not pass on this data without your consent.

 

This data is processed on the basis of Article 6 (1) (b) GDPR if your request is related to the fulfillment of a contract or is necessary to carry out pre-contractual measures. In all other cases, the processing is based on your consent (Art. 6 Para. 1 lit. a GDPR) and / or on our legitimate interests (Art. 6 Para. 1 lit. f GDPR), since we have a legitimate interest in the effective processing of inquiries addressed to us.

 

The data you sent to us via contact requests will remain with us until you request deletion, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory legal provisions - in particular statutory retention periods - remain unaffected.

 

Social media links

We have our own social media pages for the third-party providers that can be reached via links from this website. By using the links you get to the respective third-party websites (e.g. Facebook, LinkedIn, Instagram, YouTube, Vimeo) and can also share our content. No data transfer takes place when you visit our website. As soon as you have called up the third-party provider's website, you are in the area of responsibility of the respective third-party provider, so that their data protection declaration or their declarations on the use of data also apply. We have no influence on this, but to avoid unnecessary data transfer, we recommend that you log out of the respective third-party provider before using a corresponding link, so that usage profiles cannot be created by the third-party provider simply by using the link.

​

Security of your data / SSL encryption

In accordance with the legal regulation according to § 13 Abs. 7 TMG, this site uses SSL encryption, recognizable by a lock symbol in the address bar of your browser. Transmitted data cannot be read by third parties if SSL encryption is activated.

This is usually a 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is being transmitted in encrypted form by the closed representation of the key or lock symbol in the lower status bar of your browser.

 

We also use appropriate technical and organizational security measures (TOM) to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

 

User Rights

You can request information about the personal data stored about you at any time and free of charge. Your rights also include a confirmation, correction, restriction, blocking and deletion of such data and the provision of a copy of the data in a form suitable for transmission, as well as the revocation of a given consent and the objection.Statutory retention requirements remain unaffected.

 

Your rights arise in particular from the following standardsGDPR:

• Article 7(3) – Right to withdraw consent under data protection law

• Article 12 - Transparent information, communication and modalities for exercising the rights of the data subject

• Article 13 - Obligation to provide information when collecting personal data from the data subject

• Article 14 - Information to be provided when the personal data have not been collected from the data subject

• Article 15 - Right of access of the data subject, right to confirmation and to be provided with a copy of the personal data

• Article 16 – Right to rectification

• Article 17 – Right to erasure (“right to be forgotten”)

• Article 18 – Right to restriction of processing

• Article 19 – Obligation to notify in relation to rectification or erasure of personal data or restriction of processing

• Article 20 – Right to data portability

• Article 21 – Right to object

• Article 22 - Right not to be subject to a decision based solely on automated processing, including profiling

• Article 77 – Right to lodge a complaint with a supervisory authority

To exercise your rights (with the exception of Art. 77 GDPR), please contact the office named under “Responsible within the meaning of the GDPR” (e.g. by email).

​

Collecting, using, sharing and disclosing personally identifiable information about our website visitors

Our company is hosted on the Wix.com platform. Wix.com provides us with the online platform through which we can present and possibly sell our products and services to you. Your data may be stored through Wix.com's data storage, databases and general Wix.com applications. They store your data on secure servers behind a firewall. 

All direct payment gateways offered by Wix.com and used by our company comply with the standards of PCI-DSS administered by the PCI Security Standards Council, a joint initiative of brands such as Visa, MasterCard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of credit card information by our online store and its service provider.

​​

Duration of storage of posts and commentsaren

Contributions and comments as well as related data, such as IP addresses, are saved. The content remains on our website until it has been completely deleted or had to be deleted for legal reasons.

The storage of theArticles and comments are based on your consent (Article 6 (1) (a) GDPR). You can revoke your consent that you have already given at any time. An informal message by e-mail is sufficient for the revocation. The legality of data processing operations that have already taken place remains unaffected by the revocation.

​

The following links explain how to access cookie settings in different browsers:

• Cookie settings in Firefox

• Cookie settings in Internet Explorer

• Cookie settings in Google Chrome

• Cookie settings in Safari (OS X)

• Cookie settings in Safari (iOS)

• Cookie settings in Android

Visit the following website to prevent Google Analytics from tracking you across all websites (opt-out): http://tools.google.com/dlpage/gaoptout.

 

Google Analytics

Our website uses functions of the web analysis service Google Analytics. The provider of the web analysis service is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.

Google Analytics uses "cookies." These are small text files that your web browser stores on your end device and enable analysis of website usage. Information generated by cookies about your use of our website is transmitted to a Google server and stored there. Server location is usually the USA.

Google Analytics cookies are set on the basis of Article 6 (1) (f) GDPR. As the operator of this website, we  have a legitimate interest in analyzing user behavior in order to optimize our website and, if necessary, advertising.

 

- IP anonymization

We use Google Analytics in connection with the IP anonymization function. It ensures that Google shortens your IP address within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before it is transmitted to the USA. There may be exceptional cases in which Google transmits the full IP address to a server in the USA and shortens it there. On our behalf, Google will use this information to evaluate your use of the website, to create reports on website activity and to provide us with other services related to website activity and internet usage. The IP address transmitted by Google Analytics is not merged with other Google data.

 

- Browser plugin

The setting of cookies by your web browser can be prevented. However, this could limit some functions of our website. You can also prevent the collection of data relating to your website use, including your IP address and subsequent processing by Google. This is possible by downloading and installing the browser plugin available via the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

 

- Objection to data collection

You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to our website: Disable Google Analytics: https://tools.google.com/dlpage/gaoptout​

For details on how Google Analytics handles user data, see Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

 

- Order processing

In order to fully comply with the legal data protection requirements, we have concluded an order processing contract with Google.

 

- Demographic characteristics in Google Analytics

Our website uses the "demographic characteristics" function of Google Analytics. It can be used to create reports that contain statements about the age, gender and interests of the site visitors. This data comes from interest-based advertising from Google and visitor data from third-party providers. It is not possible to assign the data to a specific person. You can deactivate this function at any time. This is possible via the ad settings in your Google account or by generally prohibiting the collection of your data by Google Analytics, as explained in the point "Objection to data collection".

​​

Google AdWords and Google Conversion Tracking

Our website uses Google AdWords. The provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, United States.

AdWords is an online advertising program. As part of the online advertising program, we work with conversion tracking. After clicking on an ad placed by Google, a cookie is set for conversion tracking. Cookies are small text files that your web browser stores on your end device. Google AdWords cookies lose their validity after 30 days and are not used to personally identify users. We and Google can use the cookie to recognize that you have clicked on an ad and were forwarded to our website.

Each Google AdWords customer receives a different cookie. The cookies are not traceable across AdWords advertiser websites. Conversion cookies are used to create conversion statistics for AdWords customers who use conversion tracking. Adwords customers find out how many users clicked on their ad and were redirected to pages with a conversion tracking tag. However, AdWords customers do not receive any information that would allow users to be personally identified. If you do not wish to participate in tracking, you can object to its use. Here the conversion cookie must be deactivated in the user settings of the browser. This means that there is no inclusion in the conversion tracking statistics.

"Conversion cookies" are stored on the basis of Article 6 (1) (f) GDPR. As the website operator, we have a legitimate interest in analyzing user behavior in order to optimize our website and our advertising.

Details on Google AdWords and Google Conversion Tracking can be found in Google's data protection regulations: https://www.google.de/policies/privacy/.

With a modern web browser you can monitor, restrict or prevent the setting of cookies. The deactivation of cookies can result in limited functionality of our website.

 

YouTube

Our website uses plugins from YouTube to integrate and display video content. The provider of the video portal is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.

When a page with an integrated YouTube plugin is called up, a connection to the YouTube servers is established. This tells YouTube which of our pages you have accessed.

YouTube can assign your surfing behavior directly to your personal profile if you are logged into your YouTube account. You can prevent this by logging out beforehand.

YouTube is used in the interest of an attractive presentation of our online offers. This represents a legitimate interest within the meaning of Article 6 (1) (f) GDPR.

Details on handling user data can be found in YouTube's data protection declaration at: https://www.google.de/intl/de/policies/privacy.

 

Update of the privacy policy

We reserve the right to change this privacy policy at any time, so please review it regularly. Changes and clarifications will be made immediately after theirPublication on the website effective. If we make material changes to this Policy, we will notify you of those changes here. As a result, you will know what information we collect, how we use it and under what circumstances, if any, we use and/or disclose it.

​

Supervisory authority:

The Federal Commissioner for Data Protection and Freedom of Information

hussar street 30

53117 Bonn

 

Telephone: +49 (0)228 997799-0

Fax: +49 (0)228 997799-5550

Email: redaktion@bfdi.bund.de

 

home page:https://bfdi.bund.de

(Please check the above-mentioned website before contacting us to ensure that the contact details are still up-to-date)