1) General Information and Details of the Controller

1.1 Thank you for visiting our website and for your interest in our services. Below, we inform you about how we process personal data when you use our website. Personal data means any information by which a natural person can be identified directly or indirectly.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Julia Hoffmann-Schaefer
Emsdettener Str. 10
48268 Greven
Germany
Phone: +49 1575 42 87 630
Email: hello(at)paw-spective.com

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

1.3 No data protection officer has been appointed.

2) Data Collection When Visiting Our Website

2.1 If you use our website for informational purposes only, meaning in particular without registering or otherwise actively providing us with information, we only collect the data that your browser automatically transmits to the server of the website. These are known as server log files. When our website is accessed, the following data may in particular be collected:

• the website or subpage accessed

• date and time of access

• amount of data transmitted in bytes

• the previously visited page or the source/reference from which you reached our website

• information about the browser used

• information about the operating system used

• the IP address used, where applicable in anonymised form

We process this data on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in the technically secure provision of the website and in ensuring its stability and functionality. This data is generally not used for any other purpose and is not disclosed to third parties. However, we reserve the right to review server log files retrospectively if there are concrete indications of unlawful use.

2.2 To protect the transmission of personal data and other confidential content, such as orders or contact enquiries, this website uses SSL or TLS encryption. You can recognise an encrypted connection by “https://” in your browser’s address line and by the padlock symbol.

3) Hosting and Content Delivery

Squarespace

We use the following provider for hosting our website and delivering its content:

Squarespace Ireland Ltd.
Squarespace House
Ship Street Great
Dublin 8, D08 N12C
Ireland

All data collected on our website is processed on the servers of this provider. We have concluded a data processing agreement with the provider which ensures the protection of our website visitors’ personal data and prohibits unauthorised disclosure to third parties.

As part of the provision of services, further processing on our behalf may also take place through Squarespace Inc. in the United States.

For data transfers to the United States, the provider relies on its participation in the EU-US Data Privacy Framework. This is based on an adequacy decision of the European Commission and is intended to ensure a level of data protection equivalent to that in the EU.

4) Cookies

Our website uses cookies. Cookies are small text files stored on your device that contain certain information. Some cookies are automatically deleted when you close your browser; these are known as session cookies. Other cookies remain on your device for a longer period and allow settings or preferences to be stored for future visits; these are known as persistent cookies. Information about the respective storage period can be found in your browser’s cookie settings.

Where personal data is processed through individual cookies, this is done either on the basis of Art. 6(1)(b) GDPR for the performance of a contract, on the basis of Art. 6(1)(a) GDPR where consent has been given, or on the basis of Art. 6(1)(f) GDPR where our legitimate interest in the technically optimal, efficient and user-friendly design of our website requires this.

You can configure your browser so that you are informed about the setting of cookies and can decide individually whether to accept them. You can also exclude the acceptance of cookies for certain cases or in general.

Please note that the functionality of our website may be restricted if cookies are disabled.

5) Contacting Us

If you contact us, for example by email or via a contact form, we process the personal data you provide to us. Which data is collected in the case of a contact form can be seen from the respective form itself. The data is used exclusively to process your enquiry, to contact you, and for the associated technical administration.

The processing is based on Art. 6(1)(f) GDPR due to our legitimate interest in handling your request appropriately. If your contact is aimed at concluding a contract, Art. 6(1)(b) GDPR also serves as the legal basis for processing.

Your data will be deleted once your enquiry has been finally processed and there are no indications that further storage is required. Statutory retention obligations remain unaffected.

6) Web Analytics

Squarespace Analytics

This website uses the analytics service:

Squarespace
Le Pole House
Ship Street Great
Dublin 8
Ireland

As part of processing on our behalf, data may also be transferred to Squarespace Inc. in the United States.

The service uses cookies and comparable technologies to collect and analyse information about the use of our website. This may include, in particular, details about the device used, the IP address, browser information, pages accessed and interactions with the website. The processing serves statistical evaluation, reach measurement and the improvement of our online offering. Where possible, this information is processed only in pseudonymised form. It is not combined with other personal data collected elsewhere.

All associated processing operations, in particular the storing of or access to information on your device, only take place if you have given us your explicit consent pursuant to Art. 6(1)(a) GDPR. You may withdraw any consent given at any time with effect for the future by changing the relevant settings in our cookie consent tool.

We have concluded a data processing agreement with the provider which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

For possible data transfers to the United States, the provider relies on its participation in the EU-US Data Privacy Framework.

7) Functions of Our Website

7.1 Google Sign-In

We offer a single sign-on function on our website from the following provider:

Google Ireland Limited
Gordon House
4 Barrow St
Dublin, D04 E5W5
Ireland

Data may also be transferred to Google LLC in the United States.

If you have a Google user account, you can use these login details to register on our website or create a user account.

When the page is accessed, the sign-in function may establish a connection between your browser and Google’s servers. This may happen even if you do not have a Google account or are not logged into one. Google may thereby in particular receive the information that our website has been visited. The information collected in this context may be transmitted directly by your browser to a Google server and processed there.

This processing takes place on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in the user-friendly and interactive design of our online offering.

If you actively use Google sign-in, Google will transmit certain profile data to us depending on your consent and the information you have released to Google. This may in particular include your Google ID, your name, your email address and, where applicable, other profile data you have chosen to share. Which data is transmitted in each individual case depends on Google’s settings and the permissions you have granted.

We store and process the data transmitted by Google for the purpose of creating and managing your user account insofar as this is necessary for registration and use of our services.

Any consent you have given may be withdrawn at any time with effect for the future.

For data transfers to the United States, Google relies on the EU-US Data Privacy Framework. Further information on data protection at Google can be found in Google’s privacy notices.

7.2 Google Maps

This website uses the Google Maps (API) map service provided by:

Google Ireland Limited
Gordon House
4 Barrow St
Dublin, D04 E5W5
Ireland

Google Maps is an online map service that serves to display geographical information visually and in particular to show our location and facilitate route planning.

When subpages containing Google Maps are accessed, information about your use of our website, in particular your IP address, may be transmitted to Google servers and processed there. This may also involve a transfer to servers of Google LLC in the United States. This may happen regardless of whether you are logged into Google or whether you have a user account. If you are logged into Google, the data collected may be associated with your Google account. If you do not wish this to happen, you must log out of Google before using the service.

Where legally required, Google Maps is only used on the basis of your consent pursuant to Art. 6(1)(a) GDPR. Where processing takes place independently of this, it is based on Art. 6(1)(f) GDPR on the basis of our legitimate interest in an appealing presentation of our online offering and in making the places specified on our website easy to find.

You may withdraw any consent you have given at any time with effect for the future. In addition, you may prevent data transmission to Google by disabling JavaScript in your browser. In that case, the map function on our website cannot be used.

For data transfers to the United States, Google relies on the EU-US Data Privacy Framework. Further information on data protection at Google can be found in Google’s privacy notices.

7.3 Adobe Fonts (Typekit)

To ensure the consistent display of fonts, this website uses web fonts from the provider:

Adobe Systems Incorporated
345 Park Avenue
San Jose, CA 95110-2704
USA

When a page is accessed, your browser loads the required fonts into the browser cache so that texts and fonts can be displayed correctly. In this process, a connection is established to the provider’s servers. In this context, certain browser data, including your IP address, may be transmitted to the provider.

The processing of personal data in connection with the use of Adobe Fonts only takes place if you have given us your explicit consent pursuant to Art. 6(1)(a) GDPR. You may withdraw this consent at any time with effect for the future by deactivating the service via the cookie consent tool provided on our website. If your browser does not support web fonts, a standard font from your device will be used instead.

For data transfers to the United States, the provider relies on its participation in the EU-US Data Privacy Framework.

7.4 Google reCAPTCHA

We use the CAPTCHA service of the following provider on our website:

Google Ireland Limited
Gordon House
4 Barrow St
Dublin, D04 E5W5
Ireland

Data may also be transferred to Google LLC in the United States.

The service is used to check whether entries on our website are made by a natural person or abusively by automated programmes. In this way, spam and abusive automated access in particular are to be prevented.

In connection with the use of Google reCAPTCHA, the IP address, technical information about the browser and operating system used, referrer information, date and duration of the visit, and, where applicable, mouse movements, keyboard inputs or other interaction data may in particular be processed. Cookies may also be used in this context.

Where the described processing takes place with the aid of cookies or comparable technologies, this is done only on the basis of your explicit consent pursuant to Art. 6(1)(a) GDPR. You may withdraw any consent given at any time with effect for the future by deactivating the service via the cookie consent tool provided on our website.

Where the described processing takes place without the use of cookies, the legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in preventing misuse, defending against spam and ensuring the secure use of our website.

We have concluded a data processing agreement with the provider which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

For data transfers to the United States, Google relies on the EU-US Data Privacy Framework. Further information can be found in Google’s privacy notices.

8) Consent Management / Cookie Consent Tool

A cookie consent tool is used on this website to obtain effective user consent for cookies and comparable technologies requiring consent. The tool appears as an interactive interface when the website is accessed, through which you can decide which cookies and services you wish to consent to. Cookies and applications requiring consent are only activated once you have given the relevant consent. This ensures that such technologies are only used on your device if consent has been given.

The tool uses technically necessary cookies to store your selected settings. As a rule, no personal user data is processed in this context.

If, in individual cases, personal data such as the IP address is nevertheless processed for the purpose of storing, assigning or documenting your cookie decisions, this is done on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in legally compliant, user-oriented and practical consent management as well as in the data protection compliant design of our website.

An additional legal basis results from Art. 6(1)(c) GDPR, as we are under a legal obligation to make the use of technically unnecessary cookies dependent on prior user consent.

Where required, we have concluded a data processing agreement with the provider of the consent tool which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

Further information about the operator of the tool and the available settings can be found directly in the corresponding interface on our website.

9) Rights of Data Subjects

9.1 Under applicable data protection law, you have various rights vis-à-vis us as controller in relation to the processing of your personal data. The relevant statutory requirements apply in each case. In particular, you have the following rights:

• right of access pursuant to Art. 15 GDPR

• right to rectification pursuant to Art. 16 GDPR

• right to erasure pursuant to Art. 17 GDPR

• right to restriction of processing pursuant to Art. 18 GDPR

• right to notification pursuant to Art. 19 GDPR

• right to data portability pursuant to Art. 20 GDPR

• right to withdraw consent granted pursuant to Art. 7(3) GDPR

• right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR

9.2 Right to Object

Where we process personal data on the basis of Art. 6(1)(f) GDPR, that is, on the basis of a legitimate interest, you have the right to object at any time, on grounds relating to your particular situation, to such processing with effect for the future.

If you exercise your right to object, we will stop processing the data concerned. However, further processing remains reserved where we can demonstrate compelling legitimate grounds for the processing which override your interests, fundamental rights and freedoms, or where the processing serves the establishment, exercise or defence of legal claims.

Where your personal data is processed by us for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purpose of such advertising. This also applies to profiling insofar as it is associated with such direct marketing.

Once your objection has been received, the processing of the data concerned for direct marketing purposes will cease.

10) Storage Period of Personal Data

How long personal data is stored depends on the respective legal basis, the purpose of the processing and, where applicable, also on statutory retention obligations, for example under commercial or tax law.

Where processing is based on your consent pursuant to Art. 6(1)(a) GDPR, the data concerned is generally stored until you withdraw your consent.

Where statutory retention periods exist for data processed on the basis of Art. 6(1)(b) GDPR in the context of contractual or quasi-contractual relationships, such data will be routinely deleted after the retention periods have expired, provided it is no longer required for the performance or initiation of the contract and there is no legitimate interest on our part in further storage.

Where personal data is processed on the basis of Art. 6(1)(f) GDPR, we store this data until you exercise your right to object pursuant to Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for further processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Where personal data is processed on the basis of Art. 6(1)(f) GDPR for direct marketing purposes, such data is stored until you exercise your right to object pursuant to Art. 21(2) GDPR.

Unless otherwise stated in the other provisions of this privacy policy for individual processing situations, stored personal data will otherwise be deleted as soon as it is no longer necessary for the purposes for which it was collected or otherwise processed.