Thaishophandcraft

Data Protection

1. Data Protection at a Glance

a. General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data comprises any data that can be used to personally identify you. For detailed information on the subject of data protection, please refer to our privacy policy listed below.

b. Data Collection on This Website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You can find their contact details in the legal notice (Impressum) of this website.

How do we collect your data?

Some of your data is collected when you provide it to us—for example, data you enter into a contact form.

Other data is automatically collected by our IT systems when you visit the website. This primarily consists of technical data (e.g., internet browser, operating system, or the time the page was accessed). This data is collected automatically as soon as you enter this website.

What do we use your data for?

Some of the data is collected to ensure the website functions correctly. Other data may be used to analyze your user behavior.

What rights do you have regarding your data?

You have the right to obtain information about the origin, recipients, and purpose of your stored personal data at any time, free of charge. You also have the right to request the correction or deletion of this data. You can contact us at any time at the address provided in the legal notice regarding this matter or any other questions concerning data protection. Furthermore, you have the right to lodge a complaint with the competent supervisory authority. Furthermore, under certain circumstances, you have the right to request the restriction of the processing of your personal data. Please refer to the section "Right to restriction of processing" in the privacy policy for details.

2. Hosting

External hosting

This website is hosted by an external service provider (host). Personal data collected on this website is stored on the host's servers. This may include, in particular, IP addresses, contact inquiries, meta and communication data, contract data, contact details, names, website access data, and other data generated via a website.

We engage the hosting provider for the purpose of fulfilling contracts with our prospective and existing customers (Art. 6(1)(b) GDPR) and in the interest of providing our online services securely, quickly, and efficiently through a professional provider (Art. 6(1)(f) GDPR). Our hosting provider will process your data only to the extent necessary to fulfill its service obligations and will follow our instructions regarding such data.

The hosting provider engaged is:

IONOS SE
Elgendorfer Str. 57
56410 Montabaur

3. General Information and Mandatory Disclosures

Data Protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.

When you use this website, various personal data are collected. Personal data refers to data that can be used to personally identify you. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this takes place.

Please note that data transmission over the Internet (e.g., when communicating via email) can have security vulnerabilities. Complete protection of data against access by third parties is not possible.

Information on the controller

The controller responsible for data processing on this website is:

Thaishop-Handarbeit
Andreas Gerber
Schulstraße 20
55239 Gau-Odernheim
Tel.: 06733-9495645
Email: andreas.gerber.thaishophandcraft@outlook.com

Statutorily Required Data Protection Officer

We have appointed a data protection officer for our company.

Thaishop-Handarbeit
Tel.: 06733-9495645
E-Mail: andreas.gerber.thaishophandcraft@outlook.com

Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You may revoke consent you have already given at any time. An informal notification by email is sufficient for this purpose. The lawfulness of data processing carried out prior to the revocation remains unaffected by the revocation. Right to object to data collection in special cases and to direct marketing (Art. 21 GDPR)

Right to data portability

You have the right to have data that we process automatically based on your consent or in fulfillment of a contract handed over to you in a common, machine-readable format.

4. Data collection on this website

Cookies

These websites use technically necessary cookies. They serve to make our service more user-friendly, effective, and secure. Cookies are small text files that are placed on your computer and stored by your browser.

Any other cookies that may be stored are addressed separately in this privacy policy.

Server Log Files

The provider of these pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These include:

Browser type and version
Operating system used
Referrer URL
Hostname of the accessing computer
Time of the server request
IP address
This data is not combined with other data sources.

This data is collected on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of the website; collecting server log files is necessary for this purpose.

Contact Form

If you send us inquiries via the contact form, the information provided in the inquiry form—including the contact details you enter—will be stored by us for the purpose of processing the inquiry and handling any follow-up questions. We do not share this data without your consent.

This data is processed on the basis of Art. 6(1)(b) GDPR if your inquiry relates to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in effectively handling inquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), provided such consent has been requested. The data you enter in the contact form remains with us until you request its deletion, revoke your consent for storage, or the purpose for data storage no longer applies (e.g., after your inquiry has been fully processed). Mandatory statutory provisions—particularly retention periods—remain unaffected.

Inquiries via email, telephone, or fax

If you contact us via email, telephone, or fax, your inquiry—including any personal data contained therein (such as your name and the details of the inquiry)—will be stored and processed by us for the purpose of handling your request.

This data is processed on the basis of Art. 6(1)(b) GDPR if your inquiry relates to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on your consent (Art. 6(1)(a) GDPR) and/or our legitimate interests (Art. 6(1)(f) GDPR), as we have a legitimate interest in effectively handling inquiries addressed to us.

The data you submit to us via contact inquiries will remain with us until you request its deletion, revoke your consent for storage, or the purpose for data storage no longer applies (e.g., after your request has been fully processed). Mandatory legal provisions—particularly statutory retention periods—remain unaffected.

Processing of data (customer and contract data)

We collect, process, and use personal data only to the extent necessary for establishing, defining the terms of, or modifying the legal relationship (inventory data). This is done on the basis of Art. 6(1)(b) GDPR, which permits the processing of data for the performance of a contract or to take steps prior to entering into a contract. We collect, process, and use personal data regarding the use of this website (usage data) only to the extent necessary to enable the user to utilize the service or to bill for it.

Collected customer data is deleted upon completion of the order or termination of the business relationship. Statutory retention periods remain unaffected.

Data transmission upon conclusion of a contract for services and digital content

We transmit personal data to third parties only when necessary for the performance of the contract—for example, to the financial institution commissioned to handle payment processing.

No further transmission of data takes place, except where you have expressly consented to such transmission. Your data will not be passed on to third parties without express consent—for instance, for advertising purposes.

The legal basis for data processing is Article 6(1)(b) of the GDPR, which permits the processing of data for the performance of a contract or for taking steps prior to entering into a contract.

Tracking

Tracking and logging (hereinafter referred to as "WebAnalytics") are enabled by default on this website.

What technologies does the website operator use to collect the data?

Data is collected either via a pixel or a log file. To protect personal data, WebAnalytics does not use cookies.

The visitor's IP address is transmitted when a page is requested; it is anonymized immediately after transmission and processed without any personal identification.

What data does the website operator store about me?

The website operator does not store personal data regarding website visitors, ensuring that no conclusions can be drawn about individual visitors. The following data is collected:

Referrer (previously visited website)
Requested webpage or file
Browser type and version
Operating system used
Device type used
Time of access
IP address in anonymized form (used only to determine the location of access)
For what purpose is the data collected?

In WebAnalytics, data is collected exclusively for statistical analysis and the technical optimization of the website.

5. Third-party content on the website

Our website integrates content from other providers. This may include content elements (e.g., news updates) as well as widgets (functions such as booking systems) or, for instance, fonts and technical libraries. This also includes Google Fonts. For technical reasons, this process involves the browser loading such content from external servers. In this context, the IP address currently used by your browser and the browser details of the requesting system are transmitted. Please refer to the respective privacy policies of these third-party providers.

OpenStreetMap

We use the open-source map service "OpenStreetMap" (also known as "OSM")—provided by the OpenStreetMap Foundation, 132 Maney Hill Road, Sutton Coldfield, West Midlands, B72 1JU, United Kingdom—to display geographic data. OSM serves to provide an interactive map on our website, showing you how to find and reach us. This service enables us to present our website in an appealing manner by loading map data from an external server. The following data is transmitted to OSM servers when the map is displayed: the specific page of our website you visited, your device's IP address, and any data you entered for route planning. The legal basis for processing your data in connection with the "OSM" service is Art. 6(1)(f) of the GDPR (legitimate interest in data processing). This legitimate interest arises from our need to present our online services in an appealing manner and to ensure that the locations listed on our website are easy to find.

You can find more information on how user data is handled in the OSM privacy policy: https://osmfoundation.org/wiki/Privacy_Policy