Privacy Policy
​
I, Johanna Forster, as the operator of this website at "www.johannaforster.com," inform you about the type, scope, and purpose of processing your personal data when using our shop.
​
Responsibility
The person responsible (“Controller”) within the meaning of the EU General Data Protection Regulation (GDPR) is the natural or legal person which, alone or jointly with others, determines the purposes and means of the processing of personal data. Controller within the meaning of the GDPR for the personal data processed by this shop is Johanna Forster, Scheidterstr 79, 66123 Saarbrücken, art@johannaforster.com (hereinafter “we”).
​
Use of the Website
When you visit my website, the server provided by WIX.com (Wix.com Ltd., 350671 Tel Aviv, Israel) collects certain information from your end device, such as the browser type and version, operating system, the previously visited website ("referrer"), your IP address, and the time of the page view. This data is used for the smooth operation of the website, the detection and prevention of abuse, as well as statistical evaluations to improve my offer. The legal basis for this data processing is Article 6(1)(f) GDPR. This data will be deleted no later than twelve months after collection.
Orders in the Shop
When you place an order in my shop, I process your name, delivery address, and email address that you provide during the ordering process. If you voluntarily provide additional data, I also process this information. I use this data for contract fulfillment, such as deliveries, invoicing, and returns processing, based on Article 6 par. 1 b GDPR. I store this data until all contractual claims have been fully settled and after the expiry of commercial and tax retention periods.
​
Customer Account
You have the option to create a customer account in my online shop. The necessary data for this can be found in the input mask for opening the customer account. I store the associated personal data as long as you use the customer account or until you request its deletion. For data from already completed contracts, the retention periods according to the section "Orders in the Shop" apply.
​
Delivery and Payment
For the shipment of physical goods based on a purchase contract, I transmit your name and address and, with your consent, your email address to the shipping service provider Deutsche Post (Deutsche Post AG, 53113 Bonn) or DHL (DHL Paket GmbH, 53113 Bonn). Your payment data will be processed by the payment service provider you have chosen in accordance with its privacy policy.
For the purpose of payment processing, the payment service provider you have chosen processes your name, email address, card or account number, and any other data you provide in accordance with its privacy policy. When receiving a payment, I process the data transmitted to me by the payment service provider according to Article 6 par. 1 b GDPR. This data will be stored until all commercial and tax retention periods have expired, to which I am subject.
Data Processors
To support the operation of the website, I use the technical services of WIX.com (Wix.com Ltd., 350671 Tel Aviv, Israel) as a data processor in accordance with Article 28 GDPR and the services of sevDesk (sevDesk GmbH, Hauptstr. 115, 77652 Offenburg) to support operational processes.
Contact
When using a contact form or chat function, I process the data you enter, such as name and email address. For the receipt, storage, and sending of emails, I use an email provider that acts as a data processor for me in accordance with Article 28 GDPR. When contacting me by email, I store your message with the sender data. The processing takes place for the purpose of communication and responding to your inquiries based on Article 6 par. 1 f GDPR. I delete the data collected with your message no later than twelve months after the last communication regarding your request.
​
Newsletter
If you subscribe to my newsletter, I will inform you by email about offers and features of my shop. I process your data based on your consent in accordance with Article 6 par. 1 a GDPR.
You can object to the use of your email address for advertising purposes at any time informally.
The technical service provider for my newsletter is the "Ascend" service of Wix, WIX HQ, 6350671, Nemal Tel Aviv St 40, Tel Aviv-Yafo, Israel (data processor according to Article 28 GDPR).
​
Comments and Ratings
I publish your comments and ratings of my products on my shop website along with your username or pseudonym. To prevent abuse, I store the IP address of your device for twelve months (Article 6 par. 1 f GDPR). I reserve the right to delete inappropriate contributions.
​
Use of Cookies
With your consent based on Article 6 par. 1 a GDPR, I use cookies to recognize your end device when you revisit my shop and analyze certain user behavior. You can prevent the storage of cookies in the settings of your browser.
​
Social Media
Social media buttons in my shop lead to the respective platforms, without me collecting or processing data. The IP address of your device is transmitted to the accessed platform when you open such a link.
12. Your Rights
You have the right to information, correction, deletion, restriction, data portability, and withdrawal of your consent according to Article 15 par. 1 and 2 GDPR.
You also have the right to object to certain data processing, such as direct marketing. In case of complaints, you can contact the supervisory authority.