1. Privacy at a Glance
General Information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any information that can be used to identify you personally. More detailed information about data protection can be found in the full Privacy Policy below.
How do we collect your data?
Some data is collected when you provide it to us directly, for example by entering information into a contact form.
Other data is collected automatically or with your consent when you visit this website through our IT systems. This primarily includes technical data such as:
Your internet browser
Operating system
Time of page access
This information is collected automatically as soon as you access this website.
What do we use your data for?
Some of the data is collected to ensure that the website functions properly.
Other data may be used to analyze how visitors use the website.
Where contracts can be concluded or initiated via the website, the transmitted data will also be processed for quotations, orders, or other contractual inquiries.
What rights do you have regarding
your data?
You have the right at any time to receive, free of charge, information about:
The origin of your stored personal data
The recipients of your data
The purpose of the processing
You also have the right to request correction or deletion of your personal data.
If you have given consent to data processing, you may withdraw that consent at any time with future effect.
Under certain circumstances, you also have the right to request restriction of the processing of your personal data.
In addition, you have the right to lodge a complaint with the competent supervisory authority.
If you have any questions regarding data protection, you may contact us at any time.
2. Hosting
External Hosting
This website is hosted by an external hosting provider.
Personal data collected on this website is stored on the hosting provider's servers. This may include, in particular:
IP addresses
Contact inquiries
Metadata and communication data
Contract data
Contact details
Names
Website access logs
Other data generated through the website
External hosting is carried out:
for the performance of contracts with existing and prospective customers (Article 6(1)(b) GDPR), and
in the interest of providing a secure, fast, and efficient online service through a professional hosting provider (Article 6(1)(f) GDPR).
Where consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user's device (such as device fingerprinting). Consent may be withdrawn at any time.
Our hosting provider will process your personal data only to the extent necessary to fulfill its contractual obligations and in accordance with our instructions.
Hosting provider:
Framer
Data Processing Agreement
We have entered into a Data Processing Agreement (DPA) with the hosting provider. This agreement is required under data protection law and ensures that the provider processes the personal data of website visitors only in accordance with our instructions and in compliance with the GDPR.
3. General Information and
Mandatory Information
Data Protection
The operators of this website take the protection of your personal data very seriously.
We treat your personal data confidentially and in accordance with applicable data protection legislation and this Privacy Policy.
When you use this website, various types of personal data are collected. Personal data is any information that can be used to identify you personally.
This Privacy Policy explains:
what data we collect,
how we use it,
how it is processed, and
the purposes for which it is processed.
Please note that data transmission over the Internet (for example, email communication) may be subject to security vulnerabilities. Complete protection against access by third parties cannot be guaranteed.
Information about the Controller
The controller responsible for processing personal data on this website is:
Eskinder Mamo
Rheinsberger Str. 76/77
c/o Factory Works GmbH
10115 Berlin
Germany
Email: hello@eskindermamo.com
The controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.
Data Retention
Unless a more specific retention period is stated in this Privacy Policy, your personal data will remain with us until the purpose for processing no longer applies.
If you submit a legitimate request for deletion or withdraw your consent, your personal data will be deleted unless we are legally entitled or required to retain it (for example, under tax or commercial record-keeping laws). In such cases, deletion will occur once those legal retention obligations expire.
Legal Basis for Data Processing
If you have given your consent to data processing, we process your personal data on the basis of Article 6(1)(a) GDPR, or Article 9(2)(a) GDPR where special categories of personal data under Article 9(1) GDPR are processed.
If you have expressly consented to the transfer of personal data to third countries, processing is also based on Article 49(1)(a) GDPR.
Where you have consented to the storage of cookies or access to information on your device (for example through device fingerprinting), processing is additionally based on Section 25(1) TDDDG. You may withdraw your consent at any time.
Where your data is necessary to perform a contract or to carry out pre-contractual measures, we process it on the basis of Article 6(1)(b) GDPR.
Where processing is necessary to comply with a legal obligation, we process your data under Article 6(1)(c) GDPR.
Processing may also take place on the basis of our legitimate interests under Article 6(1)(f) GDPR.
The specific legal basis applicable in each case is explained in the relevant sections of this Privacy Policy.
Recipients of Personal Data
As part of our business activities, we work with various external service providers. In some cases, this requires the transfer of personal data.
We disclose personal data to third parties only when:
it is necessary for the performance of a contract;
we are legally required to do so (for example, disclosure to tax authorities);
we have a legitimate interest under Article 6(1)(f) GDPR; or
another legal basis permits the transfer.
Where processors are engaged, personal data is transferred only on the basis of a valid Data Processing Agreement (DPA).
Where data is processed jointly with another controller, a Joint Controller Agreement is concluded.
Withdrawal of Consent
Many processing activities require your explicit consent.
You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
Right to Object (Article 21 GDPR)
Where your personal data is processed on the basis of Article 6(1)(e) or Article 6(1)(f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data. This also applies to profiling based on those provisions.
The applicable legal basis for processing can be found in this Privacy Policy.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where processing is necessary for the establishment, exercise, or defense of legal claims (Article 21(1) GDPR).
If your personal data is processed for direct marketing purposes, you have the right to object at any time to such processing, including profiling related to direct marketing.
If you object, your personal data will no longer be used for direct marketing purposes (Article 21(2) GDPR).
Right to Lodge a Complaint
If you believe that your rights under the GDPR have been violated, you have the right to lodge a complaint with a supervisory authority, particularly in the Member State of your habitual residence, place of work, or the place of the alleged infringement.
This right exists without prejudice to any other administrative or judicial remedies.
Right to Data Portability
You have the right to receive the personal data that we process automatically on the basis of your consent or for the performance of a contract in a commonly used, machine-readable format.
Where technically feasible, you also have the right to request that we transfer this data directly to another controller.
Right of Access, Rectification,
and Erasure
Within the limits of applicable law, you have the right at any time to obtain, free of charge:
information about your stored personal data,
its origin,
its recipients,
the purpose of processing,
and, where applicable, the right to have that data corrected or deleted.
If you have questions regarding personal data, you may contact us at any time.
Right to Restriction of Processing
You have the right to request restriction of the processing of your personal data.
This right applies in particular in the following situations:
You contest the accuracy of your personal data. Processing may be restricted while we verify its accuracy.
The processing is unlawful, and you request restriction instead of deletion.
We no longer require the data, but you need it for the establishment, exercise, or defense of legal claims.
You have objected under Article 21(1) GDPR, and it has not yet been determined whether your interests override ours.
Where processing has been restricted, your data may, apart from storage, only be processed:
with your consent;
for the establishment, exercise, or defense of legal claims;
to protect the rights of another natural or legal person; or
for important public interest reasons of the European Union or a Member State.
SSL/TLS Encryption
For security reasons and to protect the transmission of confidential content, such as orders or inquiries sent to us, this website uses SSL/TLS encryption.
You can recognize an encrypted connection when your browser's address changes from http:// to https:// and a padlock icon appears in the address bar.
When SSL/TLS encryption is enabled, the data you transmit to us cannot be read by third parties.
4. Data Collection on This Website
Contact Form
If you send us inquiries via the contact form, the information you provide, including the contact details you enter, will be stored for the purpose of processing your request and handling any follow-up questions.
We will not share this data without your consent.
Processing is carried out:
under Article 6(1)(b) GDPR where your request relates to a contract or pre-contractual measures;
otherwise on the basis of our legitimate interest in efficiently handling inquiries (Article 6(1)(f) GDPR); or
on the basis of your consent (Article 6(1)(a) GDPR), where consent has been requested.
Any consent may be withdrawn at any time.
The data you enter into the contact form will remain with us until you request its deletion, withdraw your consent, or the purpose for storing the data no longer applies (for example, after your inquiry has been fully processed).
Mandatory legal retention periods remain unaffected.
5. Newsletter
Newsletter Subscription Data
If you would like to subscribe to the newsletter offered on this website, we require your email address and information that allows us to verify that you are the owner of the email address provided and that you consent to receiving the newsletter.
No additional data is collected unless you voluntarily provide it.
We use this information exclusively to send the requested newsletter and do not share it with third parties.
The data entered into the newsletter subscription form is processed solely on the basis of your consent pursuant to Article 6(1)(a) GDPR.
You may withdraw your consent to the storage of your data, your email address, and its use for sending the newsletter at any time, for example by clicking the "Unsubscribe" link included in every newsletter.
Withdrawal of consent does not affect the lawfulness of any processing carried out before the withdrawal.
Storage of Newsletter Data
The data you provide for the purpose of subscribing to the newsletter will be stored by us, or by our newsletter service provider, until you unsubscribe from the newsletter. It will then be deleted from the mailing list after your subscription ends or once the purpose for processing no longer applies.
We reserve the right to remove or block email addresses from our mailing list at our own discretion where this is necessary to protect our legitimate interests under Article 6(1)(f) GDPR.
Personal data stored by us for other purposes remains unaffected.
After you unsubscribe, your email address may be retained in a blacklist by us or our newsletter service provider where necessary to prevent future mailings. Blacklist data is used exclusively for this purpose and is not combined with any other data.
This serves both your interests and our legitimate interest in complying with legal requirements for sending newsletters (Article 6(1)(f) GDPR).
Storage in the blacklist is not subject to a fixed retention period.
You may object to this storage if your interests outweigh our legitimate interests.
6. Plugins and Tools
Google Fonts
This website uses Google Fonts to ensure a consistent display of fonts.
When you access a page, your browser loads the required fonts into its cache so that text and fonts are displayed correctly.
To do this, your browser must establish a connection to Google's servers. As a result, Google becomes aware that this website has been accessed via your IP address.
Google Fonts are used on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in presenting a consistent visual appearance across the website.
Where consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user's device (for example, device fingerprinting). Consent may be withdrawn at any time.
If your browser does not support Google Fonts, a standard font installed on your computer will be used instead.
Further information about Google Fonts is available at:
Google's Privacy Policy is available at:
Google is certified under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the United States designed to ensure compliance with European data protection standards when personal data is processed in the United States.
Every company certified under the DPF has committed to complying with these standards.
Additional information is available at:
Source: eRecht24.