Dear users,

we are pleased about your interest in our site. In the following, we would like to inform you about the handling of your personal data when using our offer.

Personal data is any information relating to an identified or identifiable natural person.

The protection of your privacy is important to us. We use information that we receive and store during our visit to our website exclusively for internal purposes and to improve the quality of our services. We do not store the IP address transmitted by your web browser in log files.

I. Who is responsible for data processing and whom can you contact?

Responsible for data processing is

Mr. Marco Busemann

Email: info@mywishlists.de

II. General information on data processing

1. scope of data processing

We process personal data exclusively to fulfill the requested services and to protect our own legitimate business interests.

2. legal basis for data processing

Legal bases for processing may include:

• §6 para. 1 lit a) DSGVO (your consent).
• §6 para. 1 lit. b) DSGVO, if the data processing serves to establish or implement a contract;
• §6 para. 1 lit. c) DSGVO, if we are legally obliged to collect data;
• §6 para. 1 lit. f), if we have a legitimate interest in the data processing and our interests override your rights and freedoms.

3. duration of storage / deletion of data

As a matter of principle, we delete or block personal data as soon as the purpose for storing it no longer applies. If we are required by law to retain data, the data will not be blocked or deleted until the statutory retention period has expired, unless there is a need to continue to store the data for the purpose of concluding or fulfilling a contract. Storage and documentation obligations may arise from the German Civil Code (BGB), the German Commercial Code (HGB), the German Fiscal Code (AO), among others. The retention and documentation periods specified there range from two to a maximum of ten years. Finally, the storage period is also assessed according to the statutory limitation periods, which, for example, according to §§ 195 et seq. of the German Civil Code (BGB), are generally three years.

4. recipients of the collected data

Recipients of the data collected via the website are primarily us. In addition, order processors (web hosters, technical support) have access to the data collected via our website. However, compliance with legal regulations is ensured in this respect by order processing contracts that we conclude with our order processors based in the EU. A transfer of data to third countries only insofar as we inform you about it below.

In addition, your data will only be transferred to third parties within the scope of our services if the transfer of your data is mandatory and permitted by law.

5. profiling / automated decision-making

We do not carry out any profiling / automated decision-making within the meaning of the DSGVO.

III. data processing when using MyWishlists

1. general

1.1 Scope of data processing

Each time our page is called up, our system automatically collects data and information from the computer system of the calling computer.

The following data is collected:

(1) Information about the browser type

(2) The operating system of the user

(3) The IP address of the user

(4) Date and time of access

(5) Web page that is called up by the user's system via our Internet site.

This data is also stored in the log files of our system. Not affected by this are the IP address or other data that allow the data to be assigned to you. This data is not stored together with other personal data of yours.

For the operation of the website we rent servers from DigitalOcean, see also their DPA.

1.2 Legal basis for data processing

The legal basis for the temporary storage of data is Art. 6 para. 1 lit. f) DSGVO.

1.3. Purpose of data processing.

The temporary storage of the IP address by the system is necessary to enable delivery of the website to your computer. For this purpose, the IP address must remain stored for the duration of the session.

These purposes are also our legitimate interest in data processing according to Art. 6 para. 1 lit. f) DSGVO.

1.4. Duration of storage

The collected data is deleted as soon as it is no longer required to achieve the purpose for which it was collected (provision of the website). In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.

1.5. Possibility of objection and elimination

The collection of data for the provision of the website is absolutely necessary for the operation of the website. Unfortunately, it is therefore not possible to object to the processing of data in this regard.

2. cookies

We do not need and do not use cookies for the operation of the website!

3. contacting by e-mail

3.1 Scope of data processing

On our website, it is possible to contact us via the e-mail address provided. If you write us an e-mail, the personal data transmitted with the e-mail will be stored.

The contact data will be used exclusively for processing the conversation or your request.

3.2 Legal basis for data processing

The legal basis for the processing of data provided in the course of sending an e-mail is Art. 6 para. 1 lit. f) DSGVO. Additional legal basis is Art. 6 para. 1 lit. b) DSGVO, as you make use of a contractual service.

3.3. purpose of data processing

The processing of the personal data of the contact serves us solely to process your contact and your request. This is also our legitimate interest. Since the contact is initiated by you, you are free to do so and we inform you in advance how we handle the transmitted data, our legitimate interest outweighs your right to privacy.

3.4 Duration of storage

The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected, unless we are contractually entitled / obliged to store them for a longer period. The additional data collected during the sending process will be deleted after a period of 14 days at the latest.

3.5. Possibility of objection and elimination

You have the possibility to object to the storage of your personal data at any time. In such a case, the conversation can not be continued. The objection can be made by e-mail. All personal data stored in the course of contacting you will be deleted by us in this case.

Insofar as data is collected as part of a contractual relationship, the possibility of objection does not exist, as this is mandatory for the performance of the contract.

4. web analysis - plausible

4.1 Scope of data processing

We use the open source analysis service of Plausible, Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia, which is hosted in Germany, for anonymous statistical analysis of our web pages. Based on anonymized data, the analysis does not allow any conclusions to be drawn about individual persons. In particular, visitors cannot be tracked beyond several days. No cookies are set. The following data is processed:

(1) URL of the page

(2) HTTP Referer

(3) Browser

(4) Operating system

(5) Device type

(6) Country (the IP address is not stored)

For more information about Plausible, please visit https://plausible.io/data-policy.

4.2 Legal basis for data processing

The legal basis is Art. 6 para. 1 lit. f) DSGVO, our legitimate interest.

4.3 Purpose of data processing.

The purpose of using Plausible is to evaluate and optimize our website. Because Plausible processes the data anonymously and we only evaluate usage trends, our legitimate interests outweigh your freedoms in this respect.

IV. Your rights

If personal data is processed by you, you are a data subject in the sense of the DSGVO and you are entitled to the following rights in summary:

• Right to information
• Right to rectification
• Right to limited processing
• Right to deletion
• Right to information
• Right to data portability
• Right to object
• Right to withdraw consent given
• Right to lodge a complaint with a supervisory authority.

Right of objection

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is carried out on the basis of Article 6(1)(e) or (f) DSGVO; this also applies to profiling based on these provisions.

We will no longer process the personal data concerning you unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms.

V. IT Security

To protect the security of your data during data transmission, we use the so-called TLS encryption method (depending on the client 256 or 128 bit key, TLS 1.2. and 1.3), which you can recognize by the small lock symbol in the address line of the URL of our website. In addition, we secure our IT systems with numerous technical and organizational measures (e.g. firewalls, virus protection, confidentiality agreements, order processing agreements).

VI. online marketing and affiliate programs

Amazon

We participate in the Amazon affiliate program. On our pages, advertisements and links to pages of Amazon are integrated, from which we can earn money via advertising reimbursement. Amazon uses cookies for this purpose in order to be able to trace the origin of the orders. This allows Amazon to recognize that you have clicked on the partner link on our website.

The storage of "Amazon cookies" is based on Art. 6 lit. f DSGVO. The website operator has a legitimate interest in this, as the amount of its affiliate remuneration can only be determined through the cookies.

For more information on data usage by Amazon, please see Amazon's privacy policy: https://www.amazon.de/gp/help/customer/display.html/ref=footer_privacy?ie=UTF8&nodeId=3312401.

Other affiliate partnerships

We use services from various affiliate networks. Advertisements and links from the affiliate networks listed below are integrated on our pages. When calling up these links, the user is redirected by the respective affiliate network to Internet pages of third parties. These are usually online stores. We earn money with different actions of the user (e.g. already by the forwarding or only with the purchase of a product in the online store). The affiliate networks use cookies to track the origin of the orders. This allows the respective affiliate network to recognize that you have clicked the affiliate link on our website.

The storage of "affiliate cookies" is based on Art. 6 lit. f DSGVO. The website operator has a legitimate interest in this, as the amount of its affiliate remuneration can only be determined through the cookies.

For more information on the use of data by the affiliate networks, please refer to the privacy statements of the respective affiliate networks (see list below).

Services of the following affiliate networks are used:

AWIN - Privacy Policy: https://www.awin.com/de/rechtliches/privacy-policy-DACH

Tradedoubler - Privacy policy: http://www.tradedoubler.com/de/privacy-policy/

Yieldkit - Privacy policy: https://www.yieldkit.com/de/datenschutz

Subject to change

We reserve the right to adapt this data protection declaration to ensure that it complies with current legal requirements. If you visit our website again, the updated and published data protection declaration will apply in this respect.

Status: June 2023