Data Protection Declaration

This Data Protection Declaration covers the acquisition, processing and application of your personal data ('data processing') when using the services of Aurojuli.

The protection of your personal data is of special concern to us. We therefore acquire and process your data exclusively in accordance with legal regulations, particularly the regulations of the BDSG (Federal Data Protection Act) as well as the GDPR (General Data Protection Regulation). In these data protection briefs we will inform you about the most important aspects of the data processing with regard to our website.

Next we wish to inform you in detail which data and to what purpose we acquire, process, and use them and how you can object to these data applications.

§1 Name and address of the party responsible

The legal seat for the data processing is:

Aurojuli, Karl-Liebknecht-Str. 11, 10178 Berlin, Germany, info@aurojuli.com, +49-171-3662645

Legal representative:
Owner: Anke Hentschel-Stüssi

§1 Name and address of the data processing officer

The officer responsible for data processing is:

Anke Hentschel-Stüssi, Karl-Liebknecht-Str. 11, 10178 Berlin, Germany, info@aurojuli.com, +49-171-3662645

§3 Scope of the processing of personal data

In order to secure the functioning of our internet site as well as to present our contents and services it is necessary that we ask for and use personal data from our clients.

Contracted by us, the Canadian company Shopify provides the services for the hosting of our website. Personal data is therefore stored and processed in the US and Canada.

Shopify conforms to the Canadian Personal Information Protection and Electronic Documents Act (PIPEDA). You can get more information on this at:
https://www.priv.gc.ca/en/privacy-topics/privacy-laws-in-canada/the-personal-information-protection-and-electronic-documents-act-pipeda/

All data are coded on the basis of SSL procedure.

The data is processed on the basis of the legal regulations of Art. 6 (1) a (Agreement) and/or f (justified interest) of the GDPR. If the processing is required for a justified interest on the part of our enterprise or of a third party and if the interests, basic rights and freedom of the affected party do not outweigh the aforementioned interest, then Art. 6 (1) f of the GDPR serves as the legal basis for the processing.

Additional use can only be made with the express consent of the client. Data is collected and processed in detail as follows.

1. Upon a visit to our website data is collected automatically, which is conveyed via your browser to the web server. This includes the following data:

1.1 the URL of the page through which you reached us,

1.2 Search keywords, through which you found our site,

1.3 Date and time of the access to our website,

1.4 Names of the subpages called up,

1.5 Your IP address.

We collect and process these data in an anonymous way, that is, they cannot be attributed to a specific person. The purpose of the data collection and processing is their evaluation for internal, system-relevant and statistical purposes. In addition, for the purpose of technical security, particularly the defense against attempted attacks on our server, and moreover to control suspected abuse and to clarify any suspected illegal use. The IP address is only investigated in the case of an attack on our web infrastructure.

You can visit our online shop, without giving any personal details. If any person-related data is collected on our pages, it is soley on a voluntary basis. Required spaces are earmarked as such, since we need the data in these cases for the completion of a contract, or the processing of your initial contact or the opening of a client account and without which information the order and/or the opening of an account would remain incomplete, or the contact initiation could not be sent. Which data are collected is quite evident in the respective submission form. These data will not be passed on to third parties without your express consent.

2. We make use of your personal data such as name, address and e-mail address in order to complete the registration process in the opening of a client account on our site via a confirmation email and to send you confirmation e-mails concerning your orders.

The legal basis for the processing of the data is Art. 6 (1) b (necessary for the fulfillment of the contract) of the GDPR.

3. Payment data – account or credit card data – are used for the completion of chargeable orders.

The legal basis for the processing of the data is Art. 6 (1) b (necessary for the fulfillment of the contract) of the GDPR.

4. If you subscribe to the newsletter of our firm, the data from the respective submission forms are transmitted to those responsible for processing. With the application for the newsletter the IP-address of the user as well as date and time of the registration is stored. This is done to prevent a misuse of the services or of the the e-mail address of the affected person. A transfer of the data to third parties does not take place. An exception occurs when there is a legal obligation to transfer.

The data is used exclusively for the distribution of the newsletter. The subscription to the newsletter can be cancelled at any time by the subscriber. Equally, the agreement concerning the storage of personal data may be recalled at any time. To this end a relevant link may be found in every newsletter.

The legal basis for the processing of the data after the user subscribes to the newsletter is, with the existence of the user's consent declaration, Art. 6 (1) a of the GDPR. The legal basis for the mailing of the newsletter following the sale of articles or services is § 7 (3) of the UWG.

4.1 Insofar as you have agreed to the use of your email address for the reception of our newsletter and the transmission of special offers, you have given us the following agreement declaration:

„I hereby agree, that Aurojuli send me information and offers relating to their products by e-mail for advertising purposes. I am justified at any time in asking Aurojuli to provide extensive information concerning the stored data concerning my person. I can enjoin Aurojuli at any time to correct, erase and block particular personal data. I can, at any time and without grounds , make use of my right to recall and change or completely abrogate the submitted agreement, with effect to the future. I can transmit the cancellation to the contract partner either by mail or e-mail. No costs to me beyond the postage or transmission costs at basic rates apply.“

We have recorded your agreement declaration.

5. When you use the contact form on our website, which can serve for electronic contact, or take up contact by e-mail, the personal data relayed by you is stored automatically. This storage serves soley for the purpose of processing or to contact the person in question. No transfer of data to third parties takes place. The legal basis for the processing of the data is, with the presentation of the user's consent, Art. 6 (1) a of the GDPR.

The legal basis for the processing of the data that was transmitted in the course of a transmission by e-mail is Art. 6 (1) f of the GDPR. If the purpose of the e-mail contact is the closing of a contract the additional legal basis for processing is Art. 6 (1) b of the GDPR.

6. If an Aurojuli article is temporarily sold out in our online shop, there is the possibility of letting yourself be informed by email of the renewed availability of that article. The email address provided by the client is only stored for the purpose of the notification about the new availability and used to send the notification. No transfer to third parties occurs.

7. Should you wish to return an article and use the return form to that end or send a message to our email address, your data will be used exclusively to process the return.

§4 Legal basis for the processing of personal data

When we obtain permission from the affected person for the processing of personal data, Art. 6 (1) a of the EU General Data Protection Regulation (GDPR) serves as the legal basis.

In the processing of personal data, which are necessary for fulfilling a contract in which the contract party is the affected person, Art. 6 (1) b of the GDPR is the legal basis. This applies also to preprocessing measures, which are necessary for the carrying out of precontractual operations.

When a processing of personal data is required for the fulfillment of a legal obligation, to which our firm is subject, the legal basis is Art. 6 (1) c of the GDPR.

Should the processing be necessary for the maintenance of a justifiable interest on the part of our firm or of a third party, and the interests, basic rights and freedoms of the affected party not outweigh the aforementioned interests, then Art. 6 (1) f of the GDPR serves as legal basis for the processing.

§5 Recipients of data or categories of receivors

5.1 After the submission and transmission of your data, these are relayed directly to the server of the external service supplier Shopify via a coded connection.

5.2 A transfer of data to third parties does not take place, with the exception of the transmission of account / credit card data to the completing bank / payment service for the purpose of the crediting of the purchase amount, to the transportation firm / delivery service contracted by us for the delivery of the goods, as well as to our tax consultant for the fulfillment of our legal tax obligations.

§6 Routine Erasure and Storage of personal data

We process and store the personal data of the person in question only for the time necessary to achieve the purpose of storage or as called for by the European Guidelines and Regulations authority or by another legal authority in law or regulations to which the processor is subject.

Should the purpose of storage be cancelled or the storage deadline set by the European Guidelines and Regulations authority or another responsible lawgiver be reached, the personal data will routinely and, in accordiance with legal requirements, be blocked or erased.

6.1 Thus where data is used to prepare the website when the session is finished.

6.2 Thus with newsletter subscriptions as long as the subscription is active.

6.3 In case of the cancelling of a client account, all the client data is erased.

6.4 After the sending of an email concerning the renewed availability of an article, the relevant email address is erased.

§7 Your rights

When your personal data are processed, you are the affected person according to the GDPR and you are entitled to the following rights in relation to the person responsible:

Right to information

You may ask for confirmation from the responsible person, if personal data that relate to you are being processed by us. Should there be such processing, you can ask for details of the following information:

a. the purposes, for which the personal data are being processed;

b. the categories of personal data that are being processed;

c. the recipient or categories of recipients to whom the personal data have been submitted or will yet be submitted;

d. the planned duration of the storage of the personal data relating to you or, if concrete information is not possible, the criteria for the establishment of the storage duration;

e. the existence of a right to the correction or erasure of the personal data concerning you, a right to restrict the processing by the responsible person or the right to object to this processing;

f. the existence of a right to complain to a regulatory agency;

g. all available information concerning the origin of the data if the personal data was not obtained from the person in question;

h. the existence of an automatic decision making including profiling according to Art. 22 (1) and (4) of the GDPR and – at least in these cases - meaningful information about the involved logic as well as the scope and the effects of such a processing on the person in question.
You have the right to demand information about whether the personal data are transmitted to a third country or to an international organisation. In this context you can ask to be informed about the appropriate guarantees in connection to the transmission, according to Art. 46 of the GDPR.

Right to correction

You have a right to correction and/or completion by the person responsible, if the processed personal data that concerns you is incorrect or incomplete. The person responsible must undertake the correction without delay.

Right to restrict processing

Under the following conditions you may demand the restriction of the processing of the personal data realting to you:

a. if you contest the correctness of the personal data, allowing a period of time in which the responsible person can check the correctness of the personal data;

b. the processing is unlawful and you reject the erasure of the personal data and demand instead the restriction of the use of the personal data;

c. the responsible person no longer requires the personal data for the purpose of processing, but you need them for the application, execution or defense of legal claims;

d. if you have submitted opposition to the processing according to Art. 21 (1) of the GDPR and it has not yet been determined if the justified grounds of the responsible person outweigh your reasons.

Should the processing of the personal data relating to you have been restricted, these data – apart from their storage – may only be processed with your consent, or to comply, exercise or defend in legal claims or to protect the rights of another natural or pro jura person, or for reasons of an important interest of the Union or one of its member states.
If the processing was restricted by reason of the above conditions, you will be informed by the person responsible before the restriction is remanded.

The Right to Deletion

You may demand the immediate deletion of the personal data relating to you from the person responsible, and he is obligated to delete those data without delay, as long as one of the following reasons applies:

a. The personal data relating to you are no longer necessary for the purpose for which they were obtained or otherwise processed.

b. You withdraw your permission, upon which the processing was based according to Art. 6 (1) a or Art. 9 (2) a of the GDPR, and a further legal reason for the processing is absent.

c. You contest the processing according to Art. 21 (1) of the GDPR and there are no overriding justifiable reasons for the processing, or you contest the processing according to Art. 21 (2) of the GDPR.

d. The personal data relating to you were illegally processed.

e. The deletion of the personal data relating to you is required to fulfill a legal obligation of the EU or a member state, to which the person responsible is subject.

f. The personal data relating to you were obtained for proferred services of the information firm according to Art. 8 (1) of the GDPR.

If the person responsible has published the personal data relating to you and is obligated to delete them according to Art. 17 (1) of the GDPR, he must take suitable steps, also of a technical nature, subject to the available technology and the implementation costs, to inform the persons responsible for the processing of the personal data, that you, as the person in question, have demanded the deletion of all links to, or copies or reproductions of, these personal data.

The right of deletion does not exist if the processing is required for:

a. the exercise of the right to freedom of expression and information;

b. the fulfillment of a legal obligation, to which the processing according to the laws of the EU or a member state to which the person responsible, is subject, or for the fulfillment of a duty that is in the public interest or in the execution of public authority, which was transferred to the person responsible;

c. reasons of public welfare in the area of public health according to Art. 9 (2) h and i as well as Art. 9 (3) of the GDPR;

d. purposes of public archiving, scientific or historical research or for statistical purposes in the public interest, according to Art. 89 (1) of the GDPR, as long as the abovementioned right renders the realisation of these goals impossible or seriously impedes them, or

e. the assertion, exercise or defence of legal claims.

The right to notification

If you have claimed the right to notification, deletion or restriction of the processing with the person responsible, he is obligated to inform all the recipients with whom the personal data relating to you was shared of concerning the notification, deletion or restriction of the processing, unless this proves impossible or is tied to unreasonable costs.
You have the right to be informed about these recipients.

The right to the transfer of data

You retain the right to obtain the personal data relating to you, which you have provided to the person responsible, in a structured, common, and machine-readable format. In addition, you have the right to transfer these data to another person responsible, without hindrance from the original person responsible, to whom the personal data was provided, as long as

a. the processing is based on a consent according to Art. 6 (1) a of the GDPR or Art. 9 (2) a of the GDPR or on a contract according to Art. 6 (1) b of the GDPR and

b. the processing takes place with the help of automated procedures.

In the execution of this right you, moreover, have the right to have the personal data pertaining to you transferred directly from one person responsible to another, if that is technically feasible. The freedoms and rights of other persons may not be therein impuned.
The right to the transfer of data is not valid for the processing of personal data, that is necessary to the realisation of a task that is in the public interest or to the execution of public authority granted to the person responsible.

Right to object

You have the right to object at any time, on grounds that relate to your particular situation, to the processing of the personal data relating to you, which occurred based on Art. 6 (1) e or f of the GDPR; this applies also to a profiling based on these terms.
The person responsible will cease to process the personal data relating to you, unless he can make valid binding and legitimate reasons for the processing, which outweigh your interests, rights, and freedoms, or the processing serves the assertion, execution, or defence of legal claims.

Should the personal data relating to you be processed to create direct advertising, you have the right at any time to object to the processing of the personal data relating to you for the purpose of such advertising; this applies also for profiling insofar as it's connected to such direct advertising.
If you object to the processing for direct advertising purposes, your personal data will no longer be processed for these purposes.

You have the possibility , in connection with the use of the services of the information company – notwithstanding the regulations 2002/58/EG – to exercise your right to object via automatic procedures, in which technical specifications are used.

Right to revocation of the data legal protection agreement declaration

You have the right at any time to withdraw your legal data protection agreement. The withdrawal of your permission does not affect the legality of the processing done under this permission until its withdrawal.

Automated decision in individual cases including profiling

You have the right not to be subjected to a decision made exclusively on the basis of an automated processing – including profiling – which develops legal dimensions or seriously impairs it in a like manner. This does not apply when the decision

a. is required for the finalisation or fulfillment of a contract between you and the person responsible.

b. Is allowed on the basis of the legal regulations of the EU oder its member states, to which the person responsible is subject, and these legal regulations entail appropriate measures for the protection of your rights and freedoms as well as your interests, or

c. are made with your express consent.

These decisions, however, may not be based on particular categories of personal data according to Art. 9 (1) of the GDPR, if Art. 9 (2) a or g applies and appropriate measures for the protection of your rights and freedoms as well as your justifiable interests have been taken.
With regard to the aforementioned cases in a and c the person responsible undertakes appropriate measures to guarantee your rights and freedoms as well as your justifiable interests, to which at least the right to obtain the intervention of someone on behalf of the person responsible, based on the submission of your point of view and on the contestation of the decision.

The right to file a complaint with a supervisory authority

Notwithstanding other administrative or jurisdictional legal aid, you have the right to file a complaint with a supervisory authority, particularly in the member state of your place of residence, of your place of work or of the place where the alleged infraction occurred, if you are of the opinion that the processing of the personal data relating to you violated the GDPR.
The authority, with whom the complaint was lodged, will inform the complainant about the status and the results of the complaint, inclusive of the possibility of legal courtroom aid after Art. 78 of the GDPR.

§8 Information, objection, notification, and removal possibilities

You have at all times the possibility to countermand with subsequent effectiveness your agreement to the processing of personal data and to delete or change your personal data. If the data are required for the fulfilment of a contract or for the execution of precontractual measures, the deletion of the data is only possible as long as no contractual or legal obligations bar such deletion.

Requests for information, notification, and deletion as well as the revocation or contradiction in relation to permission granted to us for the use of data may be declared without a form as follows:

by mail:
Aurojuli
Anke Hentschel-Stüssi
Karl-Liebknecht-Str. 11
10178 Berlin
Germany
by Telephone: +49-171-3662645
by E-Mail: info@aurojuli.com

§9 Cookies

We use so-called „cookies“ for our websites. Cookies are small amounts of text data which are deposited on your computer and stored by your browser. Through the positioning of cookies our webserver can recognise your browser, your individual settings on our website and, if need be, parts of the application data, thereby facilitating the use of our sites.
We use cookies to identify you, after your succesful log-in in the secure client domain, for the entire duration of your visit. Address and email information can thereby be simplified in the indicated area.
Cookies are also used, to make the use of a shopping cart possible. Products can remain in this way in the shopping cart for a certain time and be purchased subsequently without having to search for them anew in the online shop.

The purpose of the implementation of technically essential cookies is to simplify the use of websites for the user. Some functions of our internet site cannot be offered without the application of cookies. For this it's necessary for the browser to be recognized again even after a switch to another page. The user data collected by the technically essential cookies are not applied to the creation of user profiles.

The legal basis for the processing of personal data with the use of cookies is in our justifiable interest, Art. 6 (1) f of the GDPR.

Cookies are stored on the computer of the user and transmitted by it to our site. For that reason you as user retain full control over the use of cookies. Via your browser settings you have the option of refusing cookies, deleting them from your computer, blocking cookies or being asked permission prior to the application of a cookie. Some of the cookies set by us are deleted from your computer after each session (session cookies). But cookies are also used, which stay on your computer for a certain time and make it possible for your browser to be recognized at your next visit (persistent cookies). With the deactivation of cookies for our website, possibly not all of the functions of our website can be used in their entirety anymore.

We also employ cookies from third parties.

§10 The application of Google Analytics

This online shop uses Google Analytics, a web analysis service of Google LLC („Google“, www.google.de). Google Analytics also uses so-called „cookies“, textual data, which are stored in your computer and allow an analysis of your use of the website. The automatically raised information concerning your use of this website are usually transferred to a Google server in the USA and stored there. Through the activation of IP anonymisation on this website the IP address is abbreviated before transmission within the member states of the European Union or in other countries under the contract agreement for the European economic area. Only in exceptional cases is the complete IP address transmitted to a Google server in the US and abbreviated there. At our behest Google uses this information to evaluate the use of the website, to collate reports about website use and to render further services connected to website and internet use. The anonymised IP address transmitted from your browser to Google is categorically not combined with other data from Google. After the purpose has been achieved and the end of the our application, the data raised in this connection are deleted.

Google LLC has its headquarters in the US.

You can prevent the storage of cookies with an appropriate setting on your browser.
You can, moreover, prevent the recording of the data (including your IP address) generated by the cookie and related to your use of the website for Google as well as the processing of these data by Google by downloading and installing the browser plug-in available via following link: http://tools.google.com/dlpage/gaoptout?hl=en

§11 The application of social plug-ins

The following social plug-ins are integrated into our pages:

Facebook, the provider is Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. You will recognise the Facebook plug-in by the Facebook logo on our pages. You will find an overview of the Facebook plug-ins here: https://developers.facebook.com/docs/plugins/. When you are logged in on Facebook and visit products on our website you can share these via the plug-in directly on Facebook.

Twitter. These functions are provided by Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA. Through the use of Twitter and the function "Re-Tweet" the websites visited by you are connected to your Twitter account and made known to other users. In this operation data are also transferred to Twitter.

Pinterest is offered by Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland. In the logged-in state of Pinterest your IP address and the addresses of visited websites are transmitted to Pinterest. This serves to identify a client account and for the recommendation of pins and pinboards.

We want to advise you that we, as providers of the sites have no information concerning the contents of the transferred data or their use by Facebook, Twitter and Pinterest.
You may find further information concerning this in the data protection declaration
of Facebook under https://facebook.com/policy.php
of Twitter under https://twitter.com/privacy
of Pinterest under https://policy.pinterest.com/privacy-policy

If you are a member of the aforementioned providers and do not wish the provider to collect data about you through our internet presentation and connect it to the member data stored with the provider you must log out of the relevant provider before your visit to our internet site.

§12 Protection of minors

Children and persons under 18 years of age should not transmit any personal data to us without the permission of their parents or legal guardian. We don't ask for any personal data from children, do not collect them and do not transmit them to third parties.

§13 Changes to the data protection declaration

We reserve the right to change the data protection declaration, in order to accomodate changed legal aspects or changes in services or in the processing of data. This applies however only with respect to declarations of data processing. Should the permission of the users be required or parts of the data protection declaration contain regulations affecting the contract conditions with the user, the changes will only take effect with the permission of the user.
The users are asked to regularly inform themselves about the contents of the data protection declaration.