Data protection

1. General information

The security and preservation of the confidentiality of your personal data is important to us. Below you will find information about how we process your data and the measures we take to protect your privacy as a user of this site. All data collected here will be treated as strictly confidential within our area of responsibility in accordance with the provisions of the European General Data Protection Regulation (GDPR) and in accordance with the country-specific data protection regulations that apply to us, such as the new Federal Data Protection Act (BDSG new) or the Telemedia Act (TMG). Processing is carried out either in accordance with Article 6 Paragraph 1 Letter a of the GDPR based on your consent, in accordance with Article 6 Paragraph 1 Letter b of the GDPR to fulfill or initiate a contract with you, or in accordance with Article 6 Paragraph 1 Letter c of the GDPR to fulfill a contract legal obligation on our part or on the basis of Art. 6 Para. 1 lit. f GDPR to protect our legitimate interests.

2. Collection and processing of personal information

Personal data is any information relating to an identified or identifiable natural person. A natural person is considered identifiable if he or she can be identified directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or one or more special features, or even the expressions the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person.

The processing of personal data can be carried out with or without the help of computer systems and includes the following activities: collecting, recording, organizing, classifying, storing, adapting or changing, reading out, querying, using, disclosing through transmission, distribution or any other form of provision, comparison or association, restriction, deletion or destruction.

We process your personal information that you provide to us via our website only to correspond with you and only for the purpose for which you provided the data to us.

Every time you access our website, we automatically and temporarily collect and store information that your browser leaves with us during your use of our website and every time you access a file in a so-called log file. Specifically, the following data is stored for each access/retrieval:

IP address
Date and time of retrieval
Page accessed/name of file accessed
Web browser and requesting domain
Amount of data transferred
Message indicating whether access was successful

Processing is carried out in accordance with Article 6 Paragraph 1 Letter f of the GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of illegal use.

3. Rules for receiving our newsletter

If you register to receive our newsletter, we will use your email address for our own advertising purposes until you revoke your consent. For the personalized newsletter dispatch, the first name can be entered as a voluntary entry when registering. After registering, you will receive an email asking you to confirm your registration. This confirmation is necessary so that no one can log in with someone else's email address. You can unsubscribe from the newsletter at any time using the unsubscribe link “Unsubscribe from the newsletter” in the newsletter. We also give you the opportunity to unsubscribe from future newsletters using the following contact details, without incurring any costs other than the transmission costs according to the basic tariffs:

Email hi(at)root-atelier.com

4. Use and Disclosure of Personal Information

Your personal data (e.g. last name, first name, telephone, address, email address), which you provide to us via our website, e.g. via our contact form, will only be processed to correspond with you, to process your request or for the purpose for which you have provided us with the data.

The data is not evaluated in any other way, except for statistical purposes and then generally in anonymized form.

If we use service providers to carry out or fulfill tasks for us, the contractual relationships will be regulated in writing in accordance with the provisions of the European General Data Protection Regulation (EU-GDPR) and the new Federal Data Protection Act (new BDSG). This affects the following categories of recipients:

IT service provider to ensure security and confidentiality
Financial service providers to process business activities and comply with legal regulations
Transport service provider

Additionally, we may share anonymous data with partners to conduct statistical analysis. All of these parties are prohibited from using your personal information unless it is used to provide our services.

5. User registration and ordering in our online shop

We collect and process your personal data as part of an ordering process in our online shop in order to enable you to select and order the selected products and services, as well as their payment and delivery. This data includes, among other things, information such as last name, first name, date of birth, delivery and billing address, email address and information about the payment method you have chosen. The data collected is always transmitted to us in encrypted form and, if necessary for the process, to service providers contracted by us, such as transport and/or payment service providers.

On our website we offer you the opportunity to register by providing personal data. Registration serves to provide a better service for you as a user, to carry out pre-contractual measures and to fulfill and bill a contract. If the user account is terminated, your data will be deleted with regard to the user account, unless commercial, tax or administrative retention periods must be observed.

In our online shop we use session cookies to store the contents of your shopping cart, as well as permanent cookies to store the login status.

We only pass on your data to third parties for the purposes of delivery, payment or within the scope of legal permissions and obligations towards legal advisors and authorities. Your data will only be passed on and processed in third countries if this is necessary to fulfill the contract.

6. Storage period of your data

Your personal data that has been provided to us via our website will only be stored until the purpose for which it was entrusted to us has been fulfilled and storage is necessary. If commercial, tax or administrative retention periods must be observed, the storage period for certain data can be up to 6 or 10 years.

7. Your privacy rights

As a data subject whose data we process, you have extensive rights under the EU General Data Protection Regulation. You have the right to information about your personal data processed by us, in particular about the processing purposes, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period and the criteria for determining the storage period. If you no longer agree to the processing or storage of your personal data or your data is incorrect, you have the right to correction, deletion or restriction of processing. Upon your request or revocation, we will make the necessary corrections or arrange for the deletion or restriction of the processing of your data or make the necessary corrections to the extent this is possible under applicable law. Furthermore, if you have given your consent, you have the right to object to processing at any time in the future, the right to data portability and the right to lodge a complaint with a supervisory authority.

8. Data encryption

To protect the confidentiality of your data, we use state-of-the-art encryption methods (e.g. SSL) via HTTPS when transmitting your data.

9. Cookie Use

In order to make visiting our website user-friendly and to enable the use of certain functions, we use so-called cookies on various pages. Cookies are small text files. These are downloaded to your computer or mobile device from the websites you visit. This allows the website to recognize your device when you use the website and also when you return later. This will help you make it easier for you to use the pages and make them more individual for you. When using cookies, we collect and process certain user information from you in the individual scope of the text files, such as browser and location data as well as IP address. Cookies are automatically deleted after a specified period of time, which may vary depending on the cookie. If you neither deactivate cookies nor use the opt-out function, we will assume that you accept the use of cookies.

10. Using script libraries - Google Webfonts

In order to display the content of our website correctly and in a graphically appealing way across browsers, we use script and font libraries such as: B. Google Webfonts (https://www.google.com/webfonts/) . Google web fonts are transferred to your browser's cache to avoid multiple loading. If your browser does not support Google Web Fonts or prevents access, content will be displayed in a standard font.

When you call up the script or font libraries, a connection to the library operator is automatically established. It is theoretically possible, although it is currently unclear whether and, if so, for what purposes, that the operator of the corresponding libraries also collects data.

You can find the privacy policy of the library operator Google here: https://www.google.com/policies/privacy/

11. Use of Google Analytics

Our website uses Google Analytics, a web analysis service from Google Inc. (“Google”). Google Analytics uses “cookies”, text files that are stored on your computer and that enable your use of the website to be analyzed. The information generated by the cookie about your use of the website is usually transmitted to a Google server in the USA and stored there. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data. We have also expanded Google Analytics on this website to include the code “anonymizeIP”, which guarantees that your IP address is masked so that all data is collected anonymously. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.

On behalf of the operator of our website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. You can prevent the storage of cookies by setting your browser software accordingly; However, we would like to point out that in this case you may not be able to fully use all of the functions of this website.

You can prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link : http://tools.google.com/dlpage/gaoptout?hl=de . As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent data collection by Google Analytics by clicking on this link. An opt-out cookie is set to prevent future collection of your data when you visit our website. The opt-out cookie only applies in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you will have to set the opt-out cookie again.

We continue to use Google Analytics to evaluate data from double-click cookies and AdWords for statistical purposes. If you do not want this, you can deactivate this via the ad preferences manager (http://www.google.com/settings/ads/onweb/?hl=de) .

13. Use of the “MailChimp” application to send newsletters

Our newsletters are sent using “MailChimp”. This is an application from the provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. For this purpose, the email addresses of our newsletter recipients are stored on the Rocket Science Group servers in the USA. The “MailChimp” application uses this information to send newsletters on our behalf. In addition to our contracts with the provider, we have concluded a “Customer EU Data Processing Addendum”. The provider Rocket Science Group hereby declares that it operates under the US-EU -Data protection agreement “Privacy Shield" is certified and thus undertakes to comply with EU data protection regulations and in particular not to pass on the data to third parties. For further information on the Rocket Science Group's data protection regulations, please click here: https://mailchimp.com/about/ security/ .

14. Data protection information in accordance with the EU General Data Protection Regulation

In addition to these website-specific data protection information, the data protection information in accordance with the EU General Data Protection Regulation also applies.

Information obligations for customers (pdf link)
Information obligations for business partners (pdf link)

15. Disclaimer

We occasionally refer to third-party websites. Although we select these third parties carefully, we cannot assume any liability or guarantee for the accuracy or completeness of the content or the data security of third-party websites. This data protection agreement is also not valid for third-party linked websites. All information contained on this website has been checked with great care. However, we do not guarantee that the content of our own websites is always correct, complete and up to date. Substantial changes to this data protection declaration will be updated online here in a timely manner.

16. Legal validity of this data protection declaration

This data protection declaration is to be viewed as part of what our website offers. If parts or individual formulations of this text do not, no longer or do not completely correspond to the applicable legal situation, the remaining parts of the text remain unaffected in their content and validity.