Privacy Policy

1. Name and contact details of the controller responsible for processing and the company Data Protection Officer

This Privacy Policy applies to data processed by:

Controller:  Studio Sarmite, Schifferstrasse 11, 60594 Frankfurt am Main, Tel.: +49 17657968636

E-Mail: hello@studiosarmite.com

(hereinafter referred to as Studio Sarmite)

The Data Protection Officer of Studio Sarmite can be reached at the address Schwedlerstrasse 1-5, Studio 3.08, 60314, Frankfurt am Main or by email at sarmite.polakova@gmail.com

2. Collection and storage of personal data, nature and purpose of its use

 a)    Visiting the website

 https://studiosarmite.com/  is hosted by Squarespace. Squarespace collects personal data when you visit this website, including:

  • Information about your browser, network and device;

  • Web pages you visited prior to coming to this website;

  • Web pages you view while on this website;

  • Your IP address.

Squarespace needs the data to run this website, and to protect and improve its platform and services. Squarespace analyzes the data in a de-personalized form.

We process the above mentioned data for the following purposes:

  • Ensuring you seamlessly connect to the website;

  • Ensuring convenient use of our website;

  • Evaluating system security and stability;

  • For further administrative purposes.

The legal basis for data processing is Article 6 (1) (f) General Data Protection Regulation (GDPR). Our legitimate interest for data collection follows from the purposes listed above. Under no circumstances will we use the data collected for the purpose of drawing conclusions about you personally.

In addition, we use cookies and analysis services when you visit our website. More information can be found in sections 4 and 7 of this Privacy Policy.

 

b) Using our contact form

If you have any questions, please contact us using the form provided on the website. A valid email address must be provided so that we know who the enquiry came from and are able to answer it. Further information can be provided voluntarily.

Data given for the purpose of contacting us will be processed in accordance with Article 6 (1) (a) GDPR on the basis of your voluntary consent.

The personal data collected by us when you use the contact form will be automatically deleted after your request has been processed.

 

c) Purchasing from online store

When you buy something on this website, we collect personal information from you to fulfill the order. We may collect information like your:

  • Billing and shipping address;

  • Details relating to your purchase (for example, your shirt size);

  • Email address;

  • Name;

  • Phone number;

We share this information with Squarespace, our online store hosting provider, so that they can provide website services to us.

Our payment processors Stripe and Paypal (depending on which payment option you choose) will also collect payment information from you. You can read the privacy policy of Stripe at https://stripe.com/en-gb-de/privacyand Paypal privacy policy at https://www.paypal.com/myaccount/privacy/privacyhub .

As you go through checkout, this site may auto-complete your shipping and billing address by sharing what you type with the Google Places API and returning suggestions to you to improve your checkout experience.

 

3. Disclosing data

Your personal data will not be disclosed to third parties for purposes other than those listed below.

We will only disclose your personal data to third parties if:

  • You have given your express consent for this in accordance with Article 6 (1) (a) GDPR;

  • Disclosure in accordance with Article 6 (1) (f) GDPR is necessary for the establishment, exercise or defence of legal claims and there is no reason to believe that you have an overriding and legitimate interest in the non-disclosure of your data;

  • In the event that there is a statutory obligation for disclosure in accordance with Article 6 (1) (c) GDPR;

  • This is permitted by law and is necessary to fulfil our contractual obligations to you in accordance with Article 6 (1) (b) GDPR. 

 4. Cookies

This website uses cookies and similar technologies, which are small files or pieces of text that download to a device when a visitor accesses a website or app. For information about viewing the cookies dropped on your device, visit The cookies Squarespace uses.

Information is stored in the cookie that is associated in each case with the specific device used. However, this does not mean that we immediately become aware of your identity.

The use of cookies serves on the one hand to improve your experience of our service. For example, we use "session cookies" to recognise that you have already visited individual pages of our website. These are automatically deleted when you finish using our website.

In addition, we also use temporary cookies that are stored on your computer for a specified period of time in order to optimise user-friendliness. If you re-visit our website in order to use our services it automatically recognises that you have previously visited our website and which inputs you made and settings you used so you do not have to set these up again.

On the one hand we use cookies to collect statistical data about the use of our website and analyse this in order to optimise our services for you (see section 5). These cookies allow us to automatically recognise you have previously visited our website on subsequent visits. These cookies are automatically deleted after a defined period of time.

The data processed by cookies is required for the aforementioned purposes, in order to protect our legitimate interests and those of third parties pursuant to Article 6 (1) (f) GDPR.

Most browsers automatically accept cookies. However, you can configure your browser so that no cookies are stored on your computer or a message always appears before a new cookie is created. However, the complete deactivation of cookies can result in you not being able to use all the functions of our website.

 

5. Fonts

This website serves font files from and renders fonts using Google Fonts and Adobe Fonts. To properly display this site to you, these third parties may receive personal information about you, including:

  • Information about your browser, network, or device;

  • Information about this site and the page you’re viewing on it;

  • Your IP address.

 

6. Squarespace Payments

When you make a purchase from us on this website, we use Squarespace Payments as our payment solution. Squarespace Payments is a fully integrated, native payment solution provided to us by our online store service provider Squarespace. Squarespace Payments makes use of the following third party service providers which will also receive your personal information and process it in accordance with their privacy policies:

 

7. Analytical tools

a) Tracking tools

The following tracking measures used by us are used on the basis of Article 6 (1) sentence 1 (f) GDPR. With these tracking measures we want to ensure the needs-based design and continued optimisation of our website. We also use tracking measures to collect statistical data about the use of our website and analyse this in order to optimise our services for you. These interests are considered legitimate within the meaning of the aforementioned provision.

The respective purpose of data processing and data categories are to be taken from the respective tracking tools.

b) Google Analytics

For the purpose of demand-oriented design and continuous optimisation of our pages, we use Google Analytics, a web analysis service provided by Google Inc. https://about.google/?hl=de (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter referred to as “Google”). In this context, pseudonymised user profiles are created and cookies (see section 4) are used. The information generated by the cookie regarding your use of this website, such as:

  • Browser type/version

  • Operating system used

  • Referrer URL (the previously visited page)

  • Host name of the accessing computer (IP address)

  • Time of the server request

is transmitted to Google’s server in the USA and stored there. This information is used to evaluate your usage of the website, to compile reports about website activity and to provide further services associated with website usage and Internet usage for the purposes of market research and to design this website to better suit the requirements of users. This information may also be disclosed to third parties if this is required by law or if third parties process this data on behalf of the company. In no circumstances will your IP address be associated with other data held by Google. IP addresses are anonymised so that assignment is not possible (IP masking).

You may refuse the use of cookies by selecting the appropriate settings on your browser, however, please note that if you do this you may not be able to use the full functionality of this website.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add on https://tools.google.com/dlpage/gaoptout?hl=de

As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent Google Analytics from collecting data by clicking on this link. This places an opt-out cookie in your browser which prevents your data from being collected when you visit this website in the future. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete your cookies in this browser, you must set up the opt-out cookie again.

Further information about data protection in relation to Google Analytics can be found in the Google Analytics help section for example https://support.google.com/analytics/answer/6004245?hl=de

 

c) Google Adwords Conversion Tracking

We use Google conversion tracking to collect statistical data about the use of our website and analyse this in order to optimise our services for you. Google Adwords places a cookie (see section 4) on your computer if you arrived at our website via a Google advert.

These cookies expire after 30 days and are not used for personal identification. If the user visits certain pages of the Adwords customer's website and the cookie has not yet expired, Google and the customer can recognise that the user has clicked on the ad and has been redirected to this page.

Each Adwords customer receives a different cookie. Therefore, cookies cannot be traced via the websites of Adwords customers. The information collected using the conversion cookie is used to generate conversion statistics for Adwords customers who have opted for conversion tracking. Adwords customers see the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However they do not receive any information which could be used to personally identify the user.

If you do not wish to participate in tracking you can refuse the cookie required for this - for instance by changing your browser settings to not automatically allow cookies. You can also deactivate cookies for conversion tracking by setting your browser to block cookies from the “www.googleadservices.com” domain. Google's Privacy Policy on conversion tracking can be found herehttps://services.google.com/sitestats/de.html

 

d) Squarespace Analytics

This website collects personal data to power our site analytics, including:

  • Information about your browser, network, and device;

  • Web pages you visited prior to coming to this website;

  • Your IP address.

 

This information may also include details about your use of this website, including:

  • Clicks;

  • Internal links;

  • Pages visited;

  • Scrolling;

  • Searches;

  • Timestamps.

We share this information with Squarespace, our website analytics provider, to learn about site traffic and activity.

 

8. Social plug-ins

Social plug-ins from the social networks Facebook and Instagram are used on our website on the basis of Article 6 (1) (f) GDPR to raise awareness of our website. The underlying marketing purposes is seen as a legitimate interest in terms of the GDPR. The providers of these plug-ins are responsible for ensuring their operation conforms to data protection law. These plug-ins have been integrated into our website using the two click method in order to best protect visitors to our website.

a) Facebook

We use social plug-ins from Facebook on our website to personalise your use of the website. We use the Like and the Share buttons. This is a service provided by Facebook.

If you access a page on our website which contains such a plug-in, your browser establishes a direct connection to the Facebook servers. The content of the plug-in is directly sent from Facebook to your browser and incorporated into the website.

Facebook will receive the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook account or are currently not logged in to Facebook. This information (including your IP address) is transmitted from your browser directly to Facebook’s server in the USA and stored there.

If you are logged in to your Facebook account, Facebook can directly associate the visit to our website with your Facebook account. If you interact with the plug-in, for example by using the Like button or the Share button, the corresponding information is likewise directly transferred to Facebook’s server and stored there. The information will also be published by Facebook and shown to your Facebook friends.

Facebook may use this information for the purposes of marketing, market research and to design Facebook to better suit the requirements of users. Facebook will create usage, interests and relationship profiles, for example to evaluate your use of our website with regard to the adverts shown to you on Facebook, to inform other Facebook users about your activities on our website and to provide further services associated with using Facebook.

If you do not wish Facebook to associate the collected information with your Facebook account you must log out of Facebook before visiting our website.

The purpose and scope of the data collection and the further processing and use of the data by Facebook as well as your rights in this regard and the privacy settings available to protect your privacy can be viewed in the Data Policy https://www.facebook.com/about/privacy/previous of Facebook.

  

b) Instagram

Social plug-ins are used on our website (“plug-ins”) from Instagram which is operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA (“Instagram”).

The plug-ins can be recognised by the Instagram logo, such as the Instagram camera.

If you access a page on our website which contains such a plug-in, your browser establishes a direct connection to the Instagram servers. The content of the plug-in is directly sent from Instagram to your browser and incorporated into the website. Instagram will receive the information that your browser has accessed the corresponding page of our website, even if you do not have an Instagram account or are currently not logged in to Instagram.

This information (including your IP address) is transmitted from your browser directly to Instagram’s server in the USA and stored there. If you are logged in to your Instagram account, Instagram can directly associate the visit to our website with your Instagram account. If you interact with the plug-in, for example by using the Instagram button, the corresponding information is likewise directly transferred to Instagram’s server and stored there.

This information will also be published to your Instagram account and shown to your Instagram contacts.

If you do not wish Instagram to directly associate the collected information with your Instagram account you must log out of Instagram before visiting our website.

More information can be found in the Data Policy https://help.instagram.com/155833707900388 of Instagram.

9. YouTube

The controller has integrated components of YouTube into this website. YouTube is an Internet video portal that enables video publishers to upload video clips free of charge and other users to view, evaluate and comment on such video clips likewise free of charge. YouTube permits the publication of all types of videos and both complete films and TV shows as well as music videos, trailers and videos created by users themselves can be accessed via the web portal.

YouTube is operated by YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. YouTube LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

Each time an individual page of this website which is operated by the controller and which YouTube components (YouTube videos) have been integrated is accessed, the web browser on the data subject’s IT system is automatically prompted by the YouTube component to download the representation of the corresponding YouTube component. Further information about YouTube can be found at https://www.youtube.com/intl/de/yt/about/

As part of this technical process YouTube and Google receive the information that the data subject has visited this specific sub-page of our website.

If the data subject is logged in to YouTube at the same time as when the sub-page which contains a YouTube video is accessed, YouTube is informed of the specific sub-page of our website which has been visited by the data subject. This information is collected by YouTube and Google and attributed to the YouTube account of the data subject. 

YouTube and Google always receive the information that the data subject has visited our website via the YouTube component if the data subject is logged in to YouTube at the time the data subject visits our website; this occurs regardless of whether the data subject clicks on a YouTube video or not. If the data subject does not want this information to be transmitted to YouTube and Google this can be prevented by logging out of your YouTube account before accessing our website.

YouTube’s Privacy Policy which can be found at https://www.youtube.com/yt/about/policies/#community-guidelines and provides information about the collection, processing and use of personal data by YouTube and Google.

10. Rights of the data subject

 You have the right:

  • To access the personal data processed by us in accordance with Article 15 GDPR. In particular you may obtain information about the purposes of processing, the categories of personal data, the categories of recipient to whom your data has been or will be disclosed, the envisaged period for which the personal data will be stored, the existence of the right to rectification, erasure, restriction of processing or to object to processing, the right to lodge a complaint with a supervisory authority, information as to the source of the data, if it was not collected by us, the existence of automated decision-making, including profiling and, if applicable, meaningful information about the details of this.

  • To have your inaccurate personal data which is stored by us rectified or completed in accordance with Article 16 GDPR.

  • To have your personal data stored by us erased, to the extent that the processing is not necessary for exercising the right of freedom of expression and information, to comply with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims in accordance with Article 17 GDPR.

  • In accordance with Article 18 GDPR to obtain restriction of processing of your personal data, provided that the accuracy of the data is contested by you, the processing is unlawful and you oppose the erasure of the data, we no longer need the data but the data is required by you for the establishment, exercise or defence of legal claims, or you have objected to processing pursuant to Article 21 GDPR.

  • To receive the personal data concerning yourself that you have provided to us in a structured, commonly used and machine-readable format or to have this data transmitted to a another controller, in accordance with Article 20 GDPR.

  • To withdraw consent you have previously given to us at any time in accordance with Article 7 (3) GDPR. This means that we will no longer be able to continue processing the data for which this consent was given in the future.

  • To lodge a complaint with a supervisory authority in accordance with Article 77 GDPR. You would generally contact the supervisory authority responsible for your habitual residence, place of work, or for the location of our registered office.

  

11. Right of withdrawal

If your personal data is processed on the basis of legitimate interests pursuant to Article 6 (1) sentence 1 (f) GDPR, you have the right pursuant to Article 21 GDPR to object to the processing of your personal data, provided there are reasons for this that result from your particular situation or you are objecting to direct marketing. If you are objecting to marketing you have a general right to object which will be implemented by us without you providing details about your particular situation.

If you wish to exercise your right to withdraw your consent or your right to object it is sufficient to send an email to sarmite.polakova@gmail.com

12. Data security

We use the most common SSL (Secure Socket Layer) method in connection with the highest level of encryption supported by your browser. Usually this is a 256 bit encryption. If your browser does not support 256 bit encryption we fall back to 128 bit v3 technology instead. You can recognise when individual pages of our website are encrypted before being sent by the closed padlock symbol in the bottom status bar of your browser.

Furthermore we use appropriate technical and organisational security measures to protect your data against accidental or deliberate manipulation, partial or complete loss, destruction or access by unauthorised third parties. Our security measures are continuously improved in line with technological developments.

 

13. Up-to-dateness of and changes to this Privacy Policy

 This Privacy Policy is currently valid as at January 2024.

It may be necessary to make changes to this Privacy Policy due to further development of our website and services offered on the website, or on the basis of changes in legislation and/or to regulatory requirements. The current Privacy Policy can be accessed and printed at any time on our website at https://studiosarmite.com/