INTRODUCTION
This website is operated by: Boho Style Unipessoal LDA.
It is very important to us to handle the data of ourWebsite visitors and to protect them in the best possible way. For this reason, we make every effort to meet the requirements of the GDPR. In the following we explain you how we yours process data on our website. To this end, we use language that is as Clear and transparent as possible so that you really understand what with your Data happens.
GENERAL INFORMATION
1. Processing of personal data and other terms
Data protection applies to the processing of personal data. Personal data means all data with which you be personally identifiedcan. This is, for example, the IP address of the device (PC, laptop, smartphone, etc.) before defm you straightsits. Such data is processed when ’something happens to it‘. Here, for example, the IP is transmitted from the browser to our provider and automatically stored there. This is then a processing (according to Art. 4 No. 2 GDPR) of personal data (according to Art. 4 No. 1 GDPR). These and other legal definitions can be found in Art 4 GDPR.
2. Applicable regulations/laws – GDPR, BDSG and TTDSG
The scope of data protection is regulated by laws. In this case, these are the GDPR (General Data Protection Regulation) as a European regulation and the BDSG (Federal Data Protection Act) as a national law. In additiom the TTDSG supplements the provisions from the GDPR as far as the use of cookies is concerned.
3. The responsible
Responsible for data processing on this website isthe responsible person within the meaning of the GDPR. This is the natural or legal person Who alone or jointly With others determines the purposes and means of the processing of personal data.
Those responsibleyou reach under:
Boho Style Unipessoal LDA
8135-024 Almancilv
Concelho de Loulé
Portugal
contact@boho-casa.com
4. This is how data is basically processed on this website
As we have already established, some data (e.g. IP address) is collected automatically. This data is mainly required for the technical provision of the website. If we use personal data beyond this or collect other data, we Clarify the followingYou about this or ask for consent. Other personal datayou share consciously with us. Detailed information on this you will receive further down.
5. Yours Right
The GDPR equips you with comprehensive rights. These include, for example, free information about the origim recipient and purpose of the data yours stored personal data. In addition you can request the correctiom blocking or deletion of this data or you complain to the competent data protection supervisory authority. A given consentyou can revoked at any time. What these rights look like in detail and how they are to be exercised, you will find in the last section of this Privacy Policy.
6. Data protection – Our View
Data protection is more than just a chore for us! Personal data has great value and careful handling of this data should be a matter of course in our digitalized world. Further more you shall as Website visitors be able to decide for themselves what, when and by whom to do withYour data „happens“. We there for endertake to comply with all legal provisions, collect only the data we need and, of course, treat it confidentially.
7. Disclosure and deletion
The transfer and deletion of data are also important and sensitive issues. We would the re fore like to you to briefly inform you in advance about our general approach to this. A transfer of data only takes Place on the basis of a legal basis and only if this is unavoidable. This may be the case in particular if it is a so-called Data Processor and a Data Processing Agreement has been concluded in accordance With Art. 28 GDPR. We delete yours data when the purpose and legal basis for processing no longer apply and the deletion does not conflict with any other legal obligations Art. 17 GDPR also provides a ‚good‘ overview of this. All further informationyou take from please read this Privacy Policy and turn for specific questions to the person responsible.
8. Hosting
This website is hosted externally. The personal data collected on this website is stored on the hoster’s servers. This includes the automatically collected and stored log files (see below for more details), as well as all other data that the Website visitors specify. External hosting is carried out for the purpose of secure, fast and reliable provision of our website and in this context serves to fulfill the contract with our potential and existing customers. Customers. The legal basis forthe processing is Art. 6 (1) lit a, b and f GDPR, as well as 25 (1) TTDSG, insofar as consent includes the storage of cookies or access to information in the terminal device of the website visitor or user as defined by the TTDSG. Our hoster only processes data that is necessary for the fulfillment of its service obligation and acts as our Data Processor, which means that it is subject to our instructions. We have concluded a corresponding Data Processing Agreement with our hoster.
We use the following hoster:
Strato
Strato AG, Otto-Ostrowski-Strasse 7, 10249 Berlin.
impressum@strato.de
https://www.strato.de/datenschutz/.
9. Legal basis
The processing of personal data always requires a legal basis. The GDPR provides for the following possibilities in Art. 6 (1 ) Sentence 1:
a) The data subject has given his/her consent to the processing of personal data concerning him/her for one or more specific purposes;
b) the processing is necessary for the performance of a contract to which the data subject is party or for the implementation of pre-contractual measures taken at the data subjects request;
c) processing is necessary for compliance with a legal obligation to which the responsible personsubject to;
d) the processing is necessary in order to protect the vital interests of the data subject or another natural person;
e) processing is necessary for the performance of a task carried out in the public interest or in the exercise of offcial authority vested in the responsible was transferred;
f) processing is necessary for the purposes of safeguarding the legitimate interests of the responsible or of a third party necessary unless the interests or fundamental rights and freedoms of the data subject which require the protection of personal data override this, in particular where the data subject is a child.
In the following sections we will you State the specific legal basis for the respective processing.
WHAT HAPPENS ON OUR WEBSITE
When you visit our website, we process your personal data. We use SSL or TLS encryption to protect this data in the best possible way against unauthorized access by third parties. This encrypted connection you recognize that in the address line yours browser shows a https:// or a lock symbol. In the following you will find out, which data is collected when you visit our website, for what purpose this is done and on what legal basis.
Data collection when calling up the website
By calling up the website, information is automatically stored in so-called server log files. This is the following information:
- Browser type and version
- Operating system used
- Referrer URL
- Host name of the accessing computer
- Time of the server request
- IP address
This data is temporarily required in order to you to be able to display our website permanently and without problems. In particular, this data is used for the following purposes:
- System security of the website
- System stability of the website
- Website troubleshooting
- Connecting to the website
- Website presentation
The data processing is carried out in accordance with Art. 6 para .1 lit. f GDPR and is based on our legitimate interest in the processing of this data, in particular the interest in the functionality of the website as well as its security. If possible, this data is stored pseudonymously and deleted after the respective purpose has been achieved. Insofar as the server log files allow the identification of the person concerned, the data is stored for a maximum period of 14 days. An exception exists if a security-relevant event occurs. In this case, the server log files are stored until the elimination and final clarification of the security-relevant event. For the rest, a consolidation with other data does not take Place.
2. Cookies
2.1 General
https://boho-casa.com/cookie-richtlinie-eu/
This website uses so-called cookies. This is a data record, a Piece of information that is stored in the browser. Yours device and is stored in relation to our website. By setting cookies, the navigation of the website in particular can be made easier for the visitor. In our cookie consent tool you will find all information about the cookies that we use on our website (if applicable, With your consent).
2.2 Reject cookies
All cookies that are not technically necessary, you can directly via our cookie consent tool. The setting of cookies can be prevented by you the settings yours Browserscustomizes. Hereyou will find the corresponding links to frequently used browsers:
Mozilla mozilla:
https://support.mozilla.org/de/kb/cookies-und-website-daten-in-firefox-loschen?redirectslug=Cookies+l%C3%B6schen&redirectlocale=de
Google Chrome:
https://support.google.com/chrome/answer/95647?co=GENIE.Platform%3DDesktop&hl=de
Microsoft Edge:
https://support.microsoft.com/de-de/windows/l%C3%B6schen-und-verwalten-von-cookies-168dab11-0753-043d-7c16-ede5947fc64d
Safari:
(https://support.apple.com/de-de/guide/mdm/welcome/web) and (https://support.apple.com/de-de/guide/safari/sfri11471/mac) As far as you another browser use sit is recommended to use the name yours browser and ‚delete and manage cookies‘ in a search engine and follow the official link to your browser to follow. Alternative you can use your Cookie settings also under www.aboutads.info/choices/ or www.youronlinechoices.com manage. We must you However, we would like to point out that blocking/deleting cookies ompletely may impair the use of the website.
2.3 Technically necessary cookies
We use technically necessary cookies on this website to ensure that our website functions without errors and in accordance with applicable laws. They help to make the website user-friendly. Some functions of our website cannot be displayed without the use of cookies. The legal basis for this is, depending on the individual case, Art. 6 para. 1 lit. b, c and/or f GDPR.
2.4 Technically unnecessary cookies
In additiom we also use cookies on our website that are not technically necessary. These cookies are used, among other things, to analyze the surfing behavior of the website visitor or to offer website functions that are, however, not technically necessary. The legal basis for this is yours Consent pursuant toArt 6 para .1 lit. a GDPR. Technically unnecessary cookies are only stored with yours Consent set, which you Revoke at any time in the cookie consent toolcan.
3 Data processing through user input
3.1 Own data collection
We offer the following (service) on our website: Booking
For this purpose, we collect the following data:
Name
E-mail address
The legal basis for this data processing is Art. 6 para. 1 lit. b GDPR.
The data will be deleted as soon as the respective purpose ceases to apply and it is possible in accordance with the legal requirements.
3.2 Contact
a) E-mail
When you contact us by e-mail kick we process yours e-mail address and any other data contained in the e-mail. This data is stored on the mail server and in some cases on the respective end devices. Depending on the request, the legal basis for this is regularly Art 6 para. 1 lit. f GDPR or Art. 6 para. 1 lit. b GDPR. The data will be deleted as soon as the respective purpose no longer applies and it is possible in accordance with the legal requirements.
b) Contact form
We offer a contact form. This is used to contact our company. In this form we usually process your First and last names, yours Telephone number, yours e-mail address, a postal address and the content of the message. The data is stored on our web server and forwarded internally to the relevant e- mail addresses.
The legal basis for data processing is Art 6 para. 1 lit. f GDPR, as we have a legitimate interest in responding to your request. Yours concerns and have an uncomplicated way of contacting us. If the contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art 6 parm. 1 lit. b GDPR. We delete this data no later than 3 months after receipt, unless it is required for a contractual relationship that has arisen.
We bind the contact form of
Strato
Strato AG, Otto-Ostrowski-Strasse 7, 10249 Berlin, Germany.
WordPress
Automattic Inc, 60 29th Street #343, San Francisco, CA 94110, United States of America
https://wordpressorg/about/privacy/ on our website.
3.3 Cookie Consent Tool
3.4 Compliance
To ensure that only those cookies are set on our website for which there is a legal basis, we use the Complianz consent management tool from Complianz B.V., Kalmarweg 14-5, 9723 JG Groningen, the Netherlands. This service is used to obtain consent of the website visitor for the storage of certain cookies in his browser or the use of certain technologies and document them in compliance with data protection regulations. When you access this website, thefrom the website visitor consent given or the withdrawal of consent as a compliance cookie in the browser_of the website visitor stored. No connection to the Complianz servers is established for this purpose. The legal basis is Art 6 para. 1 lit. c GDPR. Complianz is used to obtain the legally required consent for the use of cookies. Until of the website visitors requests deletion or Complianz it self deletes the data or the purpose for storing the data no longer applies, the data collected will be stored. The mandatory statutory retention periods remain unaffected by this.
3.5 Analysis and tracking tools
3.5.1 Google Analytics
We use Google Analytics on this website. Google Analytics is a web analytics Service. This service is provided by Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies to the user and thus to analyze user behavior. These cookies are only set with consent Consent can be revoked at any time and managed in our cookie consent tool. The legal basis for the processing is Art. 6 para. 1 lit. a GDPR and S 25 para. 1 TTDSG. The information collected here is usually transferred to a Google server in the USA and stored there On July 10, 2023, the European Commission adopted an adequacy decision for the USA. Goggle LLC is certified under the EU-US Privacy Framework. However, as the Google servers are located worldwide and data transfer to third countries (e.g. Singapore) cannot be ruled out, the EU Commission’s Standard Contractual Clauses (SCC) apply. The use of Google Analytics results in IP anonymizatiom. The IP address of the respective user is shortened on servers within the member states of the EU (or the European Economic Area) in such a way that it is no longer possible to trace it back to a natural person. In additiom Google undertakes to provide appropriate data protection via the Google Ads data processing conditions and creates an evaluation of website use and website activity and provides the services associated with use. The Google Ads Data Processing Terms apply to companies that are subject to the EU General Data Protection Regulation (GDPR) of the European Economic Area (EEA), the California Consumer Privacy Act (CCPA) or similar regulations. An additional browser plugin can be used to prevent the information collected (such as the IP address) from being sent to Google and used by Google. The plugin and further information you will find under https://tools.google.com/dlpage/gaoptout?hl=de. Otherwise, the storage period depends on the type of data processed. Each customer can choose how long Google Analytics stores data before it is automatically deleted. The maximum lifespan ofa Goggle Analytics cookie is two years.
Further information on the use of data by Google you will find also under https://support.google.com/analytics/answer/6004245?hl=de. For all further questions you can also directly to support-deutschland@google.com turn.
3.5.2 Google Maps
We use Google Maps on this website. Google Maps is a web mapping service. This service is provided by Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Ireland. When using Google Maps, the IP address is stored. This data is usually transferred to a Google server in the USA and stored there. We have no influence on this. Google may use Google Fonts for a uniform presentatiom These fonts are stored in the browser cacheof the website visitorof the website Visitor. Google Maps uses cookies. These cookies are only set with your consent. Consent can be revoked at any time. The legal basis is Art 6 para. 1 lit. a GDPR and S 25 para. 1 TTDSG, insofar as this consent allows access to information in the end device of the user or the storage of cookies within the meaning of the TTDSG. In the case of data transfer to the USA, the standard contractual clauses (SCC) of the EU Commission apply.
More details:
https://business.safety.google/controllerterms/ and
https://business.safety.google/controllerterms/sccs/
https://policies.google.com/privacy?hl=de
3.5.3 Google Ads
We use Google Ads on this website. Google Ads is an online advertising program of Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Ireland. The service enables us to link advertisements in the Google search engine to certain key words and to Place targeted advertisements based on existing user data. Cookies are used for conversion tracking. The legal basis for the processing is Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG. The consent can be revoked at any time. In the case of data transfer to the USA, the standard contractual clauses (SCC) of the EU Commission apply.
More details:
https://privacy.google.com/businesses/controllerterms/mccs/
3.5.4 Google AdSense
We use Google AdSense on this website. Google AdSense is a service that embeds advertisements into a website. This service is offered by Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4 Ireland. When selecting advertising, the so-called „context information“ (e.g. location, content of the website) is used in the non-personalized mode. Google AdSense uses cookies to fight against fraud and abuse. The legal basis for the processing is Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG. The consent can be revoked at any time. In the case of data transfer to the USA, the standard contractual clauses (SCC) of the EU Commission apply.
More details:
https://privacy.google.com/businesses/controllerterms/mccs/
https://adssettings.google.com/authenticated
https://policies.google.com/technologies/ads
https://www.google.de/intl/de/policies/privacy/
3.6 Third-party content
3.6.1 Google Fonts
We use Google Fonts on this website. Google Fonts is a tool that enables a uniform display of fonts (so-called Google Fonts). This service is offered by Google Ireland Limited (‚Google“), Gordon House, Barrow Street, Dublin 4, Ireland. As soon as a website visitor Visits a website that uses Google Fonts, the browser used must connect to the Google servers. No cookies are set in this process owever, the IP addressof the website visitor and used for analysis purposes he legal basis for the processing is Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as this consent allows access to information in the terminal device of the user or the storage of cookies within the meaning of the TTDSG. This consent can be revoked at any time.
Details :
https://developers.google.com/fonts/faq?hl=de
https://policies.google.com/privacy?hl=de. We use Google Fonts on our website. Here, fonts are provided and used by Google in order to be able to display them Accordingly. This service is provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland).
3.6.2 Adobe Fonts
We use Adobe Fonts on this website. Adobe Fonts is a font service that enables a uniform display of fonts (web fonts). This service is provided by Adobe Systems Incorporated (Adobe), 345 Park Avenue, San Jose, CA 95110-2704, USA. As soon as a website visitor of a website that uses Adobe Fonts, the browser used must connect to the Adobe servers in the USA. No cookies are set in this process However, Adobe receives the IP addressof the website visitor This processing is carried out With consent in accordance With Art. 6 para. 1 lit. a GDPR. The consent is revocable. Otherwise, the legal basis for the processing is Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in the uniform presentation of the typeface on our website, improved Ioading times and a Iower implementation effort. In the case of data transfer to the USA, the standard contractual clauses (SCC) of the EU Commission apply.
Details:
https://www.adobe.com/de/privacy/eudatatransfers.html
https://www.adobe.com/de/privacy/policies/adobe-fonts.html
3.6.3 Font Awesome
We have embedded Adobe fonts locally on our server. Thus, despite the use, no data is transmitted to Adobe.
3.6.4 WP-Optimize
We integrate the functions of WP-Optimize on our website. This service is provided by Updraft WP Software Ltd, Welsh Ice Britannia House, Caerphilly Business Park, Caerphilly, Wales, CF83 3GG. WP-Optimize is a WordPress optimization tool that includes database cleanup, image compression and page caching to improve website performance and speed. lt offers features such as automatic database cleanup, lossless and lossy image compression, device-specific caching, CSS and JavaScript minimization, GZIP compression and the ability to manage multiple websites with UpdraftCentral. WP Optimize can also set cookies. These cookies are only set With consent Consent can be revoked at any time. The legal basis for this is Art. 6 para. 1 lit. a GDPR. Otherwise, the legal basis for the processing of personal data is Art. 6 Para. 1 lit. f GDPR. We have a legitimate interest in optimizing the presentation of our website. Further information:
https://getwpo.com/data-protection-and-privacy-centre/
3.7 CRM systems
3.8 WordPress
https://de.wordpress.org/
THIS IS ALSO IMPORTANT
Finally we would like to you extensively and in detail about yours Inform rights and you communicate how you be informed about changes to data protection equirements.
4.1 Yours Rights in detail
4.1.1 Right to information according to Art. 15 GDPR
You can Request information about whether personal data of you are processed. If this is the case,you can request further information on the type and manner of Processing. A detailed list you will find in Art 15 para. 1 lit. a to h GDPR.
4.1.2 Right to rectification according to Art. 16 GDPR
This right includes the correction of inaccurate data and the completion of incomplete personal data.
4.1.3 Right to deletion according to Art. 17 GDPR
This so-called ‚right to be forgotten‘ givesYou the right, under certain conditions, to demand the erasure of personal data by the controller. This is generally the case if the purpose of the data processing no longer applies, if consent has been withdrawn or if the initial processing took Place without a legal basis. A detailed list of reasonsyou will find in Art. 17 para. 1 lit. a to f GDPR. This „right to be forgotten“ also corresponds to the controller’s obligation under Art. 17 para. 2 GDPR to take reasonable measures to ensure the general erasure of data.
4.1.4 Right to restriction of processing according to Art. 18 GDPR
This right is subject to the conditions set out in Art 18(1)(a) to (d).
4.1.5 Right to data portability according to Art. 20 GDPR
Here, the basic right to receive one’s own data in a common form and to transfer it to another data controller is regulated. However, this only applies to data processed on the basis of consent or a contract pursuant to Art. 20 (1) (a) and (b) and to the extent that this is technically feasible.
4.1.6 Right of objection according to Art. 21 GDPR
You can Principle of processingYours Object to the processing of personal data. This applies in particular ifYour interest in the objection outweighs the legitimate interest of the controller in the processing and if the processing relates to direct marketing and/or profiling.
4.1.7 Right to „decision in individual cases“ according to Art. 22 GDPR
You have the right not to be subject to a decision based solely on automated processing (including profiling) which produces legal effects concerning you or similarly significantly affects you. You has legal effect vis-ä-vis or you significantly impaired in a similar manner. However, this right is also restricted and supplemented by Art. 22 (2) and (4) GDPR.
4.1.8 Other rights
The GDPR includes comprehensive rights to inform third parties about whether or howYou rights pursuant to Art. 16, 17, 18 GDPR. However, this is only possible or feasible with reasonable effort. We would like toYou again at this pointYour right to withdraw consent granted in accordance With Art 7 (3) GDPR. However, this does not affect the lawfulness of the processing carried out up to that point. We would also like toYou also on yours rights according to §§ 32 ff. BDSG, which, however, are largely congruent with the rights just described.
4.1.9 Right of appeal according to Art. 77 GDPR
You have also the right you to lodge a complaintwith a data protection supervisory authority if you the viewarethat processing of the you personal data concerned violates this Regulatiom
WHAT IF TOMORROW THE GDPR IS ABOLISHED OR OTHER CHANGES TAKE PLACE?
The current status of this Privacy Policy is 18.04.2024.From time to time it is necessary to adapt the content of the Privacy Policy in order to respond to factual and legal changes. We therefore reserve the right to amend this Privacy Policy at any time. We will publish the amended version in the same Place and recommendYouto read the Privacy Policy regularly.
