DATA PROTECTION
We process your personal data confidentially and in accordance with the applicable data protection laws and this Privacy Policy. This Privacy Policy explains what personal data we process, for which purposes and on which legal bases.

INFORMATION ABOUT THE CONTROLLER
The controller responsible for data processing on this website is:

Moritz Allmendinger
trading as Dear Wendy™
Virngrundstraße 4
73479 Ellwangen (Jagst)
Germany

Email: dearwendy@mail.de
Contact form

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.

STORAGE PERIOD
Unless a more specific retention period is stated in this Privacy Policy, we retain personal data only for as long as necessary for the purpose for which it was collected. We will delete the data if you validly request its erasure or withdraw the consent on which the processing is based, unless another legal basis or a statutory retention obligation requires us to retain it. In that case, the data will be deleted once the applicable retention period or other legal grounds no longer apply.

GENERAL LEGAL BASES FOR DATA PROCESSING
Where you have given your consent, we process personal data on the basis of Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future. Where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract, processing is based on Article 6(1)(b) GDPR. Where processing is necessary to comply with a legal obligation, it is based on Article 6(1)(c) GDPR. Processing may also be based on our legitimate interests pursuant to Article 6(1)(f) GDPR. Where consent is required for storing information on or accessing information from your device, processing is additionally based on Section 25(1) TDDDG. Further information about the applicable legal basis is provided for each processing activity in the following sections.

INTERNATIONAL DATA TRANSFERS
Some service providers may process personal data outside the European Economic Area. Such transfers take place only where the requirements of Articles 44 et seq. GDPR are met, for example on the basis of an adequacy decision, the EU-US Data Privacy Framework where applicable, or the European Commission’s Standard Contractual Clauses together with any necessary supplementary safeguards. Further information about the safeguards used for a particular transfer may be requested from us.

WITHDRAWAL OF CONSENT
Where processing is based on your consent, you may withdraw that consent at any time with effect for the future. You can withdraw cookie-related consent through the cookie settings or contact us using the details provided above. The lawfulness of processing carried out before the withdrawal remains unaffected.

RIGHT TO OBJECT TO DATA COLLECTION IN SPECIAL CASES; RIGHT TO OBJECT TO DIRECT MARKETING (ARTICLE 21 GDPR)
WHERE DATA PROCESSING IS BASED ON ARTICLE 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO THE PROCESSING OF YOUR PERSONAL DATA. THIS ALSO APPLIES TO ANY PROFILING BASED ON THESE PROVISIONS. PLEASE REFER TO THIS PRIVACY POLICY TO DETERMINE THE LEGAL BASIS ON WHICH PROCESSING IS BASED.

IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE, OR DEFENCE OF LEGAL CLAIMS (OBJECTION UNDER ARTICLE 21(1) GDPR).

IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING PURPOSES. THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL THEREAFTER NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION UNDER ARTICLE 21(2) GDPR).

RIGHT TO LODGE A COMPLAINT
You have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement.

The supervisory authority responsible for us is:
The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg
https://www.baden-wuerttemberg.datenschutz.de

This right is without prejudice to any other administrative or judicial remedy.

RIGHT TO DATA PORTABILITY
You have the right to receive personal data that you have provided to us in a structured, commonly used and machine-readable format where the processing is based on your consent or a contract and is carried out by automated means. Where technically feasible, you may also request that the data be transmitted directly to another controller.

ACCESS, RECTIFICATION AND ERASURE
Subject to the applicable legal requirements, you have the right to request access to your personal data and information about its processing. You may also request the rectification of inaccurate data or, where the applicable conditions are met, the erasure of your personal data. You may contact us at any time to exercise these rights.

RIGHT TO RESTRICTION OF PROCESSING
You have the right to request restriction of the processing of your personal data. You may contact us at any time for this purpose.

The right to restriction of processing applies in the following cases:

• if you contest the accuracy of your personal data stored by us, we generally require time to verify this; during this verification period, you have the right to request restriction of processing;

• if processing of your personal data is or has been unlawful, you may request restriction of processing instead of erasure;

• if we no longer need your personal data, but you require it for the establishment, exercise, or defence of legal claims, you have the right to request restriction instead of erasure;

• if you have objected pursuant to Article 21(1) GDPR, your rights and our rights must be balanced. Until it is determined whose interests prevail, you have the right to request restriction of processing.

If processing has been restricted, such personal data may — apart from storage — only be processed with your consent, for the establishment, exercise, or defence of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.

SSL AND/OR TLS ENCRYPTION
This website uses SSL/TLS encryption to protect the transmission of confidential information, such as orders and enquiries. You can recognise an encrypted connection by “https://” in the browser’s address bar and the corresponding security indicator. Information transmitted to us is thereby protected against unauthorised access during transmission.