PRIVACY POLICY
1) Introduction and Contact Details of the Controller
1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we will inform you about how we handle your personal data when using our website. Personal data includes any data that can personally identify you.
1.2 The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Asdeiy Altan, Ambassador Agency, Krotoszyner Ring 57, 56269 Dierdorf, Germany, Tel.: +49 176 77480597, Email: hello@ambassador-agency.de. The controller for the processing of personal data is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.
2) Data Collection When Visiting Our Website
2.1 When you visit our website for informational purposes only, i.e., if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website:
- Our visited website
- Date and time of access
- Amount of data sent in bytes
- Source/referral from which you came to the page
- Used browser
- Used operating system
- Used IP address (if applicable: in anonymized form)
The processing is carried out in accordance with Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. There is no further disclosure or use of the data. However, we reserve the right to check the server log files subsequently if there are concrete indications of illegal use.
2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser bar.
3) Hosting & Content Delivery Network
Wix
For hosting our website and displaying the page content, we use the system of the following provider: Wix HQ, 6350671, Nemal Tel Aviv St 40, Tel Aviv-Yafo, Israel
Data is also transmitted to: Wix Inc., 500 Terry A. Francois Boulevard, San Francisco, California 94158, USA
All data collected on our website is processed on the provider's servers. We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.
An adequate level of data protection is ensured by an adequacy decision of the European Commission when transferring data to the provider's location.
The provider has joined the EU-US Privacy Shield Framework for data transfers to the USA, ensuring compliance with the European data protection level based on an adequacy decision of the European Commission.
4) Cookies
To make your visit to our website attractive and to enable the use of certain functions, we use cookies, which are small text files that are stored on your device. Some of the cookies we use are deleted after you close your browser (so-called "session cookies"), while others remain on your device and allow us to save your preferences (so-called "persistent cookies"). In the latter case, you can find the storage period in the overview of the cookie settings of your web browser.
If cookies also process personal data, the processing is carried out in accordance with Art. 6 Para. 1 lit. b GDPR either for the performance of a contract, in accordance with Art. 6 Para. 1 lit. a GDPR in the case of consent given, or in accordance with Art. 6 Para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit.
You can configure your browser to inform you about the setting of cookies and individually decide on their acceptance or exclude the acceptance of cookies for specific cases or in general.
Please note that if you do not accept cookies, the functionality of our website may be limited.
5) Contact
When contacting us (e.g., via contact form or email), personal data is collected. The data collected when using a contact form is evident from the respective contact form. This data is stored and used exclusively for the purpose of responding to your inquiry or for contacting you and the associated technical administration.
The legal basis for the processing of this data is our legitimate interest in responding to your inquiry pursuant to Art. 6 Para. 1 lit. f GDPR. If your contact is aimed at concluding a contract, an additional legal basis for the processing is Art. 6 Para. 1 lit. b GDPR. Your data will be deleted after final processing of your request if it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.
6) Site Functionality
Google reCAPTCHA
On this website, we use the CAPTCHA service of the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data may also be transmitted
to: Google LLC, USA. For the visual design of the captcha window, the provider uses "Google Fonts," which are fonts loaded from the internet by Google. No further processing of information beyond the functionality of reCAPTCHA is carried out by Google.
The service checks whether an input is made by a natural person or is abusive through machine and automated processing, and blocks spam, DDoS attacks, and similar automated malicious attacks. To ensure that an action is taken by a human and not by an automated bot, the provider collects the IP address of the device used, detection data of the browser and operating system type, as well as date and duration of the visit, and transmits this information to the provider's servers for evaluation.
The legal basis is our legitimate interest in determining individual responsibility on the internet and preventing abuse and spam pursuant to Art. 6 Para. 1 lit. f GDPR.
We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Privacy Shield Framework, ensuring compliance with the European data protection level based on an adequacy decision of the European Commission.
7) Rights of the Data Subject
7.1 The applicable data protection law grants you, as the data subject, certain rights with regard to the processing of your personal data (rights of data subjects), for which the respective legal basis is referred to for the respective exercise conditions:
- Right to information according to Art. 15 GDPR;
- Right to rectification according to Art. 16 GDPR;
- Right to erasure according to Art. 17 GDPR;
- Right to restriction of processing according to Art. 18 GDPR;
- Right to information according to Art. 19 GDPR;
- Right to data portability according to Art. 20 GDPR;
- Right to revoke consent granted according to Art. 7 Para. 3 GDPR;
- Right to lodge a complaint according to Art. 77 GDPR.
7.2 RIGHT TO OBJECT
IF WE PROCESS YOUR PERSONAL DATA IN THE CONTEXT OF A BALANCING OF INTERESTS BASED ON OUR PREVAILING LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO SUCH PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION WITH EFFECT FOR THE FUTURE.
IF YOU MAKE USE OF YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING IS RESERVED IF WE CAN PROVE COMPELLING REASONS FOR PROCESSING THAT ARE WORTHY OF PROTECTION AND OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS, AND FREEDOMS, OR IF PROCESSING SERVES TO ASSERT, EXERCISE, OR DEFEND LEGAL CLAIMS.
IF YOUR PERSONAL DATA IS PROCESSED BY US TO CONDUCT DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.
IF YOU MAKE USE OF YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT ADVERTISING PURPOSES.
8) Duration of Storage of Personal Data
The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing, and – if applicable – additionally by the respective statutory retention period (e.g., commercial and tax retention periods).
If personal data is processed on the basis of explicit consent pursuant to Art. 6 Para. 1 lit. a GDPR, the affected data will be stored until you revoke your consent.
If there are legal retention periods for data that is processed within the scope of legal or quasi-legal obligations based on Art. 6 Para. 1 lit. b GDPR, this data will be routinely deleted after the retention periods have expired, provided it is no longer necessary for the fulfillment or initiation of a contract and/or there is no longer any legitimate interest on our part in continuing to store it.
If personal data is processed based on Art. 6 Para. 1 lit. f GDPR, this data will be stored until you exercise your right to object pursuant to Art. 21 Para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights, and freedoms, or if the processing serves to assert, exercise, or defend legal claims.
If personal data is processed for the purpose of direct advertising based on Art. 6 Para. 1 lit. f GDPR, this data will be stored until you exercise your right to object pursuant to Art. 21 Para. 2 GDPR.
Unless otherwise stated in the specific processing situations described in this statement, stored personal data will be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.