Cookie information:
This Strato website uses cookies. These cookies are not evaluated by us (Bali-Beach Museum) and not further processed.

General Data Protection Regulation GDPR / DSGVO

You may have heard about the new General Data Protection Regulation (GDPR), that comes into effect today May 25, 2018.

Unless otherwise stated below, the provision of your personal information is neither required by law nor by contract nor required to conclude a contract. You are not required to provide the data. A non-provisioning has no consequences. This applies only insofar as no other information is given in the subsequent processing operations.
"Personal Data" means any information relating to an identified or identifiable natural person.

Collection, processing and use of personal data for orders
When ordering, we collect and use your personal data only to the extent necessary to fulfill and process your order and to process your requests. The provision of the data is required for the conclusion of the contract. Non-provisioning means that no contract can be concluded. Processing is based on Art. 6 (1) lit. b DSGVO and is required to fulfill a contract with you. A transfer of your data to third parties without your express consent is not. Excluded from this are only our service partners, which we need to process the contractual relationship or service providers of which we serve in the context of a processing order. In addition to the recipients named in the respective clauses of this privacy policy, these include, for example, recipients of the following categories: shipping service providers, payment service providers, merchandise management service providers, order processing service providers, web hosting providers, IT service providers and dropshipping retailers. In all cases, we strictly adhere to the legal requirements. The amount of data transmission is limited to a minimum.

Duration of storage
After completion of the contract, the data are initially stored for the duration of the warranty period, then taking into account statutory, especially tax and commercial retention periods and then deleted after the deadline, unless you have agreed to further processing and use.

Rights of the person concerned
You are entitled to the following rights under Art. 15 to 20 GDPR if the legal prerequisites are met: Right to information, to correction, to cancellation, to limitation of processing, to data portability.
In addition, according to Art. 21 (1) GDPR, you are entitled to a right of objection to the processing based on Art. 6 (1) of the GDPR and to processing for the purpose of direct mail.

Contact us on request. The contact details can be found in our imprint.

Right of appeal to the supervisory authority
According to Art. 77 GDPR you have the right to complain to the supervisory authority if you believe that the processing of your personal data is not legal.

last update: 25.05.2018