PRIVACY POLICY

THE PRIVACY PART —

This privacy policy informs you, as the data controller, in accordance with the provisions of Regulation (EU) 2016/679 (General Data Protection Regulation - GDPR) about the nature, scope, and purpose of the processing of personal data in connection with our online services.

I. Definitions

"Personal data" refers to all information relating to an identified or identifiable natural person; an identifiable natural person is one who can be directly or indirectly identified, particularly by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that person.

"Processing" refers to any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or other forms of provision, alignment, or combination, restriction, erasure, or destruction.

"Controller" refers to the natural or legal person, public authority, agency, or other body that alone or jointly with others determines the purposes and means of the processing of personal data. If the purposes and means of processing are determined by Union law or the law of the Member States, the controller or specific criteria for their designation may be provided for in Union law or the law of the Member States.

"Recipient" refers to a natural or legal person, public authority, agency, or any other body to whom personal data is disclosed, regardless of whether they are a third party. However, authorities that may receive personal data within the scope of a particular investigation under Union or Member State law are not considered recipients. The processing of this data by such authorities is carried out in compliance with applicable data protection rules in accordance with the purposes of the processing.

II. General Information

Data Controller

SWMA DESIGN

Seidenstraße 57

70174 Stuttgart

Tel. +49-711-7223668-0

Email info@swma.design

We have not appointed a Data Protection Officer and are not required to do so.

Legal Basis

We process personal data on the basis of at least one of the following legal grounds:

Consent of the data subject for the processing of their personal data for one or more specific purposes (Art. 6 (1) (a) GDPR);

Performance of a contract with the data subject or to take steps at the request of the data subject prior to entering into a contract (Art. 6 (1) (b) GDPR);

Compliance with a legal obligation to which we are subject (Art. 6 (1) (c) GDPR);

Protection of vital interests of the data subject or another natural person (Art. 6 (1) (d) GDPR);

Legitimate interests pursued by us or a third party (Art. 6 (1) (f) GDPR)

In this privacy policy, we refer to the respective legal basis for specific processing activities.

Transfer of Data to Recipients

We only transfer personal data to recipients (processors or other third parties) to the necessary extent and only under one of the following conditions:

The data subject has consented to the transfer;

The transfer is necessary for the performance of contractual obligations or pre-contractual measures at the request of the data subject;

We are legally obliged to transfer the data;

The transfer is based on legitimate interests of us or a third party.

Third Countries

The transfer of personal data to a country or international organization outside the European Union (EU) or the European Economic Area (EEA) shall only occur under the conditions set out in Art. 44 et seq. GDPR. This means that the country in question must have an adequacy decision by the EU Commission according to Art. 45 GDPR, suitable safeguards for data protection according to Art. 46 GDPR, or binding corporate rules according to Art. 47 GDPR.

Data Subject Rights

As a data subject, you have the following rights:

According to Art. 15 GDPR, you can request information about your personal data processed by us, including the processing purposes, categories of processed data, recipients or categories of recipients to whom your data has been disclosed or will be disclosed, the planned storage period, the origin of your data, if not collected from you, the existence of automated decision-making, including profiling, and relevant details such as logic, scope, and effects.

According to Art. 16 GDPR, you can request the immediate correction of inaccurate or incomplete personal data.

According to Art. 17 GDPR, you can request the deletion of your personal data stored by us, unless processing is necessary for exercising the right to freedom of expression and information, compliance with a legal obligation, public interest, or the assertion, exercise, or defense of legal claims.

According to Art. 18 GDPR, you can request the restriction of the processing of your personal data, provided the accuracy of the data is contested, the processing is unlawful, you oppose the deletion, or the data are no longer needed for processing purposes, but are required for the assertion, exercise, or defense of legal claims.

According to Art. 20 GDPR, you can request the transfer of your personal data in a structured, commonly used, and machine-readable format or the transmission to another controller.

According to Art. 21 GDPR, you can object to the processing of your personal data if there are reasons arising from your particular situation or if the objection concerns direct marketing and the legal basis for the processing is legitimate interests under Art. 6 (1) (f) GDPR.

According to Art. 7 (3) GDPR, you can withdraw your consent at any time, which will not affect the legality of processing based on consent before withdrawal.

According to Art. 77 GDPR, you can lodge a complaint with a supervisory authority, particularly in the Member State of your habitual residence, place of work, or place of the alleged infringement.

If you wish to exercise your data subject rights, you can contact us at the contact details provided above at any time.

Deletion and Restriction of Personal Data

Unless otherwise specified in this privacy policy, personal data will be deleted when it is no longer necessary for the purposes for which it was collected or processed, and there are no legal retention obligations preventing deletion. We also delete personal data in accordance with Art. 17 GDPR upon request if the conditions specified therein are met. If personal data is required for other legally permissible purposes, it will not be deleted but its processing will be restricted according to Art. 18 GDPR. In the case of restriction, the data will not be processed for other purposes.

We use cookies as part of our online services. Cookies are small text files that your browser automatically creates and stores on your device (laptop, tablet, smartphone, PC, etc.) when you visit our site. Cookies do not harm your device and do not contain viruses or malware. They store information related to the specific device being used. However, this does not mean that we automatically gain knowledge of your identity. Cookies primarily serve to make our online services more user-friendly, efficient, and secure.

We use session cookies to recognize that you have visited certain pages of our online services during your visit. Additionally, we use temporary cookies to optimize user-friendliness and the statistical analysis of the use of our services. These cookies are stored on your device for a set period. When you return to our site, it is automatically recognized that you have previously visited us and what entries and settings you have made, so you do not need to enter them again.

The data processed by cookies is required for the aforementioned purposes to safeguard our legitimate interests and those of third parties under Art. 6 (1) (f) GDPR.

Most browsers automatically accept cookies. However, if you do not want this, you can configure your browser to not store cookies on your device or to always prompt you before setting a new cookie. A general objection to the use of cookies for online marketing purposes can be declared on various services, e.g., at http://www.youronlinechoices.com/ or the deactivation page of the Network Advertising Initiative at http://optout.networkadvertising.org. Deactivating cookies may, however, result in you not being able to use all the features of our online services.