PRIVACY POLICY

4.1 Data Protection

​

The operator of this website takes the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.

​

When you use this site, various personal data points are collected. Personal data is information that can be used to identify you directly. This privacy policy explains what data we collect and for what purposes it is used.

 

We would like to point out that the transmission of data over the Internet (e.g., via email) may present security vulnerabilities. Complete protection against third-party access cannot be guaranteed.

 

4.2 About the Website Operator

​

The website operator, responsible for data processing on this site, is:

 

360° Ninja Webdesign 

c/o Esther von Törne 

Via Michael Pacher 10 

39100 Bolzano, Italy

 

The operator is the natural or legal person who, individually or jointly with others, determines the purposes and means of the processing of personal data (e.g., names, email addresses, etc.).

​

4.3 Retention Period

 

Unless otherwise stated in this privacy policy, your personal data will be retained until the purpose for which it was collected ceases to be valid. If you make a justified request for deletion or revoke your consent to processing, your data will be deleted, unless there are other legally permissible reasons for retention (such as, for example, retention periods required by tax or business regulations). In that case, deletion will occur once those reasons no longer apply.

 

4.4 Legal Basis for Data Processing.

 

If you have provided your consent for data processing, we process your personal data on the basis of Art. 6(1)(a) of the GDPR, or Art. 9(2)(a) of the GDPR if special categories of data are processed in accordance with Art. 9(1) of the GDPR. In cases where you have provided explicit consent to the transfer of personal data to third countries, processing will also take place on the basis of Art. 49(1)(a) of the GDPR. In addition, if you have consented to the storage of cookies or access to information in your end device (e.g. by fingerprinting the device), processing will also take place on the basis of Art. 25 (1) TTDSG. Your consent can be revoked at any time. If your data is necessary for the execution of the contract or for taking pre-contractual measures, we process your data based on Art. 6 (1) (b) GDPR. We also process your data if necessary to fulfill a legal obligation under Art. 6(1)(c) of the GDPR. Data may also be processed on the basis of our legitimate interest under Art. 6(1)(f) of the GDPR. Information regarding the applicable legal bases is provided in the following sections of this privacy policy.

 

4.5 Transfer of Data to Non-Secure Third Countries and to Non-Certified U.S. Companies under the DPF

 

We use, among other things, tools provided by companies located in third countries that are not considered secure under data protection law, as well as tools from U.S. companies whose providers are not certified under the EU-U.S. Data Privacy Framework (DPF). If such tools are activated, your personal data may be transferred to and processed in these countries. It is important to note that a level of data protection comparable to that of the European Union cannot be guaranteed in such countries.

 

We would also like to point out that although the U.S. is considered a safe third country, the transfer of data to the U.S. is only permitted if the recipient is certified under the “EU-U.S. Data Privacy Framework” (DPF) or if adequate safeguards are in place. Further details on transfers to third countries, including recipients, can be found in this privacy policy.

 

4.6 Recipients of Personal Data

​

In the context of our business activities, we cooperate with various external parties. In some cases, it is necessary to transfer your personal data to such parties. Data will only be transferred to third parties if this is indispensable for the performance of a contract, if there is a legal obligation (e.g., transmission to tax authorities), if there is a legitimate interest of ours in the transfer within the meaning of Art. 6(1)(f) of the GDPR, or if another legal basis allows such a transfer.

 

If we use data processors, your personal data are transferred exclusively under a contract governing the processing of orders. In the case of joint processing, a specific agreement is made.

 

4.7 Revocation of Consent to Data Processing

 

Many data processing operations are only possible with your explicit consent. You have the right to revoke your consent at any time. Revocation does not affect the lawfulness of the processing carried out prior to the revocation.

 

4.8 Right to Object to Data Collection in Special Cases and Direct Advertising (Art. 21 GDPR)

​

If data processing takes place on the basis of Art. 6(1)(e) or (f) of the GDPR, you have the right to object at any time to the processing of your personal data on grounds relating to your particular situation, including profiling based on these provisions. If you object, we will no longer process your personal data, unless we can demonstrate the existence of compelling legitimate grounds that override your rights and freedoms, or if the processing is necessary for the establishment, exercise or defense of legal rights.

 

If your data is processed for direct marketing purposes, you have the right to object at any time to processing for such purposes, including marketing-related profiling. If you object, your data will no longer be used for direct marketing purposes.

 

4.9 Right to File a Complaint with the Supervisory Authority

 

In the event of a breach of the GDPR, you have the right to file a complaint with the relevant supervisory authority, particularly in the member state where you reside, work, or where the alleged breach occurred. The right to file a complaint is independent of any ongoing administrative or judicial proceedings.

​

You have the right to receive the personal data you have provided to us, processed automatically on the basis of your consent or in performance of a contract, in a structured, commonly used, machine-readable format. If you request, such data may be transferred directly to another data controller, insofar as this is technically feasible.

 

4.10 Right to Data Transfer

 

You have the right to receive the personal data you have provided to us, processed automatically on the basis of your consent or in performance of a contract, in a structured, commonly used and machine-readable format. If you request, such data may be transferred directly to another data controller, insofar as this is technically feasible.

 

4.11 Information, Corrections and Deletions

​

Under applicable laws, you have the right to obtain free information about the personal data we store, its origin, recipients, and the purposes of processing. If necessary, you also have the right to request the correction or deletion of such data at any time. If you have further questions regarding your personal data, you may contact us at any time.

 

4.12 Right to Restriction of Processing

 

You have the right to request the restriction of the processing of your personal data. You may contact us at any time to make such a request. The right to restriction of processing exists in the following cases:

​

• If you dispute the accuracy of your personal data stored by us, we generally need time to verify this issue. During the review, you have the right to request that the processing of your personal data be restricted.

• If we have processed your personal data unlawfully, you may request that we restrict the processing rather than delete it.

• If we no longer need your personal data, but you need to retain it for the exercise, defense, or assertion of legal rights, you have the right to request restriction of the processing of your personal data instead of its deletion.

• If you have filed an objection under Article 21(1) of the GDPR, a balancing of your interests against ours is necessary. Until it is determined which interest prevails, you have the right to request the restriction of the processing of your personal data.

​​

If you have restricted the processing of your personal data, your personal data - apart from its storage - may be processed only with your consent, or for the establishment, exercise or defense of legal rights, for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or a member state.

 

4.13 SSL or TLS Encryption

 

This site uses SSL or TLS encryption for security reasons to protect the transmission of confidential data, such as orders or inquiries. You can recognize a secure connection by the prefix “https://” in the URL and the padlock symbol in the browser. With SSL or TLS encryption enabled, the data you transmit cannot be read by third parties.