This website www.curatedandbespoke.com (hereinafter “website”) is made available to you by Curated & Bespoke GmbH, with its registered address at Am Sonnenhang 8, 82069 Hohenschaeftlarn, Germany, +49 (0) 8178 / 997 5036, info[at]curatedandbespoke.com, and hereinafter referred to as “Curated & Bespoke”, “we” or “us”.
We take the protection of personal data seriously and comply with all data protection legislation. This website privacy statement (hereinafter “privacy statement”) informs visitors about how Curated & Bespoke collects, processes and uses the personal data and other information of visitors to the website as a controller within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27th April 2016 on the protection of individuals with regard to the processing of personal data, on the free movement of such data and on the repeal of Directive 95/46/EC (Data Protection Regulation – “GDPR”). Please note that other pages, services or offers may be subject to other data protection regulations. This data protection declaration applies in particular to third-party offers linked to from the website (such as social media offers).
I: Categories of personal data, processing purposes and legal basis. What personal data do we actually process and for what purposes? What are the legal bases? Usage data: In connection with your visit to the website, we collect the following information: Information about your browser (e.g. type, version, language), operating system and interface, website from which you visited us (referral URL), web pages you visit on our website, time and date of access to our website as well as time zone difference, HTTP status code and access status, amount of data transferred, IP address, etc. Purpose: Usage data is used to enable you to access the website, to maintain and restore the security of the website or to detect technical faults or errors in electronic communication. Legal basis: The processing is necessary to protect the legitimate interests of Curated & Bespoke or a third party (such as a business partner of Curated & Bespoke), unless such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data (Article 6(1)(f) DS-GVO). Such interests are in particular to enable you to access the website and to achieve the purposes stated above. You are welcome to request additional information on the balance of interests by contacting us as indicated in section VIII below. The processing is necessary for the performance of a contract (e.g. the user relationship) to which the data subject is a party or for the performance of pre-contractual measures taken at the request of the data subject (Art. 6 (1) (b) DS-GVO).
II: Consequences if you do not provide your data. What happens if you do not provide your data? The provision of personal data is neither required by law nor by contract. However, the provision of certain data is necessary in order to visit our website or use other of our services. Failure to provide personal data may result in disadvantages for you. For example, you may not be able to receive or use our services (e.g. you may not be able to access the website). However, unless otherwise stated, you will not suffer any legal disadvantages as a result of not providing the data.
III: Categories of recipients and international data transfer. To whom do we transfer your data and where is your data transferred? Categories of recipients: Please note that we may transfer your personal data to third parties for the above processing purposes as follows:
To Commissioned Data Processors: Certain third party service providers, such as IT support service providers or hosting service providers, will receive your personal data in order to process that data in accordance with appropriate instructions (“Processors”), to the extent necessary for the processing purposes set out above. The Processors will be subject to contractual obligations to implement appropriate technical and organisational security measures to protect the Personal Data and to process the Personal Data only as instructed. To certain third parties: In accordance with applicable law, we may transfer to third parties, such as existing or potential business partners, government agencies, courts, suppliers, external advisors, other service providers or potential acquiring or to-be-acquired companies your personal data. Any access to your personal data will be limited to those persons with whom there is a need to know in order to fulfil their obligations to operate. International data transfers: As a rule, your data will only be transferred to recipients in the European Union.
IV: Retention periods. How long do we keep your personal data? Your personal data will be retained to the extent necessary to fulfil our obligations and for the period necessary to achieve the purposes for which personal data is collected, in accordance with applicable data protection laws. When Curated & Bespoke no longer needs your personal data for use, we will remove it from our systems and records and/or take steps to properly anonymise it so that you can no longer be identified from it (unless we need to retain your personal data to comply with legal or regulatory obligations to which Curated & Bespoke is subject). For example, we store your usage data for one week. You are welcome to request additional information on retention periods by contacting us as set out in section VIII below.
V: Your rights. What rights do you have and how can you exercise them? Right to withdraw your consent: If you have given your consent to certain types of processing activities, you may withdraw this consent at any time with effect for the future. Such a withdrawal will not affect the lawfulness of the processing carried out on the basis of the consent until the withdrawal. You can withdraw your consent by contacting us by email at info@curatedandbespoke.com. Additional data protection rights: Under applicable data protection law, you have the right to (i) request access to your personal data, (ii) request rectification of your personal data, (iii) request erasure of your personal data, (iv) request restriction of the processing of your personal data, (v) request data portability; and/or (vi) object to the processing of your personal data. Below you will find more information about your rights as far as the GDPR applies. Please note that these rights may be limited under (local) applicable data protection law. Right of access to your personal data: To the extent provided by applicable data protection law, you have the right to request confirmation from us as to whether or not your personal data is being processed and, if so, you have the right to request information about such personal data. The information to be provided includes – among other things – the purposes of the processing, the categories of personal data concerned and the recipients or categories of recipients to whom the personal data have been or will be disclosed. However, this is not an absolute right and the interests of other individuals may limit your right of access. You also have the right to obtain a copy of the personal data that is the subject of processing. Where you request further copies, we may charge a reasonable fee based on administrative costs. Right of rectification: Where provided by applicable data protection law, you have the right to request us to rectify inaccurate personal data relating to you. Depending on the purposes of the processing, you have the right to have your incomplete personal data completed, including by means of a supplementary declaration. Right to erasure (right to be forgotten): Where provided by applicable data protection law, you have the right to obtain from us the erasure of personal data relating to you and we may be obliged to erase such personal data. Right to restriction of processing: Where provided by applicable data protection law, you have the right to obtain from us the restriction of the processing of your personal data and we may be obliged to restrict the processing of your personal data. In this case, the personal data concerned will be marked and may only be processed by us for specified purposes. Right to data portability: Where provided for by applicable data protection law, you have the right to receive personal data relating to you that you have provided to us in a structured, commonly used and machine-readable format, and you have the right to transfer that personal data to another entity without hindrance from us, provided that the processing is carried out using automated procedures and is based on consent pursuant to Article 6(1)(a) DS-GVO or on a contract pursuant to Article 6(1)(b) DS-GVO. Right to object: In certain circumstances, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data carried out by us on the basis of Art 6(1)(f) DS-GVO (balance of interests) and we are obliged to stop processing your personal data. If you have a right to object and if you exercise this right, your personal data will no longer be processed by us for these purposes. You can exercise this right by contacting us as indicated in section VIII below. In particular, such a right to object may not exist if the processing of your personal data is necessary to perform a contract with you. To exercise your rights, please contact us as set out in section VIII below. You also have the right to lodge a complaint with a competent data protection supervisory authority in the relevant Member State (e.g. the Member State of your residence, workplace or the place of the alleged infringement).
VI: Cookies and other tracking technology This website uses session cookies, tracking cookies and other tracking technology. The following information is collected with each call: Time of call, URL called, IP address of the calling client, transmission status/response code, method of call (GET/POST), amount of data transferred, UA string (reference to browser/operating system/versions), the page visited before the call (referrer).
VII: Changes to our privacy policy We reserve the right to amend this data protection declaration from time to time so that it always complies with the current legal requirements or to reflect changes to our services in the data protection declaration, e.g. when new services are introduced. The new data protection statement will then apply to your next visit.
VIII: Questions about data protection If you have any questions or wish to exercise your rights as described in section V above, please contact us as follows by sending an E-Mail to info[at]curatedandbespoke.com