imprint

​

Responsible for the content of this page:
Laura Louise Natz
reflect
Samaritanstrasse 25
10247 Berlin
Email: lauranatz@reflaect.de

Tax Office Berlin Friedrichshain-Kreuzberg

Tax number: 14/452/01698

​

Design and Programming:

Laura Natz

​

Photos:

Recordings by Laura Natz

​

​

privacy

We will inform you below in accordance with the legal requirements of data protection law (esp
BDSG nF and the European General Data Protection Regulation 'DS-GVO') about the type and scope
and purpose of processing personal data by our company. This
Privacy Policy also applies to our websites and social media profiles. Regarding the definition of
Terms such as "personal data" or "processing" are referred to Art. 4 GDPR.

Name and contact details of the person responsible
Our responsible person (hereinafter "responsible person") within the meaning of Art. 4 no. 7 GDPR is:
reflect
Samaritanstrasse 25
10247 Berlin
Email address: lauranatz@reflaect.de
Types of data, purposes of processing and categories of data subjects

Below we inform you about the type, scope and purpose of the collection, processing and use
personal data.
1. Types of data we process
Inventory data (name, address, etc.), contact data (telephone number, e-mail, fax, etc.), content data
(text input, videos, photos, etc.), communication data (IP address, etc.),
2. Purposes of processing according to Art. 13 Para. 1 c) GDPR
Avoiding SPAM and abuse, customer service and customer care, handling contact requests,
security measures,
3. Categories of data subjects according to Art. 13 Para. 1 e) GDPR
Visitors/users of the website, interested parties,

The persons concerned are referred to collectively as "users".

Legal bases for the processing of personal data
In the following we inform you about the legal basis for the processing of personal data:

1. If we have obtained your consent for the processing of personal data, Art. 6
Paragraph 1 sentence 1 lit. a) GDPR legal basis.
2. Is the processing to fulfill a contract or to carry out pre-contractual measures
required, which take place in response to your request, Art. 6 (1) sentence 1 lit. b) GDPR is the legal basis.
3. Is the processing necessary for compliance with a legal obligation to which we are subject (e.g
statutory retention requirements), Art. 6 Para. 1 S. 1 lit. c) GDPR is the legal basis.
4. Is the processing necessary to protect the vital interests of the data subject or a
to protect another natural person, Art. 6 (1) sentence 1 lit. d) GDPR is the legal basis.
5. Is the processing necessary to protect our legitimate interests or those of a third party?
and your interests or fundamental rights and freedoms do not prevail in this regard, Art.
6 paragraph 1 sentence 1 lit. f) GDPR legal basis.

Disclosure of personal data to third parties and processors
In principle, we do not pass on any data to third parties without your consent. Should this be the case,
then the transfer takes place on the basis of the aforementioned legal bases, e.g
Passing on of data to online payment providers for the fulfillment of a contract or due to legal reasons
Order or because of a legal obligation to release the data for the purpose of
Law enforcement, security or intellectual property enforcement.
We also use processors (external service providers, e.g. for web hosting of our websites and
databases) to process your data. If under an agreement to
Order processing to which the order processor data is passed on, this is always done in accordance with Art.
28 GDPR. We select our processors carefully and check them regularly
and have granted us the right to issue instructions regarding the data. In addition, they have to
processors have taken appropriate technical and organizational measures and
Comply with data protection regulations in accordance with BDSG nF and DS-GVO

Data transfer to third countries
With the adoption of the European General Data Protection Regulation (GDPR), a
created a uniform basis for data protection in Europe. Your data will therefore be predominant
processed by companies to which the GDPR applies. Should the processing
Third-party services take place outside the European Union or the European Economic Area
they must meet the special requirements of Art. 44 et seq. GDPR. That means the
Processing takes place on the basis of special guarantees, such as those officially provided by the EU Commission
recognized statement of a data protection level corresponding to the EU or the observance officially
recognized special contractual obligations, the so-called "standard contractual clauses".
Insofar as we, due to the ineffectiveness of the so-called "Privacy Shield", according to Article 49 (1) sentence 1 lit. a) GDPR
obtain your express consent to the transfer of data to the USA
in this respect to the risk of secret access by US authorities and the use of the data
surveillance purposes, possibly without legal remedies for EU citizens.

Deletion of data and storage period
Unless expressly stated in this privacy policy, your personal data
deleted or blocked as soon as you revoke your consent to processing or
Purpose for storage is omitted or the data is no longer required for the purpose, unless
their continued storage is required for evidentiary purposes or is required by law
conflict with retention requirements. This includes, for example, storage obligations under commercial law
of business letters according to § 257 paragraph 1 HGB (6 years) as well as tax retention obligations
according to § 147 paragraph 1 AO of receipts (10 years). When the required retention period expires,
your data will be blocked or deleted unless the storage is still for you
required to conclude or fulfill a contract.

Existence of automated decision-making
We do not use automated decision-making or profiling.

Provision of our website and creation of log files
1. If you only use our website for informational purposes (i.e. no registration and no
other transmission of information), we only collect the personal data that you
Browser transmitted to our server. If you want to view our website, we collect
the following data:
• IP address;
• User's internet service provider;
• date and time of retrieval;
• browser type;
• language and browser version;

• content of the call;
• time zone;
• Access Status/HTTP Status Code;
• amount of data;
• websites from which the request comes;
• Operating system.
This data is stored together with other personal data from you
not instead.

2. This data serves the purpose of user-friendly, functional and secure delivery
our website to you with functions and content as well as their optimization and statistical
Evaluation.

3. The legal basis for this is our legitimate interest in the above purposes
of data processing in accordance with Article 6 Paragraph 1 Clause 1 Letter f) GDPR.

4. For security reasons, we store this data in server log files for the storage period of
days. After this period, they will be automatically deleted unless we need them
Storage for evidence purposes in the event of attacks on the server infrastructure or others
infringements.

Contact via contact form / e-mail / fax / post
1. When you contact us via the contact form, fax, post or e-mail, your details will be
processed for the purpose of processing the contact request.

2. The legal basis for processing the data is Art. 6 if you have given your consent
Paragraph 1 sentence 1 lit. a) GDPR. Legal basis for the processing of the data in the course of a
contact request or e-mail, a letter or a fax are sent, is Art. 6 Para.
GDPR. The person responsible has a legitimate interest in the processing and storage of the
Data to be able to answer user inquiries, to preserve evidence for liability reasons
and, if necessary, to comply with his legal storage obligations for business letters
be able. If the contact is aimed at concluding a contract, there is an additional legal basis
for processing Art. 6 (1) sentence 1 lit. b) GDPR.

3. We can use your details and contact request in our customer relationship management
System ("CRM System") or a comparable system.

4. The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected
required are. For the personal data from the input mask of the contact form and
those that were sent by e-mail, this is the case if the respective conversation
is over with you. The conversation is over when the circumstances indicate
that the facts in question have been conclusively clarified. Requests from users who have a
If you have an account or contract with us, we store it for a period of two years
termination of contract. In the case of legal archiving obligations, the deletion takes place after their
Expiration: End of commercial law (6 years) and tax law (10 years) retention obligation.

5. You have the option at any time to withdraw your consent in accordance with Article 6 Paragraph 1 Sentence 1 Letter a) GDPR
object to the processing of personal data. Contact us via email
you can object to the storage of your personal data at any time.

Contact by phone
1. When contacting us by phone, your phone number will be used to process the
Contact request and its processing processed and temporarily in the RAM / cache of the phone device /
Displays saved or displayed. The storage takes place for liability and security reasons,
to be able to provide evidence of the call and, for economic reasons, to request a callback
to allow. In the case of unauthorized advertising calls, we block the phone numbers.

2. The legal basis for processing the telephone number is Article 6 Paragraph 1 Clause 1 Letter f) GDPR. aims the
Contact on the conclusion of a contract is an additional legal basis for the
Processing Article 6 Paragraph 1 Letter b) GDPR.

3. The device cache stores the calls for days and successively overwrites or deletes old data
Disposal of the device will delete all data and possibly destroy the memory. locked
Telephone numbers are checked annually to determine whether blocking is necessary.

4. You can prevent the phone number from being displayed by using withheld phone number
call up.

Google Maps
1. We have maps from "Google Maps" (provider: Google Ireland Limited,
Registration No.: 368047, Gordon House, Barrow Street, Dublin 4, Ireland).

2. Data category and description of data processing: usage data (e.g. IP, location,
called page). With Google Maps we can find the location of addresses and a
Show directions directly on our website in interactive maps and give you the
enable use of this tool. When accessing our website, where Google Maps is integrated,
A connection to the Google servers in the USA is established. Your IP and
Location will be transmitted to Google. In addition, Google receives the information that you
have accessed the relevant page. This is also done without a user account with Google. Should you in
If you are logged into your Google account, Google can assign the above data to your account. if
If you do not want this, you must log out of your Google account. Google created from
such data user profiles and uses this data for the purpose of advertising, market research or
Optimizing its websites.

3. Purpose of processing: Providing a user-friendly, economical and optimized
Website.

4. Legal bases: Do you have consent for the processing of your personal data using “Google
Maps” from the third-party provider (“opt-in”), then Art. 6 (1) sentence 1 lit. a) GDPR applies
the legal basis. The legal basis is also ours in the above purposes
legitimate interest in data processing according to Article 6 Paragraph 1 Clause 1 Letter f) GDPR.

5. Data transfer/recipient category: Third-party providers in the USA.

6. Duration of storage: Cookies up to 6 months or until you delete them. Otherwise as soon as you
are no longer required for processing purposes.

7. Possibility of objection and removal: You have the right to object to Google
against the creation of user profiles. Therefore, please contact Google directly via the below
mentioned privacy policy. You can object to the opt-out of advertising cookies
here in your Google account:
https://adssettings.google.com/authenticated.

8. In the Google Maps Terms of Use at
https://www.google.com/intl/de_de/help/terms_maps.html and in the privacy policy for
You can find more advertising from Google at https://policies.google.com/technologies/ads
Information on the use of Google cookies and their advertising technologies, storage period,
Anonymization, location data, how it works and your rights. General Privacy Policy
from Google: https://policies.google.com/privacy.

Presence on social media
1. We maintain profiles or fan pages in social media. When using and calling our
profile in the respective network by you, the respective data protection information and
Terms of use of the respective network.

2. Data categories and description of data processing: usage data, contact data,
Content data, inventory data. Furthermore, the data of the users within social networks in
Usually processed for market research and advertising purposes. For example, based on the
Usage behavior and the resulting interests of the users created usage profiles
will. The usage profiles can in turn be used, for example, to display advertisements within
and to switch outside of the networks that presumably correspond to the interests of the users. to
For these purposes, cookies are usually stored on the computers of the users in which the
Usage behavior and the interests of the users are saved. Furthermore, in the
Usage profiles also store data independently of the devices used by the users
(especially if the users are members of the respective platforms and
are logged in). For a detailed description of the respective processing forms and the
Possibilities of objection (opt-out) we refer to the data protection declarations and information
the operators of the respective networks. Also in the case of requests for information and assertion
of data subject rights, we would like to point out that these apply most effectively to the providers
can be made. Only the providers have access to the data of the users and can
take appropriate measures and provide information directly. Should you still need help
need, then you can contact us.

3. Purpose of processing: communication with those connected on social networks
and registered users; Information and advertising for our products, offers and
Services; Presentation and image cultivation; Evaluation and analysis of users and content
our presence in social media.

4. Legal basis: The legal basis for processing the personal data is
our legitimate interest in the above purposes in accordance with Article 6 (1) sentence 1 lit. f)
GDPR. If you give us or the person responsible for the social network consent to the
processing of your personal data, the legal basis is Art. 6 Para. 1 S. 1 lit.
a) in conjunction with Art. 7 GDPR.

5. Data transmission/recipient category: social network.

6. The data protection information, information options and objection options (opt-out) of
respective networks / service providers can be found here:

• Instagram service provider: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour,
Dublin 2, Ireland) – Privacy Policy/ Opt-Out: https://help.instagram.com/519522125107875,
Objection: https://help.instagram.com/contact/186020218683230; agreement on common
Processing of personal data on Instagram pages (Article 26 GDPR):
https://www.facebook.com/legal/terms/page_controller_addendum.
• LinkedIn – Service Provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland) –
Privacy Policy: https://www.linkedin.com/legal/privacy-policy, Cookie Policy and Opt-Out:
https://www.linkedin.com/legal/cookie-policy

rights of the data subject
1. Objection or revocation against the processing of your data
Insofar as the processing is based on your consent in accordance with Art. 6 Para. 1 S. 1 lit. a), Art. 7 DS-GVO
is based, you have the right to withdraw your consent at any time. The legality of
This does not affect the processing that took place on the basis of the consent until the revocation.
Insofar as we base the processing of your personal data on the balancing of interests
pursuant to Art. 6 (1) sentence 1 lit. f) GDPR, you can object to the
insert processing. This is the case if the processing is not particularly necessary
Performance of a contract with you is required, which is what we do at the following
Description of the functions is presented. When exercising such an objection
we ask you to explain the reasons why we do not use your personal data as of
should process us carried out. In the event of your justified objection, we will check the
Facts and will either stop or adapt the data processing or you
show our compelling reasons worthy of protection on the basis of which we carry out the processing
continue.
You can object to the processing of your personal data for advertising and marketing purposes
Object to data analysis at any time. You can exercise your right to object free of charge.
You can inform us about your objection to advertising using the following contact details:
reflect
Samaritanstrasse 25
10247 Berlin
Email address: lauranatz@reflaect.de

2. Right to information
You have the right to request confirmation from us as to whether you
personal data are processed. If this is the case, you have a right to
Information about your personal data stored by us according to Art. 15 DS-GVO. this includes
in particular the information about the processing purposes, the category of personal data
Data, the categories of recipients to whom your data was disclosed or
be, the planned storage period, the origin of your data, if they are not directly with you
were raised.

3. Right to Rectification
You have the right to have incorrect data corrected or correct data completed in accordance with Art.
16 GDPR.

4. Right to erasure
You have the right to have your data stored by us deleted in accordance with Art. 17 DS-GVO, unless
because legal or contractual retention periods or other legal obligations or

Rights to further storage are opposed to this.

5. Right to Restriction
You have the right to restrict the processing of your personal data
request if one of the requirements in Article 18 (1) lit. a) to d) GDPR is met:
• If you contest the accuracy of the personal data concerning you for a period that it
enables the controller to verify the accuracy of the personal data;
• the processing is unlawful and you refuse to have the personal data erased
and instead request that the use of the personal data be restricted;
• the controller no longer uses the personal data for the purposes of the processing
required, but you use them to assert, exercise or defend legal claims
need, or
• if you have lodged an objection to the processing pursuant to Art. 21 Para. 1 DS-GVO and
It is not yet certain whether the legitimate reasons of the person responsible compare to your reasons
predominate.

6. Right to data portability
You have the right to data portability under Art. 20 GDPR, which means that you
Personal data we hold about you in a structured, common and
machine-readable format or the transmission to another person responsible
can request.
7. Right to Complain
You have the right to lodge a complaint with a supervisory authority. You can usually opt for this
to the supervisory authority, in particular in the member state of your place of residence, your place of work
or the location of the alleged infringement.

​

data security
To protect any personal data submitted to us and to ensure that
the data protection regulations are observed by us, but also by our external service providers,
we have taken appropriate technical and organizational security measures. Therefore become
including all data between your browser and our server via a secure SSL connection
transmitted encrypted.

​