The following information will provide you with an easy to navigate overview of what will happen with your personal data when you visit this website. By “personal data”, we mean all data that can be used to personally, directly or indirectly, identify you. For example, your name, email address, contact details or any unique identifiers such as your IP address, device ID or other online identifier. 

 

1. Data recording on this website

 

The data processing controller of your Personal Data is Project Tres gemeinnützige UG, Chausseestr. 86, 10115 Berlin, an association registered with the register court Berlin, Amtsgericht Charlottenburg with the registration number 220972B. 

 

2. How do we record your data?

​

We rely on your consent as a legal basis for processing your Personal Data in relation to our use of cookies, when we reply to your communications via email and send you our newsletter. From time to time, we may share your Personal Data with third parties with your consent. Your consent can be revoked at any time.

 

This processing is carried out on the basis of legal provisions that allow us to process personal data because you gave your consent (e.g. Art. 6 Para. 1 a) GDPR).

 

3. What do we do with your information?

​

We rely on your consent as a legal basis for processing your Personal Data in relation to our use of cookies, when we reply to your communications via email and send you our newsletter. In case you consent and subscribe to our newsletter, we will send you emails with updates about the project, and other marketing-related topics. From time to time, we may share your Personal Data with third parties with your consent. Your consent can be revoked at any time.

​

This processing is carried out on the basis of legal provisions that allow us to process personal data because you gave your consent (e.g. Art. 6 Para. 1 a) GDPR). 

We collect and process personal data when you voluntarily provide it to us as part of an order for the fulfilment of a contract or for the implementation of pre-contractual measures. The data collected can be seen from the respective input forms. To fulfill the contract, we pass on your data to the shipping company commissioned with the delivery as far as necessary. To process payments, we pass on the payment data required for this to the credit institution commissioned with the payment and, if applicable, to payment service providers commissioned by us or by you or to the payment service you selected during the ordering process.

​

This processing is carried out on the basis of legal provisions that allow us to process personal data insofar as it is necessary for the fulfilment of a contract (Art. 6 Para. 1 b) GDPR). Furthermore, if your data is required for the fulfillment of a legal obligation, we process it on the basis of Article 6 Para. 1 c) GDPR.

​

The data processing may also be carried out on the basis of our legitimate interest (for ourselves or of a third party), meaning it is in our interest to conduct and manage our business; this includes for example conducting analytics to improve and optimize the website, protecting our interests and enforcing agreements with others, as well as complying with industry self-regulatory requirements. We ensure that we balance any potential impact on you and your rights before we process your Personal Data on that basis.

​

This processing is carried out on the basis of legal provisions that allow us to process personal data because Project Tres has a predominantly legitimate interest (Art. 6 Para. 1 f) GDPR). Furthermore, if your data is required for the fulfillment of a legal obligation, we process it on the basis of Article 6 Para. 1 c) GDPR.

​

4. How do you get my consent?

​

When you provide us with personal information to complete a transaction, verify your credit card, place an order, arrange for a delivery or return a purchase, we imply that you consent to our collecting it and using it for that specific reason only. If we ask for your personal information for a secondary reason, like marketing, we will either ask you directly for your expressed consent or provide you with an opportunity to say no.

​

5. How do I withdraw my consent?

​

If after you opt-in, you change your mind, you may withdraw your consent for us to contact you, for the continued collection, use or disclosure of your information, at any time, by contacting us at info@project-tres.org. 

 

6. What rights do you have as far as your information is concerned?

 

Your rights

​

You have a number of rights in relation to how we process your Personal Data. You may exercise these rights by contacting us (see details below). These include the right to:

 

• A right to information about the categories of data processed, the purposes of processing, the storage period and any recipients. 

• A right to rectification or erasure of incorrect or incomplete data. 

• A right to restriction of processing if deletion is not possible or disputed. 

• A right to object to processing if the data processing was carried out on the basis of a legitimate interest. (Art. 21 Para. 1 GDPR)

• A right to revoke consent given with effect for the future. For cookies, this is done by setting up the cookie’s preferences. For newsletters, you can do so by opting-out using the “unsubscribe” link provided in the newsletters at any time. We will do our best to honor your request promptly.

• A right to data portability in a common format.  

• You also have the right to complain to a data protection supervisory authority about our processing of your personal data, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement.

​

Generally, we try to respond to all legitimate requests within one month maximum. Depending on the scope and complexity of the request this might take longer. In this case, we will notify you and keep you updated. As a security measure you may be required to provide specific information to confirm your identity, to ensure that Personal Data is not disclosed to any person who has no right to receive it.

 

Please do not hesitate to contact us at any time at info@project-tres.org if you have questions about this or any other data protection related issues.

 

7. Hosting and Content Delivery Networks (CDN)

​

This website is hosted by an external service provider (host). Personal data collected on this website are stored on the servers of the host. These may include, but are not limited to, IP addresses, contact requests, metadata and communications, contract information, contact information, names, web page access, and other data generated through a web site.

 

The host is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of secure, fast, and efficient provision of our online services by a professional provider (Art. 6(1)(f) GDPR).

 

Our host will only process your data to the extent necessary to fulfil its performance obligations and to follow our instructions with respect to such data.

 

We are using the following host:

​

Wix.com

Wix Online Platforms Limited
1 Grant’s Row, Dublin 2

D02HX96, Ireland.

 

Please refer to this page https://www.wix.com/about/privacy for more detailed information on how Wix uses your personal data.

 

8. Data protection

​

The operators of this website and its pages take the protection of your personal data very seriously. Hence, we handle your personal data as confidential information and in compliance with the statutory data protection regulations and this Data Protection Declaration.

 

Whenever you use this website, a variety of personal information will be collected. Personal data comprises data that can be used to personally identify you. This Data Protection Declaration explains which data we collect as well as the purposes we use this data for. It also explains how, and for which purpose the information is collected.

 

We herewith advise you that the transmission of data via the Internet (i.e., through e-mail communications) may be prone to security gaps. It is not possible to completely protect data against third-party access.

 

9. Information about the responsible party (referred to as the “controller” in the GDPR)

 

The data processing controller on this website is:

 

Project Tres gemeinnützige UG 

Chausseestr. 86

10115 Berlin, Germany

Phone: +49 177 546 1903

Email: info@project-tres.org

 

The controller is the natural person or legal entity that single-handedly or jointly with others makes decisions as to the purposes of and resources for the processing of personal data (e.g., names, e-mail addresses, etc.).

 

10. Storage duration

​

Unless a more specific storage period has been specified in this privacy policy, your personal data will remain with us until the purpose for which it was collected no longer applies. If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted, unless we have other legally permissible reasons for storing your personal data (e.g., tax or commercial law retention periods); in the latter case, the deletion will take place after these reasons cease to apply.

 

11. The use of Google Analytics

​

This website uses functions of the web analysis service Google Analytics. The provider of this service is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

 

Google Analytics enables the website operator to analyze the behavior patterns of website visitors. To that end, the website operator receives a variety of user data, such as pages accessed, time spent on the page, the utilized operating system and the user’s origin. Google may consolidate these data in a profile that is allocated to the respective user or the user’s device.

 

Furthermore, Google Analytics allows us to record your mouse and scroll movements and clicks, among other things. Google Analytics uses various modeling approaches to augment the collected data sets and uses machine learning technologies in data analysis.

 

Google Analytics uses technologies that make the recognition of the user for the purpose of analyzing the user behavior patterns (e.g., cookies or device fingerprinting). The website use information recorded by Google is, as a rule, transferred to a Google server in the United States, where it is stored.

 

This analysis tool is used on the basis of Art. 6(1)(f) GDPR. The operator of this website has a legitimate interest in the analysis of user patterns to optimize both the services offered online and the operator’s advertising activities. If a corresponding agreement has been requested (e.g., an agreement to the storage of cookies), the processing takes place exclusively on the basis of Art. 6(1)(a) GDPR; the agreement can be revoked at any time.

 

Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

​

Contract data processing

​

We have executed a contract data processing agreement with Google and are implementing the stringent provisions of the German data protection agencies to the fullest when using Google Analytics.

 

Demographic parameters provided by Google Analytics

​

This website uses the “demographic characteristics” function of Google Analytics, to be able to display to the website visitor compatible ads within the Google advertising network. This allows reports to be created that contain information about the age, gender, and interests of the website visitors. The sources of this information are interest-related advertising by Google as well as visitor data obtained from third-party providers. This data cannot be allocated to a specific individual. You have the option to deactivate this function at any time by making pertinent settings changes for advertising in your Google account or you can generally prohibit the recording of your data by Google Analytics as explained in section “Objection to the recording of data”.

 

Archiving period

​

Data on the user or incident level stored by Google linked to cookies, user IDs or advertising IDs (e.g., DoubleClick cookies, Android advertising ID) will be anonymized or deleted after 2 months. For details, please click the following link: https://support.google.com/analytics/answer/7667196?hl=en

 

12. Newsletter data

​

If you would like to subscribe to the newsletter offered on this website, we will need from you an e-mail address as well as information that allows us to verify that you are the owner of the e-mail address provided, and consent to the receipt of the newsletter. No further data shall be collected or shall be collected only on a voluntary basis. We shall use such data only for the sending of the requested information and shall not share such data with any third parties.When subscribing to our newsletter, we will store your IP address as well as the date and time you subscribed. This serves to protect us in the event a third party improperly and without your knowledge makes use of your email address to subscribe to our newsletter. We will not collect any other data. The data thereby collected is used solely for the purpose of receiving our newsletter. No data is transferred to third parties. Nor is any of this information matched to any information that other components of our website may collect. You may cancel your subscription to the newsletter at any time. You will find additional details in the email confirming your subscription as well as in each newsletter.

​

We currently use Mailchimp, Intuit Inc. (USA) to host and send out our newsletters. Please check this link for further information on their privacy policy: https://www.intuit.com/privacy/statement/

​

The processing of the information entered into the newsletter subscription form shall occur exclusively on the basis of your consent (Art. 6(1)(a) GDPR). You may revoke the consent you have given to the archiving of data, the e-mail address and the use of this information for the sending of the newsletter at any time, for instance by clicking on the “Unsubscribe” link in the newsletter. This shall be without prejudice to the lawfulness of any data processing transactions that have taken place to date.

​

The data deposited with us for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter or the newsletter service provider and deleted from the newsletter distribution list after you unsubscribe from the newsletter or after the purpose has ceased to apply. We reserve the right to delete or block e-mail addresses from our newsletter distribution list at our own discretion within the scope of our legitimate interest in accordance with Art. 6(1)(f) GDPR.

 

After you unsubscribe from the newsletter distribution list, your e-mail address may be stored by us or the newsletter service provider in a blacklist to prevent future mailings. The data from the blacklist is used only for this purpose and not merged with other data. This serves both your interest and our interest in complying with the legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6(1)(f) GDPR). The storage in the blacklist is indefinite. You may object to the storage if your interests outweigh our legitimate interest.

 

​Our newsletter includes so-called web bugs that allow us to recognise if and when an email has been opened and which links in the email have been clicked by its recipient. This data is stored by us so that we can best align our newsletter to the wishes and interests of our subscribers. Accordingly, the data thus collected is used to send personalised newsletters to each recipient.

​

You will be asked to consent to the use of your personal data as follows: “I agree that my data and my user responses will be stored electronically by newsletter tracking so that I can receive a personalized newsletter. The revocation of the consent to receive the newsletter constitutes a revocation of the consent for the tracking described above.” By revoking the consent to receive the newsletter, the consent to the aforementioned tracking is revoked.

 

13. Third-party providers

​

In general, the third-party providers used by us will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us.

​

However, certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies in respect to the information we are required to provide to them for your purchase-related transactions.

 

For these providers, we recommend that you read their privacy policies so you can understand the manner in which your personal information will be handled by these providers.

​

In particular, remember that certain providers may be located in or have facilities that are located in a different jurisdiction than either you or us. So if you elect to proceed with a transaction that involves the services of a third-party service provider, then your information may become subject to the laws of the jurisdiction(s) in which that service provider or its facilities are located.

 

Once you leave our store’s website or are redirected to a third-party website or application, you are no longer governed by this Privacy Policy or our website’s Terms of Service.

 

14. The use of Instagram

​

​We promote the service Instagram on our website. Instagram is a service of Instagram Inc. 

 

By means of the integrated "Insta" button on our page, Instagram receives the information that you have accessed the corresponding page of our website. If you are logged into Instagram, Instagram may assign the visit to our site to your Instagram account and link the data by this means. The data transmitted by clicking the "Insta" button is stored by Instagram. You can find more information regarding the purpose and scope of data collection, its processing and use, as well as your related rights and settings options for protecting your privacy in the Instagram data protection notice under https://help.instagram.com/155833707900388.

 

To prevent your visit to our site from being accessed by your Instagram account, you must log out of your Instagram account before visiting our site.

 

15. Security

To protect your personal information, we take reasonable precautions and follow industry best practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed. If you provide us with your credit card information, the information is encrypted using secure socket layer technology (SSL) and stored with a AES-256 encryption. Although no method of transmission over the Internet or electronic storage is 100% secure, we follow all PCI-DSS requirements and implement additional generally accepted industry standards.

16. Age of Consent

​

By using this site, you represent that you are at least the age of majority in your state or province of residence, or that you are the age of majority in your state or province of residence and you have given us your consent to allow any of your minor dependents to use this site.

17. Changes to this Privacy Policy

​

We reserve the right to modify this privacy policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the website. If we make material changes to this policy, we will notify you here that it has been updated, so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we use and/or disclose it.

QUESTIONS AND CONTACT INFORMATION

If you would like to: access, correct, amend or delete any personal information we have about you, register a complaint, or simply want more information, contact our Privacy Compliance Officer at info@project-tres.org