Cheyenne Privacy Policy

1 Preamble

We,

MT.DERM GmbH

Blohmstrasse 37-61
12307 Berlin

Germany

are the operators (hereinafter referred to as "We" or the "Operators") of the website cheyennetattoo.com

(hereinafter referred to as the "Website") and the services offered on it and are therefore responsible for the collection, processing and use of personal data within the meaning of the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (new FDPA) and the German Telemedia Act (TMG).

The principle of data minimisation is of great importance to us even at the data collection stage. We shall only collect and process personal data if you have given us your consent or if the law expressly permits or mandates us to do so. We will explain below which data we collect, how we use it and which rights you have with regard to the use of your data.

2 Security

The data entered on our website shall be encrypted (according to the state of the art) and transmitted to our servers via the internet.

We protect our website and other systems through technical and organisational measures against loss, destruction, access, modification or dissemination of your data by unauthorised persons. Our security measures are continuously improved in line with technological developments.

3 Collection, storage and use of personal data

3.1 Personal data

The term personal data defines individual information about personal or factual circumstances of a specific or identifiable natural person (data subject). This includes, for example, your real name, your address, your telephone number or your date of birth.

3.2 Collection, processing and use of personal data

We shall adhere strictly to the statutory provisions of the General Data Protection Regulation, the German Federal Data Protection Act and the German Telemedia Act when collecting, processing and using personal data.

We will collect, store and process your data for the entire complaint handling process, the implementation and improvement of our services, technical administration, improvement of our products and services as well as our own marketing purposes.

When using the website for information purposes only, i.e. if you do not register or otherwise provide us with information, we will only collect the personal data that your browser transmits to our server. If you wish to view our website, we will collect the following data that are technically necessary for us to display our website to you and to guarantee stability and security (legal basis is Art. 6(1)(1)(f) of the GDPR):

– IP address;

– Date and time of the request;

– Time zone difference from Greenwich Mean Time (GMT);

– Content of the request (specific page)

– Access Status/HTTP Status Code

– The amount of data transferred in each case

– Website from which the request comes

– Browser

– Operating system and its interface

– Language and browser software version.

For the processing of complaints, we will collect a person’s full name, address, country, telephone number and e-mail address, IP address and gender.

If you contact us by e-mail or through the contact form, we will store your e-mail address and other information according to the form. This is done for the purpose of responding to you or, if necessary, contacting you at a later point in time about the subject of the inquiry.

When the processing of your request has been completed, your data will be blocked for further use and deleted after expiry of the periods provided for under tax and commercial law, unless you have expressly consented to further use of your data.

3.3 Children

Persons under the age of 18 should not transmit any personal data to us without the consent of their parents or legal guardians. We do not request personal data from children and young people, shall not collect any and shall not pass on any to third parties.

3.4 Retention period

Personal data provided to us via our website will only be stored until the purpose for which they were entrusted to us has been fulfilled. If retention periods under commercial and tax law have to be observed, the storage period for certain data can be up to 10 years or longer.

3.5 Disclosure of data/ transmission to third parties

In some cases, we use external service providers to process your data. We have carefully selected and commissioned these providers, who are bound by our instructions and are regularly monitored.

Your personal data will only be passed on or otherwise transmitted to third parties if this is necessary for the purpose of contract processing or invoicing or if you have given your prior consent. As part of complaints handling, for example, the service providers we use here (such as logisticians) will receive the necessary data for order processing. The data passed on in this way may only be used by our service providers for the performance of their tasks. Any other use of the information is not permitted and shall not be made by any of the service providers commissioned by us.

We will not sell or otherwise pass on your data to third parties without your consent. Anything to the contrary shall only apply if there is a legal obligation to do so (e.g. transmitting information to certain authorities within the scope of their statutory duties) or if this is necessary for the enforcement of our rights, especially for the enforcement of claims arising from the contractual relationship with you.

3.6 Storage of log files

Every time you visit our website, the access will be recorded (access log). The recording is automated and will be anonymised. This means that the collected personal data (e.g. IP address) will be changed such that the individual information about personal or factual circumstances can no longer be assigned to a specific or identifiable natural person or this can only be done with a disproportionately high expenditure of time, cost and manpower.

The stored log files serve to further improve our website and the services offered as well as to better control the capacities of the servers.

4 Newsletter

If you consent to doing so, you can subscribe to our newsletter through which we inform you about ourselves and our work, projects, campaigns and offers.

We use the so-called double opt-in procedure for the registration to our newsletter. This means that after your registration we will send you an e-mail to the specified e-mail address in which we will ask you to confirm that you would like the newsletter to be sent. If you do not confirm your registration within [24 hours], your information will be blocked and automatically deleted after one month. In addition, we will store your IP addresses and the time of registration and confirmation. The purpose of the procedure is to be able to prove your registration and, if necessary, to resolve any misuse of your personal data.

If you would like to receive the newsletter, you will have to supply us a valid e-mail address as well as information allowing us to verify that you are the owner of the given e-mail address or that the owner agrees to receive the newsletter.

You can also provide us with your first and last name and additional information using the online form. No other data will be collected. After your confirmation, we will save your e-mail address for the purpose of sending you the newsletter. The legal basis for this is Art. (6) ( 1) (1)(a) of the GDPR.

This data will only be used for the newsletter’s dispatch and will not be passed on to third parties. We will save your IP address and the date of registration when you register for the newsletter. This storage serves solely as proof in the event that a third party misuses an e-mail address and registers for the newsletter’s receipt without the authorised party’s knowledge. You can revoke your consent to the storage of the data and the e-mail address as well as their use for the newsletter’s despatch at any time.

Revocation can be effected through a link in the newsletters themselves or by communication using the contact procedures below.

5 Web analytics services

5.2 Google Analytics

This website uses Google Analytics, a web analysis service of Google Inc. ("Google"). Google Analytics uses so-called "cookies", which are text files stored on your computer to enable the website analyse your use of the site. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, if IP anonymisation has been activated on this website, Google shall truncate your IP address beforehand within Member States of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of this website’s operator, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website and Internet use. The IP address transmitted by your browser in the context of Google Analytics shall not be merged with other Google data. You may refuse the use of cookies by selecting the appropriate settings on your browser, however, please note that if you do this you may not be able to use this website’s full functionality. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available at the following link (http://tools.google.com/dlpage/gaoptout?hl=de ).

You can prevent the collection by Google Analytics by clicking on the following link. An opt-out cookie will be set which prevents the future collection of your data when visiting this website: deactivate Google Analytics

We use Google Analytics to analyse and regularly improve the use of our website. We can improve our offer and make it more interesting for you as a user. Google has signed up to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework for the exceptional cases in which personal data is transferred to the USA. The legal basis for the use of Google Analytics is Art. 6(1)(1)(f) of the GDPR.

You can find more information on terms of use and data protection at http://www.google.com/analytics/terms/de.html or at http://www.google.de/intl/de/policies/. Please note that on this website, Google Analytics has been supplemented with the code "anonymizeIp" to ensure anonymous collection of IP addresses (so-called IP masking).

5.2 Google Ads (including Conversion Tracking and Enhanced Conversions)

We use the online advertising program "Google Ads" on our website, operated by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; hereinafter referred to as "Google").

1. Scope and Description of Data Processing As part of Google Ads, we use a feature known as Conversion Tracking. When you click on an advertisement placed by Google, a conversion tracking cookie is stored on your device. These cookies typically expire after a maximum of 90 days and are not intended to identify you personally. If you visit certain pages on our website and the cookie has not yet expired, Google and we can detect that you clicked on the ad and were redirected to that page. Each Google Ads customer receives a different cookie, meaning cookies cannot be tracked across the websites of different Ads customers.

In addition, we utilize the "Enhanced Conversions" feature. When you complete an action on our website (e.g., making a purchase), this feature captures the data you entered into the form fields (such as your email address, name, or address). Before being transmitted to Google, this data is encrypted ("hashed") on your local device using a secure mathematical algorithm (SHA-256). Google then matches these pseudonymized hashes with the data of existing Google account users. This allows us to measure and optimize the performance of our Google Ads campaigns more accurately across multiple devices.

2. Purpose of Data Processing The information gathered using the conversion cookie and enhanced conversions is used solely to generate conversion statistics for us. We receive the total number of users who clicked on our ad and were redirected to a page featuring a conversion tracking tag. However, we do not receive any information that allows us to personally identify you.

3. Legal Basis The use of Google Ads and Enhanced Conversions is based exclusively on your explicit consent pursuant to Art. 6 para. 1 lit. a GDPR. You can grant or revoke this consent at any time via the cookie consent banner on our website.

4. Data Transfer to Third Countries Data collected during this tracking process may be transferred to and stored on Google servers located in the United States. Google is certified under the EU-US Data Privacy Framework, which ensures a level of data protection that complies with EU standards for data processing in the US.

5. Objection and Prevention of Data Collection You can prevent participation in this tracking process in several ways:

By adjusting your browser software settings accordingly (specifically by disabling third-party cookies).
By disabling cookies for conversion tracking by setting your browser to block cookies from the domain "www.googleadservices.com".
By revoking your consent within our website’s cookie consent banner.

For further details regarding data processing by Google, please refer to Google's Privacy Policy: https://policies.google.com/privacy.

5.3 Use of the Facebook pixel (Facebook Custom Audiences)

On our website we use the so-called "Facebook pixel" of Facebook Inc. ( Facebook). This allows users of our website to be provided with interest-related advertisements ("Facebook Ads") when they visit the social network Facebook or other websites that also use the procedure. Through the Face-book pixel, your browser automatically establishes a direct connection with the Facebook server. We have no influence on the scope and further use of the data collected by Facebook through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of the Facebook pixel, Facebook receives the information that you have clicked on an advertisement from us or called up the corresponding website of our Internet presence. If you are registered with a Facebook service, Facebook can assign the visit to your account. Even if you are not registered with Facebook or have not logged in, there is a possibility that the provider will find out and save your IP address and other identification features.

With the use of the Facebook pixel, we pursue the purpose of displaying Facebook ads placed by us only to those Facebook users who have also shown an interest in our Internet offer. With the help of the Facebook pixel, we want to ensure that our Facebook ads correspond to the potential interest of the users and do not appear annoying. In addition, the Facebook pixel allows us to track the effectiveness of Facebook ads for statistical purposes by seeing whether users were redirected to our website after clicking on a Facebook ad. The legal basis for the use of the Facebook pixel is article 6 paragraph 1 letter f DSGVO.

You may object to the use of the Facebook Pixel at any time by clicking deactivate Facebook Pixel .

Third party information: Facebook Inc, 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php; further information on data collection:

http://www.facebook.com/help/186325668085084

http://www.face-book.com/about/privacy/your-info-on-other#applicationssowie

http://www.face-book.com/about/privacy/your-info#everyoneinf

6 Social plug-ins and integration of YouTube videos

6.1 Social Plug-Ins

We do not use plug-ins from social networks called "social plug-ins” on our site. The symbols of social networks used on the website merely represent links to the respective services.

6.2 YouTube Videos

We use YouTube to integrate videos. The videos were embedded in the extended data protection mode. Like most websites, however, YouTube also uses cookies to collect information about the visitors to its website. YouTube uses them, among other things, to collect video statistics, to prevent fraud and to improve user-friendliness. This also leads to the establishment of a connection to the Google DoubleClick network. You could trigger further data processing by starting the video. We have no control over that. For more information about privacy at YouTube, please see their privacy policy: http://www.youtube.com/t/privacy_at_youtube

7 Right of objection and the rights to information, rectification, correction and deletion of data

You have a right to information regarding the personal data stored about you and a right to correction of incorrect data as well as their blocking, completion and deletion.

You can object to the use of your data for the aforementioned purposes at any time with effect for the future without incurring any costs other than transmission costs according to the basic tariffs.

Upon request, we will provide you with a copy of your personal data in a structured, common and machine-readable format.

For information about your personal data, to have incorrect data corrected or blocked or deleted, to exercise your right of objection and for further questions about the use of your personal data, please contact us:

MT.DERM GmbH

Data protection

Rheinstr. 10b

14513 Teltow

Germany

datenschutz@mtderm.de

8 Complaint to the supervisory authority

Pursuant to Art. 77 of the GDPR, data subjects have the right to complain to the competent supervisory authority if they believe that the processing of their personal data is unlawful. The competent data protection supervisory authority is the Berlin Commissioner for Data Protection and Freedom of Information.

9 Disclaimer of liability

All information contained on this website has been verified very carefully. However, we do not guarantee that the contents of our own websites are always correct, complete and up to date.

10 Mobile Devices

The provisions of this data protection declaration also apply to mobile access and use of mobile devices.

11 Changes to the data protection declaration

We reserve the right to adapt our data protection declaration if this is necessary due to modified security and data protection measures. We therefore recommend that you visit this page regularly to acquaint yourself with this data protection declaration.