Privacy
It is important to me to protect your data, which may be collected on the occasion of your visit to my website. The legal provisions for the protection of your data can be found in the General Data Protection Regulation and in the Federal Data Protection Act. Responsible body in the sense of the data protection regulations is:
Sonja Kalb
Düsseldorfer Str. 103
40545 Düsseldorf
DE
+49 211 55 60 834
info@sonjakalb.com
Below you will find information about what data I collect during your visit to my site and how it is used. If you still have questions, please feel free to contact me at any time. In case of unlawful use of data, you have the right to complain to the regulatory authority:
Landesbeauftragte für Datenschutz und Informationsfreiheit
Nordrhein-Westfalen
Postfach 20 04 44
40102 Düsseldorf
DE
+49 211 38 42 40
poststelle@ldi.nrw.de
- Server Data Collection
When visiting my site, various server statistics are automatically stored, which your browser transmits to the server of my provider. Among other data, the name of the requested webpage, file, date and time of the request, amount of data transferred, notification of successful retrieval, browser type and version, operating system of the user, referrer, IP address and requesting provider, are logged. This data is used for statistical analysis of visits to my site and cannot be assigned to specific persons. In addition, the data collection serves the prevention of abuse and/or the punishment of attacks on my website. The legal basis for the data collection is Art. 6 1 f GDPR. A combination of this data with other data sources is not made. My legitimate interest in collecting this data is based on the fact that I can use the data to optimize my website for visitors, for example, by preventing access from malicious sites, optimizing access for certain browsers or utilizing the log of the IP address to deliver content to the visitor. In general, you have the right to object to this data collection. This is exceptionally not considered here, because otherwise the use of the site would be impossible. The data is deleted as soon as it is no longer needed for the above-mentioned purposes.
- Use and Disclosure of Personal Data
a. General
As far as you have provided me with personal data, I will use it for technical administration, to answer your inquiries, to advise you as well as to process contracts concluded with you. Your personal data will only be passed on to third parties or otherwise transferred if this is necessary for the purpose of processing contracts, for billing purposes or you have given your prior consent. You have the right to revoke your consent at any time with effect for the future.
b. Processing of Contracts
In the context of contracts concluded with you for the purchase of paintings and editions, I collect and store the personal data provided by you for the purpose of contract execution, e.g. also for billing. A passing on of the data takes place in the context of the account to banks or galleries. The billing data will be transferred to the tax accountant and the tax authority within the framework of tax law requirements. The legal basis for the collection and processing of the data is Art. 6 1 b GDPR in the context of contract processing. The legal basis for the transfer of data to the tax accountant and the tax authority is Art. 6 1 c GDPR. The deletion of this data takes place after the expiry of the legal obligation to preserve records. If I am not subject to any legal obligations to preserve records, the data will be deleted when the purpose ceases.
c. Request by Email
If you send me a contact request by email, I will collect and store the email address and the data contained in the email for the purpose of answering to your request. The legal basis is Art. 6 1 a GDPR, since you consent to the processing of your data when making a contact request. The deletion of the data takes place when the purpose of the storage has ceases, i.e. after answering your email inquiry or when the matter related to the inquiry has been finally clarified. You have the right to revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent.
- Cookies
This site uses cookies. These are small text files that are stored in or by your browser on your computer when you visit my site. With the help of cookies, which contains certain strings, my website recognizes your browser when you call it up again. I use my own cookies, so-called session cookies. These are used to improve the use of the website and to optimize the presentation of the content. The legal basis is Art. 6 1 f DSGVO. My legitimate interest arises from the fact that I only want to facilitate the accessibility of the site with the aforementioned cookies, do not collect any tracking data and do not interfere with your personal rights and fundamental freedoms. You can exclude the acceptance of cookies in your browser. However, this may lead to impairments in functionality. These cookies are only valid for the duration of your browser session and are deleted when you end your visit to my site. I do not use cookies from third-party providers.
- Newsletter
With my newsletter, I inform you regularly about openings, exhibitions and closing parties, new works and editions. If you would like to receive the offered newsletter, please send me an e-mail. You will then be subscribed to the newsletter. You can unsubscribe from the newsletter at any time by clicking on a link at the end of each newsletter. You can also send an email to me with the request to unsubscribe from newsletter. The legal basis for the collection and processing of your data for newsletter marketing is, as a result of your express consent, Art. 6 1 a GDPR. The conditions for consent and its revocation have their legal basis in Art. 7 GDPR. The data will be deleted immediately after you unsubscribed from my newsletter. You have the right to information and the right to objection of your stored data.
- Data Subject Rights
a. Right to Information
At any time, you have the right to information about your personal data stored by me. I must provide the information within one month. You may request information about the following: the purposes for which your personal data is processed; the categories of your personal data; the recipients or the categories of recipients to whom your personal data has been disclosed, the duration of the storage of your personal data or, if specific information on this is not available, criteria for determining the storage period.
b. Right to Correction
You have the right to request immediate correction of incorrect personal data or the completion of incomplete personal data.
c. Right to Deletion
You have the right to have your personal data deleted and I am obliged to immediately delete this data if one of the following reasons apply: Your personal data is no longer necessary for the purposes for which they were collected or otherwise processed. You withdraw your consent to the processing according to Art. 6 1 a GDPR and there is no other legal basis for the processing. According to Art. 21 1 GDPR, you object to the processing of your data that I collect on the basis of my stated legitimate interests and there are no overriding legitimate reasons for the processing, or, according to Art. 21 2 GDPR, you object to the processing of your data in the context of direct marketing. Your personal data has been processed by me unlawfully, for example without consent or without legitimate interests. The deletion of your personal data is necessary to fulfill a legal obligation under European Union law or German law. The data was collected in the context of information society services towards you as a minor under Art. 8 a GDPR. If I have published personal data of you and I am obliged to delete it for one of the aforementioned reasons, I will inform the companies on whose websites the data was published about your request for deletion in an appropriate manner and explain that you, as the data subject, have requested me to delete all links to this data and to delete all copies or replications.
Exceptions: The right to deletion does not exist if the processing of your personal data is necessary to exercise the right to freedom of expression and information; to fulfill legal obligations requiring processing of your personal data under European law or German law, e.g. in the context of tax retention obligations, or to perform a task carried out in the public interest or in the exertion of official authority, which has been assigned to us; for reasons of public interest in the field of public health according to Art. 9 2 h and i GDPR as well as Art. 9 3 GDPR; for archival purposes in the public interest, scientific or historical research purposes or for statistical purposes according to Art. 89 1 GDPR, insofar as the right to deletion is likely to render impossible or seriously affect the achievement of the purposes of such processing, or for the establishment, exercise or defense of legal claims, e.g. in legal proceedings.
d. Right to Restriction of Data Processing
You have the right to request the restriction of processing of your personal data if any of the following conditions apply: If you dispute the accuracy of your personal data, for a period of time that allows me to verify the accuracy of your personal data. If the processing of your personal data is unlawful and you object to the deletion of it and instead request the restriction of the use of it. If I no longer need your personal data for the purposes of processing, but you needed it to assert, exercise or defend legal claims. If you have objected to the processing of your personal data that I collected on the basis of my stated legitimate interests, as long as it has not been established that my legitimate reasons outweigh your rights. If the processing of your personal data has been restricted in accordance with the reasons stated above, it may - apart from being stored - only be used with your consent or for asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. If you have obtained the restriction of data processing, you will be notified by me before the restriction is lifted.
e. Duty to Report
If you have claimed the right to correction, deletion or restriction of data processing, I am obliged to notify all recipients to whom your personal data has been disclosed of this correction, deletion, restriction of processing of your personal data, unless this proves to be impossible or involves a disproportionate effort. You have the right to be informed about these recipients.
f. Right to Transferability
You have the right to receive your personal data shared with me in a structured, common and machine-readable format. In addition, you have the right to transfer this data to another company without hindrance, provided that the processing is based on consent according to Art. 6 1 GDPR or on a contract according to Art. 6 1 b GDPR and the data processing is carried out with the help of automated processes. In exercising this right, you also have the right to obtain that your personal data is transferred directly to another company, insofar as this is technically feasible. Freedoms and rights of other persons must not be affected by this. The right to data transferability does not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority that has been delegated to me.
g. Right to Object
You have the right to object at any time, for reasons arising from your particular situation, to the processing of your personal data which is carried out on the basis of Art. 6 1 e GDPR - processing required for a task carried out in the public interest - or Art. 6 1 f GDPR - processing with explanation of my legitimate interest, e.g. in online marketing; this also applies to profiling based on these provisions. I will no longer process your personal data, unless I can demonstrate compelling legitimate interests for the data processing which override your interests, rights and freedoms, or the processing serves the assertion, exercise or defense of legal claims. If your personal data is processed for the purposes of direct marketing, you have the right to object at any time to the processing of your personal data for the purposes of such marketing; this also applies to profiling, insofar as it is related to such direct marketing. If you object to the processing for direct marketing purposes, your personal data will no longer be processed for these purposes. You have the possibility, in connection with the use of information society services, notwithstanding Directive 2002/58/EC, to exercise your right to object by means of automated procedures using technical specifications.
h. Right to Revoke the data protection consent declaration
You have the right to revoke your data protection declaration at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.
i. Contact for Data Subject Rights
As far as I do not allow you to exercise your rights in the context of data processing, such as, if you unsubscribe from the newsletter, please contact me directly.
SSL or TLS Encryption
This site uses, for security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as a site operator, an SSL or TLS encryption. You can recognize an encrypted connection by changing the address line of the browser from "http://" to "https://" and the lock symbol in your browser line. If SSL or TLS encryption is enabled, the data you submit to us cannot be read by third parties.
For more information, please see the policy of Facebook.
For more information, please see the policy of Instagram.