We place great importance on data protection.

The following privacy policy applies to the use of the website www.devasileva.de (hereinafter the "Website").

We place great importance on data protection. The collection and processing of your personal data is carried out in compliance with applicable data protection regulations, in particular the EU General Data Protection Regulation (GDPR). We collect and process your personal data in connection with the use of our website. This statement describes how and for what purpose your data is collected and used, and what choices you have in relation to personal data.
By using this website, you consent to the collection, use and transfer of your data in accordance with this privacy policy.

Below we inform you about the collection of personal data when using our website.

The term "personal data" means, with reference to the definition in Art. 4 No. 1 of Regulation (EU) 2016/679 (hereinafter referred to as the "General Data Protection Regulation" or "GDPR" for short), any data that can be related to you personally. This includes, for example, name, address, email address, and user behaviour. With regard to other terms, in particular "processing", "controller", "processor" and "consent", we refer to the statutory data protection definitions in Art. 4 GDPR.

We generally only process personal data to the extent necessary to provide a functioning website and the content and services we offer. Personal data is regularly processed only if you have given us your consent within the meaning of Art. 6(1)(a) GDPR, or if the processing is permitted by statutory provisions, in particular one of the legal bases listed in Art. 6(1)(b) to (f) GDPR.

Your personal data will be deleted or blocked as soon as the purpose of storage no longer applies. Storage may also take place if this is provided for by national or European regulations to which we are subject. Data will be blocked or deleted once the storage period prescribed by the relevant regulations has expired, unless further storage of the data is necessary for the conclusion or performance of a contract.

1. Controller

The party responsible for the collection, processing and use of your personal data within the meaning of the GDPR is: DESISLAVA VASILEVA Sp. z o.o.
ul. Okrężna 8
40-100 Gliwice
Poland

Phone: 0048 538 431 660
Email: info@devasileva.de 

2. Your Rights

With regard to your personal data, you have the following rights against us:

• the right to access,
• the right to rectification and erasure,
• the right to restriction of processing,
• the right to object to processing,
• the right to data portability.

You also have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data.

Under the scope of the applicable national data protection law, you also have the right to:

• data disclosure,
• data destruction.

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. Duis cursus, mi quis viverra ornare, eros dolor interdum nulla, ut commodo diam libero vitae erat. Aenean faucibus nibh et justo cursus id rutrum lorem imperdiet. Nunc ut sem vitae risus tristique posuere.

3. Data Collection on Our Website. Cookies

Our web pages partly use so-called cookies. Cookies do not cause any damage to your computer and do not contain viruses. Cookies serve to make our offering more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so-called "session cookies". They are automatically deleted at the end of your visit. Other cookies remain stored on your device until you delete them. These cookies allow us to recognise your browser on your next visit.

You can set your browser so that you are informed when cookies are set and only allow cookies on a case-by-case basis, exclude the acceptance of cookies in certain cases or in general, and enable the automatic deletion of cookies when you close your browser. Disabling cookies may limit the functionality of this website.

Cookies that are necessary to carry out the electronic communication process or to provide certain functions are stored on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in storing cookies to ensure a technically error-free and optimised provision of its services. Insofar as other cookies (e.g. cookies for analysing your browsing behaviour) are stored, these are treated separately in this privacy policy.

Server Log Files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

• browser type and version
• operating system used
• referrer URL
• host name of the accessing computer
• time of the server request
• IP address

This data is not combined with other data sources.

The basis for data processing is Art. 6(1)(f) GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures.

4. Enquiry Forms

If you send us enquiries via "Contact", your details from the enquiry form, including the contact and personal data you provide there, are stored by us for the purpose of processing the enquiry and in case of follow-up questions. We do not pass on this data without your consent.

The processing of the data entered in the form is therefore carried out exclusively on the basis of your consent (Art. 6(1)(a) GDPR). You can revoke this consent at any time. An informal email to us is sufficient for this purpose. The lawfulness of the data processing carried out up to the revocation remains unaffected by the revocation. The data you enter in the enquiry form remains with us until you ask us to delete it, revoke your consent to storage, or the purpose for storing the data no longer applies (e.g. after your enquiry has been fully processed). Mandatory statutory provisions – in particular retention periods – remain unaffected.

5. Third-Party Services. Google Analytics

Based on our legitimate interests in optimising and analysing our online offering within the meaning of Art. 6(1)(f) GDPR, this website uses the "Google Analytics" service, provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). The service (Google Analytics) uses "cookies" – text files that are stored on your device. The information collected by the cookies is generally transmitted to and stored on a Google server in the USA.

Google LLC complies with European data protection law and is certified under the applicable data transfer mechanisms.

6. Contacting Us

If you contact us by email, the personal data you send us in your email will be stored.

We also provide a contact form on our website that you can use to contact us. The data you enter in the input mask is transmitted to us and stored: form of address, first name, surname, email address, address, phone, care needs, email, phone, address, first name, last name.

The data is used exclusively for responding to your enquiries. Unless expressly stated otherwise in this privacy policy, the data is not passed on to third parties. In addition, we record your IP address and the time you submitted the form.

The processing of the aforementioned personal data serves solely to process your enquiries.

The processing of further personal data arising from the use of the contact form provided on our website serves to prevent misuse and to ensure the security of our information technology systems.

This also constitutes our legitimate interest in processing your personal data. Insofar as you have given us your consent for this purpose, the legal basis for processing this data is Art. 6(1)(a) GDPR. Otherwise, the legal basis for processing this data is Art. 6(1) GDPR, in particular where the data is transmitted to us by you sending an email. Insofar as you intend to conclude a contract by means of your email, Art. 6(1)(b) GDPR constitutes an additional legal basis.

The data will be deleted, subject to statutory retention periods, as soon as we have completed processing your enquiry. In the case of contact by email, you can object to the storage of your personal data at any time. We would like to point out that in this case your enquiry can no longer be processed. You can declare your revocation or objection by sending an email to the email address given in our Legal Notice.

7. Right to Object

If your personal data is processed on the basis of legitimate interests pursuant to Art. 6(1) sentence 1(f) GDPR, you have the right, pursuant to Art. 21 GDPR, to object to the processing of your personal data, insofar as there are grounds for this arising from your particular situation, or where the objection relates to direct marketing. In the latter case, you have a general right to object, which we will implement without you needing to state a particular situation. If you would like to exercise your right of revocation or objection, an email to info@devasileva.de is sufficient.

8. DoubleClick

We use this service on our website.

The service uses, among other things, cookies – small text files that are stored locally in the cache of your web browser on your device. Via a cookie ID, the provider records which advertisements are shown in which web browser. This can prevent advertisements from being displayed multiple times. Using the cookie IDs, the service can also record so-called conversions relating to advertising requests. This is the case, for example, if you see a corresponding advertisement and later visit the advertiser's website using the same web browser and make a purchase there. According to the provider, the aforementioned cookies do not contain any personal data. By using the service, your browser automatically establishes a direct connection with the provider's server. We have no influence on the scope and further use of the data collected by the provider through the use of the service. To the best of our knowledge, the provider receives the information that you have visited the corresponding part of our website or clicked on an advertisement from us. If you have a user account with the provider and are logged in, the provider can associate the visit with your user account. Even if you are not registered with the provider or are not logged in, it is possible that the provider will obtain and store your IP address.

We use the service for optimisation purposes, in particular to improve the use of our website for you and to make its design more user-friendly.

9. ROUTINE ERASURE AND BLOCKING OF PERSONAL DATA

The controller processes and stores the personal data of the data subject only for the period necessary to achieve the purpose of storage, or as provided for by the European legislator or other legislators in laws or regulations to which the controller is subject.

If the purpose of storage no longer applies, or if a storage period prescribed by the European legislator or another competent legislator expires, the personal data is routinely blocked or deleted in accordance with statutory requirements.

10. RIGHTS OF THE DATA SUBJECT

• RIGHT OF CONFIRMATION
  Every data subject has the right granted by the European legislator to obtain confirmation from the controller as to whether or not personal data concerning them is being processed. If a data subject wishes to exercise this right of confirmation, they may, at any time, contact any employee of the controller.
  ‍
• ‍RIGHT OF ACCESS
  Every data subject affected by the processing of personal data has the right granted by the European legislator to obtain from the controller, free of charge, at any time, information about the personal data stored about them and a copy of this information. Furthermore, the European legislator has granted the data subject access to the following information:
  - the purposes of the processing
  - the categories of personal data being processed
  - the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations - where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period the existence of the right to request rectification or erasure of the personal data concerning the data subject, or restriction of processing by the controller, or to object to such processing
  - the existence of the right to lodge a complaint with a supervisory authority
  - where the personal data are not collected from the data subject
  - any available information as to their source
  - the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for the data subject
  The data subject also has the right to be informed whether personal data have been transferred to a third country or to an international organisation. Where this is the case, the data subject also has the right to be informed of the appropriate safeguards relating to the transfer.
  If a data subject wishes to exercise this right of access, they may, at any time, contact any employee of the controller.
• ‍RIGHT TO RECTIFICATION
  Every data subject affected by the processing of personal data has the right granted by the European legislator to obtain, without undue delay, the rectification of inaccurate personal data concerning them. The data subject also has the right to request the completion of incomplete personal data – including by means of a supplementary statement – taking into account the purposes of the processing.
  If a data subject wishes to exercise this right to rectification, they may, at any time, contact any employee of the controller.
• ‍RIGHT TO ERASURE (RIGHT TO BE FORGOTTEN)
  Every data subject affected by the processing of personal data has the right granted by the European legislator to obtain from the controller the erasure of personal data concerning them without undue delay, where one of the following grounds applies and insofar as the processing is not necessary:
  - The personal data were collected for such purposes, or otherwise processed, for which they are no longer necessary.
  - The data subject withdraws the consent on which the processing was based pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR, and there is no other legal basis for the processing. - - The data subject objects to the processing pursuant to Art. 21(1) GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Art. 21(2) GDPR.
  - The personal data have been processed unlawfully.
  - Erasure of the personal data is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject.
  - The personal data have been collected in relation to the offer of information society services referred to in Art. 8(1) GDPR.
  If one of the aforementioned grounds applies and a data subject wishes to arrange for the erasure of personal data stored by DESISLAVA VASILEVA Agency, they may, at any time, contact any employee of the controller. The employee of DESISLAVA VASILEVA Agency will ensure that the request for erasure is complied with immediately. Where the personal data have been made public by DESISLAVA VASILEVA Agency and our company as controller is obliged pursuant to Art. 17(1) GDPR to erase the personal data, DESISLAVA VASILEVA Agency will, taking account of available technology and the cost of implementation, take reasonable steps, including technical measures, to inform other controllers processing the published personal data that the data subject has requested that those other controllers erase any links to, or copies or replications of, that personal data, insofar as processing is not required. The employee of DESISLAVA VASILEVA Agency will arrange the necessary steps in individual cases.
• RIGHT TO RESTRICTION OF PROCESSING
  Every data subject affected by the processing of personal data has the right granted by the European legislator to obtain from the controller restriction of processing where one of the following applies:
  - The accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data.
  - The processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead.
  - The controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims.
  - The data subject has objected to processing pursuant to Art. 21(1) GDPR pending the verification whether the legitimate grounds of the controller override those of the data subject.
  
  If one of the aforementioned conditions applies and a data subject wishes to request restriction of the processing of personal data stored by DESISLAVA VASILEVA Agency, they may, at any time, contact any employee of the controller. The employee of DESISLAVA VASILEVA Agency will arrange for the restriction of processing.
• RIGHT TO DATA PORTABILITY
  Every data subject affected by the processing of personal data has the right granted by the European legislator to receive the personal data concerning them, which was provided to a controller by the data subject, in a structured, commonly used and machine-readable format. They also have the right to transmit this data to another controller without hindrance from the controller to which the personal data was provided, as long as the processing is based on consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR, or on a contract pursuant to Art. 6(1)(b) GDPR, and the processing is carried out by automated means, provided the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
  
  Furthermore, in exercising their right to data portability pursuant to Art. 20(1) GDPR, the data subject has the right to have personal data transmitted directly from one controller to another, where technically feasible and when doing so does not adversely affect the rights and freedoms of others.
  
  In order to assert the right to data portability, the data subject may contact any employee of DESISLAVA VASILEVA Agency at any time.
• RIGHT TO OBJECT
  Every data subject affected by the processing of personal data has the right granted by the European legislator to object, on grounds relating to their particular situation, at any time, to the processing of personal data concerning them which is based on Art. 6(1)(e) or (f) GDPR. This also applies to profiling based on these provisions.
  
  In the event of an objection, DESISLAVA VASILEVA Agency will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves the establishment, exercise or defence of legal claims.
  
  If DESISLAVA VASILEVA Agency processes personal data for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning them for the purpose of such marketing. This also applies to profiling insofar as it is related to such direct marketing. If the data subject objects to DESISLAVA VASILEVA Agency's processing for direct marketing purposes, DESISLAVA VASILEVA Agency will no longer process the personal data for these purposes.
  
  The data subject also has the right, on grounds relating to their particular situation, to object to the processing of personal data concerning them carried out by DESISLAVA VASILEVA Agency for scientific, historical research or statistical purposes pursuant to Art. 89(1) GDPR, unless such processing is necessary for the performance of a task carried out for reasons of public interest.
  
  To exercise the right to object, the data subject may directly contact any employee of DESISLAVA VASILEVA or another employee. The data subject is also free, in the context of the use of information society services, and notwithstanding Directive 2002/58/EC, to exercise their right to object using automated means employing technical specifications.
• AUTOMATED DECISION-MAKING IN INDIVIDUAL CASES, INCLUDING PROFILING
  Every data subject affected by the processing of personal data has the right granted by the European legislator not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning them, or similarly significantly affects them, unless the decision (1) is necessary for entering into, or the performance of, a contract between the data subject and the controller, or (2) is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard the data subject's rights and freedoms and legitimate interests, or (3) is based on the data subject's explicit consent.
  
  If the decision (1) is necessary for entering into, or the performance of, a contract between the data subject and the controller, or (2) it is based on the data subject's explicit consent, DESISLAVA VASILEVA Agency will implement suitable measures to safeguard the data subject's rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express their point of view and to contest the decision.
  
  If the data subject wishes to exercise their rights concerning automated decision-making, they may, at any time, contact any employee of the controller.‍
• RIGHT TO WITHDRAW DATA PROTECTION CONSENT
  Every data subject affected by the processing of personal data has the right granted by the European legislator to withdraw consent to the processing of their personal data at any time.‍
  If the data subject wishes to exercise their right to withdraw consent, they may, at any time, contact any employee of the controller.

LEGAL BASIS FOR THE PROCESSING
Art. 6(1)(a) GDPR serves as the legal basis for our company for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is party, as is the case, for example, with processing operations necessary for the supply of goods or the provision of any other service or consideration, the processing is based on Art. 6(1)(b) GDPR. The same applies to such processing operations necessary for the implementation of pre-contractual measures, for example in cases of enquiries concerning our products or services. If our company is subject to a legal obligation by which processing of personal data is required, such as for the fulfilment of tax obligations, the processing is based on Art. 6(1)(c) GDPR. In rare cases, the processing of personal data may become necessary to protect the vital interests of the data subject or of another natural person. This would be the case, for example, if a visitor were injured at our premises and their name, age, health insurance data or other vital information had to be passed on to a doctor, hospital or other third party. In that case, the processing would be based on Art. 6(1)(d) GDPR. Finally, processing operations could be based on Art. 6(1)(f) GDPR. This legal basis is used for processing operations not covered by any of the aforementioned legal bases, where processing is necessary to safeguard a legitimate interest of our company or a third party, unless the interests, fundamental rights and freedoms of the data subject prevail. Such processing operations are permitted to us in particular because they have been specifically mentioned by the European legislator, who took the view that a legitimate interest could be assumed if the data subject is a customer of the controller (Recital 47, sentence 2 GDPR).

11. DURATION FOR WHICH PERSONAL DATA WILL BE STORED

The criterion for the duration of storage of personal data is the respective statutory retention period. After expiry of that period, the corresponding data is routinely deleted, provided it is no longer required for the performance or initiation of a contract.

12. Automated Decision-Making

No automated decision-making based on the personal data collected takes place.

13. Disclosure of Data to Third Parties. No Data Transfer Outside the EU

As a matter of principle, we only use your personal data within our company.
Data only to the extent that the transfer is necessary for the corresponding service.
Where we outsource certain parts of data processing ("processing on our behalf"), we contractually oblige processors to use personal data only in accordance with the requirements of data protection law and to ensure the protection of the rights of the data subject.
A transfer of data to bodies or persons outside the EU beyond the cases mentioned in this statement does not take place and is not planned.

14. WhatsApp Business

We use "WhatsApp Business", an instant messaging service (hereinafter "WhatsApp"), to offer you a convenient way to get in touch with us. To use this service, you must have WhatsApp installed on your device. By clicking on the corresponding WhatsApp icon on our website, WhatsApp opens a conversation ("chat") disclosing your mobile phone number, which you can use to contact us. During the course of the conversation, we may also receive further data you provide, such as your name, address or email address, as well as details of your enquiry, in order to process your requests. We treat the data provided as confidential. The service is provided by WhatsApp as the controller. Please refer to WhatsApp's privacy policy for information on data processing, in particular on the disclosure of data, on ensuring compliance with applicable data protection regulations, and on exercising your rights: https://www.whatsapp.com/legal/?l=en&lang=de. In this context, we only store personal data where necessary to process your enquiry, in particular for follow-up questions and later contact. WhatsApp does not process your data if you only use our website for information purposes and do not contact us via WhatsApp. The use of WhatsApp is therefore optional. In your own interest, please make sure that you only give WhatsApp access to the contact details of those persons in your address book who have consented to their contact details being transmitted to WhatsApp.

The processing of the aforementioned data serves the purpose of being able to answer your enquiries quickly and efficiently. This also constitutes our legitimate interest in processing the aforementioned data. Where you have given your consent, the legal basis is Art. 6(1) sentence 1(a) GDPR. Where the use of WhatsApp's content or function serves to initiate or perform a contract with us, Art. 6(1) sentence 1(b) GDPR constitutes an additional legal basis for the processing. Otherwise, Art. 6(1) sentence 1(f) GDPR is the legal basis for the processing.

If you want to prevent the disclosure of data, you cannot use the functions of WhatsApp.

Insofar as we store data, it is deleted, subject to statutory retention obligations, as soon as it is no longer required to achieve the purpose for which it was collected. This is the case once we have completed processing your enquiry.

15. Data Protection

As a general rule, our website can be used without providing personal data. Insofar as personal data (such as name, address or email addresses) is collected on our pages, this is always done, as far as possible, on a voluntary basis. This data will not be passed on to third parties without your express consent.

We would like to point out that data transmission over the internet (e.g. when communicating by email) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.

We hereby expressly object to the use of contact details published as part of the obligation to provide a Legal Notice by third parties for sending unsolicited advertising and information materials. The operators of the pages expressly reserve the right to take legal action in the event of the unsolicited sending of advertising material, for example via spam emails.