Privacy policy

Data Protection Statement
1. Data protection
General information
It is important to me to protect your data, which can be recorded during your visit to sonjakalb.com. The legal provisions for the protection of your data can be found in the General Data Protection Regulation and in the Federal Data Protection Act. Responsible body in the sense of the data protection regulations is

Sonja Kalb
Düsseldorfer Str. 103
40545 Düsseldorf

Telefon: 0211 5560834
E-Mail: info@sonjakalb.com

Below you will find information about what information I collect during your visit to my site and how it is used. If you have any questions, feel free to contact me at info@sonjakalb.com. You also have the right to appeal to the relevant regulatory authority in case of misappropriation of the data. This is the

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Postfach 20 04 44
40102 Düsseldorf

Telefon: 0211 38424-0
Fax: 0211 38424-10
E-Mail: poststelle@ldi.nrw.de.

1. Server data collection
When visiting my page, various server statistics are automatically saved, which your browser transmits to the server of my provider. Among other things, name of the retrieved web page, file, date and time of retrieval, amount of data transferred, notification of successful retrieval, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider, are logged.

This data serves the statistical evaluation of the visits of my site and is not assignable to definite persons for me. In addition, the data collection serves to prevent abuse and / or punishment of attacks on my website. The legal basis of the data collection is Art. 6 I f GDPR. An aggregation of this data with other data sources will not be performed.

My legitimate interest in the collection of this data is based on the fact that I can optimize my offer for users based on the data, for example by preventing access from malicious pages or optimizing access via certain browsers, and only the log of the IP address makes the delivery of the page to the visitor possible.

You have fundamentally the right to object to this data collection. Factually, this is exceptionally not considered here otherwise the use of the site would be impossible. The data will be deleted as soon as it is no longer needed for the above mentioned purposes.

2. Use and disclosure of personal data
A. General
Insofar as you have provided me with personal data, I use this to answer your inquiries, to advise and
Your personal data will only be disclosed to third parties or otherwise transmitted, if this is necessary for the purpose of the contract, if this is necessary for billing purposes or if you have previously consented. You have the right to revoke your consent with effect for the future at any time, see also paragraph 6 of your affected rights.
B. Contract processing
Within the framework of contracts with you for the purchase of paintings and editions, I collect and store the personal data you provide for the purpose of contract execution, e.g. also for accounting. A transfer of the data takes place in the context of the account to banks or galleries.
The billing data is transferred to the accountancy firm and the financial authorities within the framework of the tax law. The legal basis for the collection and processing of the data in the context of the contract is Art. 6 I (b) GDPR. The legal basis for the transfer of data to the tax office and tax office is Art. 6 I (c) GDPR. The deletion of this data takes place after expiry of the applicable statutory retention requirements. As far as I do not meet any legal storage obligations, the deletion of the data takes place with cessation of the purpose.

C. Contact form and request by e-mail
Through the use of my contact form I collect and save the name and the e-mail address for the purpose of answering your request. The phone number for a callback is optional. When sending me a contact request via e-mail, I collect and save the e-mail address and the data contained in the e-mail for the purpose of answering your request.
The legal basis is Art. 6 I (a) GDPR, because if you use the form in the above mentioned, you provide the consent to the processing of your data. The deletion of the data takes place when the purpose of the storage no longer applies, i.e. after answering your e-mail / contact form request or when the matter connected with the request has finally been clarified. You have the right to revoke your consent at any time without affecting the lawfulness of the processing on the basis of your consent. To claim for deletion and information, see under paragraph 6 on your affected rights.

3. Cookies
This site uses cookies. These are small text files that are saved when you visit my page in your Internet browser (e.g., Firefox, Chrome, Microsoft Explorer / Edge, Safari, etc.) or from your computer (i.e., your operating system). With the help of cookies, which contains a certain string, my web page will recognize your internet browser when it is called up. I use my own cookies, so-called session cookies.
These serve to improve the use of the website and to optimize the presentation of the content for you. Likewise, I use cookies that recognize your browser when logging into the customer account and facilitate access to the deposited content. The legal basis is Art. 6 I (f) GDPR.
My legitimate interest arises from the fact that I would like to facilitate the retrieval of the site for you with the aforementioned cookies, no tracking data will be collected and thereby raise no interference with your personal rights and fundamental freedoms. You can exclude the acceptance of cookies in your web browser.
This may, among other things, lead to impairments in functionality. To your further affected rights see under 2. These cookies are only valid for the duration of your browser session and will be deleted at the end of your visit to our site. I do not use third-party cookies.

4. Newsletter
With my newsletter, I regularly inform you about exhibition openings, closing parties/finissages, new works and editions. If you would like to receive the offered newsletter, please send an e-mail to info@sonjakalb.com. You will then be included in the newsletter mailing list and receive our news.
At any time, by clicking on a link at the end of each newsletter, you may object to the receipt of further newsletters without incurring any costs other than the transmission costs of the basic rates. You can also send an e-mail with the request for removal from the mailing list to me at info@sonjakalb.com.
The legal basis for the collection and processing of your data for newsletter marketing is, as a result of your express consent, Art. 6 I (a) GDPR. The conditions for consent and their revocation have their legal basis in Art. 7 GDPR. The data will be deleted immediately after your cancellation from my newsletter. You have a right to information and objection to your stored data, see under Section 2 for your affected rights.

5. Google Maps
This site uses the Google Maps mapping service provided by Google Inc. (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; "Google"). If you view my location through Google Maps, this service may collect information from you. For details, see Maps Terms of Service, such as "Google's Privacy Policy."
The legal basis for the collection and storage of the data is Art. 6 I (f) GDPR. My legitimate interest lies in the fact that I can make it easier for you to find my premises.

6. Affected rights
A. Disclosure rights
You always have the right to free information about the personal data that I have stored about you. I have to provide the information within a month. You may request information about: the purposes for which your personal information is being processed; the categories of personal data that are processed; the recipients or categories of recipients to whom the personal data relating to you have been disclosed or are still being disclosed; the planned duration of the storage of your personal data or, if specific information is not available, criteria for determining the duration of storage; the existence of a right to rectification or erasure of personal data concerning you, a right to restriction of processing by the person responsible or a right to object to such processing; the existence of a right of appeal to a supervisory authority; all available information on the source of the data if the personal data is not collected from the data subject; the existence of automated decision-making including profiling in accordance with Art.22 (1) and (4) GDPR and - at least in these cases - meaningful information about the logic involved and the scope and intended impact of such processing on the data subject. I point out that such automated decision-making does not take place on my part. Whether the personal data relating to you is transferred to a third country or to an international organization. In this connection, you can request the appropriate guarantees in accordance with. Art.46 GDPR in connection with the transmission to be informed.

B. Right to rectification
You have the right to request immediate correction of incorrect personal information or the completion of incomplete personal data.

C. Right to delete
Entitlement to cancellation. You have the right to the immediate deletion the personal data relating to you, and I am obliged to delete that data immediately if one of the following is true: Your personal data is for the purposes for which it was collected or otherwise were processed, no longer necessary. You revoke your consent to the processing according to Art. 6 I (a) and there is no other legal basis for processing. You object to the processing of your data according to Art. 21 I GDPR which I base on the basis of my stated legitimate interests (for example in Google Analytics), and there are no legitimate reasons for the processing, or you object according to Art. 21 II GDPR to oppose to the processing in the context of direct mail.
Your personal data has been processed by me unlawfully, for example without consent or without legitimate interests. The deletion of personal data concerning you is required to fulfill a legal obligation under European Union law or German law. The data was collected in the context of information society services towards you as a minor under Art.8 A GDPR.
If I have published personal information from you and I am obliged to delete it for any of the reasons stated above, I will inform the companies on whose website the data was published about your request for cancellation in an appropriate manner and explain that you have requested the deletion of all links to this data as well as the deletion of all copies or replications.
Exceptions: The right of cancellation does not exist if the processing is necessary to exercise the right to freedom of expression and information; to fulfill a legal obligation requiring processing under European law or German law, e.g. in the context of fiscal retention obligations, or to perform a task that is in the public interest or in the exertion of official authority, which has been assigned to us; for reasons of public interest in the field of public health in accordance with Art. Art. 9 II (h) and (i) as well as Art. 9 III GDPR; for archival purposes of public interest, scientific or historical research purposes or for statistical purposes according to Art.89 (I) GDPR, to the extent that the right of cancellation is likely to render impossible or seriously affect the achievement of the objectives of such processing or to assert

D. Right to restriction of data processing
You have the right to request that I restrict the processing if any of the following conditions apply: If you dispute the accuracy of your personal information for a period of time that allows me to verify the accuracy of your personal information. If the processing is unlawful and you refuse the deletion of personal data and instead demand the restriction of the use of personal data.
If I no longer need your personal information for the purposes of processing, you however need it to assert, exercise or defend your rights. If you have objected to the processing of your personal information that I collect based on my legitimate interests (such as in Google Analytics) as long as it has not been established that my legitimate reasons outweigh your rights.
If the processing has been restricted in accordance with the reasons stated above, this personal data may only be used with your consent or for asserting, exercising or defending legal claims or protecting the rights of another natural or legal person (GmbH, AG etc.). ) or for reasons of important public interest of the Union or of a Member State. If you have obtained the restriction on processing, you will be notified by me before the restriction is lifted.

E. Obligation to inform
If you have the right to rectify, delete or restrict the processing by me, I shall be obliged to notify all recipients to whom your personal data has been disclosed of this correction or deletion of the data or restriction of processing, unless it is the case that this proves to be impossible or involves a disproportionate effort. You have the right to be informed about these recipients.

F. Right to portability
You have the right to receive personally identifiable information you have provided to me in a structured, common and machine-readable format. In addition, you have the right to transfer this data to another company without hindrance by me, provided that the processing is based on a consent in accordance with. Art. 6 (I) GDPR or on a contract pursuant to Art. Art.6 I (b) GDPR and the processing is carried out using automated procedures.
In exercising this right, you also have the right to obtain that personal data relating to you is transmitted directly by me to another company, insofar as this is technically feasible. Freedoms and rights of other persons may not be affected. The right to data portability does not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority that has been delegated to us.

G. Right of objection
You have the right at any time, for reasons arising from your particular situation, against the processing of personal data concerning you, processing required by Article 6 I (e) for a public-interest task or (f ) GDPR - processing with explanation of my legitimate interest, e.g. in online marketing - takes place, to object; this also applies to profiling based on these provisions.
I no longer process personal data concerning you, unless I can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct marketing.
If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes. Regardless of Directive 2002/58 / EG, you have the option, in the context of the use of information society services, of exercising your right to object through automated procedures that use technical specifications.

H. Right to revoke the data protection consent declaration
You have the right to revoke your data protection declaration at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent up to the revocation.

I. Contact person for affected rights
As far as I do not allow you to exercise your rights directly in the context of processing, such as, if you unsubscribe from the newsletter, please contact me at info@sonjakalb.de or by post at the address given in the imprint.

SSL or TLS encryption
This site uses, for security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as a site operator, an SSL or. TLS encryption. You can recognize an encrypted connection by changing the address line of the browser from "http: //" to "https: //" and the padlock symbol in your browser line. If SSL or TLS encryption is enabled, the data you submit to us cannot be read by third parties.

7. Facebook
For more information, see the Facebook Privacy Policy at
http://www.facebook.com/policy.php

8. Instagram
For more information, see the Instagram Privacy Policy at
https://help.instagram.com/155833707900388