Privacy Notice for the Website
The entity responsible for data processing on this website is:

​

Faszinaturen UG (limited liability)
Sebastian Glende
Greifswalder Straße 51
10405 Berlin

​

The responsible entity determines, either alone or jointly with others, the purposes and means of processing personal data (e.g., names, contact information, etc.).

Withdrawal of Your Consent to Data Processing
Certain data processing activities are only possible with your explicit consent. You may withdraw your consent at any time. To do so, simply send us an informal email. The lawfulness of the data processing carried out prior to the withdrawal remains unaffected by the withdrawal.

Right to File a Complaint with the Competent Supervisory Authority
As a data subject, you have the right to file a complaint with the competent supervisory authority in the event of a data protection violation. The competent supervisory authority for data protection matters is the State Data Protection Commissioner of the federal state in which our company is headquartered. The following link provides a list of data protection officers and their contact information: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Right to Data Portability
You have the right to have data that we process automatically—based on your consent or in fulfillment of a contract—provided to you or to a third party. The data will be provided in a machine-readable format. If you request that the data be transferred directly to another controller, this will only be done to the extent that it is technically feasible.

Right to Access, Correction, Restriction, and Deletion
You have the right, at any time and in accordance with applicable legal provisions, to receive information free of charge regarding your stored personal data, the origin of the data, its recipients, and the purpose of data processing, as well as the right to have this data corrected, restricted, or deleted, if applicable. In this regard, and for any further questions regarding personal data, you may contact us at any time using the contact information provided in the legal notice.

SSL or TLS Encryption
For security reasons and to protect the transmission of confidential information that you send to us as the website operator, our website uses SSL or TLS encryption. This ensures that data you transmit via this website cannot be read by third parties. You can recognize an encrypted connection by the “https://” in your browser’s address bar and the lock icon in the browser bar.

Data Transfer Upon Conclusion of a Contract for the Purchase and Shipping of Goods
If you wish to place an order in our online store, you must provide the personal data necessary for us to process your order in order to conclude the contract. Personal data will only be transferred to third parties if such transfer is necessary for the fulfillment of the contract. Third parties may include, for example, payment service providers or logistics companies. No further transfer of data takes place, or only if you have expressly consented to it.
The legal basis for data processing is Article 6(1)(b) of the GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures.

Registration on this Website
To use certain features, you can register on our website. The data you provide is used exclusively for the purpose of using the respective feature or service. All required information requested during registration must be provided in full. Otherwise, we will decline your registration.
In the event of significant changes, such as for technical reasons, we will notify you via email. The email will be sent to the address provided during registration.
The processing of the data entered during registration is based on your consent (Art. 6(1)(a) GDPR). You may revoke your consent at any time. An informal notification via email is sufficient for withdrawal. The lawfulness of data processing that has already taken place remains unaffected by the withdrawal.
We store the data collected during registration for the duration of your registration on our website. Your data will be deleted if you cancel your registration. Statutory retention periods remain unaffected.

Contact Form
Data submitted via the contact form, including your contact information, is stored so that we can process your inquiry or respond to any follow-up questions. This data will not be disclosed to third parties without your consent.
Depending on the nature of the inquiry, the legal basis for this processing is Article 6(1)(b) of the GDPR for inquiries you submit yourself as part of a pre-contractual measure, or Article 6(1)(f) of the GDPR if your inquiry is of a different nature. If personal data is requested that we do not require for the performance of a contract or to safeguard legitimate interests, the transmission to us is based on your consent pursuant to Article 6(1)(a) of the GDPR, which remains unaffected by revocation.
Data transmitted via the contact form will remain with us until you request its deletion, revoke your consent to its storage, or there is no longer a need to store the data. Mandatory legal provisions—in particular retention periods—remain unaffected.

Newsletter Data
To send you our newsletter, we need your email address. Verification of the email address you provide is required, and you must consent to receiving the newsletter. No additional data is collected, and any other information is provided voluntarily. The data is used exclusively for the purpose of sending the newsletter.
The data provided when subscribing to the newsletter is processed exclusively on the basis of your consent (Art. 6(1)(a) GDPR). You may revoke your consent at any time. To revoke your consent, simply send an informal email or unsubscribe via the “Unsubscribe” link in the newsletter. The lawfulness of data processing operations that have already taken place remains unaffected by the withdrawal.
Data entered to set up the subscription will be deleted upon unsubscription. If this data has been transmitted to us for other purposes or to other locations, it will remain with us.

Cookies
Our website uses cookies. These are small text files that your web browser stores on your device. Cookies help us make our website more user-friendly, effective, and secure.
Some cookies are “session cookies.” These cookies are automatically deleted at the end of your browser session. Other cookies, however, remain on your device until you delete them yourself. These cookies help us recognize you when you return to our website.
With a modern web browser, you can monitor, restrict, or prevent the setting of cookies. Many web browsers can be configured so that cookies are automatically deleted when the program is closed. Disabling cookies may result in limited functionality on our website.
The use of cookies necessary for the performance of electronic communications or the provision of specific functions you have requested (e.g., shopping cart) is based on Article 6(1)(f) of the GDPR. As the operator of this website, we have a legitimate interest in storing cookies to ensure the technically error-free and smooth provision of our services. If other cookies (e.g., for analytics functions) are set, these are addressed separately in this privacy policy.

PayPal
Our website allows you to pay via PayPal. The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.
When you pay with PayPal, the payment details you enter are transmitted to PayPal.
The transmission of your data to PayPal is based on Art. 6(1)(a) GDPR (consent) and Art. 6(1)(b) GDPR (processing for the performance of a contract). You may revoke your consent at any time. Data processing operations that took place in the past remain valid in the event of revocation.

Hosting
We host the content of our website with the following provider: WIX
The provider is Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel (hereinafter “WIX”).
WIX is a tool for creating and hosting websites. When you visit our website, WIX is used to analyze user behavior, visitor sources, the region of website visitors, and visitor numbers. WIX stores cookies on your browser that are necessary for displaying the website and ensuring security (essential cookies).
The data collected via WIX may be stored on various servers worldwide. WIX’s servers are located in the U.S., among other places.
According to WIX, data transfers to the United States and other third countries are based on the European Commission’s Standard Contractual Clauses or comparable safeguards pursuant to Article 46 of the GDPR. Details can be found here: https://de.wix.com/about/privacy-dpa-users.
The use of WIX is based on Article 6(1)(f) of the GDPR. We have a legitimate interest in ensuring that our website is displayed as reliably as possible. If consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG, insofar as the consent covers the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent may be revoked at any time.
The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the United States designed to ensure compliance with European data protection standards for data processing in the United States. Every company certified under the DPF commits to adhering to these data protection standards. Further information on this is available from the provider at the following link: https://www.dataprivacyframework.gov/participant/5626.
 

Data Processing
We have entered into a Data Processing Agreement (DPA) for the use of the aforementioned service.
This is a contract required under data protection law that ensures the service provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

We use the Meta Pixel (formerly “Facebook Pixel”) on our website. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (and, where applicable, other Meta companies in third countries).

​

Purpose of Data Processing
Meta-Pixel is an analytics and marketing tool that tracks visitor behavior on the website. With its help, we can, for example:

• Target Facebook and Instagram ads more effectively (e.g., remarketing).

• Track conversions and measure the success of advertising campaigns.

• Create target groups (known as custom audiences) to re-engage users who have already shown interest.

Type of Data Processed / Categories
When the pixel is activated, Meta may collect and process various types of data, such as:

• IP address (truncated if necessary)

• Device and browser identification (user agent, screen size, etc.)

• Time spent on the site, pages visited, elements clicked

• Event data (e.g., “Purchase,” “Contact form submitted”)

• User ID (if applicable; e.g., if users are logged in to Facebook or Instagram)

Legal Basis for Processing
The processing of this data is based on your consent in accordance with Article 6(1)(a) of the GDPR. The Meta Pixel may only become active once the visitor has consented to tracking.

Transfer to Third Countries & Data Protection Safeguards
Since Meta operates some of its services in third countries (e.g., the U.S.), personal data may be transferred to countries outside the European Economic Area. Meta has implemented standard contractual clauses to ensure an adequate level of data protection.

​

However, data protection authorities point out that there are risks associated with data transfers to the United States.

Cookies / Retention Period
The pixel uses cookies or tracking-related identifiers (e.g., _fbp, _fbclid, or similar) for this purpose. These cookies may have a specific lifespan (e.g., a few days to several months).

Withdrawal / Opt-Out Option
You have the right to withdraw your consent at any time. If you withdraw your consent, the Meta Pixel will be deactivated and no further tracking will take place.
We provide you with a suitable opt-out function for this purpose (e.g., by clicking on “Disable Tracking”).

Joint Responsibility
According to a ruling by the European Court of Justice regarding the integration of the Facebook plugin, there is joint responsibility between the website operator and Meta with respect to certain data processing activities.
We regulate this responsibility through appropriate contractual agreements and technical measures.

​

Privacy Policy for the “Faszinaturen” App

The following privacy policy applies exclusively to the use of the “Faszinaturen” mobile app, which is available for iOS and Android. The provider and data controller within the meaning of the GDPR is:

​

Hochschule Mittweida – University of Applied Sciences
Technikumpl. 17
09648 Mittweida
Germany
Email: virtual@hs-mittweida.de

​

Processing of Personal Data

The “Faszinaturen” app can be used entirely without registration or the entry of personal data. No personal data is collected, stored, or disclosed to third parties.

​

Permissions and How It Works

The app uses your mobile device’s camera to display augmented reality (AR) content. The camera is used solely for the real-time detection of AR markers or surfaces on the device. No image data is stored or transmitted to servers. All processing takes place exclusively on the device.

​

Offline Mode

The app is fully capable of operating offline. It does not connect to any external servers. No analytics, tracking, or cloud services are used.

​