Privacy Policy from Sakure Walk
As of [30.09.2023]
This privacy policy informs you about the nature, scope, and purpose of the processing of personal data (hereinafter referred to as „data“) within our online offering and the associated websites, functions, and content, as well as external online presences, such as our social media profiles (hereinafter collectively referred to as „online offering“). Regarding the terminology used, such as „processing“ or „controller,“ we refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR).
Types of processed data:
Contact data (e.g., name, email, phone numbers)
Content data (e.g., text entries, photographs, videos)
Usage data (e.g., visited websites, interest in content, access times)
Meta/communication data (e.g., device information, IP addresses)
Purpose of processing:
Provision of the online offering, its functions, and content
Responding to contact inquiries and communicating with users
Security measures
Reach measurement/marketing
Relevant legal bases:
The legal basis for obtaining consent is Article 6(1)(a) and Article 7 GDPR.
The legal basis for processing to fulfill our services and carry out contractual measures and respond to inquiries is Article 6(1)(b) GDPR.
The legal basis for processing to fulfill our legal obligations is Article 6(1)(c) GDPR.
The legal basis for processing to protect our legitimate interests is Article 6(1)(f) GDPR.
Relevant legal bases
In accordance with Article 13 GDPR, we disclose the legal bases of our data processing. For users within the scope of the General Data Protection Regulation (GDPR), i.e., the EU and the EEA, if the legal basis is not mentioned in the privacy policy, the following applies: The legal basis for obtaining consent is Article 6(1)(a) and Article 7 GDPR, the legal basis for processing to fulfill our services and carry out contractual measures and respond to inquiries is Article 6(1)(b) GDPR, the legal basis for processing to fulfill our legal obligations is Article 6(1)(c) GDPR, and the legal basis for processing to protect our legitimate interests is Article 6(1)(f) GDPR.
Security measures
In accordance with Article 32 GDPR, we take suitable technical and organizational measures, taking into account the state of the art, implementation costs, the nature, scope, circumstances, and purposes of processing, as well as the varying likelihood and severity of risks to the rights and freedoms of natural persons, to ensure an appropriate level of protection commensurate with the risk.
Collaboration with processors and third parties
If, within the scope of our processing, we disclose data to other individuals and companies (processors or third parties), transmit it to them, or otherwise grant them access to the data, this is done only on the basis of legal permission (e.g., if data transmission to third parties, such as payment service providers, is necessary for the performance of the contract), if the users have consented, if a legal obligation provides for it, or based on our legitimate interests (e.g., when using agents, web hosts, etc.).
Transfers to third countries
If we process data in a third country (i.e., outside the European Union (EU) or the European Economic Area (EEA)) or if this occurs in the context of using third-party services or disclosing or transferring data to third parties, this only takes place if it is necessary to fulfill our (pre)contractual obligations, on the basis of your consent, due to a legal obligation, or based on our legitimate interests. Subject to legal or contractual permissions, we process or have the data processed in a third country only under the special conditions of Articles 44 et seq. GDPR. This means that processing is carried out, for example, based on special guarantees, such as the officially recognized determination of a level of data protection equivalent to that in the EU (e.g., for the USA through the „Privacy Shield“) or compliance with officially recognized special contractual obligations (so-called „standard contractual clauses“).
Rights of data subjects
You have the right to obtain confirmation as to whether or not personal data concerning you is being processed and to receive information about such data in accordance with Article 15 GDPR.
According to Article 16 GDPR, you have the right to request the completion of data concerning you or the rectification of inaccurate data concerning you.
You have the right, in accordance with Article 17 GDPR, to request the immediate deletion of relevant data or, alternatively, in accordance with Article 18 GDPR, to demand a restriction of the processing of personal data. This restriction may be particularly relevant if the accuracy of the personal data is contested by you, the processing is unlawful, but you oppose the deletion of the data, and we no longer need the data for the purposes of processing, but you require the data for the establishment, exercise, or defense of legal claims.
© Sakure Walk 2019-2025. All Rights Reserved.