Privacy Policy

The protection of personal data is very important on the website https://orangesharkart.com.

Use of the Orange Shark's website is also possible without providing personal data, however, if the respondent wishes to use some of the services of this website, the processing of personal data may be necessary. If data processing is necessary, but there is no legal basis for it, the respondent will always be asked for consent.

The processing of personal data such as the name, surname, address, email address or telephone number of the respondent will always be in accordance with the General Data Protection Regulation (EU: GDPR) and the legislation of the Member State applicable to the Orange Shark's website. Through these Privacy Policy, we would like to inform the public about the nature, scope and purpose of the personal information we collect and process. Furthermore, we would like to inform the respondents about their rights.

The data processing manager has incorporated a number of technical and organizational measures into the Orange Shark's website to ensure the complete protection of the personal data being processed. However, data transmission over the Internet can in theory have security vulnerabilities, so one hundred percent protection cannot always be guaranteed. For this reason, each respondent can provide personal information by alternative methods, eg by telephone.

1. Definitions

The privacy policy of the Orange Shark's website is based on the terms used by EU legislation in drafting and adopting the General Data Protection Regulation. The Privacy Policy is legible and understandable to the general public, as well as to our clients and business partners. To ensure this, we will first explain the terminology used.

In these Privacy Policy, we use, inter alia, the following terms:

a) Personal data

Personal data is any data relating to any identified natural person ("respondent"). An identified natural person is one who can be identified, directly or indirectly, by name and surname, identification number, location data, online identifiers such as the physical, mental, genetic, mental, economic, cultural or social identity of the natural person.

b) Respondent

Respondent is any natural person whose identity has been established or can be established, and whose personal data is subject to processing by the controller in charge of personal data processing.

c) Processing

Processing is any procedure or set of procedures applicable to personal data, whether automated processes, such as collection, recording, organization, structuring, storage, adaptation or modification, extraction, review, use, detection by transmission, dissemination or making available, aligning, restricting, deleting or destroying.

d) Processing restriction

Processing restriction is the marking of stored personal data with the aim of limiting their processing in the future.

e) Profiling

Profiling is any way of automated processing of personal data consisting of the use of personal data to determine the personal preferences of a natural person, more precisely to analyze and overlook aspects of job performance, economic situation, health, personal preferences, interests, reliability, behavior , locating and moving each individual natural person.

f) Pseudonymization

Pseudonymization is the processing of personal data in such a way that the respondent can no longer be assigned characteristics without the use of additional data collected in a separate way, and can be subject to technical and organizational measures to ensure that the data cannot be applied to any a natural person whose identity has been established or can be established.

g) The head of personal data processing or the person in charge as the head of personal data processing

The head of personal data processing or the person in charge as the head of personal data processing is any natural or legal person, public institution, agency or other body that alone or in cooperation with others determines the purpose and manner of personal data processing; in places where the purpose and manner of processing personal data is regulated by the legislation of an EU Member State, the criteria for the selection of the controller will be under the jurisdiction of the legislation of the EU Member State.

h) Executor of personal data processing

The executor of personal data processing is a natural or legal person, public institution, agency or other body that processes personal data on behalf of the controller of personal data processing.

i) Recipient

The recipient is a natural or legal person, public institution, agency or other body to which personal data have been provided, whether a third party or not. However, public authorities that receive personal data through a specific inquiry that is in line with EU or Member State law will not be considered as recipients; the processing of personal data by these state bodies will be in accordance with the applicable regulations related to the purpose of data processing.

j) Third party

A third party is a natural or legal person, public institution, agency or other body that is not the respondent, controller or processor, and who is authorized to process the respondent's personal data with the direct permission of the controller or processor.

The data processing manager may provide personal data necessary for the delivery of the product to the delivery service for the purpose of delivery and return of goods as well as to the post office for the purpose of delivery of invoices.

k) Consent

Respondent's consent is any well-defined, informed and unambiguous indication of the respondent's wish that he or she consents to the processing of personal data relating to him or her through a statement or clear affirmative action.

2. Data of the personal data processing manager

The head of personal data processing under the General Data Protection Regulation or other laws concerning the protection of personal data applicable in EU Member States is:

Owner Tatjana Šebek Markušić

Orange Shark, production trades

contact e-mail: info@orangesharkart.com


Production Trade HQ

Odra 65

Odra Sisačka

Sisak, ZIP code: 44 000, Croatia

e-mail: info@orangesharkart.com


3. Cookies

Orange Shark's website uses cookies. Cookies are text files that your browser saves on your computer system.

Many websites and servers use cookies. Many cookies contain a so-called cookie ID. Cookie ID is a unique identifier of cookies. It consists of a string of characters that websites and servers can assign to the specific browser in which the cookie is stored. This allows the websites and servers visited to distinguish individual browsers from other browsers that have different cookies. An individual browser can be identified by a unique cookie ID.

Through the use of cookies, the Orange Shark's website provides visitors with more affordable services that would not be possible without the use of cookies.

The information and offers of the website can be optimized through cookies so that the user and his user experience come first. As mentioned earlier, cookies allow us to identify website users. The purpose is to make it easier for the user to use the website. Eg. the user who uses cookies does not have to enter access data every time they access the website, because this procedure is taken over by the website that places the cookie on the computer system. Another example of using cookies is a shopping cart in a web store. The web store remembers the items that the user has placed in the cart via cookies.

The respondent can prevent the placement of cookies at any time by editing the settings the browser it uses, and may permanently disable the placement of cookies. Furthermore, already set cookies can be removed at any time via any browser. However, if the respondent deactivates the setting of cookies in their browser, they will not be able to use all the functions of the website.

There are several websites to turn off the storage of cookies for different services. Read more information at the following links:

http://www.allaboutcookies.org/

http://www.youronlinechoices.eu/

You can delete cookies and other stored data from your browser at any time (see the section for Help in your browser or visit the links below):

Microsoft Edge: https://support.microsoft.com/en-us/help/4028646/microsoft-edge-view-HYPERLINK "https://support.microsoft.com/en-us/help/4028646/microsoft-edge -view-and-delete-browsing-history "and-delete-browsing-history

Internet Explorer: https://support.microsoft.com/en-us/help/17479/windows-internet-HYPERLINK "https://support.microsoft.com/en-us/help/17479/windows-internet-explorer -11-change-security-privacy-settings "explorer-11-change-security-privacy-settings

Google Chrome: https://support.google.com/chrome/answer/95647

Mozilla Firefox: https://support.mozilla.org/hr/kb/Brisanje%20kola%C4%8Di%C4%87a

Safari: https://support.apple.com/en-us/guide/safari/sfri47acf5d6/mac

Opera: https://www.opera.com/help/tutorials/security/privacy/

4. Collection of general data and information

Orange shark's website collects general data and information when the respondent or automated system accesses the website. This general data and information is then stored on the server as log files. It is being collected


(1) browser type and version,
(2) operating system
(3) the website from which the website is accessed (so-called recommenders),
(4) subpage,
(5) the date and time of access to the website,
(6) IP address,

(7) Internet service provider
(8) other similar data and information that may be used in the event of an attack on the information system.

When using this general data and information, we do not draw conclusions about the respondent. Conversely, this information is needed in order to


(1) the content of the website is properly delivered,
(2) optimize the content of the website and its marketing,
(3) ensure the long-term capability of the system and the website,
(4) provided the necessary assistance to state authorities in the event of criminal prosecution for cyber attacks. Therefore, the Orange Shark's website analyzes anonymously collected data and information statistically with the aim of increasing data protection and security, and to ensure an optimal level of protection for all collected personal data it processes. Anonymous data of server log files are stored separately from the personal data of the respondents.

The website is located on the server, the server software can collect data such as website visit statistics, IP address of the visitor, etc., for the purpose of informing the data processing manager, maintaining the functionality and security of the server, hosting space and website. The owner of the site and a third party, such as a webmaster or any legal or natural person to whom the user has provided the data of the control panel of his hosting package (for which the data processing manager is responsible), as well as the website hosting provider ( solely for the purpose of maintaining the functionality and security of the server).

5. Subscribe to the newsletter

On the website of Orange Shark, users have the opportunity to subscribe to the newsletter. The input box determines which type of personal data is forwarded, as well as when the newsletter is requested from the head of personal data processing.

Orange Shark's website informs clients and business partners through newsletters about its offers and news.


The respondent can receive the newsletter only if

(1) the respondent provides a valid email address,
(2) the respondent requests the sending of a newsletter by subscribing to the mailing list.


The confirmation email will be sent to the email address of the respondent before sending the first newsletter for legal reasons, in the double consent procedure.


The confirmation email is used as proof that the owner of the respondent's email address is authorized to receive the newsletter.

When registering to receive a newsletter, the IP address of the computer system issued by the ISP and used by the respondent during registration, as well as the date and time of registration, are also saved. The collection of this data is necessary in order to prevent abuse of the email address of the respondents in the future and serves as a legal protection of the head of personal data processing.

Personal data collected during registration will be used exclusively for the purpose of sending newsletters. Furthermore, subscribers will be notified by email of newsletter modifications or changes in technical circumstances as long as necessary to ensure that the newsletter is sent smoothly. There will be no transfer of collected personal data to a third party. The subscriber can unsubscribe from the newsletter at any time. Consent to the storage of personal data given by the respondent to send a newsletter may be withdrawn at any time. For the purpose of revoking consent, a corresponding link can be found in each newsletter. Printing from the newsletter is also possible directly from the website or by direct communication with the head of personal data processing.

6. Possibility of contact via the website

The website of the Orange Shark contains information that enables quick contact via electronic media as well as direct communication that includes the so-called email address. If the respondent contacts the head of personal data processing via email or contact form, the transferred personal data is automatically saved. Personal data transferred voluntarily by the respondent to the controller of personal data processing are automatically stored for the purpose of processing or further communication with the respondent. There is no transfer of this type of personal data to a third party.

Orange Shark's contains an application for ordering products and / or services, and for this purpose your entered data is stored in an order database managed by the data processing manager, for the purpose of order processing, contacting about the purchase and delivery of products and / or services. The specified data is also submitted via the order form to the e-mail of the data processing manager. You can request access to your data at any time, as well as request the deletion of your data. Your data is stored for as long as it takes to process the sale or. as permitted by law.

Also in the system there is the possibility of creating a user profile and logging visitors into the created user profile, where you can see and change your data and see the status of the order. In the second case, the purchase is allowed without creating a user profile.

7. Routine deletion or blocking of personal data

The head of personal data processing will process and hold the personal data of the respondents only for the time necessary to achieve the objectives of holding personal data, or until the deadline allowed by EU legislation or other legislators under whose jurisdiction the head of personal data processing.

If the reason for storing personal data cannot be fulfilled or the retention period set by EU Legislation or other competent legislators expires, the personal data of the respondents will be routinely blocked or deleted in accordance with legal requirements.

8. Rights of respondents

a) The right to confirmation of personal data

Each respondent has the right, guaranteed by EU law, to obtain confirmation from the controller of personal data whether his or her personal data are being used or processed.

If the respondent wishes to exercise this right to confirmation, he or she may at any time contact the head of personal data processing.

b) The right of access to personal data

Each respondent has the right guaranteed by EU Legislation to receive at any time from the controller of personal data free information about their personal data stored, as well as a copy of the requested personal data. Furthermore, European provisions and directives allow the respondent access to the following information:

purpose of personal data processing;
the type of personal data requested;
the recipient or type of recipient with whom the personal data are shared, in particular recipients from third countries or international organizations;
where possible, the envisaged period of retention of personal data, or in the event of impossibility, the criteria determining that period;
the existence of the right of the respondent to request from the controller of personal data processing the correction or deletion of personal data, the restriction of the processing of personal data of the respondent or the right of the respondent to object to the processing of personal data;
the existence of the right to lodge a complaint with the supervisory authority;
if personal data are not collected directly from respondents, information on the source of personal data is available;
the existence of an automated decision-making process referred to in Article 22, Paragraphs 1 and 4 of the General Data Protection Regulation, and in this case available information on the logic of automation, as well as the importance and intended consequences for the respondents. Furthermore, the respondent has the right to information if his or her personal data is transferred to third countries or international organizations. In this case, the respondent is entitled to information on security measures implemented in the transfer
If the respondent wishes to exercise this right of access, he may at any time contact the head of personal data processing.

c) The right to correction of personal data

Every respondent has the right guaranteed by EU legislation to receive a correction of inaccurate personal data from the controller at any time. Having in mind the purpose of personal data processing, the respondent has the right to have his / her incomplete personal data supplemented, among other things, through a supplementary statement.

If the respondent wishes to exercise this right to rectification, he may at any time contact the head of personal data processing.

d) The right to delete personal data (Right to forget)

Every respondent has the right, guaranteed by European legislation, to request at any time from the controller of personal data processing the deletion of personal data related to with the respondent without delay. The controller of personal data processing has the obligation to delete personal data without delay where at least one of the conditions is applicable, as long as the processing is not necessary:

personal data are no longer required in terms of the purpose for which they were collected or processed.


the respondent withdrew his consent to the processing of personal data based on Article 6, Paragraph 1 or Article 9, Paragraph 2 of the General Data Protection Regulation, and where there is no longer a legal basis for data processing.

the respondent objects to the processing of data pursuant to Article 21, Paragraph 1 of the General Data Protection Regulationn, and there is no legal basis for the processing of data, or


the respondent objects to the processing of data pursuant to Article 21, Paragraph 2 of the General Data Protection Regulation.

personal data has been unlawfully processed.


personal data must be deleted in accordance with the legal obligation under EU law or the laws of the Member State whose controller is the national.


personal data were collected in connection with the offer of the information society service according to Article 8, Paragraph 1 of the General Data Protection Regulation.

If at least one of the above reasons is applicable and the respondent requests deletion personal data collected by the Orange Shark's website, he or she can contact the head of personal data processing. The head of personal data processing will ensure that the deletion of personal data is carried out immediately.

In places where the controller has allowed the publication of personal data, and according to Article 17, Paragraph 1, the deletion of such personal data is mandatory, the controller shall take reasonable steps, including technical measures, to take into account technical feasibility and implementation costs. informed other personal data processing managers that the respondent has requested the deletion of all links, copies or replicas of personal data, until their processing is no longer required. The head of personal data processing on the Orange Shark's website will ensure the implementation of the above measures in each individual case.

e) The right to limit the processing of personal data

Every respondent under EU law has a guaranteed right to be processed by the manager

personal data acquires the right to restrict the processing of personal data in cases where the following is applicable:

the accuracy of personal data is challenged by the respondent which allows the personal data processing manager to check the accuracy of personal data.
the processing of personal data is illegal and the respondent opposes the deletion of personal data
data and instead seeks to restrict the use of the said personal data.

the head of personal data processing no longer needs personal data for processing, however the respondent needs them for the establishment, implementation or legal requirements.
the respondent objected to the processing of personal data pursuant to Article 21, Paragraph 1 of the General Data Protection Regulation pending verification that the legal grounds
the head of personal data processing of the respondent.

If at least one of the above reasons is applicable, and the respondent requests a restriction on the processing of personal data collected by the Orange Shark's website, he or she may contact the head of personal data processing.


The head of personal data processing will ensure the restriction of personal data processing.

f) The right to the portability of personal data

Every respondent under EU law has a guaranteed right to receive personal data relating to him or her from the controller of personal data processing, in a structured, mostly used and legible format. The respondent has the right to transfer the said personal data to another controller of personal data from the current controller without any interference, as long as the processing of personal data is based on consent under point A, Article 6, paragraph 1 or point A, Article 9, paragraph 2 Of the General Data Protection Regulation, or under a contract under point B, Article 6, Paragraph 1 of the General Data Protection Regulation, and data processing is performed automatically, as long as data processing is not necessary for tasks of public interest or official duty of controller personal data.

c) The right to correction of personal data

Every respondent has the right guaranteed by EU legislation to receive a correction of inaccurate personal data from the controller at any time. Having in mind the purpose of personal data processing, the respondent has the right to have his / her incomplete personal data supplemented, among other things, through a supplementary statement.

If the respondent wishes to exercise this right to rectification, he may at any time contact the head of personal data processing.

d) The right to delete personal data (Right to forget)

Every respondent has the right, guaranteed by European legislation, to request at any time from the controller of personal data processing the deletion of personal data related to with the respondent without delay. The controller of personal data processing has the obligation to delete personal data without delay where at least one of the conditions is applicable, as long as the processing is not necessary:

personal data are no longer required in terms of the purpose for which they were collected or processed.
the respondent withdrew his consent to the processing of personal data based on Article 6, Paragraph 1 or Article 9, Paragraph 2 of the General Data Protection Regulation, and where there is no longer a legal basis for data processing.

the respondent objects to the processing of data pursuant to Article 21, Paragraph 1 of the General Data Protection Regulation, and there is no legal basis for the processing of data, or
the respondent objects to the processing of data pursuant to Article 21, Paragraph 2 of the General Data Protection Regulation.

personal data has been unlawfully processed.
personal data must be deleted in accordance with the legal obligation under EU law or the laws of the Member State whose controller is the national.
personal data were collected in connection with the offer of the information society service according to Article 8, Paragraph 1 of the General Data Protection Regulation.

 

If at least one of the above reasons is applicable and the respondent requests deletion personal data collected by the Orange Shark's website, he or she can contact the head of personal data processing. The head of personal data processing will ensure that the deletion of personal data is carried out immediately.

In places where the controller has allowed the publication of personal data, and according to Article 17, Paragraph 1, the deletion of such personal data is mandatory, the controller shall take reasonable steps, including technical measures, to take into account technical feasibility and implementation costs. informed other personal data processing managers that the respondent has requested the deletion of all links, copies or replicas of personal data, until their processing is no longer required. The head of personal data processing on the Orange Shark's website will ensure the implementation of the above measures in each individual case.

e) The right to limit the processing of personal data

Every respondent under EU law has a guaranteed right to be processed by the manager personal data acquires the right to restrict the processing of personal data in cases where the following is applicable: the accuracy of personal data is challenged by the respondent which allows the personal data processing manager to check the accuracy of personal data. the processing of personal data is illegal and the respondent opposes the deletion of personal data and instead seeks to restrict the use of the said personal data.

The head of personal data processing no longer needs personal data for processing, however the respondent needs them for the establishment, implementation or legal requirements.
The respondent objected to the processing of personal data pursuant to Article 21, Paragraph 1 of the General Data Protection Regulation pending verification that the legal grounds
The head of personal data processing of the respondent.

If at least one of the above reasons is applicable, and the respondent requests a restriction on the processing of personal data collected by the Orange Shark's website, he or she may contact the head of personal data processing.
The head of personal data processing will ensure the restriction of personal data processing.

f) The right to the portability of personal data

Every respondent under EU law has a guaranteed right to receive personal data relating to him or her from the controller of personal data processing, in a structured, mostly used and legible format. The respondent has the right to transfer the said personal data to another controller of personal data from the current controller without any interference, as long as the processing of personal data is based on consent under point A, Article 6, paragraph 1 or point A, Article 9, paragraph 2 Of the General Data Protection Regulation, or under a contract under point B, Article 6, Paragraph 1 of the General Data Protection Regulation, and data processing is performed automatically, as long as data processing is not necessary for tasks of public interest or official duty of controller personal data.


9. Personal data protection provisions related to Facebook

The head of personal data processing has installed Facebook components on the Orange Shark's treasure website. Facebook is a social network. A social network is a place of social connection on the Internet, an online community that typically allows users to communicate with each other in a virtual space. A social network serves as a platform to share opinions and experiences, or to provide the Internet community with personal or work-related information. Facebook allows its users to create private profiles, upload images and connect through friend requests.

Facebook is owned by Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. If the person using Facebook lives outside the United States or Canada, the head of personal data processing is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland.

By opening any page of the Orange Shark's website, which is managed by the head of personal data processing, and on which the Facebook component (Facebook plugin) is installed, the respondent's browser will display the corresponding Facebook component. An overview of all Facebook plugins can be found at https://developers.facebook.com/docs/plugins/ During this technical procedure, Facebook was provided with information about a specific subpage visited by the respondent.

If the respondent is logged in to Facebook, at the same time Facebook can detect any of his or her views of the Orange Shark's health website, and during his or her stay on the website he or she visited specific subpages. This information is collected through the Facebook component and remitted to the respondent’s Facebook account. If the respondent clicks on any Facebook button integrated on the Orange Shark's website, eg the "Like" button, or if the respondent sends a comment, then Facebook transfers the information to the respondent's personal Facebook account and thus saves personal data.

Every time a respondent is logged in to Facebook and at the same time accesses the Orange Shark's website, Facebook will receive information about it via the Facebook component. This will happen regardless of whether the respondent clicks on the Facebook component or not. If the respondent does not want to transfer this type of information, the same can be prevented by logging out of the Facebook account before accessing the grandmother’s beauty treasury website.

The data protection guidelines posted by Facebook at https://facebook.com/about/privacy/ provide information on the collection, processing and use of personal data by Facebook. It also explained what settings Facebook provides to protect respondents ’personal information. Also, various configuration options are available to prevent the transfer of personal data to Facebook. The respondent may use the above options for the purpose of disabling the sending of personal data.

10. Personal Analytics Privacy Policy

The head of personal data processing has installed Google Analytics components on the grandmother's beauty treasure website. Google Analytics is an Internet service; collecting and analyzing data on visitor behavior on the website. The web analytics service collects, among other things, information about the website from which the respondent came, which subpages he visited or how often and for how long he browses a particular subpage. Web analytics is used to optimize a website and to conduct online advertising analysis.

Google Analytics is owned by Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA.

For the purposes of web analytics via Google Analytics, the head of personal data processing uses the application "_gat._anonymizelp" through which the IP address of the respondent is shortened by Google and anonymized when the Orange Shark's website is accessed by a respondent from an EU Member State or another country. economic space.

The purpose of the Google Analytics component is to analyze traffic to a Orange Shark's website. Google uses the information and data collected, inter alia, to evaluate your use of the website and to provide reporting that reflects activity on the website, and to provide other services related to your use of the website.

Google Analytics places a cookie on the respondent's computer system. The definition of cookies is already explained in this document.

 

Setting cookies allows Google to analyze the use of the website. Each time an individual subpage of the Orange Shark's website is managed by a personal data processing manager with a Google Analytics component installed, the respondent's browser will automatically provide the Google Analytics component with the information needed for Internet advertising and Google's commission calculation. During this technical procedure, Google will receive personal information such as the IP address of the respondent (used to understand where visits and clicks come from, and create a commission calculation based on that).

The cookie is used to store personal information such as the time of access to the website, the location from which it is accessed and the frequency of access to the website by the respondents. With each visit to the Orange Shark's website, such personal information, including the respondent’s IP address, will be forwarded to Google and will be located there. Google may transfer this personal information through a technical procedure to a third party.

As already mentioned, the respondent can prevent the setting of cookies by appropriate modifications to the browser at any time. Such modifications would also prevent and Google Analytics to set a cookie on the respondent's computer system. It is also possible to delete cookies that have already been set via a browser or some other software solution.

Additionally, the respondent may object to the collection and processing of personal data generated by Google Analytics, which is related to the use of the Orange Shark's website. To accomplish this, the respondent must download the browser add-on located at https://tools.google.com/dlpage/gaoptout and install it. This JavaScript add-on lets Google Analytics know that information about respondents' visits to the website may not be collected and processed. Google considers the installation of this add-on to be a valid complaint against the collection of personal data. If at any subsequent time the respondent's computer system is deleted, formatted, or reinstalled, the respondent will need to reinstall browser add-ons to disable Google Analytics. If for some reason the respondent or an authorized person removed the add-on to the browser, or the add-on to the browser is disabled, it is always possible to reinstall or activate it.

Additional information and Google's privacy policy can be found at https://www.google.com/intl/en/policies/privacy/ and http://www.google.com/analytics/terms/us.html . Additional information related to Google Analytics can be found at https://www.google.com/analytics/

11. Google+ Privacy Policy

On the Orange Shark's website, the head of personal data processing has installed a Google+ button as a component. Google+ is a so-called social network. A social network is a place of social connection on the Internet, an online community that typically allows users to communicate with each other in a virtual space. A social network serves as a platform to share opinions and experiences, or to provide the Internet community with personal or work-related information. Google+ allows its users to create private profiles, upload images, and connect through friend requests.

The social network Google+ is owned by Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA.

By opening any page of the Orange Shark's website, managed by the head of personal data processing, and on which the Google+ button is embedded, the respondent's browser will display the corresponding Google+ component. During this technical procedure, Google was provided with information about a specific subpage visited by the respondent. You can find more information about the Google+ social network at https://developers.google.com/+/.

If the respondent is logged in to Google+, at the same time Google can detect each of his views of the website of the grandmother's treasury of beauty, and during his stay on the website which specific subpages he visited. This information is collected through the Google+ component and credited to the respondent's Google+ account.

If a respondent clicks on the Google+ button on Orange Shark's website and thus makes a Google+ 1 recommendation, Google will transfer this information to the respondent's Google+ account and store that personal information. Google stores the above-mentioned Google+ 1 recommendation of the respondent, and thus it becomes publicly available according to the terms and conditions previously accepted by the respondent. The Google+ 1 recommendation is then, together with the respondent's personal information such as the Google+ account name and its associated photo, saved and processed on other Google services, such as a Google search result, a Google Account elsewhere or on a website, or correlated with advertising. Google is also able to link a review of a grandmother’s beauty treasure website to other personal information stored on Google. Google will then continue to store personal information for the purpose of improving other Google services.

Through the Google+ button, Google receives information that the respondent visited the website of Orange Shark's if the respondent was logged in to Google+ during the visit. This will be the case regardless of whether the respondent clicked on the Google+ button or not.

If the respondent does not want to provide personal information to Google, he or she can prevent the transfer of data at any time by logging out of the Google+ social network before accessing the Orange Shark's website.

Additional information and Google's privacy policy can be found at https://www.google.com/intl/en/policies/privacy/. You can find more information about Google and the Google+ 1 button at the https://developers.google.com/+/web/buttons-HYPERLINK "https://developers.google.com/+/web/buttons-policy" policy.

12. Google-AdWords Privacy Policy

On the Orange Shark's website, the head of personal data processing has installed components of Google AdWords, which is an Internet advertising service. Allows the advertiser to place ads on Google search and the Google advertising network. Google AdWords allows an advertiser to define specific keywords that will cause an ad to appear on Google when a user types that keyword into a search engine. On the Google advertising network, ads are displayed on relevant web pages using an automated algorithm, taking into account pre-defined keywords.

Google AdWords is owned by Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA.

The purpose of Google AdWords is to promote a grandmother’s beauty treasure website by including relevant ads on third-party websites and on Google search engine search results.

If the respondent accesses the website https://orangesharkart.com/ via a Google ad, Google will install a conversion cookie in the respondent's computer system. The definition of cookies has already been explained. The conversion cookie loses its validity after 30 days and is not used to identify the respondent. If the cookie has not expired, it is used to check which subpages the respondent has visited, e.g. a shopping cart on a web store. Through the conversion of cookies, Google and the head of personal data processing can find out whether the person who visited the website through the AdWords ad generated a sale, or whether he made or gave up the sale of goods.

The information collected through the conversion cookie is used by Google to compile statistics on visits to the website of Orange Shark.

 

These statistics are then used to determine the total number of users who visited the website through AdWords ads and to determine the success or failure of each AdWords ad, and to allow AdWords ads to be optimized for future periods.

A conversion cookie stores personal information, such as websites visited by a respondent. Every time you visit Orange Shark's website, personal information such as the IP address of the respondents is sent to Google in the US. This personal information is stored by Google in the United States. Google may share this personal information through a technical procedure with a third party. The respondent may, as already stated, prevent the setting of cookies at any time through appropriate browser modifications and thus permanently disable them. Such a browser modification would also prevent Google from setting conversion cookies on the respondents ’computer system. Additionally, cookies already set by Google AdWords can be removed at any time via a browser or other computer program.

Additionally, a respondent may object to Google advertising based on his or her interests. In order to do this, the respondent must go to www.google.de/settings/ads and make the desired changes to the browser.

Additional information and Google's privacy policy can be found at https://www.google.com/intl/en/policies/privacy/.

13. Personal Data Protection Provisions Related to Twitter

The head of personal data processing installed components of the Twitter service on the Orange Shark's website. Twitter is a multilingual, publicly available microblogging service where users can post and share so-called "tweets", ie short messages that are limited to 280 characters. These short messages are available to everyone, including users who are not logged in to Twitter. Tweets are displayed to the so-called followers of the respective user.

Followers are other Twitter users who follow the tweets of the respective user. Furthermore, Twitter allows it to reach a wide audience through hashtags, links and tweets.

Twitter is owned by Twitter, Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA.

Each time you access the website of your Orange Shark, which is managed by the head of personal data processing, and on which the Twitter component (Twitter button) is installed, the browser on the respondent's computer system will automatically display an overview of the specified Twitter component. During this technical procedure, Twitter will receive information about a specific subpage visited by the respondent. The purpose of integrating the Twitter component is to transfer the content of the grandmother’s treasury of beauty website to acquaint users with the content of the website and increase the number of visitors.

If the respondent is logged in to Twitter at the same time, Twitter will detect each visit to the Orange Shark website, as well as which specific subpages the respondent visited during their stay on the website. The information is collected by the Twitter component and remitted to the respondent’s Twitter account. If the respondent clicks on one of the Twitter buttons on the website, Twitter will transfer this information to the respondent’s Twitter account and store that personal information

Twitter receives information via the Twitter component provided that the respondent is logged in to Twitter during the review of the website. This will be the case regardless of whether the respondent clicked on the Twitter button or not. If this type of information transfer is not what the respondent wants, he or she can prevent it by logging out of the Twitter account before accessing the Orange Shark website

Additional information and Twitter guidelines for personal data protection can be found at https://twitter.com/privacy?lang=en.

14. YouTube Privacy Policy

The head of personal data processing installed Youtube components on the website of Orange Shark. Youtube is an Internet video portal that allows free publication, review, rating and commenting of video material. Youtube allows the publication of all types of video material, so you can watch entire movies, TV broadcasts, music videos, forespans and videos made by users of the portal.

YouTube is owned by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. The YouTube, LLC which is a subsidiary of Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA.

Each time you view an individual page of your Orange Shark website, which is managed by the head of personal data processing, and on which the Youtube component is located, the respondent's computer system browser will display the built-in YouTube component. You can find more information about YouTube at https://www.youtube.com/yt/about/en/. During this technical procedure, YouTube and Google will acquire information about a specific subpage visited by the respondent.

If a respondent is logged in to YouTube, YouTube will recognize each time they open a subpage that contains a Youtube video of that subpage. This information will be collected by YouTube and Google and will be credited to the respondent's YouTube account. this will happen regardless of whether the respondent clicked on the YouTube video or not. If the respondent does not want to allow such a transfer of information, he can prevent it by logging out of the YouTube account before opening the website of Grandma's Treasury of Beauty.

The YouTube Privacy Policy, which you can view at https://www.google.com/intl/en/policies/privacy/, provides information on the collection, processing, and use of personal information by YouTube and Google.

15. Legal basis for the processing of personal data

Article 6, Paragraph 1, Subparagraph A of the General Data Protection Regulation is the legal basis for the processing of personal data for which we have obtained consent. If the processing of personal data is necessary for the implementation of the contract of which the respondent is a part, such as when the processing of personal data is necessary for the supply of goods or services, the processing is based on Article 6 (1) (B) of the General Data Protection Regulation. The same applies to the processing of personal data needed to carry out pre-contractual measures, eg in inquiries related to products or services. If a legal or natural person is subject to a legal obligation where the processing of personal data is necessary, such as the fulfillment of tax obligations, the processing of personal data is based on Article 6, Paragraph 1, Subparagraph C of the General Data Protection Regulation. In rare cases, the processing of personal data is necessary in order to protect the interests of the respondent or some other natural person. Eg. in the event that a respondent is injured when visiting the premises of the owner of this website, personal information such as name, age, health insurance information or some other vital information will have to be passed on to a doctor, hospital or a third party. Such data processing is based on Article 6, Paragraph 1, Subparagraph D of the General Data Protection Regulation. Finally, the processing of personal data may also be based on Article 6 (1), Subparagraph F of the General Data Protection Regulation. This legal basis is used in the processing of personal data when no previous legal basis is applicable, if the processing of personal data is necessary for the legitimate interests of the owner of the website Orange Shark or a third party, except in situations where these interests jeopardize fundamental rights and freedoms. respondents, who require the protection of personal data. Such processing of personal data is particularly permitted as it is specifically mentioned by EU Legislation. It is envisaged that it is possible to invoke a legitimate interest if the respondent is a client of the controller of personal data processing.

16. Legitimate interests of the controller of personal data or a third party

In places where the processing of personal data is based on Article 6 (1), Subparagraph F of the General Data Protection Regulation, a legitimate interest is to do business for the benefit of employees and / or shareholders, if any.

17. Period of storage of personal data

The criterion in determining the storage period of personal data is the maximum storage period determined by law. After the expiration of this period, personal data are routinely deleted, until they are no longer needed to fulfill the contract or its conclusion.

18. Provision of personal data as a legal or contractual precondition; Prerequisite for concluding a contract; Obligation of respondents to provide personal data; possible consequences if personal information is not provided

We need to clarify that the provision of personal data is partially prescribed by law (e.g. tax provisions) or may be the result of a contractual obligation (e.g. information about a contractual partner). Sometimes it is necessary to conclude a contract so that the respondent provides personal data which is then processed. The respondent, for example, is required to provide personal information when entering into a contract with the website owner of the Orange Shark. Refusal to provide personal data will result in the inability to enter into a contract. Before the respondent provides personal information they will need to contact the owner of the Orange Shark website. He will then indicate to him whether the provision of personal data is legally or contractually necessary, or whether it is necessary for the conclusion of the contract, whether there is an obligation to provide personal data and finally the consequences if he refuses to provide personal data.

19. Existence of an automated decision-making process

As a responsible business partner, the Orange Shark's website does not use an automated decision-making process, ie profiling.