Privacy Policy

How personal data is handled on this website

1. At a Glance

This website (ensemblo.store) is a static information page. It hosts our legal notice and this privacy policy. We do not operate a contact form, use web analytics, or set cookies.

When you open a page, your browser automatically transmits certain technical data (in particular your IP address, browser type, operating system, and the time of access) to our hosting provider. This is technically necessary to deliver the page to you. The details are set out below.

Personal data is any data that can be used to identify you personally.

2. Controller

The controller responsible for data processing on this website is:

Dominik Brenig
Ensemblo
Gartenweg 40
51143 Köln
Germany

Email: hello@ensemblo.store

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.

3. Hosting

We host this website with an external provider. The personal data collected on this website is stored on the servers of the host. This concerns, above all, the IP address and the access data that your browser transmits automatically when a page is loaded (server log files).

Our hosting provider is:

Netlify, Inc.
44 Montgomery Street, Suite 300
San Francisco, CA 94104
USA

Hosting is carried out for the purpose of a secure, fast, and efficient provision of our online offering by a professional provider (Art. 6(1)(f) GDPR — legitimate interest). We have concluded a data processing agreement (DPA) with our host as required by Art. 28 GDPR, ensuring that personal data is processed only on our instructions and in compliance with the GDPR.

Netlify is a US-based provider, so server log data may be processed in the United States, a country without an EU adequacy decision covering all processors. This transfer is safeguarded by the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR) included in Netlify's data processing agreement. You can request a copy of these safeguards from us using the contact details above.

4. General Notes and Mandatory Information

Data protection

We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.

Please note that data transmission over the internet (e.g. when communicating by email) can have security gaps. Complete protection of data against access by third parties is not possible.

Storage duration

Unless a more specific storage period is stated within this privacy policy, your personal data remains with us until the purpose for processing no longer applies. Server log files held by our host are retained only as long as needed for the secure operation of the website and are then deleted or anonymised, unless a legally permissible reason for longer storage exists (e.g. statutory retention periods under tax or commercial law).

Legal bases

Where your data is required to deliver this website to you, we process it on the basis of our legitimate interest in a secure and functional online presence (Art. 6(1)(f) GDPR). Where we are subject to a legal obligation, we process your data on the basis of Art. 6(1)(c) GDPR. Where you have given consent, processing is based on Art. 6(1)(a) GDPR; any consent can be withdrawn at any time with effect for the future.

Recipients of personal data

In the course of operating this website, personal data (in the form of server log data) is processed by our hosting provider named above, acting as a processor on our behalf. We disclose personal data to other external parties only where required to fulfil a contract, where we are legally obliged to do so (e.g. disclosure to tax authorities), where we have a legitimate interest under Art. 6(1)(f) GDPR, or where another legal basis permits it.

5. Services Outside This Website

Purchases of Ensemblo products are handled by Lemon Squeezy (Sold through Link, LLC), which acts as the Merchant of Record and is the seller and controller for the checkout and payment process under its own privacy policy. Our social media presence (for example on Instagram) is operated on third-party platforms that process data under their own privacy policies. This privacy policy covers only the ensemblo.store website.

6. Your Rights

Withdrawal of your consent

Many data processing operations are only possible with your express consent. You can withdraw consent you have already given at any time. The lawfulness of the processing carried out until the withdrawal remains unaffected.

Right to object to data collection in special cases and to direct marketing (Art. 21 GDPR)

If data processing is based on Art. 6(1)(e) or (f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data; this also applies to profiling based on these provisions. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims (Art. 21(1) GDPR).

If your personal data is processed for direct marketing, you have the right to object at any time to processing of your personal data for such marketing; this also applies to profiling to the extent that it is connected with such direct marketing. If you object, your personal data will no longer be used for direct marketing (Art. 21(2) GDPR).

Right to lodge a complaint with a supervisory authority

In the event of infringements of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, place of work, or the place of the alleged infringement. This right exists without prejudice to any other administrative or judicial remedy.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done to the extent that it is technically feasible.

Access, rectification, and erasure

Within the scope of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipients, and the purpose of the data processing, and, where applicable, a right to rectification or erasure of this data. For this and for further questions on the subject of personal data, you can contact us at any time.

Right to restriction of processing

You have the right to request the restriction of the processing of your personal data. To do so, you can contact us at any time. The right to restriction of processing exists in the following cases:

If you dispute the accuracy of your personal data stored with us, we usually need time to verify this. For the duration of the verification, you have the right to request the restriction of the processing of your personal data.
If the processing of your personal data happened or is happening unlawfully, you can request the restriction of data processing instead of erasure.
If we no longer need your personal data but you need it to exercise, defend, or assert legal claims, you have the right to request restriction instead of erasure.
If you have lodged an objection under Art. 21(1) GDPR, a balancing of your interests and ours must be carried out. As long as it has not been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, this data may — apart from being stored — only be processed with your consent or to assert, exercise, or defend legal claims, to protect the rights of another natural or legal person, or for reasons of important public interest of the European Union or a member state.

SSL / TLS encryption

For security reasons and to protect the transmission of confidential content, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address bar of the browser changes from “http://” to “https://” and by the lock symbol in your browser bar. When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.