Skip to Main Content

SolomunSolomun

Privacy Policy

1. Introduction

The Website is operated by Under My Spell GmbH (for the purposes of this Website Policy, Under My Spell GmbH is referred to as "we" and "us".). We are committed to ensuring that your privacy is respected when you visit our Website and is fully aware of the importance of this subject to you. That is why we make every effort to respect your privacy and your personal data (hereinafter, "Personal Data") when you use the our Website (the "Website").


This Privacy Policy (hereinafter, "Policy") describes how we collect, use and protect information related to the Website. This Policy applies to all visitors and users who access our Website.

The controller responsible for data processing on this website is

Under My Spell GmbH

Daniel Schoeps

Hallerstrasse 59

20146 Hamburg, Germany

Register Number : HRB 154313

Under My Spell GmbH acts as data controller (i.e. the entity that determines why and how Personal Data is processed) for the purposes of the applicable legislation and regulations on the protection of Personal Data, in particular Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (hereinafter referred to as the “GDPR”).

The data controller decides alone or jointly with others on the purposes and means of processing personal data, as defined here below.).



2. Which are the Personal Data collected by We

The Personal Data processed is information about each person or potential user of our services who browses this Website.

In the context of browsing and interacting through our Website to order our services, the Personal Data collected may be as following:

Access data

Contact details (e.g. surname, first name, username, address(optional), telephone number, e-mail address(optional))

Identification data (e.g. date of birth (optional))

Geographical data (optional)

User documents (e.g. profile picture, avatar picture (optional))

Event dates

QR codes

System and log data (e.g. IP address, device manufacturer, provider name, operating system)



3. Why we collect Personal Data

We will process your Personal Data on the basis of one or more of the following elements:

processing is necessary to perform or enter into a contract with you;

processing is necessary if you have expressly consented to the type and scope of data processing;

processing is necessary to comply with legal or regulatory obligations with which We must comply and requests or requirements of regulatory and enforcement authorities and to cooperate with such authorities;

processing is necessary to meet the purposes of the legitimate interests pursued by Us or a third party, including:

responding to and managing requests you have made to us;

to provide the products, services or information requested;

to send e-mails with marketing content;

to improve the quality, security and experience when using our services, Website and to manage our customer relationships;

to combat fraud related to the use of the services;

to implement any changes in the structure of our Website;

for billing and customer management purposes.



4. Who are the recipients of Personal Data

You are informed that in strict compliance with the provisions of the GDPR, all or part of your Personal Data may be transmitted to the following recipients:

a) to some of our employees, subcontractors and suppliers of services that provide technical support to Us; Our employees, sub-contractors or suppliers who may have access to the Personal Data shall be obliged to keep it confidential and secure and shall have access only to the Personal Data they require in order to perform their task or obligations, unless otherwise provided by laws or regulations;

b) to local authorities;

c) to the public on the Internet and to the extent permitted by law, in connection with publications on our Website ;

d) in the event of a change of control, if We sell or assign all or part of our assets to another company (e.g. in case of merger, acquisition or liquidation);

e) to public bodies, administrative or judicial authorities and supervisory bodies;



5. Are Personal Data being transferred?

You are informed that your Personal Data are hosted in Germany.

If there is a transfer to a country which does not ensure a level of protection equivalent to that in force in the European Economic Area (“EEA”), shall ensure that appropriate safeguards have been implemented, such as standard contractual clauses and other legal safeguards in accordance with the GDPR.



6. What are your rights

- Revocation of your consent to data processing

Some data processing operations are only possible with your express consent. You can withdraw your consent at any time. An informal notification by e-mail is sufficient to withdraw your consent. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

- Right to lodge a complaint with the competent supervisory authority

As a data subject, you have the right to lodge a complaint with the competent supervisory authority in the event of a breach of data protection law. The competent supervisory authority for data protection issues is the state data protection officer of the federal state in which our company is based. The following link provides a list of data protection officers and their contact details: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Der Bundesbeauftragte für den Datenschutz und die Informationsfreiheit

Graurheindorfer Straße 153
53117 Bonn
Telefon: +49 (0)228-997799-0
E-Mail: poststelle@bfdi.bund.de

- Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to third parties. The data will be provided in a machine-readable format. If you request the direct transfer of the data to another controller, this will only take place if it is technically feasible.

- Right to information, rectification, blocking, erasure

You have the right to free information about your stored personal data, the origin of the data, its recipients and the purpose of the data processing and, if necessary, a right to correction, blocking or deletion of this data at any time within the framework of the applicable legal provisions. You can contact us at any time using the contact options listed in the legal notice if you have any further questions on the subject of personal data.



7. SSL or TLS encryption

For security reasons and to protect the transmission of confidential content that you send to us as the site operator, our website uses SSL or TLS encryption. This means that data that you transmit via this website cannot be read by third parties. You can recognise an encrypted connection by the "https://" address line of your browser and the lock symbol in the browser line.



8. Server log files

The website provider automatically collects and stores information that your browser automatically transmits to us in server log files. These are

Visited page on our domain

Date and time of the server request

Browser type and browser version

Operating system used

Referrer URL

Host name of the accessing computer

IP address

This data is not merged with other data sources. The basis for data processing is Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.



9. Contact form

Data transmitted via the contact form, including your contact details, will be stored in order to process your enquiry or to be available for follow-up questions. This data will not be passed on without your consent.

The data entered in the contact form will be processed exclusively on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can withdraw your consent at any time. An informal notification by e-mail is sufficient for the cancellation. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.

Data transmitted via the contact form will remain with us until you ask us to delete it, revoke your consent to storage or there is no longer any need to store the data. Mandatory statutory provisions - in particular retention periods - remain unaffected.



10. Newsletter data

We require an e-mail address from you in order to send you our newsletter. Verification of the e-mail address provided is necessary and you must consent to receiving the newsletter. Additional data is not collected or is voluntary. The data is used exclusively for sending the newsletter.

The data provided when registering for the newsletter will be processed exclusively on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can withdraw your consent at any time. To withdraw your consent, simply send us an informal email or unsubscribe via the "Unsubscribe" link in the newsletter. The legality of the data processing operations that have already taken place remains unaffected by the cancellation.

Data entered to set up the subscription will be deleted in the event of cancellation. If this data has been transmitted to us for other purposes and elsewhere, it will remain with us.



11. YouTube

Our website uses YouTube plugins to integrate and display video content. The provider of the video portal is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA.

When a page with an integrated YouTube plugin is accessed, a connection to the YouTube servers is established. This tells YouTube which of our pages you have visited.

YouTube can assign your surfing behaviour directly to your personal profile if you are logged into your YouTube account. You can prevent this by logging out beforehand.

The use of YouTube is in the interest of an appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

Details on the handling of user data can be found in YouTube's privacy policy at: https://www.google.de/intl/de/policies/privacy.



12. Vimeo

Our website uses plugins from Vimeo to integrate and display video content. The provider of the video portal is Vimeo Inc, 555 West 18th Street, New York, New York 10011, USA.

When a page with an integrated Vimeo plugin is accessed, a connection to the Vimeo servers is established. This tells Vimeo which of our pages you have visited. Vimeo learns your IP address, even if you are not logged in to the video portal or do not have an account there. The information collected by Vimeo is transmitted to the video portal's servers in the USA.

Vimeo can assign your surfing behaviour directly to your personal profile. You can prevent this by logging out beforehand.

Details on the handling of user data can be found in Vimeo's privacy policy at: https://vimeo.com/privacy.



13. Cookies

Our website uses cookies. These are small text files that your web browser stores on your end device. Cookies help us to make our website more user-friendly, effective and secure.

Some cookies are "session cookies". Such cookies are deleted automatically at the end of your browser session. Other cookies, on the other hand, remain on your device until you delete them yourself. Such cookies help us to recognise you when you return to our website.

With a modern web browser, you can monitor, restrict or prevent the setting of cookies. Many web browsers can be configured so that cookies are deleted automatically when the programme is closed. Deactivating cookies may result in limited functionality of our website.

The setting of cookies, which are necessary for the performance of electronic communication processes or the provision of certain functions desired by you (e.g. shopping basket), takes place on the basis of Art. 6 para. 1 lit. f GDPR. As the operator of this website, we have a legitimate interest in the storage of cookies for the technically error-free and smooth provision of our services. If other cookies are set (e.g. for analysis functions), these are treated separately in this privacy policy.



14. Google Analytics

Our website uses functions of the web analysis service Google Analytics. The provider of the web analysis service is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses "cookies." These are small text files that your web browser stores on your end device and enable website usage to be analysed. Information generated by cookies about your use of our website is transmitted to a Google server and stored there. The server location is usually the USA.

Google Analytics cookies are set on the basis of Art. 6 para. 1 lit. f GDPR. As the operator of this website, we have a legitimate interest in analysing user behaviour in order to optimise our website and, if necessary, advertising.

- IP anonymisation

We use Google Analytics in conjunction with the IP anonymisation function. It ensures that Google truncates your IP address within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before transmitting it to the USA. There may be exceptional cases in which Google transmits the full IP address to a server in the USA and truncates it there. Google will use this information on our behalf to analyse your use of the website, to compile reports on website activity and to provide us with other services relating to website activity and internet usage. The IP address transmitted by Google Analytics will not be merged with other Google data.

- Browser plugin

The setting of cookies by your web browser can be prevented. However, this may restrict some functions of our website. You can also prevent the collection of data relating to your website use, including your IP address and subsequent processing by Google. You can do this by downloading and installing the browser plugin available via the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

- Objection to the collection of data

You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to our website: Deactivate Google Analytics.

Details on how Google Analytics handles user data can be found in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

- Order processing

We have concluded an order processing contract with Google in order to fully fulfil the statutory data protection requirements.

- Demographic characteristics with Google Analytics

Our website uses the "demographic characteristics" function of Google Analytics. It can be used to create reports that contain statements about the age, gender and interests of visitors to the site. This data comes from interest-based advertising from Google and visitor data from third-party providers. It is not possible to assign the data to a specific person. You can deactivate this function at any time. This is possible via the ad settings in your Google account or by generally prohibiting the collection of your data by Google Analytics, as explained in the section "Objection to data collection".

- Google AdWords and Google conversion tracking

Our website uses Google AdWords. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States.

AdWords is an online advertising programme. As part of the online advertising programme, we work with conversion tracking. After clicking on an advert placed by Google, a cookie is set for conversion tracking. Cookies are small text files that your web browser stores on your end device. Google AdWords cookies lose their validity after 30 days and are not used to personally identify users. The cookie allows Google and us to recognise that you have clicked on an ad and have been redirected to our website.

Each Google AdWords customer receives a different cookie. The cookies cannot be tracked via the websites of AdWords customers. Conversion cookies are used to create conversion statistics for AdWords customers who use conversion tracking. AdWords customers find out how many users clicked on their advert and were redirected to pages with a conversion tracking tag. However, AdWords customers do not receive any information that allows users to be personally identified. If you do not wish to participate in tracking, you can object to its use. In this case, the conversion cookie must be deactivated in the user settings of the browser. This also prevents inclusion in the conversion tracking statistics.

The storage of "conversion cookies" takes place on the basis of Art. 6 para. 1 lit. f GDPR. As the website operator, we have a legitimate interest in analysing user behaviour in order to optimise our website and our advertising.

Details on Google AdWords and Google Conversion Tracking can be found in Google's privacy policy: https://www.google.de/policies/privacy/.

With a modern web browser, you can monitor, restrict or prevent the setting of cookies. Deactivating cookies may result in limited functionality of our website.

- Google Web Fonts

Our website uses web fonts from Google. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

By using these web fonts, it is possible to present our website to you as we wish, regardless of which fonts are available to you locally. This is done by retrieving the Google Web Fonts from a Google server in the USA and the associated transfer of your data to Google. This involves your IP address and which of our pages you have visited. The use of Google Web Fonts is based on Art. 6 para. 1 lit. f GDPR. As the operator of this website, we have a legitimate interest in the optimal presentation and transmission of our website.

Google is certified for the US-European data protection agreement "Privacy Shield". This data protection agreement is intended to ensure compliance with the level of data protection applicable in the EU.

Details about Google Web Fonts can be found at: https://www.google.com/fonts#AboutPlace:about and further information in Google's privacy policy: https://policies.google.com/privacy/partners?hl=de



15. For how long your Personal Data is stored

You are informed that, in strict compliance with the provisions of the GDPR, we retain and process the relevant Personal Data for a minimum period of 10 years after the date of initialization of the services, in order to ensure retrospectively the possibility to verify the use of the services.

We will comply with the applicable legislation and any directives issued by the authorities in this respect. Personal Data that is used to send you information regarding Our offers, news and events will be retained for a period of 3 years after the collection of the Personal Data or after the last contact received from the prospect. After this period, the Personal Data will be deleted or made anonymous.



16. Security measures

We implement all appropriate technical and organisational measures to ensure a level of security of the Personal Data collected during the use of the Website, appropriate to the processing carried out by We and the associated risks against losses, misuse, unauthorised access, disclosure, unauthorised modifications or illegal destruction. It should be noted that internet connections are never completely secure or free of errors. You must therefore be cautious when selecting the information, you send to We by email. On the other hand, it is your responsibility to protect passwords, identifiers or other means that you use to access the Website.



17. External Links

For your convenience, this Website may provide links to sites that are not maintained by Us. These external links are provided for information purposes only. We do not systematically control the content of these sites. When you visit these Websites, we recommend that you carefully read the corresponding privacy policy. We cannot be held responsible for the privacy policies or the content of these websites, nor for the practices of their administrators, either in terms of their legality or the accuracy of the information contained therein, nor for any material damage that may result from their use.



18. Declaration of consent

By using this Website, you declare that you have read and accept the terms of this Privacy Policy. By submitting information through this Site, you consent to the collection, use and disclosure of your Data in accordance with this Privacy Policy.



19. Changes to the Personal Data Protection Policy

We may occasionally update this Policy. We will notify you of any changes by updating the "Last Updated" date at the end of the Policy. Any changes or modifications will be effective immediately after the Policy is published on the Website, and you waive the right to receive specific notice of each change or modification.

You agree to be bound by such amendments and we recommend that you review this Policy regularly to stay informed of any updates.



Last updated: January 2024