Data protection

We are very pleased that you are interested in our company. Data protection is of a particularly high priority for LITTLE ASHÉ.

The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other data protection provisions is:

LITTLE ASHÉ

Owner: David Amoateng 

Humboldtstrasse 120

22083 Hamburg

Contact details of the data protection officer:

You can reach our data protection officer at the following address:

mail@littleashe.com

How do we collect and process data?

We collect and process personal data (this is all information relating to an identified or identifiable natural person) only to the extent that this is necessary to provide a functional website and our content and services. The data is only collected for a specific purpose and with the consent of the user. An exception only applies if it is not possible to obtain prior consent and the law nevertheless provides for and permits this.

Article 6 of the General Data Protection Regulation is the legal basis for the processing of personal data. This regulates various legal bases for processing.

  1. a) Art. 6 (1) (a) GDPR is the legal basis for the processing of personal data if consent is obtained from the data subject;
  2. b) Art. 6 (1) (b) GDPR serves as the legal basis if the processing of personal data is necessary for the performance of a contract to which the data subject is a party; this also applies to processing operations necessary for the implementation of pre-contractual measures;
  3. c) Art. 6 (1) (c) GDPR is the legal basis insofar as the processing of personal data is necessary for the fulfillment of a legal obligation to which our company is subject;
  4. d) Article 6 (1) (d) GDPR regulates the right to object to the processing of personal data if the vital interests of the data subject or of another natural person are affected;
  5. e) Art. 6 (1) (f) GDPR is the legal basis insofar as the processing is necessary to safeguard a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not outweigh them.

The personal data will be stored for as long as the purpose for which they are processed continues. Data will only be stored for longer if the European or national legislator provides for longer storage in EU regulations, laws or other provisions to which our company is subject.

What data is processed when providing the website?

Every time you visit our website or access a file provided on our website, we log the following access data:

  • Web browser,
  • Domain from which the request came,
  • amount of data transferred,
  • Name of the page or file accessed,
  • Date and time of the call,
  • Message upon successful retrieval,
  • and the IP address of the requesting computer.

We collect this data for statistical purposes and to improve our website, whereby you as an individual user remain completely anonymous. LITTLE ASHÉ does not link or use the data to a specific person. We only collect your personal data if you provide such information voluntarily, for example as part of your online application or when ordering our newsletter.

Our system has so-called log files. The data mentioned is also stored there. The data is stored in an anonymized form.

The legal basis for temporary storage is Art. 6 (1) lit. f GDPR.

The temporary storage serves the purpose of enabling the website to be delivered to the user. For this, the user's address must be stored. The storage therefore serves the functionality of the website.

As soon as the purpose for processing the data has been fulfilled, your data will be deleted. If the data is used to provide the website, it will be deleted after the end of a session. The data stored in the log files will be deleted after seven days. There can be no right of objection to the collection of data required to operate the website, as the storage of the data is absolutely necessary for the stated purpose.

Use of cookies

Cookies are small files that are stored on your data storage device and that save certain settings and data for exchange with our system via your browser. Basically, a distinction is made between two different types of cookies, so-called session cookies, which are deleted as soon as you close your browser, and temporary/permanent cookies, which are stored on your data storage device for a longer period of time or indefinitely. This storage helps us to design our websites and our offers accordingly for you and makes it easier for you to use them, for example by saving certain entries from you in such a way that you do not have to repeat them constantly. The legal basis for the use of cookies is a legitimate interest in accordance with Art. 6 Para. 1 Clause 1 f GDPR.

You can find out the exact storage period of a cookie by displaying the cookie in your browser. Only pseudonymous data is stored in the cookies used. When the cookie is activated, it is assigned an identification number and your personal data is not associated with this identification number. Your name, IP address or similar data that would enable the cookie to be associated with you are not stored in the cookie.

You can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or to exclude the acceptance of cookies in certain cases or in general. However, if you do not accept cookies, the functionality of our website may be restricted.

Contact form – What data is processed when using the contact form or contacting us via email?

On our website, you have the option of contacting us online using a corresponding form. If you use this option, the data you enter will be sent to us and saved. Before sending the data, consent will be obtained by clicking on the button and reference will be made to this privacy statement.

The legal basis is Art. 6 Para. 1 lit. a GDPR.

You can contact us via the email address provided on the website. In this case, the user's personal data transmitted with the email will be forwarded and stored.

In this context, the data will not be passed on to third parties. The data will be stored solely for the purpose of processing the request and establishing contact.

What rights do I have as a data subject?

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis little-ashé as the controller.

1. Right to information

You can request confirmation from us as to whether personal data concerning you is being processed.

If such processing takes place, you can request the following information from us:

  1. (a) the purposes for which the personal data are processed;
  2. b) the categories of personal data being processed;
  3. (c) the recipients or categories of recipients to whom the

the personal data in question have been or will be disclosed;

  1. d) the planned duration of storage of the personal data concerning you

or, if specific information is not available, criteria for determining

the storage period;

  1. (e) the existence of a right to rectification or erasure of personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;
  2. (f) the existence of a right to lodge a complaint with a supervisory authority;
  3. (g) all available information as to their source, where the personal data are not collected from the data subject;
  4. h) the existence of automated decision-making, including profiling

pursuant to Art. 22 (1) and (4) GDPR and – at least in these cases – meaningful information about the logic involved, as well as the scope and envisaged consequences of such processing for the data subject.

You have the right to request information as to whether the personal data concerning you will be transferred to a third country or to an international organisation. In this context, you can request information about the appropriate guarantees in accordance with.

Art.46 GDPR in relation to the transmission.

2. Right to rectification

You have the right to request rectification if the data processed is incorrect. You also have the right to request completion from the controller if the personal data concerning you that are processed are incomplete.

3. Right to restriction of processing

You can also request that we restrict the processing of your personal data. The following conditions must be observed:

  1. a) if you contest the accuracy of the personal data concerning you, for a period enabling the controller to verify the accuracy of the personal data;
  2. b) the processing is unlawful and you oppose the erasure of the personal data and request the restriction of the use of the personal data instead;
  3. c) the controller no longer needs the personal data for the purposes of the processing, but you require them to assert, exercise or defend legal claims, or
  4. d) if you have objected to processing pursuant to Art. 21 (1) GDPR and it has not yet been determined whether the legitimate reasons of the controller outweigh your reasons.

If the processing of personal data concerning you has been restricted, these data may – with the exception of storage – only be processed with your consent or for the establishment, exercise or defence of legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

If the restriction of processing has been restricted in accordance with the above-mentioned requirements, you will be informed by the controller before the restriction is lifted.

4. Right to erasure of processed data

  1. Obligation to delete
You also have the right to request that we, as the responsible party, delete the personal data concerning you immediately. We, as LITTLE ASHÉ, are then obliged to delete this data immediately. One of the following reasons must then apply:

(1) The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
(2) You withdraw your consent on which the processing is based according to Art. 6 Para. 1 lit. a) or Art. 9 Para. 2 lit. a) GDPR, and there is no other legal basis for the processing.
(3) You object to the processing pursuant to Art. 21 Para. 1 GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art.
21 Para.2 GDPR objection to the processing.
(4) The personal data concerning you have been processed unlawfully.
(5) The erasure of personal data concerning you is necessary for compliance with a legal obligation under Union or Member State law
required to which the controller is subject.
(6) The personal data concerning you were collected in relation to information society services offered in accordance with Art.8 (1) GDPR.

  1. Information to third parties

If LITTLE ASHÉ has ​​made the personal data concerning you public and we are obliged to delete it pursuant to Art. 17 Para. 1 GDPR, we will take appropriate measures, including technical ones, taking into account the available technology and the costs, to inform data controllers which process the personal data that you, as the data subject, have requested that they delete all links to these personal data or copies or replications of these personal data.

  1. Exceptions
The right to erasure does not apply if processing is necessary for the following reasons:

(1) to exercise the right to freedom of expression and information;
(2) to fulfil a legal obligation which requires processing under the law
of the Union or of the Member States to which the controller is subject,
or to carry out a task which is in the public interest or in
exercise of official authority vested in the controller;
(3) for reasons of public interest in the area of ​​public health pursuant to
Art. 9 (2) (h) and (i) and Art. 9 (3) GDPR;
(4) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Art. 89 (1) GDPR, insofar as the right referred to in section a) is likely to render impossible or seriously compromise the achievement of the objectives of that processing, or
(5) to assert, exercise or defend legal claims.

5. Right to information

LITTLE ASHÉ, as the controller, is obliged to inform all recipients to whom the personal data in question was disclosed of the rectification or erasure of the data or restriction of processing if you have asserted the right to rectification, erasure or restriction of processing of personal data vis-à-vis us. This may only be omitted in cases where this proves impossible or involves disproportionate expenditure. You have the right to be notified of these recipients.

6. Right to data portability

As a data subject, you have the right to receive the personal data concerning you that you have made available to us in a structured, common and machine-readable format. You also have the right to have this data transmitted to another controller without hindrance from the controller to whom the personal data was made available, provided that

(1) the processing is based on consent pursuant to Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR or on a contract pursuant to Art. 6 (1) (b) GDPR and

(2) the processing is carried out by automated means.

You also have the right to have the personal data concerning you transmitted directly from one controller to another, where technically feasible. This must not affect the freedoms and rights of other persons.

The right to data portability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

7. Right of objection

You have the right to object at any time, for reasons related to your particular situation, to the processing of personal data concerning you based on Art.

6 (1) (e) or (f) GDPR; this also applies to profiling based on these provisions.

The controller will no longer process the personal data concerning you unless he can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or unless the processing serves to assert, exercise or defend legal claims.

If the personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purposes of such advertising; this also applies to profiling insofar as it is related to such direct marketing.

If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

In connection with the use of information society services, you have the option of exercising your right of objection by means of automated procedures that use technical specifications, notwithstanding Directive 2002/58/EC.

8. Automated decision-making in individual cases, including profiling

You have the right not to be subjected to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision

  1. a) for the conclusion or performance of a contract between you and the

is necessary for the responsible person,

  1. (b) is permitted by Union or Member State law to which the controller is subject, and this law contains appropriate measures to safeguard your rights and freedoms and your legitimate interests, or
  2. c) with your express consent.

However, these decisions must not be based on special categories of personal data pursuant to Art. 9 (1) GDPR, unless Art. 9 (2) (a) or (g) GDPR applies and appropriate measures to protect your rights and freedoms as well as your legitimate interests have been taken.


9. Right to complain to the supervisory authority

If you believe that the processing of personal data concerning you has not been lawful within the meaning of the GDPR, you have the right to lodge a complaint with the competent supervisory authority.


10. Right to revoke the declaration of consent under data protection law

You can revoke your declaration of consent under data protection law at any time. However, revoking your consent does not affect the legality of the processing carried out on the basis of your consent until the revocation.