This Privacy Policy describes which personal information is processed when you use http://www.katjakoren.com, for what purposes, and which privacy rights may apply under the relevant law. Applicability of particular U.S. federal or state rules depends on establishment, activities, statutory thresholds and target markets.
Legal jurisdiction: United States – California. The controller is established in California. The privacy framework considers CalOPPA and, where the statutory applicability requirements are met, the CCPA/CPRA. A California address alone is not sufficient to conclude that the CCPA applies. The confirmed Site Profile facts do not indicate additional territorial application of the GDPR under Article 3(2). Based on the confirmed business facts, PPRO does not activate the CCPA/CPRA module as applicable.
1. Controller
2075 E Maple Street, 91107 Pasadena, California, USA
Email: info@katjakoren.com
Privacy contact: info@katjakoren.com
2. Contact for privacy enquiries
Privacy contact: info@katjakoren.com
3. General information about the processing of personal data
We process personal data only for specific, explicit and lawful purposes and only to the extent necessary for each purpose. In particular, we observe the principles of lawfulness and transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality.
The data actually processed depend on the functions of our website that you use, the services that have been confirmed and the information you voluntarily provide to us. This may include technical connection and access data, online identifiers, device and browser information, usage data, contact details, form submissions, contract and order data, payment information, communications, and cookie and consent information.
Where processing is based on your consent, optional processing begins only after valid consent has been given. Further information about cookies and similar technologies is available in our Cookie Policy.
4. Analytics and statistics
Analytics and statistics services are used only if they are actually confirmed for this website and, where required, the appropriate consent has been given. Currently confirmed providers are shown dynamically.
5. Recipients and processors
The Service Registry identifies in particular the following providers: Google Ireland Limited / YouTube
6. Transfers of personal data to third countries
- YouTube: Depending on the service, data may also be processed outside the EEA. The provider’s information and safeguards apply.
7. Retention periods
- External media and embedded content: According to the information provided by the relevant external provider; activation can be withdrawn at any time for the future.
- IT security, error analysis and abuse prevention: Only for as long as required for security, error analysis and evidentiary purposes; the specific period must be defined by the operator.
8. Legal bases for processing
U.S. privacy law is not structured around the GDPR Article 6 legal-basis model. The applicable obligations must be determined from the relevant federal/state rules and the business’s actual activities.
9. Your rights
These rights apply subject to Articles 15 to 22 GDPR and their respective requirements. Requests may be sent to the privacy contact specified in this policy. Where necessary to securely identify a request, the controller may ask for additional information to verify your identity.
- Access to the personal data processed about you
- Rectification of inaccurate data and completion of incomplete data
- Erasure where the legal requirements are met
- Restriction of processing where the legal requirements are met
- Data portability where Article 20 GDPR applies
- Objection where processing is based on Article 6(1)(e) or (f) GDPR
- Withdrawal of consent at any time with effect for the future where processing is based on consent
- Lodging a complaint with a competent data protection supervisory authority if you believe processing is unlawful
10. Withdrawal of consent
11. Complaint to a data protection supervisory authority
California Privacy Protection Agency (CalPrivacy)
California, USA
https://cppa.ca.gov/
12. Changes to this Privacy Policy
We may update this Privacy Policy if the purposes of processing, functions, services, providers, technical design of the website or legal requirements change. The date of the latest update is shown at the beginning of this document.
Dynamic sections of this policy may reflect confirmed settings and the PPRO Privacy Service Registry. If a confirmed service is removed or rejected, it will no longer be shown in the dynamic sections. Manually edited legal pages or manually managed content are not automatically overwritten where they are marked as manually edited in PPRO Privacy.