PrivacyPolicy

The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other data protection provisions is:

We only process personal data of our users insofar as this is necessary to provide a functional website as well as our content and services.

The uploaded data (images, biographies) concerns deceased persons. Although the GDPR according to recital 27 does not apply to data of deceased persons, we treat this content with the greatest care due to its sensitivity and are obliged to comply with national regulations (such as post-mortem personality rights).

We only pass on your data to third parties if this is necessary for contract fulfillment, you have consented or there is a legal basis.

• Hosting: To provide the website, we use external hosting services.
• Payment Service Provider: To process payments, we pass on billing data to external payment providers.

If we transfer data to service providers in countries outside the European Economic Area (EEA) (e.g. hosting or certain cloud providers), we ensure that an adequate level of data protection is guaranteed. This is done through the conclusion of EU standard contractual clauses.

Your data will be deleted or blocked as soon as the purpose of storage ceases to apply.

• Contract data/Order history: We store invoices and business-relevant communications for the duration of the statutory retention periods (in Germany 10 years according to HGB and AO).
• Customer account/Memorial stones: The contents and account data stored as part of the digital cemetery remain stored as long as the service exists and the customer account is active in order to provide the purchased service.
• Marketing data: Until revocation of your consent.
• Deletion requests: You can request deletion of your data at any time (except for legally required retention obligations).

We use technically necessary cookies that are essential for the functioning of our website and for authentication.

• Purpose: Ensuring functionality, storing login
• Legal basis: Legitimate interest (Art. 6 para. 1 lit. f) and possibly contract fulfillment (Art. 6 para. 1 lit. b GDPR)

You have the right:

• To request information about your personal data processed by us (Art. 15 GDPR)
• To request correction of incorrect or incomplete data (Art. 16 GDPR)
• To request deletion of your data stored with us (Art. 17 GDPR), provided there are no statutory retention periods
• To request restriction of processing (Art. 18 GDPR)
• To revoke your consent once given (Art. 7 para. 3 GDPR)
• To data portability (Art. 20 GDPR)
• To object to processing (Art. 21 GDPR)
• Right to complain to supervisory authorities: You have the right to complain to a supervisory authority, particularly in the member state of your residence.

We reserve the right to adapt this privacy policy. We will inform users of significant changes by email.