Personal data means information that can lead to the identification of an individual and includes name, date of birth, address, phone number, e-mail address and also IP address.
Anonymous data exists when no connection can be made to a user.
Responsible authority and data protection officer
Address: Carlos Alberto Barraza Lopez, Calle 7 #451, Agua Prieta, Sonora, Mexico
Contact information: Website www.barrazacarlos.com
Phone +52 633 12 12 137
E-mail address email@example.com
Data protection officer: firstname.lastname@example.org
Your rights as a data subject
We would first like to inform you of your rights as a data subject as defined in Art. 15 – 22 EU GDPR include:
The right of access (Art. 15 EU GDPR)
The right to erasure (Art. 17 EU GDPR)
The right to rectification (Art. 16 EU GDPR)
The right to data portability (Art. 20 EU GDPR)
The right to restriction of processing (Art. 18 EU GDPR)
The right to object (Art. 21 EU GDPR)
To exercise these rights, please contact: email@example.com The same applies if you have questions about data processing in our company. You also have the right to appeal to the data protection supervisory authority.
Right to object
Please note the following in connection with the right to object:
If we process your personal data for the purpose of direct marketing, you have the right to object at any time without giving reasons. This right also applies to profiling as long as it is connected with direct advertising.
If you object to the processing of your personal data for direct marketing purposes, we will no longer process it for these purposes. Objection is free of charge and can be made without the need for filling in a form at: firstname.lastname@example.org.
In the event that we process your data to safeguard legitimate interests, you can object to such processing at any time for reasons relating to your particular situation; this also applies to profiling based on these provisions.
We shall no longer process the personal data unless the we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.
Purposes and legal bases for data processing
Processing of your personal data complies with the provisions of the EU GDPR and all other applicable data protection regulations. Legal bases for data processing result in particular from Art. 6 EU GDPR.
We use your data for business initiation, fulfilment of contractual and legal obligations, execution of a contractual relationship, offering products and services and for strengthening the customer relationship, which may also include analyses for marketing purposes, customer satisfaction surveys and direct marketing.
Your consent also constitutes a legal provision under data protection law. The following is information regarding the purposes of data processing and about your right to object. If consent also refers to the processing of special categories of personal data, we will expressly point this out to you in the consent, Art. 88 Para. 1 EU GDPR.
Processing of special categories of personal data according to Art. 9 Para. 1 EU GDPR only takes place if this is required by legal regulations and there is no reason to assume that your legitimate interest in the exclusion of the processing prevails, Art. 88 Para. 1 EU GDPR.
Transfer of data to third parties
We will only pass on your data to third parties within the framework of legal regulations or with appropriate consent. Otherwise, data will not be passed on to third parties unless we are obliged to do so by mandatory legal provisions (transfer to external bodies such as supervisory authorities or law enforcement authorities).
We will store your data only for as long as it is needed for the purposes it was collected. Please note that numerous retention periods require that data continue to be (must be) stored.
In addition, we may retain data if you have given us permission to do so or if legal disputes arise and we use it as evidence within statutory limitation periods of up to thirty years; the regular limitation period is three years.
Secure data transfer
In order to protect data from accidental or deliberate manipulation, loss, damage or access by an unauthorised person, we have taken appropriate technical and organisational security measures. To this end, the level of security is continually tested and adjusted to reflect new standards in security, in collaboration with security experts.
Data transferred to and from our online shop is always encrypted. We offer HTTPS as the transmission protocol for our website, in each case using the current encryption protocols. In addition, we offer our users content encryption for contact forms and applications. Only we are able to decrypt this data. It is also possible to use alternative communication channels (e.g. by post).
Obligation to provide data
Various personal data are necessary for the establishment, execution and termination of the obligation and the fulfilment of the associated contractual and legal duties. The same applies to the use of our online shop and the various functions it provides.
Data categories, sources and origins
The data we process depends on the context. This depends on e.g. if you place an online order, send an enquiry using our contact form, send us application or make a complaint.
Please note that we may also make information available separately at a suitable location for special processing situations, e.g. when uploading application documents.
When you visit our site, we collect and process the following data:
When you visit our site, your internet browser transmits the following types of data, which we then save:
the IP address of the computer used to access the site
the server requests (e.g. accessed pages) including time stamps
the browser type
the referral URL (i.e. the address of the previous website that you visited, if you came to our site by following a hyperlink from there)
These first three data types are technically required to be able to properly display the pages of the online shop. Moreover, this data may be used, if necessary, to maintain secure operation of the online shop (e.g. to protect against hacking). The referral URL is anonymised and used to compile statistics for marketing purposes. For reasons of technical security and in particular to prevent attempts to attack our web server, this type of data are also stored for a certain period of time in accordance with Art. 6 Paragraph 1(f) EU GDPR.
When you contact us with an enquiry, we collect and process the following data:
You can ask us various questions via our online shop, e.g. about an order or to make comments.
Depending on the request, a telephone number and/or a contact form are available.
The contact form is used to collect the required details for communication (e.g. name, phone number or e-mail address) as well as to send your message.
The collected data is used for customer relations management (contact history) and for responding to/fulfilling your request.
When you apply online, we collect and process the following data:
Using our online application tool, you can apply for a specific position or send a speculative application. For the purpose of the application process, it is necessary for us to collect data such as your full name and contact details. All other information is voluntary. If you provide your details of your social media profiles on your application, we will also use the data that we have legitimately obtained from these publicly accessible professional networks.
When you subscribe to a newsletter, we collect and process the following data:
You can subscribe to our newsletter via our site. We require your full name and e-mail address in order to send the newsletter. Please be aware that we conduct anonymous link tracking for statistical purposes.
When you take part in competitions, we collect and process the following data:
From time to time, we also offer the chance to participate in competitions. Which data is collected depends on the competition. Generally information such as full name, company name and contact details e.g. e-mail address or phone number (depending on communication channel) More detailed information can be found in the terms and conditions of the individual competitions.
Contact form / E-mail contact (Art. 6 Para. 1(a+b) EU GDPR)
A contact form is available on our site which can be used to contact us electronically. If you write to us using the contact form, we will process the information you provide to contact you and answer your questions and requests.
All data required to complete the form is subject to the principles of data reduction and data economy, meaning you only have to provide the data that is absolutely necessary for us to contact you. Due to technical and legal reasons, we will also process your IP address. All other information is voluntary (e.g. to give a more tailored answer to your question)
If you contact us by e-mail, we will process the personal data provided solely for the purpose of processing your enquiry.
Newsletter (Art. 6 Para. 1(a) EU GDPR)
You can subscribe to our free newsletter via our site. The email address provided during the registration process is used to send the newsletter.
The principle of data economy and data reduction is observed, as only the e-mail address is marked as a mandatory field. Due to technical and legal reasons, we will also process your IP address.
Our newsletter contains so called web beacons. A web beacon is a is a miniature graphic embedded in e-mails sent in HTML format to enable log file recording and analysis. This enables a statistical evaluation of the success or failure of online marketing campaigns to be carried out. The embedded web beacon can be used to determine whether and when an e-mail was opened and which links were opened.
The log file analysis is carried out by The Rocket Science Group, LLC 675 Ponce de Leon Ave NE Suite 5000 Atlanta, GA 30308 USA
Of course, you can cancel your subscription at any time via the unsubscribe option provided in the newsletter and therefore revoke your consent. You can also send your consent to: email@example.com or writing to to Muebleria Karina, Calle 7 #451 84200 Agua Prieta, Mexico.
Competitions / Advertising consent (Art. 6 Para. 1(a+b) EU GDPR)
From time to time you have the opportunity to take part in competitions through our online shop. When you fill in the competition form, we will process the data provided exclusively for the purpose of participating in the competition.
All data required to complete the form is subject to the principles of data reduction and data economy, meaning you only have to provide the data that is absolutely necessary for running competitions and sending prize notifications. This includes e.g. your name and e-mail address.
Mandatory fields are marked with a (*). Due to technical and legal reasons, we process your IP address. The other fields are optional and can be filled in if you wish. Without the information in the mandatory fields, it is not possible to enter the competition.
You also have the possibility to give us consent to send advertising. Of course it is also possible to take part in the competition without giving your advertising consent.
If you give us your consent by ticking the respective checkbox, we will also process your data in order to send you information and offers about our products and services by e-mail.
You can revoke your consent at any time without giving reasons by e-mail to firstname.lastname@example.org or by post to Muebleria Karina, Calle 7 #451 84200 Agua Prieta, Mexico.
Application portal (Art. 6 Para. 1(a+b) EU GDPR)
We understand that your data is a sensitive matter. That’s why all personal information you submit via our application form is exclusively used for the purpose of the application process and we won’t contact you for any other reason. No data are transferred to a third party without your consent.
When you fill out the application form, you are asked to provide certain personal information. All data required to complete the application form is subject to the principles of data reduction and data economy, meaning you only have to provide the data that is absolutely needed to process your application, such as a CV, or that which we are required to obtain under applicable law. Mandatory information is marked with a * (asterisk). Due to technical and legal reasons, we will also process your IP address.
Without this information, we are unable to process your application. It is therefore not possible to upload application documents to the portal without also providing this information. If you wish, you can also provide additional, optional information via the application form.
We have implemented security measures to ensure that your data remain safe and confidential at all times. All application documents submitted via the application portal are encrypted.
We keep your data for the above purposes for the duration of the application process and until all related deadlines have expired; for no longer than six months after we have informed you whether your application has been successful. However, we can also store your application documents for a longer period of time by giving your consent to the data protection policy again after these six months. If consent is given, your data will be stored for a further 6 months.
You can revoke your future consent at any time without giving reasons by e-mail to an email@example.com or by post to Muebleria Karina, Calle 7 #451 84200 Agua Prieta, Mexico.
Automated case-by-case decisions
We do not use purely automated processes to make a decision.
Cookies (Art. 6 Para. 1 (f ) EU GDPR / Art. 6 Para. 1 (a) EU GDPR in case of consent)
These cookies help us to see how users use our online shop, enabling us to design the content according to the visitor’s needs. In addition, cookies enable us to measure the effectiveness of a particular advert and to place it according, for example, to the user’s thematic interests.
We mostly use so-called “session cookies”, which are automatically deleted when you leave our site. Permanent cookies are automatically deleted by your computer when the validity period has been reached (usually six months) or you delete them yourself before this period expires.
Most Web browsers automatically accept cookies as default. If you don’t want to send this information, you can change your browser settings at any time.
Cookies are saved on the user’s computer and transmitted from there to our website. This means that the user has complete control over how the cookies are used. You can deactivate or limit the transmission of cookies by changing the settings in your internet browser. Furthermore, cookies can be deleted at any time in the internet browser or other software programmes.
Session cookies are required for processing your orders. This will allow your browser session to actually be assigned to you. As the name “session cookie” implies, this cookie will be deleted when you close your browser.
Please note: If you deactivate cookies, not all functions of our online shop may be fully usable under certain circumstances.
User profile / Web tracking / Advertising tools
This online shop—in part with the help of third-party service providers—creates anonymous usage profiles for advertising and market research purposes, as well as for target-group oriented web-design.
These usage profiles are anonymised (on the web server), so that only anonymous data (i.e. no personal or personally identifiable data such as your IP address) are sent to the service providers.
The above-mentioned personal data will not be merged with the user profiles. That means that your usage profile is not attached to your name, and nobody knows what your usage profile looks like at any given time.
Web tracking (i.e. collecting data for these usage profiles) is carried out with usage-profile cookies and scripts.
These cookies enable the web server to recognise you during your browser session and also during your next browser session, provided that the cookie has not been deleted in the meantime.
A note on the use of Google Analytics:
Our website uses the services of Google Analytics, a web analysis service from Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereafter “Google“.
Google Analytics also employs cookies. The information generated by these cookies is transmitted to Google in the USA and stored there.
On our online shop we use Google Analytics with an IP anonymisation function. In this case, Google will anonymise your IP address within member states of the European Union or in other signatory states to the Agreement on the European Economic Area.
Google will use this information to evaluate your use of our site, to compile reports on website activity for us and to provide other services relating to website and internet use. Google may also transfer this information to third parties if this is required by law or if third parties process this data on behalf of Google.
Google also offers a deactivation option for the most popular browsers, giving you more control over what information Google collects and processes. If you activate this option, no information about your visit to the website will be transmitted to Google Analytics. However, activation does not prevent information from being transmitted to us or to other web analytics services that we may use.
For more information about the opt-out option provided by Google and how to enable it, please follow the link below:
A note on the use of Google AdWords:
We also use the Google advertising tool “Google AdWords” to promote our shop. To help us in this, we use the analysis service “Conversion Tracking” from Google. If you accessed our shop via a Google adverts, a cookie is stored on your computer. These conversion cookies cannot be used to identify any personal information and will expire automatically after 30 days. If you visit certain pages of our shop before the cookie expires, we and Google may recognise that you have been redirected to our page after clicking on one of our adverts placed on Google.
The information collected using conversion cookies is used by Google to generate visit statistics for our website. These statistics show us the total number of users who clicked on our adverts and also which pages of our website were subsequently accessed by the respective user. However, we or other companies who advertise using Google AdWords do not receive any information with which users can be personally identified.
You can prevent the conversion cookies being installed by changing the settings in your browser, such as those that generally deactivate the automatic setting of cookies or specifically only block cookies from the “googleadservices.com” domain.
Social network plug-ins
Advertising and conversion cookies are used to show you relevant, interest-based advertising, also from third-party websites. Amongst other things, this prevents the same advertisement from being displayed again and again.
With these cookies, we can also measure the effectiveness of our advertising campaigns based on anonymous and pseudonymous user profiles and trace how users interact with our advertising material and what they do next (so-called “Conversion”):
A note on use of LinkedIn:
We use LinkedIn’s analysis and conversion tracking technology. LinkedIn Inc. 2029 Stierlin Ct. 200 Mountain View, CA 94043, USA (“LinkedIn“). The above-mentioned technology from LinkedIn is used to show you relevant, interest-based advertising. Furthermore, we receive aggregate and anonymous reports on advertising activities and how you interact with our website. However, LinkedIn is able to link your visit to our website to your LinkedIn account.
We have no control over the information that LinkedIn collects or the extent to which the company collects it. We also have no knowledge of the content of the data sent to LinkedIn.
More information about data protection at LinkedIn can be found here:
You can opt-out of LinkedIn’s analysis of your usage behaviour and the display of interest-based recommendations by clicking on the field “Opt Out on LinkedIn” (for LinkedIn members) or “Opt Out” (for other users) here: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
A not on the use of Facebook, Google+, Twitter, Instagram and YouTube:
Our online shop uses so-called social plugins (“plugins”) from the social networks Facebook and Google+, the microblogging services Twitter and Instagram and the video portal YouTube. These services are provided by Facebook Inc, Google Inc, Twitter Inc, Instagram LLC and YouTube LLC (“Providers”).
Facebook is operated by Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”) An overview of Facebook plugins and their appearance can be found here: https://developers.facebook.com/docs/plugins
Google+ is operated by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). An overview of the Google plugins and their appearance can be found here: https://developers.google.com/+/web/
Twitter is operated by Twitter Inc, 1355 Market St, Suite 900, San Francisco, CA 94103, USA (“Twitter”). An overview of the Twitter buttons and their appearance can be found here: https://about.twitter.com/en_us/company/brand-resources.html
More information about the Twitter buttons can be found at:
Instagram is operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA (“Instagram“). An overview of the Instagram buttons and their appearance can be found here: http://blog.instagram.com/post/36222022872/introducing-instagram-badges
YouTube is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (“YouTube“). YouTube LLC is a subsidiary of Google Inc., 600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. You can find more information about YouTube here: https://www.youtube.com/yt/about/de/
If you access a page of our online shop that contains such a plugin, your browser establishes a direct connection to the servers of Facebook, Google, Twitter, Instagram or YouTube. The content of the plugin is transferred directly from the respective provider to your browser and embedded into the page. By embedding plugins, the providers receive the information that your browser has opened on the corresponding page of our website, even if you do not have a profile or are not currently logged in. This information (including your IP address) is transmitted directly from your browser to a server of the respective provider in the USA and stored there.
If you are logged in to one of the services, providers can immediately match your visit to our online shop to your profile on Facebook, Google+, Twitter, Instagram or YouTube. If you interact with the plugins, for example by pressing the respective button, the corresponding information is also transmitted directly to a server of the provider and stored there. The information is also published on your Facebook, Google+, Twitter, Instagram or YouTube account and displayed to your contacts.
The purpose and scope of the data collection and the further processing and use of the data by the providers as well as your relevant rights and setting options for the protection of your privacy can be found in the data protection information of the providers.
If you do not want Google, Facebook, Twitter, Instagram or YouTube to associate the data collected via our online shop directly with your profile , you must log out of the corresponding service before visiting our online shop. You can also completely prevent the loading of plugins with add-ons for your browser, e.g. with a script blocker.
The remarketing feature “Custom Audiences” can be disabled on Facebook in the Ad Settings section when you are logged in:
Use of online services by children
Individuals under the age of 16 may not submit personal information or a declaration of consent to us without the consent of their legal guardian. We ask parents and legal guardians to actively participate in the online activities and interests of their children.
Links to other providers
Our shop contains links to Internet sites of other companies, and these links are clearly recognisable as such. We do not have any influence on the content of these sites and cannot, therefore, be held responsible for them. The respective provider or operator is always responsible for the content on the page.
The linked pages were tested for possible legal violations and recognisable infringements at the time at which they were added. No illegal content was detected at the time of creating the links. However, we cannot be expected to continuously check the content of the external websites without specific knowledge of illegal content. Should we be informed of any illegal content on the external sites, we will promptly remove the links.