Datenschutzerklärung

Privacy statement

We are pleased about your visit on the website of our company. Protection of information and in particular data protection is of great importance to our management. In principle, you can use this website without providing any personal data. Should you disclose data to us in connection with the processing described below, we will treat your personal data confidentially and in accordance with the statutory data protection regulations of the European Union and the Federal Republic of Germany, as well as this data protection declaration.

The Photo & Event C.S. GmbH & Co. KG, as the data controller, has implemented numerous technical and organisational measures to ensure the most complete possible protection of the personal data processed via this website. Nevertheless, Internet-based data transmissions can in principle have security gaps, so that absolute protection cannot be guaranteed. For this reason, you as the person concerned are free to transmit personal data to us by alternative means, such as telephone or post.)

1.) Definitions

The privacy policy of Photo & Event C.S. GmbH & Co. KG is based on the terms used by the European Directive and Ordinance Giver when the Data Protection Basic Ordinance (GDPR) was issued. Detailed definitions can be found in Art. 4 GDPR. Essentially, these are the following terms, described here in simplified form:

(a) personal data

This is all information available to us as a responsible person to identify you as a natural person. (e.g. name, address, e-mail, telephone number, IP address)

(b) data subject

That's you as a natural person, if we've identified you.

(c) Processing

A processing is every capture, storage, further processing, forwarding, archiving and deletion of data. Here it is irrelevant whether the process is carried out automatically with the help of IT systems or manually (e.g. by letter).

(d) Restriction of processing

Limitation of processing is the marking of stored personal data with the aim of limiting their future processing.

(e) Profiling

Profiling is any type of automated processing of your data that consists of using this data to evaluate certain personal aspects that relate to you. In particular, to analyse or predict aspects relating to your work performance, economic situation, health, personal preferences, interests, behaviour, location or change of location.

(f) pseudonymisation

This is a process to provide your personal data with an identifier. Furthermore, only this identifier will be used and without the source key or a "reference database" this pseudonym can not be resolved. (e.g. allocation of a customer number)

(g) controller or data controller

Responsible or responsible for the processing is Photo & Event C.S. GmbH & Co. KG with which you have a contractual relationship. It is decisive that we can decide independently about the processing procedures and means.

(h) Contract processor

A contract processor is a company name which is used by Photo & Event C.S. GmbH & Co. KG has been instructed to assist it in the collection, processing, storage, forwarding or deletion of your data. Usually these are IT service providers, but also waste disposal companies, which are e.g. commissioned with the destruction of files.

(k) Consent

A consent is each of you, for the certain individual case given expressions of intent. You will be fully informed of what you agree to.

2.) Name and address of the controller

Responsible for this website and the central services of Photo & Event C.S. GmbH & Co. in accordance with the data protection basic regulation and other regulations with data protection character, for this website and the central services of the Photo & Event C.S. GmbH & Co. KG

Photo & Event C.S. GmbH & Co. KG

Alte Poststraße 5

D-97318 Kitzingen

Germany

Phone: +49 (0) 9321 1309091

E-mail: info@fotoboxen-kaufen.de

Website: www.fotoboxen-kaufen.de

3.) Rights of the data subject

In accordance with Chapter 3 of the GDPR, you as the party concerned have the rights listed below. In order to fulfil our obligations in connection with your rights in accordance with the law, please address the relevant enquiries to our data protection officer.

(a) Art. 15 Right to information

You have an unlimited right to demand information about the personal data processed by you. This information must be provided to you free of charge. You may request information about the following information, copies of which must also be sent to you:

- the purpose of processing your data,

- the categories of the data,

- the internal and external recipients of your data,

- the duration of the data storage,

- their rights under Chapter 3, in connection with data processing,

- the origin of the data, if they have not been collected from you,

- whether a profile was created,

- whether your data has been transferred to a third country (non-EU and non-EEA),

- which data protection authority is responsible for our respective company,

(b) Art. 16 Right to rectification

If we should process wrong data from you, you can have these corrected at any time with your contact person.

(c) Art. 17 Right to cancellation

You have the right to demand the deletion of your personal data at any time. We may be required by law to retain your data for a certain period of time (e.g. 6 years for business mail or 10 years for tax related documents), in which case we will block your record until the retention period expires and then delete the record accordingly. Please address your request for deletion to the data protection officer, who will exercise your rights in our company on your behalf.

(d) Art. 18 Right to limitation of processing

If you dispute the accuracy of our personal data, or if you refuse the deletion of your data and instead demand the restriction (e.g. in the case of advertising letters) then you can demand the restriction of processing from us. We will then set your data unlocked.

(e) Art. 19 Notification obligations in connection with rectification, erasure or limitation

We are obliged to inform all recipients of your data of any correction, deletion or restriction commissioned by you, insofar as this is possible and can be implemented with a reasonable effort. We will inform you about the recipients of your data if you request this.

(f) Art. 20 Right to data transferability

You have the right at any time to ask our company to transfer your data to another responsible person. This applies to all master data that we keep about you. If this is technically possible, we will make the data record available in a common machine-readable format (e.g. .csv).

(g) Art. 21 Right to object

If data processing is based on Art. 6 Para. I lit. f (so-called legitimate interest), you may object to the processing in this context.

(h) Art. 77 Right to appeal to a supervisory authority

You have the right at any time to complain to the data protection supervisory authority responsible for our company if you are of the opinion that we are in any way violating the provisions of the GDPR. For Photo & Event C.S. GmbH & Co. KG is responsible for the following authority:

     Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)

     Promenade 18

     D-91522 Ansbach

     Germany

You can access the website of the data protection supervisory authority via the following link: https://www.lda.bayern.de/de/index.html

4.) Processing operations

In this section we will describe the data processing operations that are related to our Internet offering or that apply to a general business relationship between you and our company.

The following legal bases serve us for the processing of your data.

Art. 6 I lit. a GDPR serves our company as a legal basis for processing operations in which we obtain consent for a specific processing purpose.

If the processing of your data is necessary for the fulfilment of a contract to which you are a party, as is the case, for example, with processing operations which are necessary for the delivery of goods or the provision of other services or consideration, the processing is based on Art. 6 I lit. b GDPR. The same applies to such processing operations which are necessary for the implementation of pre-contractual measures, for example in cases of inquiries regarding our products or services or if you apply to us.

If our company is subject to a legal obligation requiring the processing of personal data, such as for the fulfilment of tax obligations, the processing is based on Art. 6 I lit. c GDPR.

In rare cases, the processing of personal data may be necessary to protect vital interests of you or another natural person. This would be the case, for example, if you were injured in our company and your name, health insurance data or other vital information would have to be passed on to a doctor, a hospital or our professional association. Then the processing would be based on Art. 6 I lit. d GDPR.

Ultimately, processing operations could be based on Art. 6 I lit. f GDPR. Processing operations that are not covered by any of the aforementioned legal bases are based on this legal basis if the processing is necessary to safeguard a legitimate interest of our company or a third party, provided that the interests, fundamental rights and fundamental freedoms of you do not prevail. Such processing operations are permitted to us in particular because they have been specifically mentioned by the European legislator.

  1. Website

We operate this website and collect various data in this context.

Cookies

Some of the Internet pages use so-called cookies. Cookies do not damage your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, more effective and safer. Cookies are small text files that are stored on your computer by your browser.

Most of the cookies we use are so-called "session cookies". They are automatically deleted at the end of your visit. Other cookies remain stored on your terminal until you delete them. These cookies enable us to recognize your browser during your next visit.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, accept cookies for certain cases or generally exclude them and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.

Cookies which are necessary for the electronic communication process or for the provision of certain functions requested by you (e.g. shopping basket function) are stored on the basis of Art. 6 para. 1 lit. f GDPR. We, as website operators, have a justified interest in the storage of cookies for the technically error-free and optimised provision of our services. As far as other cookies (e.g. cookies for the analysis of your surfing behaviour) are stored, these are treated separately in this data protection declaration.

Server Log Data

The Photo & Event C.S. GmbH & Co. KG or our website provider collects data about accesses to our website and stores these as "server log files". The following data is logged in this way:

- Visited website

- Time at the time of access

- Amount of data sent in bytes

- Source/reference from which you came to the page

- Browser used

- Operating system used

- IP address used (anonymized)

The data collected is used only for statistical purposes and to improve the website. However, we reserve the right to subsequently check the server log files if there are concrete indications of illegal use.

Third party modules / analysis tools / advertising

IP Anonymization

We have activated the IP anonymization function on this website. This will cause Google to shorten your IP address within member states of the European Union or other signatory states to the Agreement on the European Economic Area before it is transmitted to the United States. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator.

browser plug-in

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. In addition, you can prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and Google from processing this data by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

  1. Google Web Fonts

This page uses so-called web fonts provided by Google for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly.

For this purpose, the browser you are using must connect to Google's servers. This enables Google to know that your IP address has been used to access our website. The use of Google Web Fonts is in the interest of a uniform and appealing presentation of our online services. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

If your browser does not support web fonts, a standard font will be used by your computer.

Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.com/policies/privacy/.Google Analytics

We would like to tailor the content of our website as precisely as possible to your interests and in this way improve our services for you. In order to recognise particularly popular areas of our website, we use the following data

  1. Google Analytics

If you have given us your consent in advance, we will use Google Analytics, a web analytics service provided by Google, Inc. (https://www.google.com/intl/en/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter "Google") for the purpose of demand-oriented design and ongoing optimisation of our pages. In this context, pseudonymous user profiles are created and cookies (see 6. a website) are used. The information generated by the cookie about your use of this website such as

- Browser type/version,

- operating system,

- Referrer URL (the previously visited page),

- Host name of the accessing computer (IP address),

- Time of the server request,

are transmitted to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on the website activities and to provide further services connected with the use of the website and the Internet for the purposes of market research and the design of these Internet pages in line with requirements. This information may also be transferred to third parties if required by law or if third parties process this data on our behalf. Under no circumstances will your IP address be merged with other data from Google. The IP addresses are made anonymous so that an assignment is not possible (IP masking).

The data processing is based on your consent in accordance with Art. 6 (1) a) GDPR, which you can give us with the help of the Consent Banner. You can revoke this consent at any time by calling up the settings of the consent banner and editing them accordingly.

Furthermore, you may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=en).

You can find further information on data protection in connection with Google Analytics in the Google Analytics Help (https://support.google.com/analytics/answer/6004245?hl=en).

  1. Google Remarketing

We have integrated Google Remarketing services on this website. Google Remarketing is a Google AdWords feature that enables us to display advertisements to Internet users who have previously visited our website. The integration of Google Remarketing therefore allows us to create user-related advertising and consequently to display interest-relevant advertising to the Internet user (you).

Google Remarketing services are operated by Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

The purpose of Google Remarketing is to display interest-relevant advertising. Google Remarketing enables us to display advertisements via the Google advertising network or on other websites that are tailored to the individual needs and interests of Internet users.

Google Remarketing places a cookie on your IT system. What cookies are has already been explained above. When cookies are set, Google is able to recognize visitors to our website who subsequently visit websites that are also members of the Google advertising network. Each time you visit a website on which the Google Remarketing service has been integrated, your Internet browser automatically identifies itself to Google. As part of this technical process, Google obtains knowledge of personal data, such as the IP address or the surfing behaviour of the user, which Google uses, among other things, to display advertisements relevant to your interests.

Cookies are used to store personal information, such as the Internet pages visited by you. Accordingly, each time you visit our website, personal data, including the IP address of your Internet connection, is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may share this personal data collected through the technical process with third parties.

The person concerned can prevent the setting of cookies by our website, as described above, at any time by means of an appropriate setting of the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a cookie on your IT system. In addition, a cookie already set by Google Analytics can be deleted at any time via the Internet browser or other software programs.

Furthermore, you have the possibility to object to the interest-related advertising by Google. To do this, you must call up the link www.google.de/settings/ads from each of the Internet browsers you use and make the desired settings there.

  1. Google-AdWords

We have integrated Google AdWords on this website. Google AdWords is an Internet advertising service that allows advertisers to serve ads in both Google's search engine results and the Google advertising network. Google AdWords allows us to pre-define keywords that will be used to display an ad in Google's search engine results only when you use the search engine to retrieve a keyword relevant search result. In the Google advertising network, the ads are distributed to topic-relevant Internet pages using an automatic algorithm and taking into account the previously defined keywords.

The company operating the Google AdWords services is Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

The purpose of Google AdWords is to promote our website by displaying advertisements of interest on third-party websites and in the search engine results of Google and by displaying third-party advertisements on our website.

If a person concerned, i.e. you, reaches our website via a Google advertisement, a so-called conversion cookie is stored on your IT system by Google. What cookies are has already been explained above. A conversion cookie loses its validity after thirty days and does not serve to identify the person concerned. If the cookie has not yet expired, the conversion cookie is used to track whether certain subpages, such as the shopping cart of an online shop system, have been accessed on our website. Through the conversion cookie, both we and Google can track whether you, who came to our website via an AdWords ad, generated a turnover, i.e. completed or cancelled a purchase.

The data and information collected through the use of the conversion cookie is used by Google to generate visit statistics for our website. These visit statistics are in turn used by us to determine the total number of users who were referred to us via AdWords ads, i.e. to determine the success or failure of the respective AdWords ad and to optimise our AdWords ads for the future. Neither our company nor other Google AdWords advertisers receive any information from Google that could be used to identify you.

The conversion cookie is used to store personal information, such as the Internet pages you visit. Accordingly, each time you visit our website, personal data, including the IP address of the Internet connection you use, is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may disclose personal data collected through this technical process to third parties.You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. Such a setting of the Internet browser used would also prevent Google from setting a conversion cookie on your IT system. In addition, a cookie already set by Google AdWords can be deleted at any time via the Internet browser or other software programs.

You also have the option of opting out of receiving interest-based advertising from Google. To do this, you must call up the link www.google.de/settings/ads from each of the Internet browsers you use and make the desired settings there.

Further information and the valid data security regulations of Google can be called up under https://www.google.de/intl/de/policies/privacy/

  1. Facebook-linking

We have integrated a link to the Facebook web platform on this website. Facebook enables users of the social network to create private profiles, upload photos and network via friend requests.

The operating company of Facebook is Facebook, Inc. 1 Hacker Way, Menlo Park, CA 94025, USA. If you live outside the USA or Canada, the person responsible for processing personal data is Facebook Ireland Ltd. 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

As soon as you use the Facebook link, your browser is redirected from our website to the Facebook platform. In this context, Facebook remembers from which of our sub-pages you switched to our Facebook fan page. If you are logged in to Facebook at the same time, Facebook will link your profile to our corporate website and remember this. This will also happen if you are logged into Facebook without leaving our website via a link.

If you do not want this information to be transmitted to Facebook in this way, you can prevent it from being transmitted by logging out of your Facebook account before accessing our website.

A complete overview of all Facebook plug-ins can be found at https://developers.facebook.com/docs/plugins/?locale=en_DE. As part of this technical process, Facebook obtains information about which specific subpage of our website is visited by you.

Facebook's published data policy, which is available at https://de-de.facebook.com/about/privacy/, provides information about the collection, processing and use of personal data by Facebook. It also explains which settings Facebook offers to protect your privacy. In addition, various applications are available that make it possible to suppress data transmission to Facebook. Such applications can be used by you to suppress data transmission to Facebook.

Facebook collects so-called Insights data from every Facebook user; we do not use this data in any way for any analyses or evaluations. Unfortunately, we cannot prevent Facebook from collecting this data.

The Facebook link is used on the basis of Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in the widest possible visibility in the social media.

  1. YouTube

We have integrated components from YouTube on this website. YouTube is an internet video portal that allows video publishers (us) to post video clips and other users to view, rate and comment on them free of charge. YouTube allows the publication of all types of videos, which is why complete film and television programmes, but also music videos, trailers or videos made by users themselves can be accessed via the Internet portal.

YouTube is operated by YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

Each time you access one of the individual pages on this website, which is operated by us and on which a YouTube component (YouTube video) has been integrated, the Internet browser on your IT system is automatically prompted by the respective YouTube component to download a display of the corresponding YouTube component from YouTube. More information about YouTube can be found at https://www.youtube.com/yt/about/de/ As part of this technical process, YouTube and Google will know which specific page on our website you have visited.

If you are logged in to YouTube at the same time, YouTube recognizes which specific subpage of our website you are visiting by calling up a subpage containing a YouTube video. This information is collected by YouTube and Google and assigned to your respective YouTube account.

YouTube and Google always receive information via the YouTube component that you have visited our website when you are logged in to YouTube at the same time as you visit our website; this takes place regardless of whether you click on a YouTube video or not.

If you do not want this information to be transmitted to YouTube and Google in this way, you can prevent it from being transmitted by logging out of your YouTube account before you visit our website.

YouTube's privacy policy, which is available at https://www.google.de/intl/de/policies/privacy/, discloses the collection, processing and use of personal data by YouTube and Google.

  1. Instagram

We have integrated components of the Instagram service on this website. Instagram is a service that qualifies as an audiovisual platform that allows you to share photos and videos and also share such data on other social networks.

Instagram's services are operated by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland.

Each time you access one of the individual pages on this site that is operated by us and on which an Instagram component (Insta button) has been integrated, the Internet browser on your IT system is automatically prompted by that Instagram component to download a representation of that Instagram component. As part of this technical process, Instagram will know which specific subpage of our website you are visiting.

If you are logged in to Instagram at the same time, Instagram recognizes which specific page you are visiting each time you visit our website and for the entire duration of your visit to our website. This information is collected by the Instagram component and assigned to your Instagram account by Instagram. If you click on one of the Instagram buttons integrated on our website, the data and information transferred will be assigned to your personal Instagram user account and stored and processed by Instagram.

Instagram always receives information from the Instagram component that you have visited our website when you are logged in to Instagram at the same time as you access our website, regardless of whether you click on the Instagram component or not. If you do not want to submit this information to Instagram in this way, you can prevent the submission by logging out of your Instagram account before accessing our website.

More information and Instagram's current privacy policy can be found at https://help.instagram.com/155833707900388 and https://www.instagram.com/about/legal/privacy/

  1. Description, Purpose, and Legal Basis

You have the option to register on our website by providing personal data for our online shop. The personal data transmitted to us results from the respective input mask used for registration. The personal data you enter are collected and stored exclusively for internal use and purposes of contract execution. Data processing thus occurs on the legal basis of Art. 6 para. 1 lit. b GDPR for contract fulfillment.

We may pass on your personal data to one or more processors, such as a parcel service like DHL, which uses your data primarily for contract execution purposes.

By registering in our online shop, the IP address assigned by the internet service provider (ISP), the date, and the time of registration are also stored. These data are stored because only in this way can the misuse of our services be prevented, and these data allow the clarification of crimes committed if necessary. Insofar, the storage of these data is necessary for our security. These data are generally not passed on to third parties unless there is a legal obligation to pass them on, or the data transfer serves the purpose of criminal prosecution.

If you provide personal data voluntarily during registration, these data are used to offer you content or services that can only be offered to registered users due to the nature of the matter. The data processing then takes place based on your consent according to Art. 6 para. 1 lit. a GDPR. You have the option to change or delete the personal data you provided at any time.

To optimize our online offer for you, we have a legitimate interest in possibly passing on your personal data to third parties. This occurs based on the legal basis of Art. 6 para. 1 lit. f GDPR.

For processing your commercial and tax obligations, Art. 6 para. 1 lit. c GDPR serves as the legal basis.

We will gladly inform you upon request about the personal data we have stored about you. Furthermore, we will correct or delete your personal data upon your request or notice, provided that no statutory retention obligations conflict with this. For this purpose, you can contact our employees at any time.

We store your personal data as long as they are necessary to achieve the purpose. The purpose is achieved once the contract has been fully executed. Even after full execution, it may be necessary to store your personal data. This is the case to comply with contractual or legal obligations. Due to commercial and tax regulations, we are obligated to store your address, payment, and order data for ten years.

You have the right to object to the processing of your personal data based on our legitimate interest at any time. You can contact us by email or another contact method. Please note, however, that contractual or legal retention periods may oppose the restriction or deletion of your personal data.

Recipient

To process payments, we pass on your data to the corresponding payment service providers listed below:

User Account

To place orders via our online shop, you have the option to create a password-protected user account. This account includes an overview of your orders and active order processes. If you leave the online shop, you will be automatically logged out.

Please ensure a sufficiently secure password, as we are not liable for password misuse unless we have caused it ourselves.

If you do not wish to create a user account, you can place an order as a guest at any time.

Order Process

When you place an order, the necessary personal data are processed. These are usually name, first name, address, payment data (if applicable), and email address. These data are also collected if you place an order as a guest, as they are necessary for contract execution. They may also be passed on to third-party service providers for delivery or order processing. After the contract has been executed, your personal data will be deleted unless further storage is required or a contractual or legal retention period opposes deletion.

JTL

To operate our online shop, we use the e-commerce solution from JTL. JTL sets cookies to provide the basic functions of the shop. If you have completely disabled cookies in your browser, it is possible that the shop will not function properly.

Information about you may be transferred to the service provider behind this software during shop usage. The provider is JTL-Software-GmbH, Rheinstr. 7, 41836 Hückelhoven. We have complied with our data protection obligations towards you with JTL and have signed a corresponding order processing agreement. The JTL privacy policy can be found at https://www.jtl-software.de/datenschutz.

  1. Contact / Inquiries / Newsletter

In the following, we describe the possibilities of establishing contact with the employees of our company.

Contact form / Inquiry form

If you send us enquiries using the contact form/inquiry form, your details from the enquiry form including the contact data provided by you there will be stored by us for the purpose of processing the enquiry, preparing a non-binding offer and in the event of follow-up enquiries. These data will not be passed on without your consent.

The processing of the data entered in the contact form thus takes place in the first step on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time. For this purpose, an informal e-mail notification to us is sufficient. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation. In further correspondence, there may be a change of legality (e.g. if you request an offer), then your data will be processed in accordance with Art. 6 para. 1 lit b GDPR.

The data entered by you in the contact form will remain with us until you request deletion, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory legal provisions - in particular retention periods - remain unaffected by this.

E-Mail / Phone inquiry

If you send us enquiries by e-mail, your details from the e-mail including the contact details you provided will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. These data will not be passed on without your consent.

The processing of the data entered in the mail is therefore based on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time. For this purpose, an informal e-mail notification to us is sufficient. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation. In further correspondence, there may be a change of legality (e.g. if it is a business correspondence), then your data will be processed according to Art. 6 para. 1 lit b GDPR.

The data entered by you in the e-mail will remain with us until you request deletion, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory legal provisions - in particular retention periods - remain unaffected by this.

Newsletter

On our website you have the possibility to subscribe to the newsletter of our company. Which personal data is transmitted to us when ordering the newsletter results from the input mask used for this purpose.

The Photo & Event C.S. GmbH & Co. KG informs its customers, business partners and interested parties about the company's offers at regular intervals by means of a newsletter. The newsletter of our company can only be received by you if (1) you have a valid e-mail address and (2) you register for the newsletter dispatch. For legal reasons, a confirmation e-mail in the double opt-in procedure will be sent to the e-mail address you entered for the newsletter dispatch for the first time. This confirmation e-mail is used to check whether you have authorised the owner of the e-mail address to receive the newsletter.

When you register for the newsletter, we also store the IP address assigned by the Internet Service Provider (ISP) to the computer system you are using at the time of registration as well as the date and time of registration. The collection of this data is necessary in order to be able to trace the (possible) misuse of the e-mail address of a person concerned at a later point in time and therefore serves our legal protection.

 

The personal data collected during registration for the newsletter will only be used to send our newsletter. Furthermore, subscribers to the newsletter could be informed by e-mail if this is necessary for the operation of the newsletter service or registration in this respect, as might be the case in the event of changes to the newsletter offer or changes to the technical conditions. The personal data collected as part of the newsletter service will not be passed on to third parties. You may cancel your subscription to our newsletter at any time. The consent to the storage of your personal data, which you have given us for the newsletter dispatch, can be revoked at any time. For the purpose of revoking your consent, you will find a corresponding link in every newsletter. You also have the option of unsubscribing from the newsletter at any time directly on our website or informing us of this in any other way.

The newsletter is used on the basis of Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in providing our customers, business partners and interested parties with as much information as possible about our products and services.

Newsletter-Tracking

The Newsletter of Photo & Event C.S. GmbH & Co. KG contain so-called tracking pixels. A pixel-code is a miniature graphic that is embedded in e-mails that are sent in HTML format to enable log file recording and analysis. This allows a statistical evaluation of the success or failure of online marketing campaigns to be carried out. The embedded pixel-code allows Photo & Event C.S. GmbH & Co. KG can recognize if and when an e-mail was opened by you and which links in the e-mail were called by you.

Such personal data collected via the tracking pixels contained in the newsletters are stored and evaluated by us in order to optimise the newsletter dispatch and to adapt the content of future newsletters even better to your interests. This personal data will not be passed on to third parties. You are entitled at any time to revoke the relevant separate declaration of consent given via the double opt-in procedure. After a revocation these personal data are deleted by us. A deregistration from the receipt of the newsletter indicates Photo & Event C.S. GmbH & Co. KG automatically interprets this as a revocation.

The newsletter tracking is used on the basis of Art. 6 Para. 1 lit. f GDPR. We have a legitimate interest in informing our customers, business partners and other interested parties as comprehensively as possible about our products and services and, in connection with this, which of our services have aroused the most interest.

  1. Data processing for the fulfilment of contracts

If you have entered into a business relationship with our company, e.g. you have placed an order with us, data processing will be carried out on the basis of Art. 6 Para. 1 lit. b GDPR. All data necessary to initiate, fulfil or complete this order, such as contact data, object data, service providers involved, photo documentation, plans, orders for goods, etc., may be collected and processed by us without separate consent.

Should it be necessary to call in a subcontractor (e.g. other IT service providers, special software suppliers) to fulfil the contract with you, we may also pass on your data to this subcontractor. We guarantee that we have committed our subcontractors to the same strict data protection requirements that you can expect from us.

In individual cases it may happen that we receive information about the credit reform in order to initiate an order. Should any consequences for the order arise from the data obtained in this way, we will clarify this separately with you.

The data in connection with orders are subject to different retention periods. For example, general business letters must be verified for 6 years and tax documents for 10 years. We will only pass on your data within our company to the extent necessary, insofar as this is justified by the subject of the order.

Payment method: PayPal

We have integrated components of PayPal on this website. PayPal is an online payment service provider. Payments are processed through so-called PayPal accounts, which are virtual private or business accounts. PayPal also offers the option of making virtual payments using credit cards if a user does not have a PayPal account. A PayPal account is managed via an e-mail address, which is why there is no classic account number. PayPal makes it possible to initiate online payments to third parties or to receive payments. PayPal also acts as a trustee and offers buyer protection services.

The European operating company of PayPal is PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg.

If you select "PayPal" as your payment option during the ordering process in our online shop, your data will be automatically transmitted to PayPal. By selecting this payment option, you consent to the transfer of your personal data required for payment processing.

The personal data transmitted to PayPal is usually first name, surname, address, email address, IP address, telephone number, mobile phone number or other data necessary for payment processing. For the completion of the sales contract are necessary also such personal data, which stand in connection with the respective order.

The transmission of the data is intended for payment processing and fraud prevention. We will transmit personal data to PayPal in particular if there is a legitimate interest in the transmission. The personal data exchanged between PayPal and us may be transferred by PayPal to credit agencies. The purpose of this transfer is to check identity and creditworthiness.

PayPal may disclose the personal data to affiliated companies and service providers or subcontractors to the extent necessary to fulfill the contractual obligations or to process the data on behalf of PayPal.

You have the option to revoke your consent to PayPal handling your personal data at any time. A revocation does not affect personal data that must be processed, used or transmitted for (contractual) payment processing.

The valid data protection regulations of PayPal can be found at https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Payment Methods: Credit Card and Apple Pay

For payment processing, we use the external payment service provider Mollie (Mollie B.V., Keizersgracht 313, 1016 EE Amsterdam, Netherlands) on the website. The following payment methods are processed via Mollie:

When you make a payment, the payment data you enter are transmitted to Mollie and the selected payment provider. Personal data (your payment data, such as account or credit card number, IP address, browser and device type, first and last name, address data, information about the ordered product) are processed by Mollie. The processing aims at payment processing. Depending on the selected payment method, the data may be transmitted to the respective payment service provider (Apple Pay, Mastercard, Visa, American Express) to the required extent.

The transmission of your data to Mollie is based on Art. 6 para. 1 lit. a GDPR (consent) and Art. 6 para. 1 lit. b GDPR (processing to fulfill a contract). You have the option to revoke your consent to data processing at any time. A revocation does not affect the legality of past data processing operations.

For payment transactions, the terms and conditions and data protection notices of the respective payment service providers apply, which can also be accessed on their respective websites or transaction applications. We also refer to these for further information and to assert withdrawal, information, and other affected rights. Details on payment via the payment service provider Mollie can be found at https://www.mollie.com/de/privacy.

5.) Protection / Encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

6.) Profiling

As a responsible company, we refrain from automatic decision-making or profiling.

7.) Up-to-dateness / Status

This data protection declaration is dated July 2024 and is subject to constant updating and adaptation to new legal framework conditions and technical developments.