Data protection

Privacy Policy
We are pleased that you are visiting our company's website. Protecting information, particularly personal data, is a high priority for our management. In general, you can use this website without providing personal data. Should you disclose data to us in connection with the processes described below, we will treat your personal data confidentially and in accordance with the legal data protection regulations of the European Union and the Federal Republic of Germany, as well as this privacy policy.

The Photo & Event C.S. GmbH & Co. KG, as the data controller, has implemented numerous technical and organizational measures to ensure the most complete protection possible for personal data processed via this website. However, internet-based data transmissions can always have security vulnerabilities, so absolute protection cannot be guaranteed. For this reason, you are free to transmit personal data to us by alternative means, such as by telephone or mail.

1) Definitions

The privacy policy of Photo & Event C.S. GmbH & Co. KG is based on the terms used by the European directive and regulation authority when issuing the General Data Protection Regulation (GDPR). Detailed definitions can be found in Art. 4 GDPR. Essentially, these are the following terms, simplified here:

a) Personal Data
This includes all information available to us as the data controller that can identify you as a natural person (e.g., name, address, email, phone number, IP address).

b) Data Subject
This is you as a natural person, provided we have identified you.

c) Processing
Processing refers to any collection, storage, further processing, forwarding, archiving, and deletion of data. It is irrelevant whether the process is carried out automatically with the help of IT systems or manually (e.g., by letter).

d) Restriction of Processing
Restriction of processing means marking stored personal data with the aim of limiting its future processing.

e) Profiling
Profiling refers to any type of automated processing of your data that involves using this data to evaluate certain personal aspects related to you, particularly to analyze or predict aspects regarding your work performance, economic situation, health, personal preferences, interests, behavior, location, or change of location.

f) Pseudonymization
This is a process by which your personal data is assigned an identifier. Further processing is then carried out only with this identifier, and without the original key or a "reference database," this pseudonym cannot be resolved (e.g., assigning a customer number).

g) Controller or Data Controller
The controller or data controller is Photo & Event C.S. GmbH & Co. KG, with which you have a contractual relationship. The decisive factor is that we can independently decide on the processing methods and means.

h) Processor
A processor is a company commissioned by Photo & Event C.S. GmbH & Co. KG to assist in collecting, processing, storing, forwarding, or deleting your data. These are usually IT service providers, but also disposal companies, for example, tasked with destroying records.

k) Consent
Consent is any expression of will by you given for a specific case. You will be fully informed about what you are consenting to.

2) Name and Address of the Data Controller

The data controller within the meaning of the General Data Protection Regulation and other applicable data protection laws for this website and the central services of Photo & Event C.S. GmbH & Co. KG is:

Photo & Event C.S. GmbH & Co. KG
Simone Süßmeier
Alte Poststraße 5
97318 Kitzingen
Germany
Tel.: 09321 1309091
Email: info@fotoboxen-kaufen.de
Website: www.fotoboxen-kaufen.de

3) Rights of the Data Subject

According to Chapter 3 of the GDPR, you as a data subject have the following rights. To ensure that we fulfill our obligations in connection with your rights in a legally compliant manner, please address appropriate requests to our data protection officer.

a) Art. 15 Right of Access
You have the unrestricted right to request information about the personal data we process about you. This information must be provided to you free of charge. You may request information on the following, which must also be provided to you in copy:

  • The purpose of processing your data,
  • The categories of data,
  • The internal and external recipients of your data,
  • The duration of data storage,
  • Your rights under Chapter 3 in connection with data processing,
  • The origin of the data if it was not collected from you,
  • Whether profiling has been conducted,
  • Whether your data has been transferred to a third country (outside the EU and EEA),
  • Which data protection authority is responsible for our company.

b) Art. 16 Right to Rectification
If we process incorrect data about you, you may have it corrected at any time by contacting your point of contact.

c) Art. 17 Right to Erasure
You have the right to request the deletion of your personal data at any time. It may be the case that we are legally obliged to retain your data for a certain retention period (e.g., 6 years for business correspondence or 10 years for documents with tax relevance), in which case we will block your data set until the retention period expires and then delete it. Please direct deletion requests to the data protection officer, who will enforce your rights within our company.

d) Art. 18 Right to Restriction of Processing
If you dispute the accuracy of our data about you, or if you refuse the deletion of your data and instead request a restriction (e.g., in the case of advertising correspondence), you can request the restriction of processing. We will then place a hold on your data.

e) Art. 19 Notification Obligation Regarding Rectification, Erasure, or Restriction
We are obliged to inform all recipients of your data of any rectification, erasure, or restriction you have requested, provided this is possible and can be accomplished with reasonable effort. We will inform you about the recipients of your data if you request it.

f) Art. 20 Right to Data Portability
You have the right to request at any time that your data be transferred to another data controller. This applies to all master data that we have about you. If technically feasible, we will provide the data set in a common machine-readable format (e.g., .csv).

g) Art. 21 Right to Object
If data processing is based on Art. 6 para. 1 lit. f (so-called legitimate interest), you may object to the processing in this context.

h) Art. 77 Right to Lodge a Complaint with a Supervisory Authority
You have the right to lodge a complaint with the data protection supervisory authority responsible for our company if you believe that we have in any way violated the provisions of the GDPR. For Photo & Event C.S. GmbH & Co. KG, the following authority is responsible:

Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18
91522 Ansbach
Germany
You can access the website of the data protection supervisory authority via the following link: https://www.lda.bayern.de/de/index.html

4) Data Processing

In this section, we will describe the data processing operations that are associated with our online presence or are relevant to a general business relationship between you and our company.

The following legal bases serve as the foundation for the processing of your data:

Art. 6 I lit. a GDPR serves as the legal basis for processing operations for which we obtain consent for a specific processing purpose.

If the processing of your data is necessary for the performance of a contract to which you are a party, such as in the case of processing operations necessary for the supply of goods or the provision of any other service or consideration, the processing is based on Art. 6 I lit. b GDPR. The same applies to processing operations necessary for the implementation of pre-contractual measures, for example, in cases of inquiries about our products or services or if you apply to us.

If our company is subject to a legal obligation that requires the processing of personal data, such as for the fulfillment of tax obligations, the processing is based on Art. 6 I lit. c GDPR.

In rare cases, the processing of personal data may be necessary to protect the vital interests of you or another natural person. This would be the case, for example, if you were injured in our business and your name, health insurance data, or other vital information had to be passed on to a doctor, hospital, or our employers' liability insurance association. In such cases, the processing would be based on Art. 6 I lit. d GDPR.

Finally, processing operations could be based on Art. 6 I lit. f GDPR. This legal basis is used for processing operations that are not covered by any of the aforementioned legal bases when processing is necessary to protect a legitimate interest of our company or a third party, provided that your interests, fundamental rights, and freedoms do not outweigh the legitimate interest. Such processing operations are particularly permitted because they have been specifically mentioned by the European legislator.

a) Website
We operate this website and collect various data in this context.

Cookies
The websites use some so-called cookies. Cookies do not harm your computer and do not contain viruses. Cookies help make our website more user-friendly, efficient, and secure. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so-called "session cookies." They are automatically deleted at the end of your visit. Other cookies remain stored on your device until you delete them. These cookies allow us to recognize your browser the next time you visit.

You can set your browser to inform you about the setting of cookies and only allow cookies on a case-by-case basis, exclude the acceptance of cookies for certain cases or generally, and activate the automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.

Cookies required to carry out the electronic communication process or provide certain functions you request (e.g., shopping cart function) are stored based on Art. 6 para. 1 lit. f GDPR. As the website operator, we have a legitimate interest in storing cookies for the technically error-free and optimized provision of our services. If other cookies (e.g., cookies to analyze your surfing behavior) are stored, they are treated separately in this privacy policy.

Server Log Files
Photo & Event C.S. GmbH & Co. KG or our website provider collects data about access to our site and stores it as "server log files." The following data is logged in this way:

  • Visited website
  • Time at the moment of access
  • Amount of data sent in bytes
  • Source/reference from which you came to the page
  • Used browser
  • Used operating system
  • Used IP address (anonymized)

The collected data is used solely for statistical evaluations and to improve the website. However, we reserve the right to retrospectively check the server log files if there are concrete indications of illegal use.

Third-Party Modules / Analysis Tools / Advertising

IP Anonymization
We have activated the IP anonymization function on this website. This means that your IP address is truncated by Google within member states of the European Union or other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide other services related to website activity and internet usage to the website operator.

Browser Plug-In
You can prevent the storage of cookies by adjusting your browser software settings accordingly; however, please note that in this case, you may not be able to use all the functions of this website to their full extent. You can also prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

(1) Google Web Fonts
This site uses so-called web fonts provided by Google for uniform font display. When you call up a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly.

To do this, the browser you use must connect to Google's servers. This allows Google to know that our website was accessed via your IP address. The use of Google Web Fonts is in the interest of a uniform and attractive presentation of our online offerings. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

If your browser does not support web fonts, a standard font will be used by your computer.

Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.com/policies/privacy/.

(2) Google Analytics
Provided you have given us your prior consent, we use Google Analytics, a web analytics service provided by Google Inc. (https://www.google.com) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter "Google"), for the purpose of tailoring and continuously optimizing our pages to your needs. Pseudonymized usage profiles are created and cookies (see "Website") are used in this context. The information generated by the cookie about your use of this website, such as

  • Browser type/version,
  • Operating system used,
  • Referrer URL (the previously visited page),
  • Hostname of the accessing computer (IP address),
  • Time of the server request,

is transmitted to and stored by Google on servers in the United States. The information is used to evaluate your use of the website, compile reports on website activity, and provide other services related to website and internet usage for market research purposes and the customization of these internet pages. This information may also be transferred to third parties if required by law or if third parties process this data on behalf of Google. In no event will your IP address be merged with other Google data. IP addresses are anonymized so that assignment is not possible (IP masking).

The data processing is based on your consent under Art. 6 para. 1 lit. a) GDPR, which you can give us using the consent banner. This consent can be revoked at any time by accessing and adjusting the consent banner settings accordingly.

Furthermore, you can prevent the installation of cookies by adjusting your browser software settings accordingly; however, we point out that in this case, not all functions of this website may be fully usable.

You can also prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on https://tools.google.com/dlpage/gaoptout?hl=en.

Further information on data protection concerning Google Analytics can be found in the Google Analytics Help https://support.google.com/analytics/answer/6004245?hl=en.

(3) Google Remarketing

We have integrated Google Remarketing services on this website. Google Remarketing is a feature of Google AdWords that allows us to display advertisements to internet users who have previously visited our website. The integration of Google Remarketing allows us to create user-related advertising and therefore display relevant advertising to internet users (you).

The operating company of the Google Remarketing services is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

The purpose of Google Remarketing is to display interest-relevant advertising. Google Remarketing allows us to display advertisements via the Google advertising network or on other websites tailored to the individual needs and interests of internet users.

Google Remarketing sets a cookie on your IT system. What cookies are has already been explained above. By setting the cookie, Google enables the recognition of visitors to our website if they subsequently visit websites that are also members of the Google advertising network. Every time a website is visited that integrates Google's Remarketing services, your internet browser automatically identifies itself to Google. As part of this technical procedure, Google receives knowledge of personal data, such as the IP address or the user's browsing behavior, which Google uses, among other things, to display interest-relevant advertising.

Through the cookie, personal information such as the websites you visit is stored. Every time you visit our websites, personal data, including the IP address of your internet connection, is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may transfer this personal data collected through the technical procedure to third parties.

The data subject can prevent the setting of cookies by our website, as already explained above, by adjusting the settings of the used internet browser, and thus permanently object to the setting of cookies. Such a setting of the used internet browser would also prevent Google from setting a cookie on your IT system. Furthermore, a cookie set by Google Analytics can be deleted at any time via the internet browser or other software programs.

Furthermore, you have the option of objecting to interest-based advertising by Google. To do this, you must access the link www.google.de/settings/ads from each internet browser you use and make the desired settings there.

(4) Google AdWords

We have integrated Google AdWords on this website. Google AdWords is an internet advertising service that allows advertisers to place ads in Google's search engine results and the Google advertising network. Google AdWords allows us to predefine specific keywords that cause an ad to appear in Google's search engine results only when the user retrieves a keyword-relevant search result. In the Google advertising network, the ads are distributed on relevant internet pages using an automatic algorithm and considering the previously defined keywords.

The operating company of Google AdWords services is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

The purpose of Google AdWords is to promote our website by displaying interest-relevant advertising on third-party websites and in Google's search engine results and to display third-party advertising on our website.

If you reach our website via a Google ad, a so-called conversion cookie is placed on your IT system by Google. What cookies are has already been explained above. A conversion cookie loses its validity after thirty days and is not used to identify the data subject. If the conversion cookie has not expired, the conversion cookie is used to track whether certain sub-pages, such as the shopping cart of an online store system, were accessed on our website. Through the conversion cookie, both we and Google can track whether a user who arrived at our website via an AdWords ad generated revenue, i.e., completed or canceled a purchase.

The data and information collected through the use of the conversion cookie are used by Google to create visit statistics for our website. These visit statistics are used by us to determine the total number of users who were referred to us via AdWords ads, i.e., to determine the success or failure of each AdWords ad and to optimize our AdWords ads for the future. Neither our company nor other Google AdWords advertisers receive information from Google that could identify you.

Through the conversion cookie, personal information, such as the websites you visit, is stored. Every time you visit our websites, personal data, including the IP address of your internet connection, is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may transfer this personal data collected through the technical procedure to third parties.

You can prevent the setting of cookies by our website, as already explained above, by adjusting the settings of the used internet browser, and thus permanently object to the setting of cookies. Such a setting of the used internet browser would also prevent Google from setting a conversion cookie on your IT system. In addition, a cookie set by Google AdWords can be deleted at any time via the internet browser or other software programs.

Furthermore, you have the option to object to interest-based advertising by Google. To do this, you must access the link www.google.de/settings/ads from each internet browser you use and make the desired settings there.

Further information and Google's applicable data protection regulations can be found at https://www.google.de/intl/en/policies/privacy/.

(5) Facebook Linking

We have integrated a link to the Facebook platform on this website. Facebook allows users of the social network, among other things, to create private profiles, upload photos, and network through friend requests.

The operating company of Facebook is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. If you live outside the USA or Canada, the data controller for processing personal data is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Once you use the Facebook link, your browser will be redirected from our web offering to the Facebook platform. Facebook will remember which of our sub-pages you switched to our Facebook fan page. If you are logged into Facebook at the same time, Facebook will link your profile to our company website and remember it. This will also happen if you are logged into Facebook without leaving our website via a link.

If you do not want this information to be transmitted to Facebook, you can prevent the transmission by logging out of your Facebook account before accessing our website.

An overview of all Facebook plug-ins can be accessed at https://developers.facebook.com/docs/plugins/?locale=en_EN. Through this technical procedure, Facebook receives knowledge about which specific sub-page of our website you visited.

The data policy published by Facebook, available at https://en-gb.facebook.com/about/privacy/, provides information about Facebook's collection, processing, and use of personal data. In addition, it explains what settings Facebook offers to protect your privacy. Various applications are also available to prevent data transmission to Facebook. You can use these applications to prevent data transmission to Facebook.

Facebook collects so-called Insights data from every Facebook user. We do not use this data in any way for analysis or evaluations. Unfortunately, we cannot prevent Facebook from collecting this data.

The use of the Facebook link is based on Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in as extensive visibility as possible in social media.

(6) YouTube

We have integrated components from YouTube on this website. YouTube is an internet video portal that allows video publishers (us) to upload video clips for free and other users to watch, rate, and comment on them for free. YouTube allows the publication of all types of videos, which is why both complete films and TV shows, as well as music videos, trailers, or videos created by users, can be accessed via the internet portal.

The operating company of YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

With each visit to one of the individual pages of this website, which is operated by us and on which a YouTube component (YouTube video) has been integrated, the internet browser on your IT system is automatically prompted by the respective YouTube component to download a representation of the corresponding YouTube component from YouTube. Further information about YouTube can be obtained at https://www.youtube.com/yt/about/. In the course of this technical procedure, YouTube and Google are informed about which specific sub-page of our website you visited.

If you are logged into YouTube at the same time, YouTube recognizes which specific sub-page of our website you visit when you call up a sub-page containing a YouTube video. This information is collected by YouTube and Google and assigned to your respective YouTube account.

YouTube and Google receive information via the YouTube component whenever you visit our website and are logged into YouTube simultaneously; this occurs regardless of whether you click on a YouTube video or not.

If you do not want this information to be transmitted to YouTube and Google, you can prevent it by logging out of your YouTube account before accessing our website.

The privacy policy published by YouTube, which is available at https://www.google.de/intl/en/policies/privacy/, provides information about the collection, processing, and use of personal data by YouTube and Google.

(7) Instagram

We have integrated components of the Instagram service on this website. Instagram is a service that can be qualified as an audiovisual platform and allows you to share photos and videos and further disseminate such data on other social networks.

The operating company of Instagram's services is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Whenever you access one of the individual pages of this website that we operate and on which an Instagram component (Insta-Button) has been integrated, the internet browser on your IT system is automatically prompted by the respective Instagram component to download a representation of the corresponding component from Instagram. In the course of this technical procedure, Instagram is informed about which specific sub-page of our website you visited.

If you are logged into Instagram simultaneously, Instagram recognizes which specific sub-page of our website you visit with each call to our website and for the duration of your stay on our website. This information is collected by the Instagram component and assigned to your Instagram account by Instagram. If you press one of the Instagram buttons integrated on our website, the data and information transmitted will be assigned to your personal Instagram user account and stored and processed by Instagram.

Instagram receives information via the Instagram component whenever you visit our website and are logged into Instagram simultaneously; this occurs regardless of whether you click on the Instagram component or not. If you do not want this information to be transmitted to Instagram, you can prevent it by logging out of your Instagram account before accessing our website.

Further information and Instagram's applicable privacy policies can be found at https://help.instagram.com/155833707900388 and https://www.instagram.com/about/legal/privacy/.

(8) Online Shop on Our Website

Description, Purpose, and Legal Basis
You have the option of registering for our online shop on our website by providing personal data. The personal data transmitted to us is determined by the respective input mask used for registration. The personal data you enter will be collected and stored solely for internal use by us and for contractual purposes. The data processing is, therefore, based on Art. 6 para. 1 lit. b GDPR for contract fulfillment.

We may pass on your personal data to one or more processors, such as a parcel service provider like DHL, who will use your data exclusively for contract processing.

When you register in our online shop, the IP address assigned by your internet service provider (ISP), the date, and the time of registration are also stored. This data is stored because it is the only way to prevent misuse of our services, and this data allows us to investigate any criminal offenses that may have been committed. In this respect, storing this data is necessary for our protection. As a general rule, this data will not be passed on to third parties unless there is a legal obligation to do so or the transfer serves the purpose of criminal prosecution.

If you provide voluntary personal data during registration, this data will be used to offer you content or services that can only be offered to registered users due to the nature of the matter. Data processing will then be based on your consent according to Art. 6 para. 1 lit. a GDPR. You have the option to change or completely delete the personal data you provided at any time from our data inventory.

To optimize our online offering for you, we have a legitimate interest in passing on your personal data to third parties. This is done based on Art. 6 para. 1 lit. f GDPR.

For the processing of your commercial and tax requirements, Art. 6 para. 1 lit. c GDPR serves as the legal basis.

We are happy to inform you upon request which personal data we have stored about you. Furthermore, we will correct or delete your personal data upon your request or notice, provided that no legal retention obligations prevent your request. You are welcome to contact our staff for this purpose.

We store your personal data as long as necessary to achieve the purpose. The purpose is fulfilled once the contract has been fully executed. Even after full execution, it may be necessary to store your personal data. This is the case to comply with contractual or legal obligations. Due to commercial and tax regulations, we are obliged to store your address, payment, and order data for a period of 10 years.

You have the right to object to the processing of your personal data based on our legitimate interest at any time. To do so, you can contact us by email or another means of contact. However, please note that contractual or legal retention periods may conflict with the restriction or deletion of your personal data.

Recipients
We pass on your data to the appropriate payment service providers for payment processing. These are listed below:

User Account
To place orders via our online shop, you can set up a password-protected user account. This account includes an overview of your orders and active orders. If you leave the online shop, you will be automatically logged out.

Please ensure that you choose a sufficiently secure password, as we cannot be held liable for password misuse unless we caused it ourselves.

If you do not wish to create a user account, you can place an order as a guest at any time.

Ordering Process
When you place an order, the personal data necessary for this purpose will be processed. This usually includes your first name, last name, address, payment data if applicable, and email address. This data will also be collected if you only place an order as a guest, as it is necessary to process the contract. This data may also be passed on to third-party service providers for delivery or order processing. After the contract has been processed, your personal data will be deleted unless it is no longer necessary or a contractual or legal retention period prevents deletion.

JTL
To operate our online shop, we use the e-commerce solution from JTL. JTL sets cookies to provide the basic functions of the shop. If you have completely disabled cookies in your browser, the shop may not function properly.

In this context, it may happen that information from you is passed on to the service provider behind this software as part of the shop's use. The provider is JTL-Software-GmbH, Rheinstr. 7, 41836 Hückelhoven. We have complied with our data protection obligations towards you with JTL and have signed a corresponding data processing agreement. The privacy policy of JTL can be found at https://www.jtl-software.de/datenschutz.

b) Contact / Inquiries / Newsletter

Below we describe the options for contacting the employees of our company.

Contact Form / Inquiry Form
If you send us inquiries via the contact/inquiry form, your details from the inquiry form, including the contact data you provided there, will be stored by us for the purpose of processing the inquiry, creating a non-binding offer, and for follow-up questions. We will not pass on this data without your consent.

The processing of the data entered in the contact form is therefore initially based on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time. A simple notification by email to us is sufficient. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation. In further correspondence, the legality may change (e.g., if you request an offer), and your data will then be processed according to Art. 6 para. 1 lit. b GDPR.

The data you enter in the contact form will remain with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies (e.g., after your inquiry has been processed). Mandatory legal provisions - especially retention periods - remain unaffected.

Email / Phone Inquiry
If you send us inquiries via email, your details from the email, including the contact data you provided there, will be stored by us for processing the inquiry and for follow-up questions. We will not pass on this data without your consent.

The processing of the data entered in the email is therefore based on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time. A simple notification by email to us is sufficient. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation. In further correspondence, the legality may change (e.g., if it is business correspondence), and your data will then be processed according to Art. 6 para. 1 lit. b GDPR.

The data you enter in the email will remain with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies (e.g., after your inquiry has been processed). Mandatory legal provisions - especially retention periods - remain unaffected.

Newsletter
On our website, you are given the opportunity to subscribe to our company's newsletter. The personal data transmitted to us when subscribing to the newsletter is determined by the input mask used for this purpose.

Photo & Event C.S. GmbH & Co. KG regularly informs its customers, business partners, and interested parties about the company's offers via a newsletter. The newsletter of our company can only be received by you if (1) you have a valid email address and (2) you register for the newsletter mailing. A confirmation email will be sent to the email address you first entered for the newsletter mailing for legal reasons in the double-opt-in procedure. This confirmation email is used to verify whether you, as the owner of the email address, have authorized the receipt of the newsletter.

When you register for the newsletter, we also store the IP address assigned by your internet service provider (ISP) to the computer system you used at the time of registration and the date and time of registration. The collection of this data is necessary to trace the (possible) misuse of an email address at a later date and therefore serves our legal protection.

The personal data collected as part of a newsletter subscription will only be used to send our newsletter. Newsletter subscribers may also be informed by email if this is necessary for the operation of the newsletter service or a related registration, as may be the case in the event of changes to the newsletter offering or changes in technical conditions. No personal data collected as part of the newsletter service will be passed on to third parties. The subscription to our newsletter can be canceled by you at any time. The consent to the storage of personal data that you have given us for the newsletter mailing can be revoked at any time. A corresponding link is included in every newsletter for the purpose of revoking consent. Furthermore, there is the option to unsubscribe from the newsletter mailing directly on our website or to inform us of this in another way at any time.

The use of the newsletter is based on Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in providing our customers, business partners, and interested parties with as much information as possible about our products and services.

Newsletter Tracking
The newsletters of Photo & Event C.S. GmbH & Co. KG contain so-called tracking pixels. A tracking pixel is a miniature graphic embedded in such emails that are sent in HTML format to enable log file recording and log file analysis. This allows for a statistical evaluation of the success or failure of online marketing campaigns. Based on the embedded tracking pixel, Photo & Event C.S. GmbH & Co. KG can see whether and when an email was opened by you and which links in the email were clicked on by you.

Personal data collected via the tracking pixels contained in the newsletters is stored and evaluated by us to optimize the newsletter mailing and better adapt the content of future newsletters to your interests. This personal data will not be passed on to third parties. You are entitled to revoke the separate consent given via the double-opt-in procedure at any time. After revocation, this personal data will be deleted by us. Photo & Event C.S. GmbH & Co. KG automatically interprets an unsubscribe from the receipt of the newsletter as a revocation.

The use of newsletter tracking is based on Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in providing our customers, business partners, and interested parties with as much information as possible about our products and services and in understanding which of our services have generated the most interest.

c) Data Processing to Fulfill Contracts

If you have entered into a business relationship with our company, e.g., you have placed an order with us, data processing is based on Art. 6 para. 1 lit. b GDPR. All data necessary to initiate, fulfill, or complete this order, such as contact data, object data, service providers involved, photo documentation, plans, orders for goods, etc., may be collected and processed by us without separate consent.

Should it be necessary to involve a subcontractor (e.g., other IT service providers, specialized software suppliers) to fulfill the contract with you, we may also pass on your data to this subcontractor. We guarantee that we have obligated our subcontractors to the same strict data protection requirements that you can expect from us.

In individual cases, it may happen that we request a credit report to initiate an order. If the data obtained in this process leads to consequences for the order, we will discuss this separately with you.

The data associated with orders is subject to various retention periods. For example, general business correspondence must be kept for 6 years, and tax-related records must be kept for 10 years. We will only pass on your data within our company to the extent necessary, as justified by the subject matter of the order.

Payment Method: Prepayment/Bank Transfer

In the case of prepayment, you will receive an invoice in advance. Once this has been transferred by you to the specified bank account, we will immediately ship the ordered items. The transfer process usually takes 2-4 business days, depending on the financial institutions. Please note that from February 1, 2014, transfers can only be made with IBAN and BIC due to European regulations. You no longer need to enter the recipient's bank code and account number on the transfer form, but instead, the specified IBAN and BIC.

Payment Method: PayPal

We have integrated components of PayPal on this website. PayPal is an online payment service provider. Payments are processed via so-called PayPal accounts, which represent virtual private or business accounts. In addition, PayPal offers the option of processing virtual payments via credit cards if a user does not have a PayPal account. A PayPal account is managed via an email address, which means that there is no classic account number. PayPal makes it possible to trigger online payments to third parties or receive payments. PayPal also takes on trustee functions and offers buyer protection services.

The European operating company of PayPal is PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg.

If you select "PayPal" as the payment option during the ordering process in our online shop, your data will be automatically transmitted to PayPal. By selecting this payment option, you consent to the transmission of the personal data required for payment processing.

The personal data transmitted to PayPal is usually first name, last name, address, email address, IP address, phone number, mobile phone number, or other data necessary for payment processing. Personal data related to the respective order is also required to process the purchase contract.

The transmission of data is for payment processing and fraud prevention. We will transmit personal data to PayPal, particularly if there is a legitimate interest in the transmission. The personal data exchanged between PayPal and us may be transferred by PayPal to credit reporting agencies. This transmission is intended to verify identity and creditworthiness.

PayPal may disclose the personal data to affiliated companies and service providers or subcontractors, as necessary to fulfill contractual obligations or process the data on behalf.

You can revoke your consent to the handling of personal data at any time vis-à-vis PayPal. However, a revocation does not affect personal data that must be processed, used, or transmitted necessarily (contractually) for payment processing.

The applicable privacy policy of PayPal can be found at https://www.paypal.com/en/webapps/mpp/ua/privacy-full.

Payment Methods: Credit Card and Apple Pay

For payment, the external payment service provider Mollie (Mollie B.V, Keizersgracht 313, 1016 EE Amsterdam, Netherlands) is used on the website. The following payment methods are processed via Mollie:

When you make the payment, the payment data you enter will be transmitted to both Mollie and the payment provider you choose. In this process, personal data (your payment data, e.g., account or credit card number, IP address, browser and device type, if applicable, first and last name, if applicable, address data, if applicable, information about the ordered product) will be processed by Mollie. The processing is for payment processing. Depending on the chosen payment method, the data may be transmitted to the respective payment service provider (Apple Pay, Mastercard, Visa, American Express) to the extent necessary. The transmission of your data to Mollie is based on Art. 6 para. 1 lit. a GDPR (consent) and Art. 6 para. 1 lit. b GDPR (processing for the performance of a contract).

You have the option to revoke your consent to data processing at any time. A revocation does not affect the effectiveness of past data processing operations.

For payment transactions, the terms and conditions and privacy notices of the respective payment service providers apply, which are also accessible within the respective websites or transaction applications. We also refer you to these for further information and the assertion of rights to revocation, access, and other data subject rights. Details on payment via the payment service provider Mollie can be found at the following link: https://www.mollie.com/en/privacy.

5) Protection / Encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries you send to us as the site operator. You can recognize an encrypted connection by changing the browser's address line from "http://" to "https://" and the lock symbol in your browser line.

When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

6) Profiling

As a responsible company, we do not use automatic decision-making or profiling.

7) Currency / Status

This privacy policy is dated July 2024 and is subject to continuous revision and adaptation to new legal frameworks and technical developments.