Privacy Policy
for www.photo-bestdiscount.eu
Provider and
responsible body
Provider of the under https://www.photo-bestdiscount.eu
Photo service and person responsible in terms of the General Data Protection Regulation
(GDPR), others applicable in the member states of the European Union
Data protection laws and other provisions with data protection law
Character is:
PHOTO BESTDISCOUNT powered by
pixyfoto GmbH
Georg-Kaindl-Str. 7
DE-83624 Otterfing
Managing Director: Michael Weinhart
Register no.: HRB 49168 Munich District Court
VAT ID: DE129436911
E-Mail: service@www.photo-bestdiscount.eu
Web: www.photo-bestdiscount.eu
hereinafter "photo-bestdiscount"
Data protection officer
The data protection officer for processing
Responsible is:
Cornelia Lintow, c / o pixyfoto GmbH
Data protection officer
Georg-Kaindl-St. 7, 83624
Otterfing
E-Mail: datenschutz@pixyfoto.eu
Affected persons can deal with questions and
Contact the data protection officer at any time with suggestions on data protection.
Privacy Policy
The protection of your data is very important to us. Therefore
we would like to inform you below which data we use for which purposes
to process.
§ 1
Definitions
Our privacy policy is based on the
Terms used by the General Data Protection Regulation (GDPR)
were. First of all we want to explain the terminology used.
We use in this data protection declaration under
other terms:
personal data: are all information,
which refers to an identified or identifiable natural person (im
Hereinafter referred to as "data subject"). A
natural person, directly or indirectly, in particular by means of
Assignment to an identifier such as a name, to an identification number, to
Location data, an online identifier or one or more special ones
Traits that express physical, physiological, genetic,
psychological, economic, cultural or social identity of these
natural person can be identified.
processing is everyone with or without help
automated process or any such series of processes in
Connection with personal data such as the collection, the recording, the
Organization, arranging, storing, adapting or changing, that
Reading, querying, use, disclosure by transmission,
Dissemination or any other form of provision, comparison or linking,
the restriction, deletion or destruction.
processing restriction is the
Marking of stored personal data with the aim of their future
Restrict processing.
pseudonymization is the processing of personal data
Data in a way in which the personal data without consulting
additional information no longer of a specific data subject
can be assigned, provided this additional information is separate
are kept and are subject to technical and organizational measures,
which ensure that the personal data is not an identified one
or identifiable natural person.
controller or controller
is the natural or legal person, authority, institution or other
Body who, alone or jointly with others, about the purposes and means of
Processing of personal data is decisive.
processor is a natural or
legal entity or other body that provides personal data on behalf of
processed by the person responsible.
recipient is a natural or legal
Person or other body to whom personal data are disclosed,
regardless of whether it is a third party or not.
third party is natural or legal
Person, authority, institution or other body apart from the data subject,
the person responsible, the processor and the persons under the
direct responsibility of the person responsible or the processor
are authorized to process the personal data.
Consent is each of the data subjects
voluntarily for the specific case in an informed manner and unambiguously
Declaration of intent given in the form of a declaration or other
clear affirmative act by which the data subject can understand
there that they are involved with the processing of their personal
Data agrees.
§ 2
Collection of general data
and information when visiting the website
When visiting the website www.photo-bestdiscount.eu
We only collect and use personal user data to the extent that this is possible
to provide a functional website, as well as the
the content presented and the services offered is required.
Every time you access websites and applications
general data and information through the respective internet browser of
The device you are using is sent to the website / application server
and temporarily stored in log files, the so-called log files. Detected
the (1) browser types and versions used, (2) the from
operating system used by the accessing system, (3) the website, by
which an accessing system reaches our website (so-called
Referrer), (4) the sub-websites that are accessed via an accessing system
our website, (5) the date and time of a
Access to the website, (6) an internet protocol address
(IP address), (7) the Internet service provider of the accessing system and
(8) other similar data and information that the security in the event
of attacks on our information technology systems.
Here we or our hosting provider process
Inventory data, contact data, content data, contract data, usage data, meta
and communication data from customers, prospects and visitors to this
Online offer based on our legitimate interests in a
efficient and secure provision of this online offer acc. Art.
6 para. 1 lit. f GDPR in conjunction with Art. 28 GDPR. The ones we used
Hosting services are used to provide the following services:
Infrastructure and platform services, computing capacity, storage space
and database services, sending e-mails, security services and technical
Maintenance services that we provide for the purpose of operating our online offer
insert.
We have one with our hosting service provider
Order processing contract concluded.
When using these general data and
We do not draw any conclusions about the data subject. This
Rather, information is needed to (1) view the content of our
To deliver the website correctly, (2) the content of our website and
optimize the advertising for them, (3) the long-term functionality
of our information technology systems and the technology of our
Website and (4) law enforcement agencies in the event
the information necessary for law enforcement in the event of a cyber attack
to provide. These anonymously collected data and information are used by
therefore evaluated statistically on the one hand and also with the aim of the
To increase data protection and data security in our company
Ultimately, an optimal level of protection for those processed by us
to ensure personal data. The anonymous data in the server log files
are given separately from all by a data subject
personal data stored and after the aforementioned purposes have been achieved
automatically deleted.
§ 3
Cookies
Our website / applications use cookies.
Cookies are text files that are saved on an internet browser
Computer system filed and saved.
Numerous websites and servers use cookies.
Many cookies contain a so-called cookie ID. A cookie ID is a
unique identifier of the cookie. It consists of a string, through
which internet pages and servers are assigned to the specific internet browser
in which the cookie was saved. This enables the
visited websites and servers, the individual browser of the affected
Person from other Internet browsers that contain other cookies
distinguish. A specific internet browser can use the unique
Cookie ID can be recognized and identified.
Through the use of cookies, we can provide users
provide more user-friendly services on this website that would not work without the
It would not be possible to set cookies. Using a cookie, the
Information and offers on our website for the benefit of the user
be optimized. Cookies enable us, the users of our website
to recognize. The purpose of this recognition is to give users the
To facilitate the use of our website. The user of a
For example, a website that uses cookies does not have to be used by everyone
If you visit the website again, enter your access data because this is from the
Website and the cookie stored on the user's computer system
is accepted.
For the implementation of photo orders and the
The shopping cart function is session cookies for maintenance and assignment
the client connection to the application server and for session assignment
absolutely necessary within the application server. Another session
The cookie is set by the brute force protection used.
The data subject can prevent the setting of cookies
through our website at any time by means of a corresponding setting
of the internet browser used and thus the setting of cookies
permanently contradict. Furthermore, cookies that have already been set can be used at any time
an Internet browser or other software program. This is
possible in all common internet browsers. Deactivates the data subject
the setting of cookies in the internet browser used may be
not all functions of our website can be used in full,
in particular, customer accounts and orders for photo products are not included
possible.
The legal basis for this is Art. 6 Para. 1 lit b, c and
f GDPR.
Details on the type, name, function and storage period of the
Cookies used are under www.photo-bestdiscount.eu/cookies . php
listed.
§ 4
Use of the services offered at www.photo-bestdiscount.eu
If you go to www.photo-bestdiscount.eu order photo products
and / or create a customer account, we process the reasons for
Implementation and termination of the contractual relationship with you
Data based on Art. 6 Para. 1 lit b GDPR.
Ordering photo products: The items listed under www.photo-bestdiscount.eu
Services offered enable the customer to place orders
of the customer's own image data uploaded by the customer in the course of the order
to trigger at the provider, who with this image data the photo products / contract products selected by the customer
produced by the production service provider used and against payment
of the specified purchase price using the specified
Payment methods by shipping service providers to the delivery address specified by the customer
delivers.
is a prerequisite for using the ordering option
the specification of the address data of the customer [customer data] (first name, surname, street,
Zip code, city, country, email address), an optional different one
Delivery address (first name, surname, possibly company, street, zip code, city, country),
Specification of the payment data as well as selection and upload of the production
required image data by the customer.
The processing of this data takes place for the fulfillment
a contract with the customer on the basis of Art. 6 Para. 1 lit b GDPR
and due to tax regulations on the basis of Art. 6 Para. 1 lit c
GDPR. The basis for saving the email address is also Art. 6 Para. 1
lit c GDPR, as we are obliged by law to
To send the customer an electronic order confirmation.
In addition to this data, we process the
Contract billing and payment data. If the customer chooses PayPal as the payment method
or PayPal Plus, the following provisions also apply to
PayPal / PayPal Plus. In addition to the
Customer data also the payment-relevant data (credit institution, IBAN, BIC,
Credit card number) is collected, stored and processed. The provider processes
Payment data using the payment service provider used (e.g. bank,
other credit institute, PayPal) to process the payment process, if
this is necessary for the proper performance of the contract.
The payment service provider involved is PayPal (Europe) S.à.rl & amp; Cie.
SCA, 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg. (see also § 11)
The data transfer of the data entered by the customer
personal data to the provider sets an existing
Internet connection (LAN / WLAN or mobile data connection) is required. The
Data transmission is SSL-encrypted.
As an existing customer of our online shop, you will receive
Product recommendations from us by email. You will receive these product recommendations
from us regardless of whether you have subscribed to a newsletter. Here
we will use the e-mail address you provided during the purchase
Promotion of own goods and / or services that are similar to those
that you have purchased from us on the basis of an order that you have already placed.
The legal basis for this data processing is Art. 6 Para. 1 lit f GDPR. you
can make these product recommendations at any time with future effect
Email to datenschutz@pixyfoto.eu or via the
Object to the unsubscribe function at the end of the product recommendation e-mail without
You - with the exception of any transmission costs - incur costs.
§ 5
Optional attachment of a
Customer accounts / saving of projects
If the customer creates a customer account, the
specified address data for managing the customer account. The in
Mandatory information required for setting up a customer account (first name,
Name, street, zip code, city, country, email address, payment details if applicable)
on the basis of Art. 6 Para. 1 lit. b GDPR for the purpose of providing the
User accounts and processed for the performance of the contract. The customer account details are
stored until the customer deletes it or the provider deletes it
commissioned.
Customers can have information relevant to their
User account are relevant, such as technical changes, by email
be informed. If customers have canceled their customer account, their
Data with regard to the customer account, subject to existing legal
(commercial or tax law) retention obligations, deleted.
If the customer has created a customer account, the
Customer data after logging in to carry out further orders
Available. The customer can also view his order history.
§ 6
Business-related processing /
Order processing
We process the data of our contractual partners,
Client, customer (uniformly referred to as "contractual partner")
in accordance with Art. 6 Para. 1 lit. b GDPR in order to provide you with our contractual
or to provide pre-contractual services. The data processed here,
the type, scope and purpose and necessity of their processing,
are determined by the underlying contractual relationship.
The processed data includes
the master data of our contractual partners (e.g. names and addresses), contact details
(e.g. e-mail addresses and telephone numbers) as well as contract data (e.g., in claim
Services taken, contents of the contract, contractual communication, names of
Contact persons), image data and payment data (e.g., bank details,
Payment history).
We process the data
our customers as part of the ordering process to give them the choice and the
Order the selected products and services, as well as their payment and delivery,
or to enable execution. The processed data includes
Inventory data, communication data, contract data, image data and payment data.
The persons affected by the processing include our customers,
Interested parties and other business partners. The processing takes place for the purpose
the provision of contractual services in the context of order processing,
Production, billing, delivery and customer services. Here we bet
Session cookies for storing the contents of the shopping cart and cookies for the
Storage of the login status.
Special categories of personal data
We generally do not process, unless this is part of a
are commissioned or contractual processing.
§ 7
Newsletter
We offer interested parties a subscription to a newsletter
of our company. Here we inform our customers / subscribers in
at regular intervals about offers from the company. The newsletter of our
The company can generally only receive from the data subject
if (1) the data subject has a valid e-mail address
and (2) the data subject registers to receive the newsletter. On
those registered for the first time for the newsletter dispatch by a data subject
For legal reasons, a confirmation email will be sent to the email address
Double opt-in procedure sent. This confirmation email is used for
Verification of whether the owner of the email address is the data subject
Has authorized receipt of the newsletter. The registrations for the newsletter are
logged to the registration process according to legal requirements
to be able to prove. This includes the storage of the registration and the
Confirmation time, as well as the IP address.
Registration data: To register for the newsletter,
it is sufficient to provide your e-mail address. Optionally we ask you
to provide a name for the purpose of addressing you personally in the newsletter.
We also save when you register for the newsletter
the IP address assigned by the Internet Service Provider (ISP) to the
affected person at the time of registration
as well as the date and time of registration. The collection of this data is
required to avoid the (possible) misuse of the email address of a data subject
To be able to understand the person at a later point in time and therefore serves
the legal protection of the person responsible for the processing.
The
personal data will only be used to send our newsletter
used. Furthermore, subscribers to the newsletter could be informed by email
if this is necessary for the operation of the newsletter service or a
relevant registration is required, as in the case of changes
on the newsletter offer or when the technical conditions of the
Could be case. There is no disclosure of the
Newsletter service to third parties. Subscription
Our newsletter can be canceled by the data subject at any time
will. The consent to the storage of personal data that the
The data subject has given us the right to send the newsletter at any time
be revoked. For the purpose of withdrawing consent, see
a corresponding link for each newsletter. There is also the possibility to
at any time directly on the website for processing
To unsubscribe the person responsible from sending the newsletter or to do so for the
To notify the controller in another way.
The dispatch of the newsletter and the associated with it
Success measurement is based on the consent of the recipient in accordance with
Art. 6 para. 1 lit. a, Art. 7 GDPR in conjunction with Section 7 Paragraph 2 No. 3 UWG or if a
Consent is not required based on our legitimate
Interests in direct marketing acc. Art. 6 para. 1 according to f. GDPR in conjunction with Section 7 Paragraph 3
UWG (in Austria: § 107 Abs. 2, 3 TKG)
The registration procedure is logged on
Basis of our legitimate interests acc. Art. 6 para. 1 lit. f GDPR.
Newsletter dispatch via rapidmail: The dispatch
the newsletter is sent by the dispatch service provider rapidmail GmbH, Wentzingerstraße, 21, 79106 Freiburg, Germany. The privacy policy
of the shipping service provider can be viewed here: https://www.rapidmail.de/datensicherheit .
The shipping service provider is based on our legitimate interests
according to Art. 6 para. 1 lit. f. GDPR and an order processing contract acc.
Art. 28 para. 3 sentence 1 GDPR used. The shipping service provider can send the data
the recipient in pseudonymous form, ie without assignment to a user, to
Use optimization or improvement of your own services, e.g. for technical
Optimizing the dispatch and presentation of the newsletter or for
use statistical purposes. The shipping service provider uses the data of our
Newsletter recipients, however, do not want to write to them themselves or to receive the
Passing on data to third parties.
Newsletter tracking pixels: The newsletters contain
so-called tracking pixels. A tracking pixel is a miniature graphic that is included in such
E-Mails are embedded, which are sent in HTML format to a
To enable log file recording and a log file analysis. This can
a statistical evaluation of the success or failure of
Online marketing campaigns are carried out. Using the embedded
We can recognize tracking pixels whether and when an e-mail is received from an affected person
Person was opened and which links in the e-mail from the
affected person.
Those about those contained in the newsletters
Personal data collected by tracking pixels are used by the
Processing controller stored and evaluated in order to the
Optimizing newsletter dispatch and the content of future newsletters
better match the interests of the data subject. This
personal data will not be passed on to third parties. Affected
Persons are entitled at any time to request the relevant separate, via the
Revoke the declaration of consent given in the double opt-in procedure. To
If you withdraw your consent, this personal data will be used by the company for processing
Responsible deleted. We mean that you have unsubscribed from receiving the newsletter
automatically as a revocation.
§ 8
Contact via the
Website
Our website contains due to legal
Regulations information that allows quick electronic contact
enable our company and direct communication with us,
which is also a general address of the so-called electronic mail
(Email address). If a data subject is sent via email or via
a contact form provides contact with the person responsible for processing
receives the personal data transmitted by the data subject
Data saved automatically. Such on a voluntary basis from one
data subject transmitted to the person responsible for processing
personal data are used for processing or
Contact to the data subject is saved. There is no disclosure
this personal data to third parties.
When contacting us (e.g. by
Contact form, email, phone or via social media) the information
of the user to process the contact request and its processing acc. Art. 6
Paragraph 1 lit. b. (within the framework of contractual / pre-contractual relationships), Art. 6
Paragraph 1 lit. f. (other requests) GDPR processed. The information provided by the user
can in a customer relationship management system (& quot; CRM
System & quot;) or comparable request organization.
We delete the inquiries if they are no longer
required are. We review the requirement every two years; Further
the statutory archiving obligations apply.
§ 9 # Use of Script Libraries (Google Webfonts)
In order to ensure that our content is correct and
We use it on this website to represent it in a graphically appealing manner
Script libraries and font libraries such as B. Google Web Fonts
(https://www.google.com/webfonts/). Google web fonts are used to avoid this
multiple loads in the cache of your browser. If the browser supports the
Google does not support web fonts or prevents access to content
displayed in a standard font. Calling script libraries or
Font libraries automatically releases a connection to the operator of the
Library off. For this purpose, the browser you are using
Connect to the Google servers. This gives Google
Knowledge that our website was accessed via your IP address.
The use of Google Web Fonts is in the interest of a uniform and
appealing presentation of our online offers. This represents a legitimate
Interest within the meaning of Art. 6 Para. 1 lit. f GDPR.
If your browser does not support web fonts, a
Standard font used by your computer. More information on Google Web
You can find fonts at https://developers.google.com/fonts/faq and in the
Google's privacy policy: https://www.google.com/policies/privacy/.
§ 10
Privacy Policy for use
of Google Analytics
As far as you have given your consent, will be on
This website uses Google Analytics, a web analysis service from Google
LLC. The responsible service provider in the EU is Google Ireland Limited,
Gordon House, Barrow Street, Dublin 4, Ireland ("Google").
Scope of processing: Google Analytics used
Cookies that analyze your use of our website
enable. The information collected by the cookies about your
Use of this website is usually sent to a Google server
Transferred to the USA and stored there.
We use the user ID function. With the help of the User ID
we have one or more sessions (and the activities within them
Sessions) assign a unique, permanent ID and user behavior
Analyze across devices.
We use Google signals. This will be in Google
Analytics collects additional information about users, the personalized
Have ads enabled (interests and demographics) and ads
can be used in cross-device remarketing campaigns to these users
will be delivered.
We use the 'anonymizeIP' function (so-called.
IP masking): Due to the activation of IP anonymization on this website
Your IP address will be used by Google within member states of the European
Union or in other contracting states of the Agreement on the European
Economic area shortened. The full IP address will only be sent in exceptional cases
transferred to a Google server in the USA and abbreviated there. The in the frame
IP address transmitted by Google Analytics from your browser is not included
merged with other data from Google.
During your website visit, the following are among others
Data recorded: the pages you have visited, your "click path"; achievement
of "website goals" (conversions, e.g. newsletter registrations, downloads,
Purchases); Your user behavior (e.g. clicks, length of stay,
Bounce rates); Your approximate location (region); Your IP address (in abbreviated
Shape); technical information about your browser and the ones you use
End devices (e.g. language setting, screen resolution); Your internet provider;
the referrer URL (via which website / via which advertising material you accessed this
Website)
Purposes of processing: On behalf of the operator
this website, Google will use this information to store your (pseudonymous
[NOT IF USER ID IS USED]) to evaluate the use of the website and to generate reports
about the website activities. The through Google Analytics
The reports provided are used to analyze the performance of our website and
the success of our marketing campaigns.
Recipient: The recipient of the data is Google Ireland
Limited, Gordon House, Barrow Street, Dublin 4, Ireland as a processor.
For this purpose, we have concluded an order processing contract with Google.
Google LLC, based in California, USA, and possibly US authorities
can access the data stored on Google.
Transmission to third countries: A transmission of
Data in the USA cannot be excluded.
Storage duration: those sent by us and with cookies
linked data is automatically deleted after 14 months. The deletion of
Data whose retention period has expired is automatically sent once in the
Month.
You can also include the
Cookie generated data related to your use of the website (including your
IP address) to Google and the processing of this data by Google
prevent by (a) not giving your consent to the setting of the cookie
grant or (b) the browser add-on to deactivate Google Analytics
download and install. You can also choose to save cookies
prevent this by setting your browser software accordingly. If
You can configure your browser so that all cookies are rejected
however, to the restriction of functionalities on this and other websites
come.
legal basis and revocation option:
The legal basis for this data processing is your consent, Article 6 (1)
S.1 letter a GDPR. You can withdraw your consent at any time with effect for the
Revoke the future by changing the cookie settings [HERE LINK TO THE
SET SETTING OPTIONS OF THE CONSENT TOOL] and there your
Change selection.
More information on Google's terms of use
Analytics and data protection at Google can be found at
https://marketingplatform.google.com/about/analytics/terms/de/ and under
https://policies.google.com/?hl=de.
§ 11
External payment service providers
We use external payment service providers, over
whose platforms the customer and we can carry out payment transactions.
As part of the fulfillment of contracts, we use the
Payment service provider based on Art. 6 Para. 1 lit. b GDPR. in the
We also use external payment service providers based on our
legitimate interests acc. Art. 6 para. 1 lit. f GDPR to make our customers effective
and to offer secure payment options.
PAYPAL / PAYPAL PLUS: Payments are made via
so-called PayPal accounts, the virtual private or
Represent business accounts. PayPal also offers the option of virtual
Process credit card payments if a user does not have a PayPal account
entertains. A PayPal account is managed via an email address, which is why it is
there is no classic account number. PayPal allows online payments
Triggering third parties or receiving payments. PayPal also takes over
Trustee functions and offers buyer protection services.
The European operating company of PayPal is
the PayPal (Europe) S.à.rl & amp; Cie. SCA, 22-24 Boulevard Royal, 2449
Luxembourg, Luxembourg.
Selects the person concerned during the ordering process
"PayPal" as a payment option, data of the
data subject transmitted to PayPal. With the selection of this payment option
the person concerned consents to the payment processing required
Transmission of personal data.
For the personal data transmitted to PayPal
it is usually a first name, last name, address, email address,
IP address, telephone number, cell phone number or other data used for
Payment processing are necessary. Necessary to process the purchase contract
are also personal data in connection with the
respective order.
The purpose of the transmission of the data is
Payment processing and fraud prevention. The one for processing
PayPal becomes responsible for personal data in particular
Submit if there is a legitimate interest in the transmission.
The one between PayPal and the data controller
exchanged personal data will be sent by PayPal under certain circumstances
Credit agencies transmitted. The purpose of this transmission is
Identity and credit checks.
PayPal gives the personal data if necessary
to affiliated companies and service providers or subcontractors,
as far as this is necessary to fulfill the contractual obligations
or the data should be processed in the order.
The data subject has the option of the
Consent to PayPal to handle personal data at any time
to revoke. A revocation does not affect personal data,
which is processed, used or required for (contractual) payment processing
must be transmitted.
The following apply to payment transactions
Terms and conditions and the data protection information of the respective
Payment service providers that operate within the respective websites or
Transaction applications are available. We refer to these as well
for the purpose of further information and assertion of revocation, information and
other data subject rights.
The applicable data protection regulations of PayPal can
at https://www.paypal.com/de/webapps/mpp/ua/privacy-full/
retrieved.
§ 12
Online services / credit check / production
/ Shipping
photo-bestdiscount processes for the execution of the contract,
the data entered by the customer when placing an order /
Customer data (first and last name, email address, payment data and address of the
Customer / possibly different delivery address (es) / IP address, type and number
ordered contract products, desired shipping and payment method), image data
and shipping data based on Art. 6 Para. 1 lit b GDPR according to the
statutory data protection regulations.
photo-bestdiscount checks regularly when contracts are signed and
in certain cases where there is a legitimate interest, also with
Existing customers their creditworthiness. For this we work with the Creditreform Boniversum
GmbH, Hellersbergstraße 11, 41460 Neuss, from which we do this
Get the data you need. For this purpose we transmit your name and yours
Contact details for Creditreform Boniversum GmbH. The information according to Art.
14 of the EU General Data Protection Regulation to the Creditreform Boniversum
GmbH can be found at: www.boniversum.de/EU-DSGVO .
The data protection provisions of Creditreform Boniversum
GmbH can be found at https://www.boniversum.de/datenschutzerklaerung/
The delivery is carried out by used
Shipping service providers such as Deutsche Post (Deutsche Post AG,
Charles-de-Gaulle-Straße 20, 53113 Bonn) or DHL (DHL Paket GmbH, Sträßchensweg
10; 53113 Bonn) on the basis of Art. 6 Para. 1 lit b. GDPR.
The data protection regulations of Deutsche Post AG
can be found under https://www.deutschepost.de/de/f/footer/datenschutz.html ;
those of DHL Paket GmbH under https://www.dhl.de/de/toolbar/footer/datenschutz.html .
§ 13
Legal basis for processing
Art. 6 para. 1 lit. a GDPR serves our company
as the legal basis for processing operations for which we have given consent
obtain for a specific processing purpose.
Is the processing of personal data for
Performance of a contract to which the data subject is a party,
required, as is the case, for example, with processing operations,
those for the delivery of goods or the provision of another service
or consideration is necessary, the processing is based on Art. 6 Para. 1
lit. b GDPR. The same applies to such processing operations for
Implementation of pre-contractual measures are required, for example in cases of
Inquiries about our products or services.
our company is subject to a legal
Obligation through which a processing of personal data
becomes necessary, for example to fulfill tax obligations, so
the processing is based on Art. 6 Para. 1 lit. c GDPR.
In rare cases the processing of
personal data are required to serve the vital interests of
to protect the data subject or another natural person. This would be
for example the case if a visitor is injured in our company
and then his name, his age, his health insurance data or
any other vital information to a doctor, hospital or
other third parties would have to be passed on. Then processing would go on
Art. 6 para. 1 lit. d GDPR.
Ultimately, processing operations could be based on Art. 6 para.
1 lit. f GDPR. Based on this legal basis
Processing operations that are not covered by any of the aforementioned legal bases
if the processing is to safeguard a legitimate interest of our
Company or a third party is required, provided the interests, fundamental rights
and fundamental freedoms of the person concerned do not predominate. Such
Processing operations are particularly permitted because they are carried out by
the European legislator were specifically mentioned. He represented the
Considers that a legitimate interest could be assumed if the
the person concerned is a customer of the responsible party (recital 47 sentence 2
GDPR).
§ 14
Routine deletion and
Blocking of personal data
The person responsible for processing processed
and stores personal data of the data subject only for the
Period of time required to achieve the storage purpose or
if this is done by the European directives and regulations or a
other legislators in laws or regulations which the
Processing is subject to, was provided.
If the storage purpose is omitted or a dated
European directives and regulations or another responsible
The storage period prescribed by the legislator will be the personal
Data is routinely blocked or in accordance with statutory regulations
deleted.
image data transmitted by the customer are only used for
the duration of 14 days is saved then automatically deleted.
§ 15
Security
We have extensive technical and operational
Safeguards are in place to keep your information from accidental or deliberate
Manipulation, loss, destruction or access by unauthorized persons
protect. Our security procedures are regularly monitored by a
Data protection officer checked and technological progress
adapted.
§ 16
Rights of the data subject
Right to confirmation: Any person concerned
has the right, according to the GDPR, of the person responsible for the processing
to request confirmation as to whether they are personal
Data are processed.
Right to information: Any of the processing
of personal data according to the GDPR, the person concerned has the right
free information from the person responsible for the processing at any time
about the personal data stored about him and a copy
to receive this information. Furthermore, the European directives and regulations
granted the data subject access to the following information:
§
the processing purposes
§
the categories of personal data that are processed
§
the recipients or categories of recipients to whom the
personal data has been disclosed or is still being disclosed,
especially for recipients in third countries or international
Organizations
§
If possible, the planned duration for which the personal
Data are stored, or, if this is not possible, the criteria for
the definition of this duration
§
the existence of a right to correct or delete them
relevant personal data or restriction of processing
by the person responsible or a right to object to them
Processing
§
the right to lodge a complaint with a supervisory authority
§
if the personal data is not with the data subject
collected: All available information about the origin of the data
§
the existence of automated decision-making
including profiling according to Article 22 Paragraph 1 and 4 GDPR and - at least in
these cases - meaningful information about the logic involved as well
the scope and intended effects of such processing
for the data subject
§
Furthermore, the data subject has a right to information
whether personal data is sent to a third country or an international one
Organization. If this is the case, the
The data subject also has the right to information about the appropriate
To receive guarantees in connection with the transmission.
Right to rectification: Any of the
Processing of personal data According to the GDPR, the data subject has
Right, the immediate correction of the incorrect ones
to request personal data. Furthermore, the person concerned is entitled to
Right to, taking into account the purposes of processing, the
Completion of incomplete personal data - also by means of a
additional explanation - to request.
Right to delete (right to be forgotten): Any
person affected by the processing of personal data has after
DSGVO the right to demand from the person responsible that the
personal data will be deleted immediately if one of the
the following reasons apply and insofar as the processing is not required:
§
The personal data was collected for such purposes or
processed in any other way for which they are no longer necessary.
§
The data subject withdraws their consent on which
the processing in accordance with Art. 6 Paragraph 1 Letter a GDPR or Art. 9 Paragraph 2
Letter a GDPR was based, and there is no other legal basis
for processing.
§
The data subject objects in accordance with Art. 21 Paragraph 1 GDPR
object to the processing and there are no overriding legitimate reasons
for processing, or the person concerned submits in accordance with Art. 21 Para. 2 GDPR
Objection to the processing.
§
The personal data was processed unlawfully.
§
The deletion of personal data is necessary to fulfill a
legal obligation under Union law or the law of
Member States required to which the controller is subject.
§
The personal data were offered in relation to
Information society services in accordance with Art. 8 Para. 1 GDPR.
Did the personal data of the professional portrait become public
made and our company is responsible according to Art. 17 Para. 1
GDPR obliged to delete personal data, we meet under
Consideration of available technology and implementation costs
reasonable measures, including technical measures, to avoid others for the
Data processing controller who published the
process personal data, to inform that the
data subject from these other data controllers
the deletion of all links to this personal data or copies
or has requested replications of this personal data, insofar as the
Processing is not required.
Right to restriction of processing: Any
person affected by the processing of personal data has after
DSGVO the right to restrict processing by the controller
request if one of the following conditions is met:
§
The accuracy of the personal data is determined by the person concerned
Person denied, and for a period that would allow the person responsible
allows to check the correctness of the personal data.
§
The processing is unlawful, the data subject refuses
the deletion of the personal data and instead requests the
Restriction of the use of personal data.
§
The person responsible needs the personal data for the
Purposes of processing no longer, but the data subject needs them
for the establishment, exercise or defense of legal claims.
§
The data subject has objected to the processing in accordance with.
Art. 21 para. 1 GDPR and it has not yet been determined whether the
legitimate reasons of the person responsible vis-à-vis those of the data subject
predominate.
Right to data portability: Any of the
Processing of personal data According to the GDPR, the data subject has
Right to the personal data concerning you, which by the
data subject have been made available to a controller in one
structured, common and machine-readable format. she has
also the right to transfer this data to another person responsible without hindrance
by the person responsible to whom the personal data was provided,
to be transmitted, provided that the processing is based on the consent pursuant to Art. 6 para.
1 lit a GDPR or Art. 9 Para. 2 lit a GDPR or on a contract in accordance with Art.
6 Para. 1 lit b GDPR and the processing with the help of automated
Procedure takes place, unless the processing is necessary for the performance of a
Task is required which is in the public interest or in exercise
public authority, which was transferred to the person responsible.
Furthermore, when exercising their
Right to data portability in accordance with Art. 20 Paragraph 1 GDPR, the right to
obtain that the personal data are sent directly from a responsible person
be transmitted to another person responsible, as far as this is technical
is feasible and insofar as this does not affect the rights and freedoms of other people
be affected.
Right to object: Any of the processing
personal data affected person has the right according to the GDPR, from
Reasons arising from your particular situation against the
Processing of personal data concerning you, which is based on Art. 6
Para. 1 lit e or f GDPR takes place, to object. This also applies to
Profiling based on these provisions.
We process the personal data in the event
the contradiction no longer, unless we can compelling protection worthy
Provide reasons for the processing that affect the interests, rights and
The freedoms of the data subject prevail, or the processing serves
Assertion, exercise or defense of legal claims.
We process personal data in order to
To operate direct mail, the person concerned has the right at any time
Objection to the processing of personal data for the purpose
to insert such advertising. This also applies to profiling, insofar as it is with
such direct mail is related. If the data subject objects
to us processing for direct marketing purposes, we are the personal
No longer process data for these purposes.
Automated decisions in individual cases
including profiling: Any of the processing of personal data
According to the GDPR, the data subject has the right, not just one
automated processing - including profiling - based
Decision to be subjected to legal effect against her
unfolds or significantly affects them in a similar manner, provided that the
Decision (1) not for entering into or performing a contract
is necessary between the data subject and the person responsible, or
(2) based on Union or Member State legislation to which
the person responsible is subject to, is permissible and these legal provisions
appropriate measures to safeguard rights and freedoms as well as the
contain legitimate interests of the data subject or (3) with
express consent of the data subject is given.
Is the decision (1) for the conclusion or the
Performance of a contract between the data subject and the
Responsible person required or (2) it is done with express
Consent of the data subject, we take appropriate measures to obtain the
Rights and freedoms as well as the legitimate interests of the data subject
to preserve, including at least the right to obtain human intervention
on the part of the person responsible, to express their own point of view and on
Appeal of the decision heard.
»Take automated decisions or profiling
but we don't.
Right to revoke a data protection law
Consent: Anyone affected by the processing of personal data
Person has the right to consent to the processing of personal
Revoke data at any time.
Would the person concerned want one of the in § 15
To assert the above-mentioned concerns or rights, our
Data protection officer at datenschutz@pixyfoto.eu .
You are always free to contact the for you
to contact the competent data protection supervisory authority.
§ 17
Links to other websites
Provider
Our websites may contain links to other websites
Provider included. So much for using the websites of other providers
the collection, processing or use of personal data is associated,
Please note the data protection information of the respective provider.
§ 18
Changes to the
Privacy policy
We reserve the right to change this
Data protection declaration in compliance with the applicable data protection regulations
to change.
Current status is May 2023.
Privacy Policy
for www.photo-bestdiscount.eu
Provider and
responsible body
Provider of the under www.photo-bestdiscount.eu offered photo service and
Responsible within the meaning of the General Data Protection Regulation (GDPR), other in
data protection laws applicable to the member states of the European Union and
other provisions with a data protection character is:
o: p>
PHOTO BESTDISCOUNT powered by o: p>
pixyfoto GmbH o: p>
Postbox 0009
AT-6200 Jenbach
Managing Director: Michael Weinhart
Commercial register: FN267676t Landesgericht Innsbruck
UStID : ATU62884178
E-Mail: service@photo-bestdiscount.eu
WEB: www.photo-bestdiscount.eu
below "photo-bestdiscount"
Data protection officer o: p>
The data protection officer for processing
Responsible is:
Cornelia Lintow , c / o Pixyfoto GmbH o: p> p>
Data Protection Officer
Georg-Kaindl-St.
7, 83624 Otterfing
E-Mail: datenschutz@pixyfoto.eu
Affected persons can deal with questions and
Contact the data protection officer at any time with suggestions on data protection.
Privacy Policy o: p>
The protection of your data is very important to us. Therefore
we would like to inform you below which data we use for which purposes
to process.
§ 1
Definitions
Our privacy policy is based on the
Terms used by the General Data Protection Regulation (GDPR)
were. First of all we want to explain the terminology used.
We use in this data protection declaration under
other terms:
personal
Data: are all information that relates to an identified or
identifiable natural person (hereinafter "data subject").
A natural person who is directly or
indirectly, in particular by means of assignment to an identifier such as a name
an identification number, location data, an online identifier or an or
several special characteristics that express the physical, physiological,
genetic, psychological, economic, cultural or social identity
this natural person can be identified.
processing
is any process carried out with or without the aid of automated processes
or any such series of processes in connection with personal data such as
the collection, the recording, the organization, the ordering, the storage, the
Adaptation or change, the reading out, the querying, the use, the
Disclosure by transmission, dissemination or any other form of
Provisioning, matching or linking, restriction, the
Delete or destroy.
restriction
processing is the marking of stored personal data
with the aim of restricting their future processing.
pseudonymization
is the processing of personal data in a way in which the
personal data without consulting additional information
can be assigned to a specific data subject, provided this
additional information is kept separately and technical and
are subject to organizational measures to ensure that the
personal data not an identified or identifiable
natural person.
responsible
or the controller is the natural or
legal person, authority, agency or other body that alone or
together with others about the purposes and means of processing
personal data is decisive.
processor
is a natural or legal person or other body that is personal
Data processed on behalf of the person responsible.
recipient
is a natural or legal person or other body that is personal
Data is disclosed regardless of whether it is a third party
act or not.
third is
a natural or legal person, authority, institution or other
In addition to the data subject, the person responsible, the
Processors and the persons under direct responsibility
of the person responsible or the processor are authorized to
process personal data.
consent
is each of the data subject voluntarily for the specific case in
informed and unambiguous declaration of intent in the form
a statement or some other unequivocal affirmative act, with
which gives the data subject to understand that they are processing the
I agree to the personal data concerning her.
§ 2
Collection of general data
and information when visiting the website
When visiting the website www.photo-bestdiscount.eu
We only collect and use personal user data to the extent that this is possible
to provide a functional website, as well as the
the content presented and the services offered is required.
Every time you access websites and applications
general data and information through the respective internet browser of
The device you are using is sent to the website / application server
and temporarily stored in log files, the so-called log files.
The (1) browser types and versions used, (2) the
Operating system used by the accessing system, (3) the website, by
which an accessing system reaches our website (so-called Referrer ), (4) the sub-websites that have a
accessing system on our website, (5) the date
and the time of access to the website, (6) a
Internet protocol address (IP address), (7) the Internet service provider of the
accessing system and (8) other similar data and information that the
Defense in the event of attacks on our information technology
Systems serve.
Here we process or our hosting provider
Inventory data, contact data, content data, contract data, usage data, meta
and communication data from customers, prospects and visitors to this
Online offer based on our legitimate interests in a
efficient and secure provision of this online offer acc. Art.
6 para. 1 lit . f GDPR in conjunction with Art. 28 GDPR. The from
The hosting services used by us serve to make them available
the following services: infrastructure and platform services,
Computing capacity, storage space and database services, sending emails,
Security services and technical maintenance services that we use for the purpose
the operation of our online offer.
We have one with our hosting service provider
Order processing contract concluded.
When using these general data and
We do not draw any conclusions about the data subject. This
Rather, information is needed to (1) view the content of our
To deliver the website correctly, (2) the content of our website and
optimize the advertising for them, (3) the long-term functionality
of our information technology systems and the technology of our
Website and (4) law enforcement agencies in the event
the information necessary for law enforcement in the event of a cyber attack
to provide. These anonymously collected data and information are used by
therefore evaluated statistically on the one hand and also with the aim of the
To increase data protection and data security in our company
Ultimately, an optimal level of protection for those processed by us
to ensure personal data. The anonymous data in the server log files
are given separately from all by a data subject
personal data stored and after the aforementioned purposes have been achieved
automatically deleted.
§ 3
Cookies
Our website / applications use cookies.
Cookies are text files that are saved on an internet browser
Computer system filed and saved.
Numerous websites and servers use cookies.
Many cookies contain a so-called cookie ID. A cookie ID is a
unique identifier of the cookie. It consists of a string, through
which internet pages and servers are assigned to the specific internet browser
in which the cookie was saved. This enables the
visited websites and servers, the individual browser of the affected
To distinguish person from other Internet browsers that contain other cookies.
A specific internet browser can be recognized by the unique cookie ID
and identified.
Through the use of cookies, we can provide users
provide more user-friendly services on this website that would not work without the
It would not be possible to set cookies. Using a cookie, the
Information and offers on our website for the benefit of the user
be optimized. Cookies enable us, the users of our website
to recognize. The purpose of this recognition is to give users the
To facilitate the use of our website. The user of a
For example, a website that uses cookies does not have to be used by everyone
If you visit the website again, enter your access data because this is from the
Website and the cookie stored on the user's computer system
is accepted.
For the implementation of photo orders and the
The shopping cart function is session cookies for maintaining and assigning the
Client connection to the Application server and for session assignment
mandatory within the Application server
required. Another session cookie is used by the
Brute force protection set.
The data subject can prevent the setting of cookies
through our website at any time by means of a corresponding setting
of the internet browser used and thus the setting of cookies
permanently contradict. Furthermore, cookies that have already been set can be used at any time
an Internet browser or other software program. This is
possible in all common internet browsers. Deactivates the data subject
the setting of cookies in the internet browser used may be
not all functions of our website can be used in full, in particular
Customer accounts and orders for photo products are not possible.
The legal basis for this is Art. 6 Para. 1 lit b, c and f GDPR.
§ 4
Use of the services offered at www.photo-bestdiscount.eu
If you under www.photo-bestdiscount.eu
If you order photo products and / or create a customer account, we will process them
for the establishment, implementation and termination of the contractual relationship with
The data you require on the basis of Art. 6 Paragraph 1 lit
b GDPR.
Ordering photo products: The items listed under www.photo-bestdiscount.eu
Services offered enable the customer to place orders
of the customer's own image data uploaded by the customer in the course of the order
to trigger at the provider, who with this image data the photo products / contract products selected by the customer
produced by the production service provider used and against payment
of the specified purchase price using the specified
Payment methods by shipping service providers to the delivery address specified by the customer
delivers.
is a prerequisite for using the ordering option
the specification of the address data of the customer [customer data] (first name, surname, street,
Zip code, city, country, email address), an optional different one
Delivery address (first name, surname, possibly company, street, zip code, city, country),
Specification of the payment data as well as selection and upload of the production
required image data by the customer.
The processing of this data takes place for the fulfillment
of a contract with the customer based on Art. 6 Para. 1 lit b GDPR and due to tax regulations
Basis of Art. 6 Para. 1 lit c GDPR. basis for
The storage of the e-mail address is also Article 6 Paragraph 1 lit
c GDPR, as we are obliged by law to
To send the customer an electronic order confirmation.
In addition to this data, we process the
Contract billing and payment data. If the customer chooses PayPal as the payment method
or PayPal Plus, the following provisions also apply to
PayPal / PayPal Plus. In addition to the
Customer data also the payment-relevant data (credit institution, IBAN, BIC,
Credit card number) is collected, stored and processed. The provider processes
Payment data using the payment service provider used (e.g. bank,
other credit institute, PayPal) to process the payment process, if
this is necessary for the proper performance of the contract.
The payment service provider involved is PayPal (Europe) S.à.rl .
& amp; Cie. SCA, 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg. (please refer
also § 11)
The data transfer of the data entered by the customer
personal data to the provider sets an existing
Internet connection (LAN / WLAN or mobile data connection) is required. The
Data transmission is SSL-encrypted.
As an existing customer of our online shop, you will receive
Product recommendations from us by email. You will receive these product recommendations
from us regardless of whether you have subscribed to a newsletter. Here
we will use the e-mail address you provided during the purchase
Promotion of own goods and / or services that are similar to those
that you have purchased from us on the basis of an order that you have already placed.
The legal basis for this data processing is Art. 6 Para. 1 lit f GDPR. You can use these product recommendations
at any time with effect for the future by e-mail to datenschutz@pixyfoto.eu or via the unsubscribe function at the end of the
Object to product recommendation e-mail without you - with exception
any transmission costs - costs arise.
§ 5
Optional attachment of a
Customer accounts / saving of projects
If the customer creates a customer account, the
specified address data for managing the customer account. The in
Mandatory information required for setting up a customer account (first name,
Name, street, zip code, city, country, email address, payment details if applicable)
on the basis of Art. 6 Para. 1 lit . b GDPR
Purposes of providing the user account and for the fulfillment of the contract
processed. The customer account information is saved until the customer deletes it
or instructs the provider to delete it.
Customers can have information relevant to their user account
relevant, such as technical changes, are informed by email.
If customers have canceled their customer account, their data will be used with regard to
the customer account, subject to existing statutory (commercial or
retention obligations under tax law, deleted.
If the customer has created a customer account, the
Customer data after logging in to carry out further orders
Available. The customer can also view his order history.
§ 6
Business-related processing /
Order processing
We process the data of our contractual partners,
Client, customer (uniformly referred to as "contractual partner")
in accordance with Art. 6 Para. 1 lit . b GDPR to you
to provide our contractual or pre-contractual services.
The data processed here, the type, scope and purpose and the
The need for their processing is determined by the underlying
Contractual relationship.
to the processed data
include the master data of our contractual partners (e.g. names and addresses),
Contact details (e.g. e-mail addresses and telephone numbers) and contract data
(e.g., services used, contract content, contractual
Communication, names of contact persons), image data and payment data (e.g., bank details,
Payment history).
We process the data
our customers as part of the ordering process to give them the choice and the
Order the selected products and services, as well as their payment and
To enable delivery or execution. The processed data includes
Inventory data, communication data, contract data, image data and payment data.
The persons affected by the processing include our customers,
Interested parties and other business partners. The processing takes place for the purpose
the provision of contractual services in the context of order processing,
Production, billing, delivery and customer services. Here we bet
Session cookies for storing the contents of the shopping cart and cookies for the
Storage of the login status.
Special categories of personal data
We generally do not process, unless this is part of a
are commissioned or contractual processing.
§ 7
Newsletter
We offer interested parties a subscription to a newsletter
of our company. Here we inform our customers / subscribers in
at regular intervals about offers from the company. The newsletter of our
The company can generally only receive from the data subject
if (1) the data subject has a valid e-mail address
and (2) the data subject opts for the newsletter dispatch
registered. To the person concerned for the first time for the Newsletterversand registered email address is from
For legal reasons, a confirmation email in the double Opt -In procedure
sent. This confirmation email is used to check whether the owner of the
E-mail address authorized to receive the newsletter as the data subject
Has. The registrations for the newsletter are logged for the registration process
to be able to prove according to the legal requirements. Which also includes
the storage of the registration and confirmation time, as well as the
IP address.
Registration data: To register for the newsletter,
it is sufficient to provide your e-mail address. Optionally we ask you
to provide a name for the purpose of addressing you personally in the newsletter.
We also save when you register for the newsletter
the IP address assigned by the Internet Service Provider (ISP) to the
affected person at the time of registration
as well as the date and time of registration. The collection of this data is
required to avoid the (possible) misuse of the email address of a data subject
To be able to understand the person at a later point in time and therefore serves
the legal protection of the person responsible for the processing.
The
personal data will only be used to send our newsletter
used. Furthermore, subscribers to the newsletter could be informed by email
if this is necessary for the operation of the newsletter service or a
relevant registration is required, as in the case of changes
on the newsletter offer or when the
technical conditions could be the case. There is no disclosure of the
Personal data collected as part of the newsletter service to third parties.
The data subject can subscribe to our newsletter at any time
be terminated. Consent to the storage of personal data,
which the data subject sends us for the newsletter
can be revoked at any time. For the purpose of revoking the
A corresponding link can be found in every newsletter. Further
there is the possibility to register directly on the website of the
Responsible for processing from Newsletter dispatch
unsubscribe or otherwise to the controller
notify.
The dispatch of the newsletter and the associated with it
Success measurement is based on the consent of the recipient in accordance with
Art. 6 para. 1 lit . a, Art. 7 GDPR in conjunction with Section 7 Paragraph 2
No. 3 UWG or, if consent is not required, on the basis
our legitimate interests in direct marketing acc. Art. 6 para. 1 according to f.
DSGVO in conjunction with Section 7 Paragraph 3 UWG (in Austria: Section 107 Paragraph 2, 3 TKG)
The registration procedure is logged on
Basis of our legitimate interests acc. Art. 6 para. 1 lit . f GDPR.
newsletter dispatch via Rapidmail:
The newsletter is sent by the mailing service provider
rapidmail GmbH, Wentzingerstraße, 21, 79106 Freiburg, Germany. The
You can view the data protection provisions of the shipping service provider here: https://www.rapidmail.de/datensicherheit .
The shipping service provider is based on our legitimate interests
according to Art. 6 para. 1 lit . f. GDPR and one
Order processing contract according to Art. 28 para. 3 sentence 1 GDPR used. Of the
Shipping service providers can send the recipient's data in pseudonymous form, ie
without assignment to a user, to optimize or improve your own
Use services, e.g. for the technical optimization of shipping and
Use the presentation of the newsletter or for statistical purposes. Of the
Shipping service provider uses the data of our newsletter recipients
but not to write to them yourself or to forward the data to third parties
to pass on.
Newsletter tracking pixels:
The newsletters contain so-called tracking pixels. A tracking pixel is one
Miniature graphic that is embedded in such emails that are in HTML format
be sent to a log file recording and a log file analysis
enable. This allows a statistical evaluation of the success or failure
be carried out by online marketing campaigns. Using the embedded
We can recognize tracking pixels whether and when an e-mail is received from an affected person
Person was opened and which links in the e-mail from the
affected person.
Those about those contained in the newsletters
Personal data collected by tracking pixels are used by the
Processing controller stored and evaluated in order to ensure the Newsletter delivery and optimize the content of future
Adapt the newsletter even better to the interests of the data subject. This
personal data will not be passed on to third parties. Affected
Persons are entitled at any time to request the relevant separate, via the
Double Opt -In procedure submitted
To revoke the declaration of consent. After a revocation, these
personal data deleted by the person responsible for processing.
We automatically interpret unsubscribing from receiving the newsletter as a revocation.
§ 8
Contact via the
Website
Our website contains due to legal
Regulations information that allows quick electronic contact
enable our company and direct communication with us,
which is also a general address of the so-called electronic mail
(Email address). If a data subject is sent via email or via
a contact form provides contact with the person responsible for processing
receives the personal data transmitted by the data subject
Data saved automatically. Such on a voluntary basis from one
data subject transmitted to the person responsible for processing
personal data are used for processing or contacting purposes
stored on the person concerned. This will not be passed on
personal data to third parties.
When contacting us (e.g. by
Contact form, email, phone or via social media) the information
of the user to process the contact request and its processing acc. Art. 6
Paragraph 1 lit . b. (as part of
contractual / pre-contractual relationships), Art. 6 Para. 1 lit .
f. (other requests) GDPR processed. The information provided by users can be stored in a
Customer Relationship Management System (& quot; CRM System & quot;)
or comparable request organization.
We delete the inquiries if they are no longer
required are. We review the requirement every two years; Further
the statutory archiving obligations apply.
§ 9 # Use of Script Libraries (Google Webfonts)
Um
our content is correct and graphically appealing across all browsers
We use script libraries on this website
and font libraries such as B. Google Webfonts
(https://www.google.com/webfonts/). Google Webfonts
are transferred to the cache of your browser to avoid multiple loading.
If the browser does not support the Google Webfonts
supports or prevents access, content in a
Standard font displayed. Calling up script libraries
or font libraries automatically releases a connection to the operator of the
Library off. For this purpose, the browser you are using
Connect to the Google servers. This gives Google
Knowledge that our website was accessed via your IP address.
The use of Google Web Fonts is in the interest of a uniform and
appealing presentation of our online offers. This represents a legitimate
Interest within the meaning of Art. 6 Para. 1 lit . f GDPR
.
if
If your browser does not support web fonts, your
Computer used. For more information on Google Web Fonts, see
https://developers.google.com/fonts/faq and in the privacy policy of
Google: https://www.google.com/policies/privacy/.
§ 10
Privacy Policy for use
of Google Analytics
As far as you have given your consent,
Google Analytics is used on this website, a web analysis service from
Google LLC. The responsible service provider in the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4,
Ireland ("Google").
Scope of processing: Google Analytics
uses cookies to analyze your use of our website
enable. The information collected by the cookies about your
Use of this website is usually sent to a Google server
Transferred to the USA and stored there.
We use the user ID function. With the help of
We can use User ID for one or more sessions (and the activities within
these sessions) assign a unique, permanent ID and user behavior
Analyze across devices.
We use Google signals. This means that in
Google Analytics collects additional information about users who
activated personalized ads (interests and demographic data)
and ads can be used in cross-device Remarketing campaigns
delivered to these users.
We use the function ' anonymizeIP '
(so-called IP- Masking ): Due to the activation of the
IP anonymization on this website is your IP address from Google within
of member states of the European Union or in other contracting states of
Agreement on the European Economic Area shortened. Only in exceptions
the full IP address is sent to a Google server in the USA and
shortened there. The transmitted from your browser as part of Google Analytics
The IP address will not be merged with other data from Google.
During your website visit, among others
collects the following data: the pages you have visited, your "click path";
Achievement of "website goals" ( Conversions , e.g.
Newsletter registrations, downloads, purchases); Your user behavior (for example
Clicks, length of stay, bounce rates); Your approximate location (region); Your
IP address (in abbreviated form); technical information about your browser and
the devices you are using (e.g. language setting,
Screen resolution); Your internet provider; the Referrer URL
(via which website / via which advertising material you came to this website
are)
Purposes of processing: On behalf of the
The operator of this website, Google will use this information to your
(pseudonymous [NOT IF USER ID IS USED]) to evaluate the use of the website
and to compile reports on website activity. The through google
Analytics reports are used to analyze the performance of our
Website and the success of our marketing campaigns.
Recipient: The recipient of the data is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4,
Ireland as a processor. We have one for this with Google
Order processing contract concluded. Google LLC, based in
California, USA, and possibly US authorities can access the Google
stored data.
Transmission to third countries: One
Transmission of data to the USA cannot be ruled out.
Storage duration: The ones sent by us and with
Data linked to cookies are automatically deleted after 14 months. The
Deletion of data whose retention period has expired takes place automatically
once a month.
You can also capture the
Data generated by the cookie and related to your use of the website
(including your IP address) to Google and the processing of this data
Prevent Google by (a) giving your consent to the setting of the cookie
not grant or (b) the browser add-on to deactivate Google
Download and install Analytics. You can save
Cookies also through a corresponding setting in your browser software
prevent. If you configure your browser so that all cookies
However, functionality may be restricted
come to this and other websites.
Legal basis and cancellation option:
The legal basis for this data processing is your consent, Article 6 (1)
S.1 letter a GDPR. You can give your consent
revoke at any time with effect for the future by the
Cookie settings [HERE LINK TO THE SETTING POSSIBILITIES OF THE
SET CONSENT TOOLS] and change your selection there.
More information on terms of use
from Google Analytics and data protection at Google can be found at
https://marketingplatform.google.com/about/analytics/terms/de/ and under
https://policies.google.com/?hl=de.
§ 11
External payment service providers
We use external payment service providers, over
whose platforms the customer and we can carry out payment transactions.
As part of the fulfillment of contracts, we use the
Payment service provider based on Art. 6 Para. 1 lit .
b GDPR. In addition, we use external payment service providers
our legitimate interests acc. Art. 6 para. 1 lit .
f GDPR to provide our customers with effective and secure payment options
offer.
PAYPAL / PAYPAL
PLUS: Payments are processed via so-called PayPal accounts, the
represent virtual private or business accounts. In addition, there is the
Ability to process virtual payments via credit cards when a user
does not have a PayPal account. A PayPal account is created using an email address
managed, which is why there is no classic account number. PayPal enables
Initiate online payments to third parties or receive payments. PayPal
also takes on trustee functions and offers buyer protection services.
The European operating company of PayPal is
the PayPal (Europe) S.à.rl . & amp; Cie. SCA, 22-24
Boulevard Royal, 2449 Luxembourg, Luxembourg.
Selects the person concerned during the ordering process
"PayPal" as a payment option, data of the
data subject transmitted to PayPal. With the selection of this payment option
the person concerned consents to the payment processing required
Transmission of personal data.
For the personal data transmitted to PayPal
it is usually first name , last name,
Address, email address, IP address, telephone number, mobile phone number or
other data that are necessary for payment processing. To handle the
The purchase contract also requires personal data that is included in the
Related to the respective order.
The purpose of the transmission of the data is
Payment processing and fraud prevention. The one for processing
PayPal becomes responsible for personal data in particular
Submit if there is a legitimate interest in the transmission.
The one between PayPal and the data controller
exchanged personal data will be sent by PayPal under certain circumstances
Credit agencies transmitted. The purpose of this transmission is
Identity and credit checks.
PayPal gives the personal data if necessary
to affiliated companies and service providers or subcontractors,
as far as this is necessary to fulfill the contractual obligations
or the data should be processed in the order.
The data subject has the option of the
Consent to PayPal to handle personal data at any time
to revoke. A revocation does not affect personal data,
which is processed, used or required for (contractual) payment processing
must be transmitted.
The following apply to payment transactions
Terms and conditions and the data protection information of the respective
Payment service providers that operate within the respective websites or
Transaction applications are available. We refer to these as well
for the purpose of further information and assertion of revocation, information and
other data subject rights.
The applicable data protection regulations of PayPal can
at https://www.paypal.com/de/webapps/mpp/ua/privacy-full/
retrieved.
§ 12
Online services / credit check / production
/ Shipping
photo-bestdiscount processes for the execution of the contract,
the data entered by the customer when placing an order /
Customer data (first and last name, email address, payment data and address of the
Customer / possibly different delivery address (es) / IP address, type and number
ordered contract products, desired shipping and payment method), image data
and shipping data on the basis of Art. 6 Paragraph 1 lit b
GDPR according to the legal data protection regulations.
photo-bestdiscount checks regularly when contracts are signed and
in certain cases where there is a legitimate interest, also with
Existing customers their creditworthiness. To do this, we work with Creditreform Boniversum GmbH, Hellersbergstraße
11, 41460 Neuss, from which we receive the necessary data. To
For this purpose we will send your name and contact details to
Creditreform Boniversum GmbH. The information according to
Art. 14 of the EU General Data Protection Regulation on the Creditreform Boniversum GmbH
at: www.boniversum.de/EU-DSGVO .
The data protection regulations of Creditreform Boniversum GmbH can be found under https://www.boniversum.de/datenschutzerklaerung/
The delivery is carried out by used
Shipping service providers such as Deutsche Post (Deutsche Post AG,
Charles-de-Gaulle-Straße 20, 53113 Bonn) or DHL (DHL Paket GmbH, Sträßchensweg 10; 53113 Bonn) on the basis of Art. 6 para.
1 lit b. GDPR.
The data protection regulations of Deutsche Post AG
can be found under https://www.deutschepost.de/de/f/footer/datenschutz.html ;
those of DHL Paket GmbH under https://www.dhl.de/de/toolbar/footer/datenschutz.html .
§ 13
Legal basis for processing
Art. 6 para. 1 lit . a GDPR
serves our company as the legal basis for processing operations
which we obtain consent for a specific processing purpose.
Is the processing of personal data for
Performance of a contract to which the data subject is a party,
required, as is the case, for example, with processing operations,
those for the delivery of goods or the provision of another service
or consideration is necessary, the processing is based on Art. 6 Para. 1
lit . b GDPR. The same applies to those
Processing operations for the implementation of pre-contractual measures
are required, for example in cases of inquiries about our products or
Services.
our company is subject to a legal
Obligation through which the processing of personal data is required
is, for example, to fulfill tax obligations, the
Processing based on Art. 6 Paragraph 1 lit . c GDPR.
In rare cases the processing of
personal data are required to meet the vital interests of the data subject
To protect a person or another natural person. This would be
for example the case if a visitor is injured in our company
and then his name, his age, his health insurance data or
any other vital information to a doctor, hospital or
other third parties would have to be passed on. Then processing would go on
Art. 6 para. 1 lit . d GDPR.
Ultimately, processing operations could be based on Art. 6 para.
1 lit . f GDPR. On this legal basis
based processing operations that are not supported by any of the aforementioned
Legal bases are recorded if the processing is to safeguard a
legitimate interest of our company or a third party
is provided that the interests, fundamental rights and freedoms of the person concerned
not outweigh. We are therefore particularly interested in such processing operations
permitted because they are specifically mentioned by the European legislator
were. In this respect, he took the view that a legitimate interest
could be assumed if the data subject is a customer of the
Is responsible (recital 47 sentence 2 GDPR).
§ 14
Routine deletion and
Blocking of personal data
The person responsible for processing processes and
saves personal data of the data subject only for the period
which is necessary to achieve the storage purpose or if this
by the European directives and regulations or another
Legislators in laws or regulations, which of the processing
Responsible subject, was provided.
If the storage purpose is omitted or a dated
European directives and regulations or another responsible
The storage period prescribed by the legislator will be the personal
Data is routinely blocked or in accordance with statutory regulations
deleted.
image data transmitted by the customer are only used for
the duration of 14 days is saved then automatically deleted.
§ 15
Security
We have extensive technical and operational
Safeguards are in place to keep your information from accidental or deliberate
Manipulation, loss, destruction or access by unauthorized persons
protect. Our security procedures are regularly monitored by a
Data protection officer checked and technological progress
adapted.
§ 16
Rights of the data subject
Right to
Confirmation: According to the GDPR, every person concerned has the right to obtain from the
to request confirmation from the controller as to whether
personal data concerning them are processed.
Right to
Information: Any person affected by the processing of personal data
According to the GDPR, the person has the right to request processing at any time
Responsible free information about his person
stored personal data and a copy of this information
receive. Furthermore, the European legislator of directives and regulations has
data subject has been granted access to the following information:
§
the processing purposes
§
the categories of personal data that
processed
§
the recipients or categories of recipients,
to whom the personal data have been or are still being disclosed
be disclosed, in particular to recipients in third countries or to
international organizations
§
if possible the planned duration for which the
personal data are stored or, if this is not possible,
the criteria for determining this duration
§
the existence of a right to rectification or
Deletion of the personal data concerning you or restriction
the processing by the person responsible or a right of objection against
this processing
§
the right to complain to a
Supervisory authority
§
if the personal data is not with the
data subject are collected: All available information about the
Origin of the data
§
the existence of automated decision-making
including Profiling in accordance with Article 22 Paragraphs 1 and 4
GDPR and - at least in these cases - meaningful information about the
involved logic as well as the scope and the intended effects of a
such processing for the data subject
§
The person concerned is also responsible
Right to information about whether personal data is sent to a third country or to
an international organization. If this is the case,
the data subject has the right to obtain information about the
to obtain appropriate guarantees in connection with the transmission.
right to
Correction: Any person affected by the processing of personal data
According to the GDPR, a person has the right to immediate rectification
to request the relevant incorrect personal data. The
data subject has the right, taking into account the purposes of
Processing, the completion of incomplete personal data -
also by means of a supplementary declaration - to be requested.
right to
Erasure (right to be forgotten): Any processing
of personal data, the person concerned has the right, according to the GDPR, from the
To request the person responsible that the personal
Data will be deleted immediately if one of the following reasons applies
and if the processing is not necessary:
§
The personal data were for such
Purposes collected or otherwise processed for which they are no longer
are necessary.
§
The data subject revokes their
Consent on which the processing is based in accordance with Art. 6 Para. 1 Letter a
DSGVO or Art. 9 Para. 2 Letter a DSGVO based, and there is no one
other legal basis for the processing.
§
According to Art. 21 Para. 1
DSGVO objection to the processing, and there are no priority
justified reasons for the processing, or the data subject submits
object to the processing in accordance with Art. 21 Para. 2 GDPR.
§
The personal data became unlawful
processed.
§
The deletion of personal data is for
Fulfillment of a legal obligation under Union law or the law
of the member states to which the controller is subject.
§
The personal data were processed in relation to
Information society services offered in accordance with Art. 8 Para. 1 GDPR
collected.
Did the personal data of the professional portrait become public
made and our company is responsible according to Art. 17 Para. 1
GDPR obliged to delete personal data, we meet under
Consideration of available technology and implementation costs
reasonable measures, including technical measures, to avoid others for the
Data processing controller who published the
process personal data, to inform that the
data subject from these other data controllers
the deletion of all links to this personal data or copies
or has requested replications of this personal data, insofar as the
Processing is not required.
right to
Restriction of processing: Any of the processing of personal
According to the GDPR, data subjects have the right to request from the person responsible
to request the restriction of processing if one of the following
The prerequisites are:
§
The correctness of the personal data will be
disputed by the data subject, and for a period that allows the
The person responsible enables the correctness of the personal data
check.
§
The processing is unlawful, the
affected person rejects the deletion of personal data and
instead requests the restriction of the use of personal data.
§
The person responsible needs the
personal data for the purposes of processing no longer the
However, the data subject needs them to assert, exercise or
Defense of legal claims.
§
The data subject has objected to the
Processing acc. Art. 21 para. 1 GDPR and it has not yet been determined
whether the legitimate reasons of the person responsible compared to those of the affected
Person predominate.
Right to
Data portability: Any of the processing of personal data
According to the GDPR, the data subject has the right to
personal data which the data subject gives to a
Responsible persons were provided in a structured, common and
machine-readable format. You also have the right to this data
another responsible person without hindrance by the responsible person, the
the personal data have been provided, provided that the
Processing based on consent in accordance with Art. 6 Paragraph 1 lit
a GDPR or Art. 9 Para. 2 lit a GDPR or on a
Contract according to Art. 6 Para. 1 lit b GDPR is based and
the processing is carried out using automated procedures, provided that the
Processing is not necessary for the performance of a task that is im
is in the public interest or takes place in the exercise of public authority,
which was transferred to the person responsible.
Furthermore, when exercising their
Right to data portability in accordance with Art. 20 Paragraph 1 GDPR, the right to
obtain that the personal data are sent directly from a responsible person
be transmitted to another person responsible, as far as this is technical
is feasible and insofar as this does not affect the rights and freedoms of other people
be affected.
Right to
Objection: Any person affected by the processing of personal data
According to the GDPR, a person has the right, for reasons that arise from their particular
Situation arise at any time against the processing of them
personal data that is processed on the basis of Art. 6 Para. 1 lit
e or f GDPR takes place, to object. This also applies to an on
Profiling .
supported by these provisions
We process the personal data in the event
the contradiction no longer, unless we can compelling protection worthy
Provide reasons for the processing that affect the interests, rights and
The freedoms of the data subject prevail, or the processing serves to assert,
Exercise or defense of legal claims.
We process personal data in order to
To operate direct mail, the person concerned has the right at any time
Objection to the processing of personal data for the purpose
to insert such advertising. This also applies to Profiling ,
as far as it is related to such direct mail. Contradicts the
data subject to us processing for direct marketing purposes,
so we will no longer use the personal data for these purposes
process.
Automated
Decisions in individual cases including Profiling :
Every person affected by the processing of personal data has
according to the GDPR the right, not one exclusively on an automated
Processing - including Profiling - based
Decision to be subjected to legal effect against her
unfolds or significantly affects them in a similar manner, provided that the
Decision (1) not for entering into or performing a contract
is necessary between the data subject and the person responsible, or
(2) based on Union or Member State legislation to which
the person responsible is subject to, is permissible and these legal provisions
appropriate measures to safeguard rights and freedoms as well as the
contain legitimate interests of the data subject or (3) with
express consent of the data subject is given.
Is the decision (1) for the conclusion or the
Performance of a contract between the data subject and the
Responsible person required or (2) it is done with express
Consent of the data subject, we take appropriate measures to obtain the
Rights and freedoms as well as the legitimate interests of the data subject
to preserve, including at least the right to obtain human intervention
on the part of the person responsible, to express their own point of view and on
Appeal of the decision heard.
» Automated
However, we do not take decisions or Profiling
before.
Right to
Revocation of a data protection consent: Any of the
Processing of personal data data subject has the right to a
To withdraw consent to the processing of personal data at any time.
Would the person concerned want one of the in § 15
To assert the above-mentioned concerns or rights, our
Data protection officer at datenschutz@pixyfoto.eu .
You are always free to contact the for you
to contact the competent data protection supervisory authority.
§ 17
Links to other websites
Provider
Our websites may contain links to other websites
Provider included. So much for using the websites of other providers
the collection, processing or use of personal data is associated,
Please note the data protection information of the respective provider.
§ 18
Changes to the
Privacy policy
We reserve the right to change this
Data protection declaration in compliance with the applicable data protection regulations
to change.
Current status is May 2023. o: p>
Google Google Übersetzer
Originaltext
style='color:windowtext'>www.photo-bestdiscount.eu angebotenen Fotoservice und
Bessere Übersetzung vorschlagen