Information according to Art. 13, 14 and 21 EU General Data Protection Regulation - GDPR.
preamble
We hereby inform you about the processing of your personal data by us and the claims and rights to which you are entitled under data protection regulations. Which data is processed in detail and how it is used depends largely on the services you have requested or agreed with you.
1. Who is responsible for data processing and who can I contact?
Responsible is:
light and light
Walter Eckhardt
Säbener Strasse 92
81547 Munich
walter.eckardt@gmail.com
2. What sources and data do we use?
We process personal data that we receive from you as part of our business relationship. In addition, to the extent necessary for the provision of our service, we process personal data that we have received from other parties (e.g. the inviting wedding couple) permissibly (e.g. to execute orders, to fulfill contracts or on the basis of your consent). On the other hand, we process personal data that we have legitimately obtained and are allowed to process from publicly accessible sources (e.g. debtor directories, press, media). Relevant personal data are personal details and contact details (name, address, telephone number and e-mail address). In addition, this can also be order data or data from the fulfillment of our contractual obligations, such as advertising and sales data, documentation data, data on your use of the telemedia we offer and other data comparable to the categories mentioned.
3. What do we process your data for (purpose of processing) and on what legal basis?
We process personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG).
3.1. To fulfill contractual obligations (Art. 6 Para. 1 lit. b GDPR)
The processing of personal data takes place to provide the service as a photographer and the associated sale of pictures taken and their electronic transmission or production of these on photo products and shipping to customers and in particular to carry out our contracts or pre-contractual measures with you and the execution of your orders. The purposes of data processing are primarily aimed at obligations from the purchase contract that you enter into with us by placing an order in our shop and can include reminders of important events, among other things. Further details on the purpose of data processing can be found in the respective terms and conditions.
3.2. As part of the balancing of interests (Article 6 (1) (f) GDPR)
If necessary, we process your data beyond the actual fulfillment of the contract to protect our legitimate interests or those of third parties. For: - Advertising or market and opinion research, unless you have objected to the use of your data; Assertion of legal claims and defense in legal disputes; ensuring IT security; Prevention and investigation of criminal offenses; Measures for business management and further development of services and products.
We also collect personal data in the course of our business processes if you send us an inquiry via our contact form. We need this data to process your request. As soon as the request has been processed, we will delete your data.
If we are active at events where our photographic services were used to take pictures, we process the personal data obtained there on the basis of our legitimate interest in carrying out the order placed with us and offering them for sale. Should this be the case, we pointed out the photograph of the people present during the event, as well as a right of objection. Please note that an objection will only take effect in the future. All processing carried out up to that point remains unaffected.
3.3. Based on your consent (Art. 6 Para. 1 lit. a GDPR)
If you have given us your consent to process personal data for specific purposes (e.g. publication or use of images), the legality of this processing is given on the basis of your consent. A given consent can be revoked at any time with effect for the future. Please note that the revocation only applies to the future. Processing that took place before the revocation is not affected.
3.4. Due to legal requirements (Art. 6 Para. 1 lit. c GDPR) or in the public interest (Art. 6 Para. 1 lit. e GDPR)
We also process personal data on the basis of legal requirements. For example, we store invoice data (name, address) on the basis of existing legal provisions, such as the retention requirements arising from the German Commercial Code (HGB) and the Fiscal Code (AO).
4. Who gets my data?
In the course of using the online shop, those departments that need your data to fulfill our contractual and legal obligations will receive it. Processors employed by us (Article 28 GDPR) may also receive data for these purposes. These are companies in the categories [IT services, production of photo products, logistics, telecommunications and debt collection]. Data will only be passed on to recipients outside of Licht und Licht if this is required by law, you have given your consent or we are authorized to provide information. Under these conditions, recipients of personal data e.g. B. be: - Public bodies and institutions (e.g. supervisory authorities) if there is a legal or official obligation. Other data recipients can be those bodies for which you have given us your consent to data transmission or have released your consent.
5. How long will my data be stored?
If necessary, we process and store your personal data to the extent necessary to meet the obligations arising from our contracts. In addition, we are subject to various storage and documentation obligations, which result from the German Commercial Code (HGB) and the Fiscal Code (AO), among other things. The storage and documentation periods specified there are two to ten years. Finally, the storage period is also assessed according to the statutory limitation periods, which, for example, according to §§ 195 et seq.
6. Is data transferred to a third country or to an international organization?
Data will only be transferred to third countries (countries outside the European Economic Area, EEA) if this is necessary for the execution of the contracts concluded with you or is required by law or if you have given us your consent. If required by law, we will inform you separately about the details. Please note the information on Google Analytics and PayPal.
7. What data protection rights do you have?
Every data subject has the right to information under Article 15 GDPR, the right to rectification under Article 16 GDPR, the right to erasure under Article 17 GDPR, the right to restriction of processing under Article 18 GDPR and the right to data portability from Art. 20 GDPR. The restrictions according to ßß 34 and 35 BDSG apply to the right to information and the right to deletion. In addition, there is a right of appeal to a data protection supervisory authority (Art. 77 GDPR).
8. Am I obligated to provide data?
As part of our business relationship, you only have to provide the personal data that is necessary for the establishment, implementation and termination of a business relationship or that we are legally obliged to collect. Without this data, we will generally have to refuse to conclude the contract or execute the order, or we will no longer be able to carry out an existing contract and may have to terminate it. Furthermore, in order to provide paid services, it is necessary for us to request additional data, such as processing the payment method you require.
9. Notification of important events
When registering to receive our notification by email and/or SMS, the data you provide will be used exclusively for this purpose. To do this, we log your consent to receiving the notification, including your IP address. Further data is not collected. The data will only be used to send notifications and will only be passed on to third parties for delivery purposes. You can revoke your consent to the processing of your personal data and its use for sending notifications at any time. There is a corresponding link in every notification, and you can object at any time by sending an email to walter.eckardt@gmail.com. Please note that the revocation only applies to the future. Processing that took place before the revocation is not affected.
10. Third Party Features
10.1. cookies
What are cookies?
"Cookies" are text files that are stored on your computer and enable an analysis of your use of the website.
What exactly do cookies do?
The information generated by the cookie about your use of this website is usually transmitted to a server and stored there. Due to the activation of IP anonymization on some websites, your IP address will sometimes be shortened beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Depending on the service provider, such an IP address is stored in abbreviated form.
What is the transmitted data used for?
On behalf of Licht und Licht, the third-party provider will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator.
Google Analytics
Our website uses functions of the web analysis service Google Analytics. The provider of the web analysis service is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.
Google Analytics uses "cookies." These are small text files that your web browser stores on your end device and enable analysis of website usage. Information generated by cookies about your use of our website is transmitted to a Google server and stored there. Server location is usually the USA.
Google Analytics cookies are set on the basis of Article 6 (1) (f) GDPR. As the operator of this website, we have a legitimate interest in analyzing user behavior in order to optimize our website and, if necessary, advertising.
IP anonymization
We use Google Analytics in connection with the IP anonymization function. It ensures that Google shortens your IP address within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before it is transmitted to the USA. There may be exceptional cases in which Google transmits the full IP address to a server in the USA and shortens it there. On our behalf, Google will use this information to evaluate your use of the website, to create reports on website activity and to provide us with other services related to website activity and internet usage. The IP address transmitted by Google Analytics is not merged with other Google data.
browser plug-in
The setting of cookies by your web browser can be prevented. However, this could limit some functions of our website. You can also prevent the collection of data relating to your website use, including your IP address and subsequent processing by Google. This is possible by downloading and installing the browser plugin available via the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
Objection to data collection
For details on how Google Analytics handles user data, see Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=en.
order processing
In order to fully comply with the legal data protection requirements, we have concluded an order processing contract with Google.
Demographic characteristics in Google Analytics
Our website uses the "demographic characteristics" function of Google Analytics. It can be used to create reports that contain statements about the age, gender and interests of the site visitors. This data comes from interest-based advertising from Google and visitor data from third-party providers. It is not possible to assign the data to a specific person. You can deactivate this function at any time. This is possible via the ad settings in your Google account or by generally prohibiting the collection of your data by Google Analytics, as explained in the point "Objection to data collection".
PayPal
Our website allows payment via PayPal. The provider of the payment service is PayPal (Europe) S.à.rl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg.
If you pay with PayPal, the payment data you have entered will be transmitted to PayPal.
Your data is transmitted to PayPal on the basis of Article 6 (1) (a) GDPR (consent) and Article 6 (1) (b) GDPR (processing to fulfill a contract). You can revoke your consent that you have already given at any time. Data processing operations in the past remain effective in the event of revocation.
How to turn off cookies?
You can prevent the storage of cookies by setting your browser software accordingly; we would like to point out to you however that in this case you can if applicable not use all functions of this website in full. Which third-party cookies are used? We use cookies from the following third parties on our website:
• Google Analytics (More information at: https://support.google.com/analytics/answer/6004245?hl=en)
• fotograf.de (Further information at: Photographers Online Service GmbH) (https://www.fotograf.de/datenschutzanleitung/)
Status: 16.2018
Information about your right to object
according to Art. 21 GDPR
1. General right to object
You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data relating to you, which is based on Article 6 (1) (f) of the GDPR (data processing on the basis of a balance of interests). to insert If you file an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms or the processing serves to assert, exercise or defend legal claims.
Right to lodge a complaint with the competent supervisory authority
As a data subject, you have the right to lodge a complaint with the competent supervisory authority in the event of a breach of data protection law. The competent supervisory authority with regard to data protection issues is der State data protection officer of the Free State of Bavaria.
2. Right to object to the processing of data for direct marketing purposes
In individual cases, we process your personal data in order to carry out direct advertising. You have the right to object at any time to the processing of your personal data for the purpose of such advertising. If you object to the processing for direct marketing purposes, we will no longer process your personal data for these purposes. The objection must be addressed in writing by e-mail to the following contact person:
Walter Eckhardt
walter.eckardt@gamil.com