Information according to Art. 13, 14 and 21 EU General Data Protection Regulation - DSGVO.
We hereby inform you about the processing of your personal data by us and the claims and rights to which you are entitled under the data protection regulations. Which data is processed in detail and how it is used depends largely on the services you have requested or agreed with us.
1. Who is responsible for data processing and whom can I contact?
The person responsible is:
Main street 98
2. which sources and data do we use?
We process personal data that we receive from you in the course of our business relationship. In addition, we process , to the extent necessary for the provision of our service , personal data that we have received from other entities (e.g., the institutions in which we photograph, such as schools and daycare centers) permissibly (e.g., for the execution of orders, for the performance of contracts or based on a consent granted by you). On the other hand, we process personal data that we have permissibly obtained from publicly accessible sources (e.g. debtor directories, press, media) and are allowed to process. Relevant personal data are personal details and contact data (name, address, telephone number and e-mail address). In addition, this may also include order data or data from the fulfillment of our contractual obligations, such as advertising and sales data, documentation data, data about your use of our offered telemedia and other data comparable with the categories mentioned.
3. What do we process your data for (purpose of processing) and on what legal basis?We process personal data in accordance with the provisions of the European Data Protection Regulation (DSGVO) and the German Federal Data Protection Act (BDSG).
3.1 For the fulfillment of contractual obligations (Art. 6 para. 1 lit. b DSGVO).
The processing of personal data is carried out to provide the service as a photographer and the associated sale of images taken and their electronic transmission or production of these on photo products and shipping to customers, and in particular also for the performance of our contracts or pre-contractual measures with you and the execution of your orders. The purposes of data processing are primarily obligations arising from the sales contract you enter into with us by placing an order in our store and may include, among other things, reminders about important events. Further details on the purpose of data processing can be found in the respective terms and conditions.
3.2 In the context of balancing interests (Art. 6 para. 1 lit. f DSGVO).
As far as necessary, we process your data beyond the actual performance of the contract to protect legitimate interests of us or third parties. For: - advertising or market and opinion research, unless you have objected to the use of your data; assertion of legal claims and defense in legal disputes; ensuring IT security; prevention and investigation of criminal acts; measures for business management and further development of services and products. We also collect personal data in the course of our business processes in the eve
3.3 Based on your consent (Art. 6 para. 1 lit. a DSGVO).
Insofar as you have given us consent to process personal data for certain purposes (e.g. publication or use of images), the lawfulness of this processing is based on your consent. Consent given can be revoked at any time with effect for the future. Please note that the revocation is only effective for the future. Processing that took place before the revocation is not affected.
3.4 On the basis of legal requirements (Art. 6 para. 1 lit. c DSGVO) or in the public interest (Art. 6 para. 1 lit. e DSGVO).
We also process personal data on the basis of legal requirements. For example, we store invoice data (name, address) on the basis of existing legal requirements, such as the retention obligations arising from the German Commercial Code (HGB) and the German Fiscal Code (AO).
4. who gets my data?
In the course of the use of the website, those bodies receive your data that need it to fulfill our contractual and legal obligations. Processors used by us (Art. 28 DSGVO) may also receive data for these purposes. These are companies in the categories [IT services, production of photo products, logistics, telecommunications and debt collection]. A transfer of data to recipients outside Kamera Kunterbunt | Owner Lars May will only take place if required by law, you have consented or we are authorized to provide information. Under these conditions, recipients of personal data can be, for example: - public bodies and institutions (e.g. supervisory authorities) in the presence of a legal or official obligation. - Other data recipients may be those bodies for which you have given us your consent to transfer data or have exempted consent.
5. how long will my data be stored?
As far as necessary, we process and store your personal data as long as it is required to fulfill the obligations arising from our contracts. In addition, we are subject to various storage and documentation obligations, which result, among other things, from the German Commercial Code (HGB) and the German Fiscal Code (AO). The retention and documentation periods specified there range from two to ten years. Finally, the storage period is also assessed according to the statutory limitation periods, which, for example, according to ßß 195 ff. of the German Civil Code (BGB), generally amount to 3 years, but in certain cases can also be up to thirty years.
6. Is data transferred to a third country or to an international organization?
Data will only be transferred to third countries (countries outside the European Economic Area ,EEA) if this is necessary for the execution of the contracts concluded with you or if it is required by law or if you have given us your consent. We will inform you separately about details, if required by law.
7. What data protection rights do you have?Every data subject has the right to information under Article 15 of the GDPR, the right to rectification under Article 16 of the GDPR, the right to erasure under Article 17 of the GDPR, the right to restriction of processing under Article 18 of the GDPR and the right to data portability under Article 20 of the GDPR. With regard to the right to information and the right to erasure, the restrictions pursuant to ßß 34 and 35 BDSG apply. In addition, there is a right of appeal to a data protection supervisory authority (Art. 77 DSGVO).
8. Is there an obligation for me to provide data?
Within the scope of our business relationship, you only have to provide those personal data that are necessary for the establishment, implementation and termination of a business relationship or that we are legally obliged to collect. Without this data, we will usually have to refuse to conclude the contract or execute the order, or we will no longer be able to perform an existing contract and may have to terminate it. Furthermore, in order to provide chargeable services, it is necessary for us to ask for additional data, such as to process the method of payment requested by you.
9. notification of important events
When signing up to receive our notification by email and / or SMS, the data you provide will be used exclusively for this purpose. For this purpose, we log your consent to receive the notification, including your IP address. No other data is collected. The data will be used exclusively for sending notifications and will be passed on to third parties only for the purpose of delivery. You can revoke your consent to the processing of your personal data and its use for sending notifications at any time. In each notification you will find a link to do so, in addition, you can object at any time by sending an email to email@example.com. Please note that the revocation is only effective for the future. Processing that took place before the revocation is not affected.
10. functions of third party providers
What are cookies?
"Cookies" are text files that are stored on your computer and enable an analysis of your use of the website.
What exactly do cookies do?
The information generated by the cookie about your use of this website is usually transmitted to a server and stored there. However, due to the activation of IP anonymization on some websites, your IP address is sometimes shortened beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Depending on the service provider, such an IP address is stored shortened.
What is the transmitted data used for?
On behalf of Lars May, the third-party provider will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.
How to disable cookies?
Information about your right to object according to Art. 21 DS-GVO
1. general right of objection
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(f) of the DSGVO (data processing on the basis of a balance of interests). If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
2. right to object to processing of data for direct marketing purposes.
In individual cases, we process your personal data in order to conduct direct advertising. You have the right to object at any time to the processing of personal data concerning you for the purposes of such advertising. If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes. The objection must be made in writing by e-mail to the following contact person: