Data protection
I. Responsible body
Responsible body in terms of data protection regulations
Foto Bravo UG (limited liability)
Artur-Ladebeck-Str. 62a
33617 Bielefeld
Germany
Telephone: +49 521 94987676
Fax: +49 521 94987505
Email: info@fotobravo.de
II. Processing of personal data
Personal data will only be processed if this is necessary for the provision of the website with its functionalities and its contents as well as for the execution of the respective contractual relationship or the concerns of the user. The processing of personal data takes place regularly only with the consent of the user. An exception applies to cases in which prior consent is not possible for reasons of fact or where the processing of the data is permitted by law.
III. Legal basis
The processing of personal data by us takes place on the following legal basis:
Art. 6 para. 1 lit. a GDPR:
For processing of personal data where we obtain the consent of the data subject.
Art. 6 para. 1 lit. b DSGVO:
Processing is necessary for the performance of a contract to which the data subject is a party or for the performance of pre-contractual actions, which are carried out at the request of the data subject;
Art. 6 para. 1 lit. c DSGVO:
For the processing of personal data necessary to fulfill a legal obligation to which we are responsible
Art. 6 para. 1 lit. d DSGVO:
Processing is necessary to protect the vital interests of the data subject or any other natural person;
Art. 6 para 1 lit. e DSGVO:
The processing is necessary for the performance of a task which is in the public interest or in the exercise of public authority delegated to the controller;
Art. 6 para. 1 lit. f DSGVO:
Processing is necessary to safeguard the legitimate interests of the controller or a third party, provided that the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data do not prevail, in particular where the data subject is a child ,
IV. Logfiles when calling the website
When the website is called up, the system automatically saves the following information in our log files:
Browser type and version used
Operating system of the user
Internet service provider of the user
IP address of the user
Date and time of access
Website where the user came to our website
Websites that are accessed by the user's system via our website
A storage together with other personal data of the user does not take place. The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f DSGVO.
V. Cookies
This website uses cookies to facilitate the use of our website. Cookies are small text files that can be stored by a website locally in the memory of your Internet browser on the computer you are using. In particular, cookies enable the recognition of the Internet browser. You can delete cookies at any time by using the corresponding function of your browser or by deleting the cookies on your hard disk. In addition, you have the option to disable the use of cookies via the corresponding menu item of your browser. The legal basis for the processing of personal data using technically necessary cookies is Article 6 (1) lit. f DSGVO.
VI. contact
As part of contacting us by email or contact form, the data you provide us with stored. The data will be stored and used exclusively for the purpose of answering your request or for establishing contact and the associated technical processing. The legal basis for processing the data is 6 para. 1 lit. f DSGVO and Art. 6 para. 1 lit. a GDPR. If the establishment of contact is to conclude a contract, then further legal basis is Art. 6 para. 1 lit. b DSGVO. Your data will be deleted after final processing of your request, provided there are no legal storage requirements.
VII. Ordering process
As part of the ordering process, the data provided by the user are stored with us. The data is entered by the user in an input mask and transmitted to us and stored. In addition, the IP address of the user as well as date and time of registration and order are stored. The legal basis for processing the data is Art. 6 para. 1 lit. b DSGVO and Art. 6 para. 1 lit. a GDPR. Your data will be deleted after final processing of your request, provided there are no legal storage requirements. For fulfillment of the contract, we will pass on your data to the shipping company commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods. In order to process payments, we will pass on the necessary payment data to the credit institution commissioned with the payment and any payment service providers commissioned by us or to the payment service selected by you in the ordering process. The legal basis for processing is Art. 6 para. 1 lit. b DSGVO.
VIII. Registration on the website
Users can register for our website by providing personal information. In addition, users can also order without registration. The data is entered by the user in an input mask and transmitted to us and stored. In addition, the IP address of the user as well as the date and time of the registration are stored. Your data will be deleted after final processing unless there is a legal legal basis for the processing of the data 6 para. 1 lit. a GDPR. If the registration serves the conclusion of a contract, further legal basis is Art. 6 para. 1 lit. b DSGVO.
IX. Product evaluation function
When using the product rating funcion, not only the comment of the user but also information on the time of the creation of the comment and the user-selected account name are saved and published on the website. In addition, the IP address of the user as well as the date and time of the registration are stored. The legal basis for storing your data is Art. 6 para. 1 lit.b and f DSGVO.
X. Google Anaytics
This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses so-called "cookies", text files that are stored on your computer and that allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website (including the shortened IP address) is usually transmitted to a Google server in the USA and stored there.
This website uses Google Analytics exclusively with the extension "_anonymizeIp ()", which ensures anonymization of the IP address by curtailment and excludes a direct personal reference. The extension will truncate your IP address beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. In these exceptional cases, this processing is carried out in accordance with Art. 6 para. 1 lit. f DSGVO. On our behalf Google will use this information to evaluate your use of the website, compiling reports on website activity and providing other with website and internet related services to us. The IP address provided by Google Analytics as part of Google Analytics will not be merged with other Google data.
You can prevent the storage of cookies by a corresponding setting of your browser software; however, please note that if you do this, you may not be able to use all the features of this website to the fullest extent possible. In addition, you may prevent the collection by Google of the data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading the browser plug-in available under the following link and install:
http://tools.google.com/dlpage/gaoptout?hl=de
As an alternative to the browser plug-in or within browsers on mobile devices, please click on the following link to set an opt-out cookie that will prevent Google Analytics from entering this website in the future (this opt-out cookie only works in this browser and only for this domain, delete your cookies in this browser, you must click this link again): Disable Google Analytics.
US-based Google LLC is certified to the US Privacy Shield, which ensures compliance with the level of data protection in the EU.
For more information on how to handle user data on Google Analytics, please refer to the Google Privacy Policy: https://support.google.com/analytics/answer/6004245?hl=en
XI. Facebook
We use social plugins ("plugins") from the social network Facebook used on our website - This is powered by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook"). An overview of the Facebook plugins and their appearance can be found here: https://developers.facebook.com/docs/plugins
When the user visits a page on our website that contains such a plugin, the browser connects directly to the Facebook servers. The content of the plugin is transmitted by Facebook directly to your browser and integrated into the page. Through this integration, Facebook receives the information that the browser has accessed the corresponding page, even if the user does not have a Facebook profile or is not logged in to Facebook. This information (including the IP address of the user is transmitted by the browser directly to a Facebook server in the US and stored there.
If the user is logged in to Facebook, Facebook can immediately assign the visit to the website to the Facebook profile. When interacting with the plugin, this information is transmitted directly to a Facebook server and stored there. The information may also be published on the user's Facebook profile.
The data processing operations described are carried out in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of the legitimate interests of Facebook in the display of personalized advertising, to inform other users of the social network about your activities on our website and to tailor-made the service.
If the user does not want Facebook to associate the data collected via our website directly with the respective Facebook profile, the user must log out of Facebook before visiting our website. The user may object to the loading of the Facebook plugins and thus the data processing operations described above, even with browser add-ons for the future.
Based in the US, Facebook Inc. is certified to the US Privacy Shield, which ensures compliance with the level of data protection in the EU.
The purpose and scope of the data collection and the further processing and use of the data by Facebook as well as the related rights and setting options of the user for protection are in the privacy policy of Facebook:
http://www.facebook.com/policy.php
visible.
XII. Newsletter
To register for the newsletter, please enter the email address. The indication of salutation and name is voluntary and serves as personal address. The data collected by the user in this respect are used exclusively for the newsletter dispatch and its technical administration. The registration takes place in the "double-opt-in" procedure. By activating the sent confirmation link, the user gives us the consent for the processing of the personal data. The legal basis for processing is Art. 6 para. 1 lit. a GDPR. The user can revoke the consent to the storage of the data and use for the newsletter dispatch. In each newsletter there is a corresponding link. The user can also use the other communication channels for this purpose. When registering for the newsletter, we store the IP address as well as the date and time of registration in order to understand possible misuse. The legal basis for processing is Art. 6 para. 1 lit. a and lit. f DSGVO.
XIII. Rights of data subjects
If you process personal data, you are i.S.d. DSGVO and you have the following rights to the person responsible:
1. Right to information
You may ask the person in charge to confirm if personal data concerning you is processed by us.
If such processing is available, you can request information from the person responsible about the following information:
(1) the purposes for which the personal data are processed;
(2) the categories of personal data being processed;
(3) the recipients or categories of recipients to whom the personal data relating to you have been disclosed or are still being disclosed;
(4) the planned duration of the storage of your personal data or, if specific information is not available, criteria for determining the duration of storage;
(5) the existence of a right to rectification or erasure of personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;
(6) the existence of a right of appeal to a supervisory authority;
(7) all available information on the source of the data if the personal data is not collected from the data subject;
(8) the existence of automated decision-making including profiling under Article 22 (1) and (4) GDPR and, at least in these cases, meaningful information about the logic involved, and the scope and intended impact of such processing on the data subject.
You have the right to request information about whether your personal information relates to a third country or an international organization. In this connection, you can request the appropriate guarantees in accordance with. Art. 46 GDPR in connection with the transfer.
2. Right to rectification
You have a right to rectification and / or completion to the controller, if the personal data you process is incorrect or incomplete. The responsible person must make the correction without delay.
3. Right to restriction of processing
You may request the restriction of the processing of your personal data under the following conditions:
(1) if you contest the accuracy of your personal information for a period of time that enables the controller to verify the accuracy of your personal information;
(2) the processing is unlawful and you refuse the deletion of the personal data and instead demand the restriction of the use of the personal data;
(3) the controller no longer needs the personal data for the purposes of processing, but you need it to assert, exercise or defend legal claims; or
(4) if you have objected to the processing pursuant to Art. 21 (1) GDPR and it is not yet certain whether the legitimate reasons of the person responsible outweigh your reasons.
If the processing of personal data concerning you has been restricted, this data may only be used with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of important public interest Union or a Member State.
If the limitation of the processing after the o.g. If conditions are restricted, you will be informed by the person in charge before the restriction is lifted.
4. Right to cancellation
a) deletion of duty
You may require the controller to delete your personal information without delay, and the controller is required to delete that information immediately if one of the following is true:
(1) Personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
(2) You revoke your consent, to which the processing acc. Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. DSGVO and there is no other legal basis for processing.
(3) According to. Art. 21 para. 1 DSGVO objection to the processing and there are no prior justifiable reasons for the processing, or you lay gem. Art. 21 para. 2 DSGVO Opposition to processing.
(4) Your personal data have been processed unlawfully.
(5) The deletion of personal data concerning you shall be required to fulfill a legal obligation under Union law or the law of the Member States to which the controller is subject.
(6) The personal data concerning you were collected in relation to information society services offered pursuant to Art. 8 (1) GDPR.
a) Information to third parties
If the person in charge has made the personal data concerning you public and is acc. Article 17 (1) of the GDPR, it shall take appropriate measures, including technical means, to inform data controllers who process the personal data that you have been identified as being affected, taking into account available technology and implementation costs Persons requesting deletion of all links to such personal data or of copies or replications of such personal data.
b) Exceptions
The right to erasure does not exist if the processing is necessary
(1) to exercise the right to freedom of expression and information;
(2) to fulfill a legal obligation that requires processing under Union or Member State law to which the controller is subject or for the performance of a task of public interest or in the exercise of official authority conferring on the controller has been;
(3) for reasons of public interest in the field of public health pursuant to Art. 9 (2) lit. h and i and Art. 9 (3) GDPR;
(4) for archival purposes of public interest, scientific or historical research purposes or for statistical purposes acc. Article 89 (1) GDPR, to the extent that the law referred to in subparagraph (a) is likely to render impossible or seriously affect the achievement of the objectives of that processing, or
(5) to assert, exercise or defend legal claims.
5. Right to information
If you have the right of rectification, erasure or restriction of processing to the controller, he / she is obliged to notify all recipients to whom your personal data have been disclosed of this correction or deletion of the data or restriction of processing, unless: this proves to be impossible or involves a disproportionate effort.
You have a right to the person responsible to be informed about these recipients.
6. Right to Data Portability
You have the right to receive personally identifiable information you provide to the controller in a structured, common and machine-readable format. In addition, you have the right to transfer this data to another person without hindrance by the person responsible for providing the personal data, provided that
(1) the processing on a consent acc. Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a DSGVO or on a contract acc. Art. 6 para. 1 lit. b DSGVO is based and
(2) the processing is done by automated means.
In exercising this right, you also have the right to obtain that your personal data relating to you are transmitted directly from one person to another, insofar as this is technically feasible. Freedoms and rights of other persons may not be affected.
The right to data portability does not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority delegated to the controller.
7. Right to
You have the right at any time, for reasons that arise from your particular situation, against the processing of your personal data, which pursuant to Art. 6 para. 1 lit. e or f DSGVO takes an objection; this also applies to profiling based on these provisions.
The controller will no longer process the personal data concerning you unless he can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the purpose of enforcing, exercising or defending legal claims.
If the personal data relating to you are processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct mail.
If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.
Regardless of Directive 2002/58 / EC, you have the option, in the context of the use of information society services, of exercising your right to object through automated procedures that use technical specifications.
8. Right to revoke the data protection consent declaration
You have the right to revoke your data protection declaration at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.