Part 1: Data protection information on our data processing pursuant to Articles (Art.) 13, 14 and 21 of the General Data Protection Regulation (GDPR)
Thank you for your interest in our website and our services. The protection of personal data is particularly important to us.
We have implemented technical and organisational measures to ensure the most complete possible protection of your personal data processed via our website. Nevertheless, internet-based data transmissions can always have security gaps, so that absolute protection cannot be guaranteed.
With this data protection declaration, we inform you how and for what purpose we collect and process your data and which claims and rights you are entitled to according to the data protection regulations.
1. Name and contact details of the controller
This data protection information applies to data processing by(responsible party):
Digiphot e.K Geiselhof 7 D 92272 Freudenberg +49 (0) 9627 91218 www.digiphot.eu
For data protection questions, please contact the company address above.
2. Scope of the processing of personal data
As a matter of principle, we only collect and process personal data of our users if this is required via the contact form for information material on products or for the utilisation and fulfilment of services of our company. Personal data is data with which you can be personally identified. Processing means any operation performed upon personal data, such as collection, recording, organisation, storage, adaptation or alteration, disclosure or any other form of utilisation.
The collection and processing of personal data of our users is carried out in accordance with the following provisions. Further details or additions to the purposes of the data processing can be found in the respective contractual documents, forms, a declaration of consent and/or other information provided to you.
3. Legal basis for the processing of personal data
3.1 Insofar as we obtain the consent of the data subject for processing operations involving personal data, Article 6 (1) a of the EU General Data Protection Regulation (GDPR) serves as the legal basis. You can revoke this consent at any time. You will be informed separately about the consequences of revoking or not granting consent in the corresponding text of the consent.
As a general rule, the revocation of consent only takes effect for the future. Processing that took place before the revocation is not affected by this and remains lawful.
Consent: Consent is any expression of will in the form of a declaration or other unambiguous affirmative action made voluntarily by the data subject for the specific case in an informed manner and in an unambiguous manner, by which the data subject indicates that he or she consents to the processing of personal data relating to him or her. Here, for example, the sending of the contact form.
No other data is collected unless you provide it voluntarily.
Voluntary fields in the form are those fields that are not clearly marked as mandatory (red asterisk). We use your address, telephone number or other personal data in order to contact you, also in case of queries, to enter into a contract with you, to send you the ordered goods or otherwise to be able to react adequately to your request.The data processing for the purpose of contacting us is based on your voluntarily given consent, which can be revoked at any time. The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies (e.g. after we have completed processing your enquiry). Mandatory legal provisions - in particular retention periods - remain unaffected.
3.2 Should the processing of personal data be necessary for the fulfilment of a legal obligation to which our company is subject, Art. 6 para. 1 c DSGVO serves as the legal basis.
Primarily, these are legal requirements (e.g. commercial and tax laws) but also, if applicable, regulatory or other official requirements. The purposes of the processing may include identity and age verification, fraud and money laundering prevention, the prevention, combating and clarification of criminal offences endangering assets, the fulfilment of control and reporting obligations under tax law and the archiving of data for data protection and data security purposes as well as audits by tax and other authorities. In addition, the disclosure of personal data may become necessary in the context of official/court measures for the purpose of collecting evidence, criminal prosecution or the enforcement of civil law claims.
4. Recipients or categories of recipients of your data
Within our company, only authorised employees receive your data who need it to fulfil our contractual and legal obligations or in the context of processing and implementing our legitimate interest. Your data will only be passed on to external bodies in connection with
- in connection with the processing of contracts
- for the purpose of fulfilling legal requirements according to which we are obliged to provide information, report or pass on data or the passing on of data is in the public interest
- on the basis of our legitimate interest or the legitimate interest of the third party for the purposes mentioned (e.g. to authorities, credit agencies, debt collection, lawyers, courts, experts, etc.);
- if you have given us consent to transfer data to third parties.
Processor is a natural or legal person, authority, institution or other body that processes personal data on behalf of the controller. E.g. logistics service provider.
5. Use of links to and from external providers
Please note that our websites contain links to external third parties (e.g. advertising banners) and that links may be mentioned in posts. When you open these links, you are on the website of third parties over whose data protection and security measures we have no influence.We do not monitor these websites in the and are also not responsible for the content and data processing on the corresponding third-party websites.
6. Data deletion and storage period
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage ceases to apply. In addition, data may be stored as long as this is provided for by the European or national legislator in Union regulations, laws or other provisions to which the person responsible is subject (e.g. in the case of storage and documentation obligations according to the German Commercial Code (HGB) or the German Fiscal Code (AO) as well as within the framework of statutory limitation provisions according to the German Civil Code (BGB)). Data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.
7. Your data protection rights
If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights:
- Thus, you have the right to receive information from us about your personal data stored by us, its origin and recipient and the purpose of the data processing according to the rules of Art. 15 DSGVO (if necessary with restrictions according to § 34 BDSG).
- Upon your request, we will correct the data stored about you in accordance with Art. 16 DSGVO if it is inaccurate or incorrect.
- If you so wish, we will delete your data in accordance with the principles of Art. 17 DSGVO, provided that other statutory regulations (e.g. statutory retention obligations or the restrictions under Section 35 BDSG) or an overriding interest on our part (e.g. for the defence of our rights and claims) do not prevent this.
- Taking into account the requirements of Art. 18 DSGVO, you may request us to restrict the processing of your data.
- Furthermore, you may object to the processing of your data in accordance with Art. 21 DSGVO, on the basis of which we must stop processing your data. However, this right of objection only applies in the case of very special circumstances of your personal situation, whereby rights of our company may possibly conflict with your right of objection. More details below.
- You also have the right to receive your data in a structured, common and machine-readable format under the conditions of Art. 20 DSGVO or to transfer it to a third party.
- Furthermore, you have the right to revoke your consent to the processing of personal data at any time with effect for the future. Furthermore, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 DSGVO). The competent supervisory authority for data protection issues is the State Commissioner for Data Protection and Freedom of Information.
https://www.datenschutz-bayern.de However, we recommend that you always address a complaint to us first.
If possible, your requests about exercising your rights should be addressed to our address given above. An informal communication by e-mail is sufficient for this purpose. Information about your right to object Art. 21 DSGVO.
You have the right to object at any time to the processing of your data based on Art. 6(1)(f) DSGVO (data processing on the basis of a balance of interests), if there are grounds for doing so that arise from your particular situation. This also applies to profiling based on this provision within the meaning of Art. 4 No. 4 DSGVO.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims. We may also process your personal data for the purposes of direct marketing. If you do not wish to receive advertising, you have the right to object to this at any time; this also applies to profiling, insofar as it is associated with such direct advertising. We will observe this objection in the future.
8. Security
Our websites use SSL encryption for security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line. If SSL encryption is activated, the data you transmit to us cannot be read by third parties.
Furthermore, we take precautions to protect your personal data from loss, destruction, falsification, manipulation and unauthorised access. The legal data protection regulations of the Federal Republic of Germany are of course observed.
However, please bear in mind that data transmission via the Internet is never completely secure. We cannot guarantee the security of data entered on our website during transmission via the Internet. This is at your own risk.
9. Google Analytics
Where you have given your consent, this website uses Google Analytics, a web analytics service provided by Google Ireland Limited ("Google"). The use includes the operating mode "Universal Analytics". This makes it possible to assign data, sessions and interactions across multiple devices to a pseudonymous user ID and thus to analyse the activities of a user across devices.
Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. In the event that IP anonymisation is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. We would like to point out that on this website, Google Analytics has been extended by IP anonymisation in order to ensure anonymised collection of IP addresses (so-called IP masking). The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. For more information on terms of use and data protection, please visit https://www.google.com/analytics/terms/de.html or https://policies.google.com/?hl=de.
Purposes of processing
On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.
Legal basis
The legal basis for the use of Google Analytics is your consent in accordance with Art. 6 Para. 1 S.1 lit. a DSGVO.
Recipients / categories of recipients
The recipient of the collected data is Google.
Transfer to third countries
Personal data is transferred to the USA under the EU-US Privacy Shield on the basis of the European Commission's adequacy decision. You can access the certificate here.
Duration of data storage
The data sent by us and linked to cookies, user IDs (e.g. user ID) or advertising IDs are automatically deleted after 14 months. Data whose retention period has been reached is automatically deleted once a month.
Data subject rights
You can revoke your consent at any time with effect for the future by preventing the storage of cookies through a corresponding setting in your browser software; however, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent.
In addition, you can prevent the collection of the data generated by the cookie and related to your use of the website (incl. your IP address) to Google as well as the processing of this data by Google by downloading and installing the browser add-on. Opt-out cookies prevent the future collection of your data when visiting this website. To prevent collection by Universal Analytics across different devices, you must perform the opt-out on all systems used. If you click here, the opt-out cookie will be set: Deactivate Google Analytics
10. Changes to this data protection declaration
Changes to the law or changes to our internal processes may make it necessary to amend this data protection declaration. We therefore reserve the right to amend this data protection declaration in accordance with the updating of our website. This privacy policy was last updated on 29.10.2019.