We are pleased about your visit on the website of our company. Protection of information and in particular data protection is of great importance to our management. In principle, you can use this website without providing any personal data. Should you disclose data to us in connection with the processing described below, we will treat your personal data confidentially and in accordance with the statutory data protection regulations of the European Union and the Federal Republic of Germany, as well as this data protection declaration.
The Photo & Event C.S. GmbH & Co. KG, as the data controller, has implemented numerous technical and organisational measures to ensure the most complete possible protection of the personal data processed via this website. Nevertheless, Internet-based data transmissions can in principle have security gaps, so that absolute protection cannot be guaranteed. For this reason, you as the person concerned are free to transmit personal data to us by alternative means, such as telephone or post.
(a) personal data
This is all information available to us as a responsible person to identify you as a natural person. (e.g. name, address, e-mail, telephone number, IP address)
(b) data subject
That's you as a natural person, if we've identified you.
A processing is every capture, storage, further processing, forwarding, archiving and deletion of data. Here it is irrelevant whether the process is carried out automatically with the help of IT systems or manually (e.g. by letter).
d) Restriction of processing
Limitation of processing is the marking of stored personal data with the aim of limiting their future processing.
Profiling is any type of automated processing of your data that consists of using this data to evaluate certain personal aspects that relate to you. In particular, to analyse or predict aspects relating to your work performance, economic situation, health, personal preferences, interests, behaviour, location or change of location.
This is a process to provide your personal data with an identifier. Furthermore, only this identifier will be used and without the source key or a "reference database" this pseudonym can not be resolved. (e.g. allocation of a customer number)
(g) controller or data controller
Responsible or responsible for the processing is Photo & Event C.S. GmbH & Co. KG with which you have a contractual relationship. It is decisive that we can decide independently about the processing procedures and means.
h) Contract processor
A contract processor is a company name which is used by Photo & Event C.S. GmbH & Co. KG has been instructed to assist it in the collection, processing, storage, forwarding or deletion of your data. Usually these are IT service providers, but also waste disposal companies, which are e.g. commissioned with the destruction of files.
A consent is each of you, for the certain individual case given expressions of intent. You will be fully informed of what you agree to.
2. the name and address of the controller
Responsible for this website and the central services of Photo & Event C.S. GmbH & Co. in accordance with the data protection basic regulation and other regulations with data protection character, for this website and the central services of the Photo & Event C.S. GmbH & Co. KG
Photo & Event C.S. GmbH & Co. KG
Alte Poststraße 5
Phone: +49 (0) 9321 1309090
3. the name and address of the Data Protection Officer
For Photo & Event C.S. GmbH & Co. KG has appointed a data protection officer. He is at your disposal at any time for questions in connection with data processing.
EIKONA Systems GmbH
Data protection officer - confidential –
Am Alten Bahnhof 8
Phone: +49 9381 7177 8 59
4. rights of the data subject
In accordance with Chapter 3 of the GDPR, you as the party concerned have the rights listed below. In order to fulfil our obligations in connection with your rights in accordance with the law, please address the relevant enquiries to our data protection officer.
a) Art. 15 Right to information
You have an unlimited right to demand information about the personal data processed by you. This information must be provided to you free of charge. You may request information about the following information, copies of which must also be sent to you:
- the purpose of processing your data,
- the categories of the data,
- the internal and external recipients of your data,
- the duration of the data storage,
- their rights under Chapter 3, in connection with data processing,
- the origin of the data, if they have not been collected from you,
- whether a profile was created,
- whether your data has been transferred to a third country (non-EU and non-EEA),
- which data protection authority is responsible for our respective company,
b) Art. 16 Right to rectification
If we should process wrong data from you, you can have these corrected at any time with your contact person.
c) Art. 17 Right to cancellation
You have the right to demand the deletion of your personal data at any time. We may be required by law to retain your data for a certain period of time (e.g. 6 years for business mail or 10 years for tax related documents), in which case we will block your record until the retention period expires and then delete the record accordingly. Please address your request for deletion to the data protection officer, who will exercise your rights in our company on your behalf.
d) Art. 18 Right to limitation of processing
If you dispute the accuracy of our personal data, or if you refuse the deletion of your data and instead demand the restriction (e.g. in the case of advertising letters) then you can demand the restriction of processing from us. We will then set your data unlocked.
e) Art. 19 Notification obligations in connection with rectification, erasure or limitation
We are obliged to inform all recipients of your data of any correction, deletion or restriction commissioned by you, insofar as this is possible and can be implemented with a reasonable effort. We will inform you about the recipients of your data if you request this.
f) Art. 20 Right to data transferability
You have the right at any time to ask our company to transfer your data to another responsible person. This applies to all master data that we keep about you. If this is technically possible, we will make the data record available in a common machine-readable format (e.g. .csv).
g) Art. 21 Right to object
If data processing is based on Art. 6 Para. I lit. f (so-called legitimate interest), you may object to the processing in this context.
h) Art. 77 Right to appeal to a supervisory authority
You have the right at any time to complain to the data protection supervisory authority responsible for our company if you are of the opinion that we are in any way violating the provisions of the GDPR. For Photo & Event C.S. GmbH & Co. KG is responsible for the following authority:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
You can access the website of the data protection supervisory authority via the following link: https://www.lda.bayern.de/de/index.html
5. processing operations
In this section we will describe the data processing operations that are related to our Internet offering or that apply to a general business relationship between you and our company.
The following legal bases serve us for the processing of your data.
Art. 6 I lit. a GDPR serves our company as a legal basis for processing operations in which we obtain consent for a specific processing purpose.
If the processing of your data is necessary for the fulfilment of a contract to which you are a party, as is the case, for example, with processing operations which are necessary for the delivery of goods or the provision of other services or consideration, the processing is based on Art. 6 I lit. b GDPR. The same applies to such processing operations which are necessary for the implementation of pre-contractual measures, for example in cases of inquiries regarding our products or services or if you apply to us.
If our company is subject to a legal obligation requiring the processing of personal data, such as for the fulfilment of tax obligations, the processing is based on Art. 6 I lit. c GDPR.
In rare cases, the processing of personal data may be necessary to protect vital interests of you or another natural person. This would be the case, for example, if you were injured in our company and your name, health insurance data or other vital information would have to be passed on to a doctor, a hospital or our professional association. Then the processing would be based on Art. 6 I lit. d GDPR.
Ultimately, processing operations could be based on Art. 6 I lit. f GDPR. Processing operations that are not covered by any of the aforementioned legal bases are based on this legal basis if the processing is necessary to safeguard a legitimate interest of our company or a third party, provided that the interests, fundamental rights and fundamental freedoms of you do not prevail. Such processing operations are permitted to us in particular because they have been specifically mentioned by the European legislator.
We operate this website and collect various data in this context.
Some of the Internet pages use so-called cookies. Cookies do not damage your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, more effective and safer. Cookies are small text files that are stored on your computer by your browser.
Most of the cookies we use are so-called "session cookies". They are automatically deleted at the end of your visit. Other cookies remain stored on your terminal until you delete them. These cookies enable us to recognize your browser during your next visit.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, accept cookies for certain cases or generally exclude them and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.
Cookies which are necessary for the electronic communication process or for the provision of certain functions requested by you (e.g. shopping basket function) are stored on the basis of Art. 6 para. 1 lit. f GDPR. We, as website operators, have a justified interest in the storage of cookies for the technically error-free and optimised provision of our services. As far as other cookies (e.g. cookies for the analysis of your surfing behaviour) are stored, these are treated separately in this data protection declaration.
Server Log Data
The Photo & Event C.S. GmbH & Co. KG or our website provider collects data about accesses to our website and stores these as "server log files". The following data is logged in this way:
- Visited website
- Time at the time of access
- Amount of data sent in bytes
- Source/reference from which you came to the page
- Browser used
- Operating system used
- IP address used (anonymized)
The data collected is used only for statistical purposes and to improve the website. However, we reserve the right to subsequently check the server log files if there are concrete indications of illegal use.
Third party modules / analysis tools / advertising
We have activated the IP anonymization function on this website. This will cause Google to shorten your IP address within member states of the European Union or other signatory states to the Agreement on the European Economic Area before it is transmitted to the United States. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator.
Google Web Fonts
This page uses so-called web fonts provided by Google for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly.
For this purpose, the browser you are using must connect to Google's servers. This enables Google to know that your IP address has been used to access our website. The use of Google Web Fonts is in the interest of a uniform and appealing presentation of our online services. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.
If your browser does not support web fonts, a standard font will be used by your computer.
We would like to tailor the content of our website as precisely as possible to your interests and in this way improve our services for you. In order to recognise particularly popular areas of our website, we use the following data
When using this analysis tool, data can be transferred to servers located in the USA and processed there. Please note the following: From the point of view of the European Union, there is no "adequate level of protection" for the processing of personal data in the USA that corresponds to EU standards. However, this level of protection can be replaced for individual companies by certification according to the so-called "EU-U.S. Privacy Shield".
If you do not want us to collect and evaluate information about your visit to our website using Google Analytics, you can object to this at any time in the future.
We implement your objection by setting an opt-out cookie in your browser. This cookie only serves to assign your objection. Please note that for technical reasons, an opt-out cookie only works in the browser in which it was set. If you delete the cookies or use a different browser or terminal, please opt out again.
Below you will find information on the providers of the analysis tools we use and the respective opt-out options:
i. Google Inc. ("Google")
Google is certified according to the EU-U.S. Privacy Shield.
You can prevent the transmission of your data and its collection and processing by Google. Google will inform you about this via the following link: https://tools.google.com/dlpage/gaoptout?hl_en
We have integrated Google Remarketing services on this website. Google Remarketing is a Google AdWords feature that enables us to display advertisements to Internet users who have previously visited our website. The integration of Google Remarketing therefore allows us to create user-related advertising and consequently to display interest-relevant advertising to the Internet user (you).
Google Remarketing services are operated by Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
The purpose of Google Remarketing is to display interest-relevant advertising. Google Remarketing enables us to display advertisements via the Google advertising network or on other websites that are tailored to the individual needs and interests of Internet users.
Google Remarketing places a cookie on your IT system. What cookies are has already been explained above. When cookies are set, Google is able to recognize visitors to our website who subsequently visit websites that are also members of the Google advertising network. Each time you visit a website on which the Google Remarketing service has been integrated, your Internet browser automatically identifies itself to Google. As part of this technical process, Google obtains knowledge of personal data, such as the IP address or the surfing behaviour of the user, which Google uses, among other things, to display advertisements relevant to your interests.
Cookies are used to store personal information, such as the Internet pages visited by you. Accordingly, each time you visit our website, personal data, including the IP address of your Internet connection, is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may share this personal data collected through the technical process with third parties.
The person concerned can prevent the setting of cookies by our website, as described above, at any time by means of an appropriate setting of the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a cookie on your IT system. In addition, a cookie already set by Google Analytics can be deleted at any time via the Internet browser or other software programs.
Furthermore, you have the possibility to object to the interest-related advertising by Google. To do this, you must call up the link www.google.de/settings/ads from each of the Internet browsers you use and make the desired settings there.
We have integrated Google AdWords on this website. Google AdWords is an Internet advertising service that allows advertisers to serve ads in both Google's search engine results and the Google advertising network. Google AdWords allows us to pre-define keywords that will be used to display an ad in Google's search engine results only when you use the search engine to retrieve a keyword relevant search result. In the Google advertising network, the ads are distributed to topic-relevant Internet pages using an automatic algorithm and taking into account the previously defined keywords.
The company operating the Google AdWords services is Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
The purpose of Google AdWords is to promote our website by displaying advertisements of interest on third-party websites and in the search engine results of Google and by displaying third-party advertisements on our website.
If a person concerned, i.e. you, reaches our website via a Google advertisement, a so-called conversion cookie is stored on your IT system by Google. What cookies are has already been explained above. A conversion cookie loses its validity after thirty days and does not serve to identify the person concerned. If the cookie has not yet expired, the conversion cookie is used to track whether certain subpages, such as the shopping cart of an online shop system, have been accessed on our website. Through the conversion cookie, both we and Google can track whether you, who came to our website via an AdWords ad, generated a turnover, i.e. completed or cancelled a purchase.
The data and information collected through the use of the conversion cookie is used by Google to generate visit statistics for our website. These visit statistics are in turn used by us to determine the total number of users who were referred to us via AdWords ads, i.e. to determine the success or failure of the respective AdWords ad and to optimise our AdWords ads for the future. Neither our company nor other Google AdWords advertisers receive any information from Google that could be used to identify you.
You also have the option of opting out of receiving interest-based advertising from Google. To do this, you must call up the link www.google.de/settings/ads from each of the Internet browsers you use and make the desired settings there.
Further information and the valid data security regulations of Google can be called up under https://www.google.de/intl/de/policies/privacy/
We have integrated a link to the Facebook web platform on this website. Facebook enables users of the social network to create private profiles, upload photos and network via friend requests.
The operating company of Facebook is Facebook, Inc. 1 Hacker Way, Menlo Park, CA 94025, USA. If you live outside the USA or Canada, the person responsible for processing personal data is Facebook Ireland Ltd. 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
As soon as you use the Facebook link, your browser is redirected from our website to the Facebook platform. In this context, Facebook remembers from which of our sub-pages you switched to our Facebook fan page. If you are logged in to Facebook at the same time, Facebook will link your profile to our corporate website and remember this. This will also happen if you are logged into Facebook without leaving our website via a link.
If you do not want this information to be transmitted to Facebook in this way, you can prevent it from being transmitted by logging out of your Facebook account before accessing our website.
A complete overview of all Facebook plug-ins can be found at https://developers.facebook.com/docs/plugins/?locale=en_DE. As part of this technical process, Facebook obtains information about which specific subpage of our website is visited by you.
Facebook's published data policy, which is available at https://de-de.facebook.com/about/privacy/, provides information about the collection, processing and use of personal data by Facebook. It also explains which settings Facebook offers to protect your privacy. In addition, various applications are available that make it possible to suppress data transmission to Facebook. Such applications can be used by you to suppress data transmission to Facebook.
Facebook collects so-called Insights data from every Facebook user; we do not use this data in any way for any analyses or evaluations. Unfortunately, we cannot prevent Facebook from collecting this data. See also https://www.photobooth-in.de/common/info/datenschutz for more information.
The Facebook link is used on the basis of Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in the widest possible visibility in the social media.
We have integrated components from YouTube on this website. YouTube is an internet video portal that allows video publishers (us) to post video clips and other users to view, rate and comment on them free of charge. YouTube allows the publication of all types of videos, which is why complete film and television programmes, but also music videos, trailers or videos made by users themselves can be accessed via the Internet portal.
YouTube is operated by YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
Each time you access one of the individual pages on this website, which is operated by us and on which a YouTube component (YouTube video) has been integrated, the Internet browser on your IT system is automatically prompted by the respective YouTube component to download a display of the corresponding YouTube component from YouTube. More information about YouTube can be found at https://www.youtube.com/yt/about/de/ As part of this technical process, YouTube and Google will know which specific page on our website you have visited.
If you are logged in to YouTube at the same time, YouTube recognizes which specific subpage of our website you are visiting by calling up a subpage containing a YouTube video. This information is collected by YouTube and Google and assigned to your respective YouTube account.
YouTube and Google always receive information via the YouTube component that you have visited our website when you are logged in to YouTube at the same time as you visit our website; this takes place regardless of whether you click on a YouTube video or not.
If you do not want this information to be transmitted to YouTube and Google in this way, you can prevent it from being transmitted by logging out of your YouTube account before you visit our website.
We have integrated components of the Instagram service on this website. Instagram is a service that qualifies as an audiovisual platform that allows you to share photos and videos and also share such data on other social networks.
Instagram's services are operated by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland.
Each time you access one of the individual pages on this site that is operated by us and on which an Instagram component (Insta button) has been integrated, the Internet browser on your IT system is automatically prompted by that Instagram component to download a representation of that Instagram component. As part of this technical process, Instagram will know which specific subpage of our website you are visiting.
If you are logged in to Instagram at the same time, Instagram recognizes which specific page you are visiting each time you visit our website and for the entire duration of your visit to our website. This information is collected by the Instagram component and assigned to your Instagram account by Instagram. If you click on one of the Instagram buttons integrated on our website, the data and information transferred will be assigned to your personal Instagram user account and stored and processed by Instagram.
Instagram always receives information from the Instagram component that you have visited our website when you are logged in to Instagram at the same time as you access our website, regardless of whether you click on the Instagram component or not. If you do not want to submit this information to Instagram in this way, you can prevent the submission by logging out of your Instagram account before accessing our website.
Contact / Inquiries / Newsletter
In the following, we describe the possibilities of establishing contact with the employees of our company.
Contact form / Inquiry form
If you send us enquiries using the contact form/inquiry form, your details from the enquiry form including the contact data provided by you there will be stored by us for the purpose of processing the enquiry, preparing a non-binding offer and in the event of follow-up enquiries. These data will not be passed on without your consent.
The processing of the data entered in the contact form thus takes place in the first step on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time. For this purpose, an informal e-mail notification to us is sufficient. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation. In further correspondence, there may be a change of legality (e.g. if you request an offer), then your data will be processed in accordance with Art. 6 para. 1 lit b GDPR.
The data entered by you in the contact form will remain with us until you request deletion, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory legal provisions - in particular retention periods - remain unaffected by this.
E-Mail / Phone inquiry
If you send us enquiries by e-mail, your details from the e-mail including the contact details you provided will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. These data will not be passed on without your consent.
The processing of the data entered in the mail is therefore based on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time. For this purpose, an informal e-mail notification to us is sufficient. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation. In further correspondence, there may be a change of legality (e.g. if it is a business correspondence), then your data will be processed according to Art. 6 para. 1 lit b GDPR.
The data entered by you in the e-mail will remain with us until you request deletion, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory legal provisions - in particular retention periods - remain unaffected by this.
Data processing for the fulfilment of contracts
If you have entered into a business relationship with our company, e.g. you have placed an order with us, data processing will be carried out on the basis of Art. 6 Para. 1 lit. b GDPR. All data necessary to initiate, fulfil or complete this order, such as contact data, object data, service providers involved, photo documentation, plans, orders for goods, etc., may be collected and processed by us without separate consent.
Should it be necessary to call in a subcontractor (e.g. other IT service providers, special software suppliers) to fulfil the contract with you, we may also pass on your data to this subcontractor. We guarantee that we have committed our subcontractors to the same strict data protection requirements that you can expect from us.
In individual cases it may happen that we receive information about the credit reform in order to initiate an order. Should any consequences for the order arise from the data obtained in this way, we will clarify this separately with you.
The data in connection with orders are subject to different retention periods. For example, general business letters must be verified for 6 years and tax documents for 10 years. We will only pass on your data within our company to the extent necessary, insofar as this is justified by the subject of the order.
6.) Protection / Encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
As a responsible company, we refrain from automatic decision-making or profiling.
8.) Up-to-dateness / Status
This data protection declaration is dated June 2019 and is subject to constant updating and adaptation to new legal framework conditions and technical developments.