Imprint Data Protection

imprint

Responsible:

Christoph Klos

Contact:

Kuckucksbadstr. 17a, 79283 Bollschweil

Tax ID:

Data protection

General information

The operator of this site takes the protection of your personal data very seriously. I treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy statement. The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is all data with which you can be personally identified. Use of this website is generally possible without providing personal data. If personal data (such as name, address or email addresses) is collected on my website, this is always done on a voluntary basis wherever possible. This data will not be passed on to third parties without your express consent. We would like to point out that data transmission over the Internet (e.g. when communicating by email) can have security gaps. Complete protection of data against access by third parties is not possible.

1. Name and contact details of the person responsible for processing and the company data protection officer

This privacy information applies to data processing by:

Responsible:

Christof Klos (Data Protection Officer IHK)

Kuckucksbadstrasse 17a

79283 Bollschweil

Mail: chris@csk-foto.de

Phone: 07633-9294382

2. Collection and storage of personal data and the nature and purpose of their use

a) when visiting the website

When you visit the website www.csk-foto.de, the browser used on your device automatically sends information to the server of my website. This information is temporarily stored in a so-called log file. The following information is recorded without your intervention and stored until it is automatically deleted:

* IP address of the requesting computer,

* Date and time of access,

* Name and URL of the retrieved file,

* Website from which access is made,

* browser used and, if applicable, the operating system of your computer and the name of your access provider.

I will process the data mentioned for the following purposes:

** Ensuring a smooth connection to the website,

** Ensuring comfortable use of our website,

** Evaluation of system security and stability as well as

for further administrative purposes.

The legal basis for data processing is Art. 6 Paragraph 1 Clause 1 Letter f of GDPR. My legitimate interest follows from the purposes for data collection listed above. Under no circumstances will I use the data collected for the purpose of drawing conclusions about you personally.

In addition, I use cookies and analysis services when you visit my website. You can find more detailed information about this in sections 4 and 5 of this privacy policy.

b) When using my contact form

If you have any questions, I offer you the opportunity to contact me using a form provided on the website. You must provide a valid email address so that I know who sent me the request and so that I can answer it. Additional information can be provided voluntarily. The data processing for the purpose of contacting me is carried out in accordance with Art. 6 Paragraph 1 Clause 1 Letter a of GDPR on the basis of your voluntarily given consent. The personal data I collect for the use of the contact form will be automatically deleted after your request has been processed.

c) Upon conclusion of the contract

(i) When the contract is concluded, the following data is collected:

* Surname

* Residential address

* Billing address

* E-mail address

(ii) You may provide the following data voluntarily:

Phone number, photo

The data collection for the purpose of concluding a contract with me is carried out on a legal basis in accordance with Art. 6 Para. 1 Clause 1 Letter b of GDPR. This data will be stored as long as it is necessary to fulfil the contractual obligations or is required by law or, in the case of (ii), your consent to the storage of the data is revoked. In the case of (ii), the data collection is carried out in accordance with Art. 6 Para. 1 Clause 1 Letter a of GDPR on the basis of your voluntarily given consent.

3. Transfer of data

Your personal data will not be transferred to third parties for purposes other than those listed below.

I will only pass on your personal data to third parties if:

You have given your express consent in accordance with Art. 6 Para. 1 Clause 1 Letter a of GDPR, the transfer is necessary in accordance with Art. 6 Para. 1 Clause 1 Letter f of GDPR to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data,

in the event that there is a legal obligation to disclose data pursuant to Art. 6 (1) sentence 1 lit. c GDPR, and

this is legally permissible and is necessary for the processing of contractual relationships with you according to Art. 6 Paragraph 1 Clause 1 Letter b of GDPR.

4. Cookies

I use cookies on my website. These are small files that your browser automatically creates and that are stored on your device (e.g. laptop, tablet, smartphone, etc.) when you visit my site. Cookies do not cause any damage to your device and do not contain any viruses, Trojans or other malware.

The cookie stores information that is related to the specific device used. However, this does not mean that I will immediately know your identity.

The use of cookies serves, on the one hand, to make the use of my services more pleasant for you. For example, I use so-called session cookies to recognize that you have already visited individual pages of my website. These are automatically deleted after you leave my website.

In addition, I also use temporary cookies to optimize user-friendliness, which are stored on your device for a specific period of time. If you visit my site again to use my services, it will automatically recognize that you have already visited me and which entries and settings you have made so that you do not have to enter them again.

I also use cookies to statistically record the use of my website and to evaluate it for the purpose of optimizing my offer for you (see section 5). These cookies enable me to automatically recognize that you have already visited my site when you visit it again. These cookies are automatically deleted after a defined period of time.

The data processed by cookies are necessary for the purposes mentioned to protect my legitimate interests and those of third parties in accordance with Art. 6 (1) sentence 1 lit. f GDPR.

Most browsers automatically accept cookies. However, you can configure your browser so that no cookies are stored on your computer or so that a warning always appears before a new cookie is created. However, completely deactivating cookies may mean that you cannot use all the functions of my website.

5. Analysis tools

a) Tracking tools

The tracking measures listed below and used by me are carried out on the basis of Art. 6 Paragraph 1 Clause 1 Letter f of GDPR. With the tracking measures used, I want to ensure that my website is designed to meet your needs and is continuously optimized. On the other hand, I use the tracking measures to statistically record the use of my website and to evaluate it for the purpose of optimizing my offer for you. These interests are to be regarded as legitimate within the meaning of the aforementioned provision.

The respective data processing purposes and data categories can be found in the corresponding tracking tools.

i) Google Analytics

see below

6. Social Media Plug-ins

Based on Art. 6 Paragraph 1 Clause 1 Letter f of GDPR, I use social plug-ins from the social networks Facebook, Twitter and Instagram on my website to make myself better known. The advertising purpose behind this is to be regarded as a legitimate interest within the meaning of the GDPR. The responsibility for data protection-compliant operation must be guaranteed by the respective provider. I integrate these plug-ins using the so-called two-click method in order to protect visitors to our website as best as possible.

a) Facebook

My website uses social media plugins from Facebook to make their use more personal. For this purpose we use the "LIKE" or "SHARE" button. This is an offer from Facebook.

When you visit a page on my website that contains such a plugin, your browser establishes a direct connection to the Facebook servers. The content of the plugin is transmitted directly from Facebook to your browser, which then integrates it into the website.

By integrating the plug-in, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook account or are not currently logged into Facebook. This information (including your IP address) is transmitted from your browser directly to a Facebook server in the USA and stored there.

If you are logged in to Facebook, Facebook can directly associate your visit to my website with your Facebook account. If you interact with the plug-ins, for example by clicking the "LIKE" or "SHARE" button, the corresponding information is also sent directly to a Facebook server and stored there. The information is also published on Facebook and displayed to your Facebook friends.

Facebook can use this information for the purposes of advertising, market research and tailoring Facebook pages to your needs. For this purpose, Facebook creates usage, interest and relationship profiles, e.g. to evaluate your use of my website with regard to the advertisements displayed on Facebook, to inform other Facebook users about your activities on my website and to provide other services associated with the use of Facebook.

If you do not want Facebook to assign the data collected via my website to your Facebook account, you must log out of your Facebook account before visiting my website.

For information on the purpose and scope of data collection and the further processing and use of data by Facebook as well as your rights and setting options to protect your privacy, please refer to Facebook's privacy policy (https://www.facebook.com/about/privacy/).

b) Twitter

My website contains plug-ins from the short message network of Twitter Inc. (Twitter). You can recognise the Twitter plug-ins (tweet button) by the Twitter logo on my site. You can find an overview of tweet buttons here: https://about.twitter.com/resources/buttons.

If you visit a page on my website that contains such a plugin, a direct connection is established between your browser and the Twitter server. Twitter therefore receives the information that you have visited my page using your IP address. If you click the Twitter "tweet button" while you are logged into your Twitter account, you can link the content of our pages to your Twitter profile. This allows Twitter to associate your visit to my pages with your user account. I would like to point out that, as the provider of the pages, I have no knowledge of the content of the transmitted data or its use by Twitter.

If you do not want Twitter to be able to assign your visit to your pages, please log out of your Twitter account. You can find further information on this

in Twitter’s privacy policy (https://twitter.com/privacy).

c) Instagram

My website also uses so-called social plugins (“plugins”) from Instagram, which is operated by Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA (“Instagram”).

The plugins are marked with an Instagram logo, for example in the form of an “Instagram camera”.

When you visit a page on my website that contains such a plugin, your browser establishes a direct connection to Instagram's servers. The content of the plugin is sent directly from Instagram to your browser and integrated into the page. Through this integration, Instagram receives the information that your browser has accessed the corresponding page on my website, even if you do not have an Instagram profile or are not currently logged into Instagram.

This information (including your IP address) is transmitted from your browser directly to an Instagram server in the USA and stored there. If you are logged in to Instagram, Instagram can directly associate your visit to my website with your Instagram account. If you interact with the plugins, for example by clicking the "Instagram" button, this information is also transmitted directly to an Instagram server and stored there.

The information will also be published on your Instagram account and displayed to your contacts there.

If you do not want Instagram to assign the data collected via my website directly to your Instagram account, you must log out of Instagram before visiting my website.

For more information, see Instagram’s privacy policy (https://help.instagram.com/155833707900388).

d) Snapwidget/Instagram Gallery

My website contains the Instagram gallery display and button via the SnapWidget platform. This function may record the user's IP address and the pages they visit on our website, and also set a cookie so that this function works correctly. Interaction with these functions is subject to the privacy policy of the third party that provides the functions. The user can find out more at the following link: https://snapwidget.com/privacy

e) Pinterest

On my website we use social plugins from the social network Pinterest, which is operated by Pinterest Inc., 808 Brannan Street San Francisco, CA 94103-490, USA (“Pinterest”). When you visit a page that contains such a plugin, your browser establishes a direct connection to the Pinterest servers. The plugin transmits log data to the Pinterest server in the USA. This log data may contain your IP address, the address of the websites visited that also contain Pinterest functions, the type and settings of the browser, the date and time of the request, your use of Pinterest and cookies.

Further information on the purpose, scope and further processing and use of data by Pinterest as well as your related rights and options for protecting your privacy can be found in Pinterest's privacy policy: https://about.pinterest.com/de/privacy- policy

7. Rights of data subjects

You have the right:

to request information about the personal data I process in accordance with Art. 15 GDPR. In particular, you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected from me, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;

pursuant to Art. 16 GDPR, to immediately request the rectification of inaccurate or completion of your personal data stored by me;

to request the deletion of your personal data stored by me in accordance with Art. 17 GDPR, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;

to request the restriction of the processing of your personal data pursuant to Art. 18 GDPR, insofar as the accuracy of the data is contested by you, the processing is unlawful but you refuse to delete it and I no longer need the data, but you need it to assert, exercise or defend legal claims or you have objected to the processing pursuant to Art. 21 GDPR;

pursuant to Art. 20 GDPR, to receive your personal data that you have provided to me in a structured, common and machine-readable format or to request that it be transmitted to another controller;

pursuant to Art. 7 Paragraph 3 GDPR, to revoke your consent at any time. This means that I may no longer continue the data processing based on this consent in the future and

to complain to a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or work or of my company headquarters.

7. Right to object

If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 Paragraph 1 Clause 1 Letter f of GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided there are reasons for doing so that arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right of objection, which I will implement without specifying a particular situation.

If you wish to exercise your right of withdrawal or objection, simply send an email to chris@csk-foto.de

8. Data security

When you visit the website, I use the common SSL (Secure Socket Layer) method in conjunction with the highest level of encryption supported by your browser. This is usually 256-bit encryption. If your browser does not support 256-bit encryption, I use 128-bit v3 technology instead. You can tell whether an individual page of my website is being transmitted using encryption by the closed display of the key or lock symbol in the lower status bar of your browser.

I also use suitable technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. My security measures are continuously improved in line with technological developments.

9. Current status and changes to this privacy policy

This privacy statement is based on the requirements of the General Data Protection Regulation, which came into force in May 2018, and the Federal Data Protection Act (new). It is continually updated.

GOOGLE ANALYTICS SUPPLEMENT

This website uses Google Analytics, a web analysis service provided by Google Inc. ("Google"). Google Analytics uses so-called "cookies", text files that are stored on your computer and that enable an analysis of your use of the website. The information on your use of this website generated through the cookie is usually transferred to a Google server in the USA and stored there. However, if IP anonymisation is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You can prevent cookies from being stored by setting your browser software accordingly; However, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout

You can prevent Google Analytics from collecting data by clicking on the following link. An opt-out cookie will be set that prevents the future collection of your data when you visit this website.

Further information on terms of use and data protection can be found in the Google Analytics terms and conditions or in the Google Analytics overview. We would like to point out that Google Analytics has been extended on this website to include the code "gat._anonymizeIp();" in order to ensure anonymous collection of IP addresses (so-called IP masking).