The Photofabrics GmbH (hereinafter referred to as „we“ or „Controller“) takes the protection of personal data seriously and complies with the relevant data protection regulations, in particular the provisions of the EU General Data Protection Regulation (GDPR). In the following, we would like to inform you in particular about when we process which data as part of the use of our website.
General information
1 Scope of data processing
We generally collect and use personal data from our users only to the extent necessary to provide a functional website as well as our content and services. The collection and use of personal data from our users only takes place if the processing of the data is permitted by legal regulations or with the consent of the user.
2 Legal basis for data processing
As far as we obtain the user’s consent for the processing of personal data on our website, Article 6(1)(a) of the GDPR serves as the legal basis for the processing of personal data. In the processing of personal data that is necessary to fulfill a contract to which the user is a party, Article 6(1)(b) of the GDPR serves as the legal basis. This also applies to processing operations that are necessary for the execution of a contractual relationship or pre-contractual measures. As far as the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Article 6(1)(c) of the GDPR serves as the legal basis. If processing is necessary to safeguard a legitimate interest of our company or a third party and the interests, fundamental rights and fundamental freedoms of the data subject concerned do not override that interest, Article 6(1)(f) of the GDPR serves as the legal basis for data processing (so-called balancing of interests). In addition, there are further legal bases for the processing of personal data that we specifically list below, insofar as relevant.
3 Storage duration
The personal data of the users will be deleted or blocked as soon as the purpose of the storage no longer applies. Furthermore, storage may take place if this is provided for by the European or national legislator in Union regulations, laws or other regulations to which our company is subject. Data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a necessity to continue storing the data for the conclusion or performance of a contract.
4 Disclosure of personal data
When we share personal data, these are service providers who support us in fulfilling the aforementioned purposes (e.g., hosting providers). These companies may only use your personal data as so-called order processors to fulfill their tasks on our behalf and are obliged to comply with the relevant data protection regulations. In other respects, however, no personal data will be shared with third parties.
5 Disclosure of personal data
The processing of the personal data you have stored by us takes place in countries of the European Economic Area. For more information on the processing of data in the context of the use of Google services, see section IV.