Source: https://www.saal-digital.com/about-saal-digital/privacy-policy/title-picture-of-the-week/
Timestamp: 2019-04-23 16:23:17+00:00

Document:
1.2 The data controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Saal Digital Fotoservice GmbH, Weidenauer Straße 160, 57076 Siegen, Germany, e-mail: support@saal-digital.co.uk. The data controller is the natural or legal person who alone or together with others decides on the purposes and means of processing personal data. The recipient of any personal data is Saal Digital Fotoservice GmbH. A passing on to third does not take place, if not otherwise indicated.
Processing is carried out in accordance with Art. 6 Para. 1 point f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files subsequently if there are any concrete indications of illegal use.
If personal data is also processed by individual cookies implemented by us, the processing is carried out in accordance with Art. 6 para. 1 point b GDPR either for the execution of the contract or in accordance with Art. 6 para. 1 point f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.
According to Art. 6 Para. 1 point b GDPR, personal data will continue to be collected and processed if you provide it to us in order to execute a contract. Which data is collected can be seen from the respective input forms. Your data can be deleted at any time and can be done by sending a message to the above-mentioned address of the data controller. We store and use the data provided by you for contract processing. After complete processing of the contract or deletion of your personal information, your data will be blocked in consideration of tax and commercial retention periods and deleted after expiry of these periods, unless you have expressly consented to further use of your data or a legally permitted further use of data has been reserved by our site, about which we inform you accordingly below.
In the context of contacting us (e.g. via contact form or e-mail), personal data is collected. Title, first name, surname and e-mail address are collected. Depending on the form or topic, further information is collected, as can be seen in the respective contact form. This data is stored and used exclusively for the purpose of responding to your request or for establishing contact and the associated technical administration. The legal basis for processing the data is our legitimate interest in accordance with Art. 6 para. 1 point f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 para. 1 point b GDPR. Your data will be deleted 3 years after completion of the request, provided that there are no legal storage obligations to the contrary. The data is stored to ensure service quality.
In accordance with art. 6 par. 1 point a) GDPR (EU Data Protection Basic Regulation), your data will be sent to our Marketing and Customer Care Department through the registration form located within the cover page of the week so that we can consider you as a candidate in the selection process.
Your data will be deleted by us a maximum of 3 years after completion of the cover picture of the week promotion, provided that there are no legal storage obligations to the contrary. The data is stored to ensure service quality.
Your order data as well as the usage behaviour in the newsletter and the website will be analysed by us in order to provide you with the best possible content. This can be price information or information about new products, for example, and can be transmitted as notifications by e-mail or as a package insert.
By activating the confirmation link, you give us your consent to the use of your personal data in accordance with Art. 6 para. 1 point a GDPR. When you register for the newsletter, we store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration so that we can trace any possible misuse of your e-mail address at a later point in time. The data collected by us when registering for the newsletter will be used exclusively for the purpose of addressing you in advertising by means of the newsletter. You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a message to the data controller named above. After your cancellation, your e-mail address will be deleted from our newsletter distribution list immediately, unless you have expressly consented to further use of your data or we reserve the right to use data in excess thereof, which is permitted by law and about which we inform you in this declaration.
If you have provided us with your e-mail address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services from our range by e-mail. Pursuant to Article 7 Para. 3 UWG (Act Against Unfair Competition), we do not need to obtain separate consent from you for this. In this respect, data processing is carried out solely on the basis of our legitimate interest in personalised direct advertising pursuant to Art. 6 para. 1 point f GDPR. If you have initially objected to the use of your e-mail address for this purpose, we will not send you an e-mail. You are entitled to object to the use of your e-mail address for the aforementioned advertising purpose at any time with effect for the future by notifying the data controller named at the beginning. For this you only have to pay the transmission costs according to the basic tariffs. Upon receipt of your objection, the use of your e-mail address for advertising purposes will cease immediately.
7.1 For the processing of your order we work together with the following service provider(s), which support us wholly or partly in the execution of concluded contracts. Certain personal data is transferred to these service providers in accordance with the following information. The personal data collected by us will be passed on to the transport company commissioned with the delivery within the scope of contract processing, to the extent that is necessary for the delivery of the goods. We will pass on your payment data to the commissioned credit institution within the framework of payment processing, if this is necessary for payment processing. If payment service providers are used, we explicitly inform you of this below. The legal basis for the transfer of data is Art. 6 para. 1 point b GDPR.
You can object to this processing of your data at any time by sending a message to Computop. However, Computop may still be entitled to process your personal data if this is necessary for processing payments in accordance with the contract.
If the goods are delivered by the transport service provider DHL/Deutsche Post (Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn), we will only pass on the name and delivery address of the recipient to DHL/Deutsche Post for the purpose of delivery in accordance with Art. 6 Para. 1 point b GDPR. The data is passed on because DHL/Deutsche Post requires this data for the delivery of goods.
This consent can be revoked at any time with future effect directly with the above-mentioned data controller or with the transport service provider DHL.
If the goods are delivered by the transport service provider DHL Express (DHL Express Germany GmbH, Heinrich-Brüning-Str. 5, 53113 Bonn), we pass on the telephone number, name and delivery address of the recipient to DHL Express for the purpose of delivering the goods in accordance with Art. 6 Para. 1 point b GDPR. The data is passed on because DHL Express requires this data for the delivery of goods.
If the goods are delivered by the transport service provider DTC (DTC Projekt-Logistik GmbH & Co KG, Donaustr. 126, 90451 Nuremberg), we pass on the telephone number, name and delivery address of the recipient to DTC for the purpose of delivering the goods in accordance with Art. 6 Para. 1 point b GDPR. The data is passed on because this data is required for the delivery of goods at DTC.
This consent can be revoked at any time with future effect directly with the above-mentioned data controller or with the transport service provider DTC.
If the goods are delivered by the transport service provider MRW (Mensajerías Reunidas Worldwide S.L., Polígono Industrial Argualas, Nave 38, 50012, Zaragoza, Spain), we pass on the telephone number, name and delivery address of the recipient to MRW for the purpose of delivering the goods in accordance with Art. 6 Para. 1 point b GDPR. The data is passed on because MRW requires this data for the delivery of goods.
This consent can be revoked at any time with future effect directly with the above-mentioned data controller or with the transport service provider MRW.
If the goods are delivered by Österreichische Post Aktiengesellschaft (Österreichische Post Aktiengesellschaft, Rochusplatz 1,1030, Vienna, Austria), we shall forward the telephone number, name and delivery address of the recipient to Austrian Post for the purpose of delivering the goods pursuant to Art. 6 Para. 1 point b GDPR. This data is passed on because Austrian Post requires it for the delivery of goods.
This consent can be revoked at any time with future effect directly with the above-mentioned data controller or with the transport service provider Austrian Post.
The extended data protection mode is used here, which, according to the provider, does not initiate the storage of user information until the video(s) are played. If the playback of embedded YouTube videos is started, the provider uses "YouTube" cookies to collect information about user behavior. According to "YouTube", these serve, among other things, to collect video statistics, to improve user-friendliness and to prevent abusive practices. If you are logged in to Google, your information will be directly associated with your account when you click on a video. If you do not wish to be associated with your profile on YouTube, you must log out before activating the button. Google saves your data (even for users who are not logged in) as usage profiles and evaluates them. Such an evaluation takes place in particular according to art. 6 para. 1 point f GDPR on the basis of the legitimate interests of Google in the insertion of personalised advertising, market research and/or demand-oriented design of its website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.
The conversion tracking cookie is set when a user clicks on an AdWords ad served by Google. Cookies are small text files that are stored on your computer system. These cookies usually expire after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user has clicked on the ad and has been redirected to this page. Each Google AdWords customer receives a different cookie. Cookies cannot therefore be traced through the websites of AdWords customers. The information collected using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. Customers see the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they will not receive any information that personally identifies users. If you do not wish to participate in tracking, you can block this by deactivating the Google Conversion Tracking cookie via your Internet browser under User Settings. They are then not included in the conversion tracking statistics. We use Google Adwords because of our legitimate interest in targeted advertising in accordance with Art. 6 Para. 1 point f GDPR.
This website uses Google Analytics exclusively with the extension "_anonymizeIp()", which ensures an anonymization of the IP address by shortening and excludes a direct personal relationship. As a result of the extension, your IP address will previously be reduced by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. In these exceptional cases, this processing is carried out in accordance with Art. 6 Para. 1 point f GDPR on the basis of our legitimate interest in the statistical analysis of user behaviour for optimisation and marketing purposes.
Our website uses the functions of Google AdWords Remarketing, which we use to advertise this website in Google search results, as well as on third-party websites. Provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). To this end, Google places a cookie in the browser of your terminal device, which automatically uses a pseudonymous cookie ID and the pages you visit to enable interest-based advertising. Processing is based on our legitimate interest in the optimal marketing of our website in accordance with Art. 6 Para. 1 point f GDPR.
This website uses technologies from LiveChat Software S.A., al. Dębowa 3, 53-134 Wrocław, Poland (www.livechatinc.com) to collect and store anonymous data for the purpose of web analysis and to operate the live chat system to respond to live support requests. These anonymous data can be used to create user profiles under a pseudonym. Cookies may be used for this purpose. Cookies are small text files that are stored locally in the cache of the visitor's Internet browser. The cookies enable the recognition of the Internet browser. If the information collected in this way is personal, it is processed in accordance with Art. 6 Para. 1 point f GDPR on the basis of our legitimate interest in effective customer service and statistical analysis of user behaviour for optimization purposes.
- Right to information in accordance with Art. 19 GDPR: If you have exercised your right to have the data controller correct, delete or limit the processing, he/she is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this correction or deletion of the data or restriction on processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed of these recipients.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 19