Source: https://www.lukas-gawenda.de/en/datenschutz/
Timestamp: 2020-07-12 05:34:32
Document Index: 439976698

Matched Legal Cases: ['Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 44', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6']

Privacy Policy | Nature Photography & Film - Lukas Gawenda
E-mail address: mail@lukas-gawenda.de
Legal notice: https://www.lukas-gawenda.de/en/impressum/
Management and response to requests.
Consent (Art. 6 para. 1 sentence 1 lit. a. DSGVO) – The data subject has given his/her consent to the processing of personal data relating to him/her for one or more specific purposes.
Contract performance and pre-contractual enquiries (Art. 6 para. 1 sentence 1 lit. b. DSGVO) – Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
Legal obligation (Art. 6 para. 1 sentence 1 lit. c. DSGVO) – The processing is necessary for compliance with a legal obligation to which the controller is subject.
Legitimate interests (Art. 6 para. 1 sentence 1 lit. f. DSGVO) – The processing is necessary in order to protect the legitimate interests of the controller or of a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data.
National data protection regulations in Germany: In addition to the data protection provisions of the basic data protection regulation, national regulations on data protection apply in Germany. These include in particular the law on protection against misuse of personal data in data processing (Federal Data Protection Act – BDSG). In particular, the BDSG contains special regulations on the right to information, the right to deletion, the right of objection, the processing of special categories of personal data, processing for other purposes and transmission as well as automated decision making in individual cases including profiling. Furthermore, it regulates data processing for the purposes of the employment relationship (Section 26 BDSG), in particular with regard to the establishment, implementation or termination of employment relationships and the consent of employees. Furthermore, state data protection laws of the individual federal states may apply.
Subject to express consent or transfer required by contract or by law, we process or allow the data to be processed only in third countries with a recognised level of data protection, including the US processors certified under the “Privacy Shield”, or on the basis of special guarantees, such as contractual obligations through so-called standard protection clauses of the EU Commission, the existence of certifications or binding internal data protection regulations (Art. 44 to 49 DSGVO, information page of the EU Commission: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection_de ).
Cookies are text files that contain data from visited websites or domains and are stored by a browser on the user’s computer. A cookie is primarily used to store information about a user during or after his visit within an online offer. The stored information may include, for example, the language settings on a website, the login status, a shopping cart or the location where a video was viewed. The term “cookies” also includes other technologies that perform the same functions as cookies (e.g., when user information is stored using pseudonymous online identifiers, also referred to as “user IDs”).
Third-Party-Cookies: Third party cookies are mainly used by advertisers (so-called third parties) to process user information.
Necessary (also: essential) cookies: Cookies may be absolutely necessary for the operation of a website (e.g. to store logins or other user entries or for security reasons).
Statistical, marketing and personalization cookies: In addition, cookies are generally also used in the context of range measurement and when the interests of a user or his behaviour (e.g. viewing certain content, using functions etc.) on individual web pages are stored in a user profile. Such profiles are used to show users e.g. content that corresponds to their potential interests. This procedure is also known as “tracking”, i.e. following the potential interests of users. . If we use cookies or “tracking” technologies, we will inform you separately in our privacy policy or when you give your consent.
General information on withdrawal and opposition (opt-out): Depending on whether the processing is based on consent or legal permission, you may at any time revoke any consent you have given or object to the processing of your data by cookie technologies (collectively referred to as “opt-out”). You can initially declare your objection by means of the settings of your browser, e.g. by deactivating the use of cookies (although this may also restrict the functionality of our online service). An objection to the use of cookies for online marketing purposes can also be made by means of a variety of services, especially in the case of tracking, explained via the websites https://optout.aboutads.info and https://www.youronlinechoices.com/. In addition, you can receive further notices of objection in the context of the information on the service providers and cookies used.
Processing of cookie data based on consent: Before we process or allow data to be processed in the context of the use of cookies, we ask users for their consent, which can be revoked at any time. Before the consent has not been given, cookies will be used if necessary, which are necessary for the operation of our online offer. Their use is based on our interest and the interest of the users in the expected functionality of our online offer.
Legal bases: Consent (Art. 6 para. 1 sentence 1 lit. a. DSGVO), legitimate interests (Art. 6 para. 1 sentence 1 lit. f. DSGVO).
We process data of our contractual and business partners, e.g. customers and interested parties (collectively referred to as “contractual partners”) within the scope of contractual and comparable legal relationships as well as associated measures and within the scope of communication with the contractual partners (or pre-contractual), e.g. to answer inquiries.
We process these data in order to fulfil our contractual obligations, to safeguard our rights and for the purposes of the administrative tasks associated with these data and for the purposes of the business organisation. Within the framework of the applicable law, we only pass on the data of the contractual partners to third parties to the extent that this is necessary for the aforementioned purposes or to fulfil legal obligations or with the consent of the contractual partners (e.g. to participating telecommunication, transport and other auxiliary services as well as subcontractors, banks, tax and legal advisors, payment service providers or tax authorities). The contractual partners will be informed about other forms of processing, e.g. for marketing purposes, within the scope of this data protection declaration.
We inform our contractual partners which data are required for the above-mentioned purposes before or within the scope of data collection, e.g. in online forms, by special marking (e.g. colours) or symbols (e.g. asterisks or similar), or personally.
Artistic and literary services: We process the data of our clients in order to enable them to select, acquire or commission the selected services or works and related activities, as well as to pay for and deliver or execute or provide them.
The required information is identified as such within the scope of the order, contract or comparable contract conclusion and includes the information required for delivery and invoicing as well as contact information in order to be able to hold possible consultations.
Processed data types: Inventory data (e.g. names, addresses), payment data (e.g. bank details, invoices, payment history), contact data (e.g. e-mail, telephone numbers), contract data (e.g. subject of contract, duration, customer category).
Persons concerned: Interested parties, business and contractual partners.
Purposes of the processing: Contractual performance and service, contact requests and communication, office and organisational procedures, administration and response to requests.
Legal bases: Fulfilment of contract and pre-contractual enquiries (Art. 6 para. 1 sentence 1 lit. b. DSGVO), Legal obligation (Art. 6 para. 1 sentence 1 lit. c. DSGVO), Legitimate interests (Art. 6 para. 1 sentence 1 lit. f. DSGVO)
We offer our services on online platforms that are operated by other service providers. In this context, the data protection notices of the respective platforms apply in addition to our data protection notices. This applies in particular with regard to the methods used on the platforms for measuring reach and for interest-based marketing.
Processed data types: Inventory data (e.g. names, addresses), payment data (e.g. bank details, invoices, payment history), contact data (e.g. e-mail, telephone numbers), contract data (e.g. subject matter of contract, duration, customer category), usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses).
Persons concerned: Customers.
Purposes of the processing: Contractual performance and service.
Legal bases: Fulfilment of contract and pre-contractual enquiries (Art. 6 para. 1 sentence 1 lit. b. DSGVO), legitimate interests (Art. 6 para. 1 sentence 1 lit. f. DSGVO).
We use blogs or comparable means of online communication and publication (hereinafter “publication medium”). Readers’ data are processed for the purposes of the publication medium only to the extent necessary for its presentation and for communication between authors and readers or for security reasons. In addition, we refer to the information on the processing of visitors to our publication medium in the context of this data protection notice.
Processed data types: Inventory data (e.g. names, addresses), contact data (e.g. e-mail, telephone numbers), content data (e.g. text entries, photographs, videos), usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses)
Purposes of the processing: Contractual performance and service, feedback (e.g. collecting feedback via online form).
The server log files can be used on the one hand for security purposes, e.g. to avoid overloading the servers (especially in the case of abusive attacks, so-called DDoS attacks), and on the other hand to ensure the utilization of the servers and their stability.
Processed data types: Content data (e.g. text entries, photographs, videos), usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses)
Legal bases: Justified interests (Art. 6 para. 1 sentence 1 lit. f. DSGVO).
We send newsletters, e-mails and other electronic notifications (hereinafter referred to as “newsletters”) only with the consent of the recipients or a legal permission. If, in the course of registering for the newsletter, its contents are specifically described, they are decisive for the consent of the users. Furthermore, our newsletters contain information about our services and us.
To subscribe to our newsletters, it is generally sufficient to provide your e-mail address. However, we may ask you to provide a name for the purpose of personal contact in the newsletter, or other information if this is necessary for the purposes of the newsletter.
Double opt-in procedure: The registration for our newsletter is always done in a so-called double opt-in procedure. This means that after registration you will receive an e-mail asking you to confirm your registration. This confirmation is necessary so that nobody can register with foreign e-mail addresses. The newsletter registrations are logged in order to be able to prove the registration process in accordance with the legal requirements. This includes the storage of the registration and confirmation time as well as the IP address. Changes to your data stored by the shipping service provider are also logged.
Notes on legal bases: The sending of newsletters is based on the consent of the recipients or, if consent is not required, on our legitimate interests in direct marketing, if and to the extent permitted by law, e.g. in the case of existing customer advertising. If we commission a service provider to send e-mails, this is done on the basis of our legitimate interests. The registration process is recorded on the basis of our legitimate interests in order to prove that it was carried out in accordance with the law.
Performance measurement: The newsletters contain a so-called “web beacon”, i.e. a pixel-sized file that is retrieved from our server when the newsletter is opened, or, if we use a mailing service provider, from their server. Within the scope of this retrieval, technical information such as information on the browser and your system, as well as your IP address and the time of the retrieval, is initially collected.
This information is used for the technical improvement of our newsletter based on the technical data or the target groups and their reading behaviour on the basis of their retrieval locations (which can be determined by means of the IP address) or the access times. This analysis also includes determining whether the newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to individual newsletter recipients. However, it is neither our intention nor, if used, that of the mailing service provider to observe individual users. Rather, the evaluations serve us to recognise the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.
Purposes of the processing: Direct marketing (e.g. by e-mail or post).
Possibility of opposition (opt-out): You can cancel the receipt of our newsletter at any time, i.e. revoke your consent or object to further receipt. You will find a link to cancel the newsletter either at the end of each newsletter or you can use one of the above mentioned contact options, preferably e-mail.
Mailchimp: E-mail marketing platform; service provider: “Mailchimp” – Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA; Website: https://mailchimp.com; Privacy Policy: https://mailchimp.com/legal/privacy/; Privacy Shield (Ensuring the level of data protection when processing data in the USA): https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active.
We point out that user data may be processed outside the European Union. This may result in risks for the users, because the enforcement of the users’ rights could be made more difficult. With regard to US providers that are certified under the Privacy Shield or offer comparable guarantees of a secure level of data protection, we would like to point out that they thereby undertake to comply with the data protection standards of the EU.
Furthermore, user data within social networks is usually processed for market research and advertising purposes. Thus, for example, user profiles can be created based on the user behaviour and the resulting interests of the users. The user profiles can in turn be used, for example, to place advertisements within and outside the networks that presumably correspond to the interests of the users. For these purposes, cookies are usually stored on the users’ computers, in which the usage behaviour and interests of the users are stored. Furthermore, data may also be stored in the user profiles independently of the devices used by the users (especially if the users are members of the respective platforms and are logged in to them).
Also in the case of requests for information and the assertion of data subject rights, we would like to point out that these can most effectively be asserted with the providers. Only the providers have access to the data of the users and can take appropriate measures and provide information directly. Should you nevertheless require assistance, you can contact us.
Purposes of the processing: Contact requests and communication, tracking (e.g. interest/behavioural profiling, use of cookies), remarketing, reach measurement (e.g. access statistics, recognition of returning visitors).
LinkedIn: Social network; service provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Irland; Website: https://www.linkedin.com; Privacy Policy: https://www.linkedin.com/legal/privacy-policy; Privacy Shield (Ensuring the level of data protection when processing data in the USA): https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active; Possibility of opposition (opt-out): https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
YouTube: Soziales Netzwerk; Dienstanbieter: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland, Mutterunternehmen: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Privacy Policy: https://policies.google.com/privacy; Privacy Shield (Ensuring the level of data protection when processing data in the USA): https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active; Possibility of opposition (opt-out): https://adssettings.google.com/authenticated.
Notes on legal bases: If we ask the users for their consent to the use of the third party providers, the legal basis for the processing of data is the consent. Otherwise, the users’ data will be processed on the basis of our legitimate interests (i.e. interest in efficient, economic and recipient-friendly services). In this context, we would also like to draw your attention to the information on the use of cookies in this privacy policy.
Processed data types: Usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses), inventory data (e.g. names, addresses), contact data (e.g. e-mail, telephone numbers), content data (e.g. text entries, photographs, videos).
Purposes of the processing: Provision of our online offer and user-friendliness, contractual benefits and service, security measures, administration and answering of enquiries, contact enquiries and communication, direct marketing (e.g. by e-mail or by post), tracking (e.g. interest/behavioural profiling, use of cookies), interest-based and behavioural marketing, profiling (creation of user profiles).
Legal bases: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f. DSGVO), consent (Art. 6 para. 1 sentence 1 lit. a DSGVO), contract performance and pre-contractual enquiries (Art. 6 para. 1 sentence 1 lit. b. DSGVO).
Google Fonts: We integrate the fonts (“Google Fonts”) of the provider Google, whereby the data of the users are used solely for the purpose of displaying the fonts in the browser of the users. The integration is based on our legitimate interests in a technically secure, maintenance-free and efficient use of fonts, their uniform presentation and taking into account possible licensing restrictions for their integration. Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland, Mutterunternehmen: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Website: https://fonts.google.com/; Privacy Policy: https://policies.google.com/privacy; Privacy Shield (Ensuring the level of data protection when processing data in the USA): https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
YouTube videos: Video content; service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland, Mutterunternehmen: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Website: https://www.youtube.com; Privacy Policy: https://policies.google.com/privacy; Privacy Shield (Ensuring the level of data protection when processing data in the USA): https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active; Possibility of opposition (opt-out): opt-out plug-in: https://tools.google.com/dlpage/gaoptout?hl=de, Settings for the display of advertisements: https://adssettings.google.com/authenticated.
Vimeo videos: Video content; service provider: Vimeo Inc., Attention: Legal Department, 555 West 18th Street New York, New York 10011, USA; Website: https://vimeo.com; Privacy Policy: https://vimeo.com/privacy; Opt-out: We would like to point out that Vimeo can use Google Analytics and refer you to the privacy policy (https://policies.google.com/privacy) and the opt-out possibilities for Google Analytics (https://tools.google.com/dlpage/gaoptout?hl=de) or the settings of Google for the use of data for marketing purposes (https://adssettings.google.com/).
As a data subject, you are entitled to various rights under the DSGVO, which result in particular from Articles 15 to 18 and 21 DSGVO:
Right of withdrawal for consents: You have the right to revoke any consent given at any time.
Right of access to information: You have the right to obtain confirmation as to whether or not data in question is being processed and to obtain information on such data, as well as further information and a copy of the data in accordance with legal requirements.
Right of rectification: In accordance with the law, you have the right to request the completion of the data concerning you or the correction of incorrect data concerning you.
Right of cancellation and limitation of processing: In accordance with the statutory provisions, you have the right to demand that data concerning you be deleted immediately, or alternatively, in accordance with the statutory provisions, to demand that the processing of the data be restricted.
Right to data portability: You have the right, in accordance with legal requirements, to receive data concerning you which you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another responsible party.
Complaint to the supervisory authority: You also have the right, in accordance with the statutory provisions, to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of suspected infringement, if you believe that the processing of personal data concerning you is in breach of the DSGVO.
Interest based and behavioral marketing: One speaks of interest-based and/or behavioral marketing when the potential interests of users in advertisements and other content are predetermined as precisely as possible. This is done on the basis of information about their previous behaviour (e.g. visiting and staying on certain websites, buying behaviour or interaction with other users), which is stored in a so-called profile. As a rule, cookies are used for these purposes.
Personal data: “Personal data” shall mean any information relating to an identified or identifiable natural person (hereinafter referred to as “data subject”); an identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier (e.g. a cookie) or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Profiling: “Profiling” is any automated processing of personal data that consists of using personal data to analyse, evaluate or predict certain personal aspects relating to a natural person (depending on the type of profiling, this may include information on age, gender, location and movement data, interaction with websites and their content, shopping behaviour, social interactions with other people) (e.g. interests in certain content or products, click behaviour on a website or location). Cookies and web beacons are often used for profiling purposes.
Range measurement: Reach measurement (also known as web analytics) is used to evaluate the flow of visitors to an online offering and can include the behaviour or interests of visitors in certain information, such as the content of websites. With the help of reach analysis, website owners can, for example, identify at what time visitors visit their website and what content they are interested in. This enables them to better adapt the contents of the website to the needs of their visitors. Pseudonymous cookies and web beacons are often used for the purpose of range analysis in order to recognise returning visitors and thus obtain more precise analyses of the use of an online offering.
Remarketing: One speaks of “remarketing” or “retargeting”, for example, when it is noted for advertising purposes which products a user was interested in on a website in order to remind the user of these products on other websites, e.g. in advertisements.
Tracking: One speaks of “tracking” when the behaviour of users can be traced across several online offers. As a rule, behavioral and interest information regarding the online offers used is stored in cookies or on servers of the providers of the tracking technologies (so-called profiling). This information can then be used, for example, to display advertisements to users that are likely to match their interests.
Responsible person: “Responsible person” shall mean the natural or legal person, public authority, agency or any other body which alone or jointly with others determines the purposes and means of the processing of personal data.
Processing: “Processing” means any operation or set of operations which is performed upon personal data, whether or not by automatic means. The term is broad and covers virtually all handling of data, whether it be collection, analysis, storage, transmission or deletion.
Created with free Datenschutz-Generator.de by Dr. Thomas Schwenke