Shopping cart
Shopping cart
category

Privacy and data protection

Privacy Policy

We are very pleased about your interest in our company. Data protection is of particular importance for the management of Foto Erhardt GmbH (hereinafter "Foto Erhardt"). A use of the internet pages of Foto Erhardt is basically possible without any indication of personal data. If special services of our company are used on our website, however, a processing of personal data of the user may be required. If the processing of personal data is required and there is no legal basis for such processing, we generally obtain the consent of the respective user.

The processing of personal data, such as the name, address, e-mail address or telephone number of a user, is always in accordance with the General Data Protection Regulation (hereinafter "DSGVO") and in accordance with the terms applicable to Foto Erhardt country-specific privacy policy. By means of this privacy policy, Foto Erhardt wishes to inform the public about the nature, scope and purpose of the personal data collected, used and processed by Foto Erhardt. Furthermore, data subjects are informed of their rights under this privacy policy.

Foto Erhardt has implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed via this website. Nevertheless, Internet-based data transmissions can generally have security holes, so that absolute protection can not be guaranteed. For this reason, every user is free to transfer personal data to Foto Erhardt in alternative ways, for example by telephone.

1. Definitions

Foto Erhardt's privacy policy is based on the terminology used by the European legislature and legislature in the adoption of the General Data Protection Regulation. Our privacy policy should be easy to read and understand for the public as well as for our customers and business partners. To ensure this, we would like to explain in advance some of the terminology used.

In this privacy statement, we use the following terms, among other things:

1.1 Personal Information

Personal information is any information relating to an identified or identifiable natural person (hereinafter referred to as "affected person"). A natural person is considered to be identifiable who, directly or indirectly, in particular by association with an identifier such as a name, an identification number, location data, an online identifier or one or more special features, expresses the physical, physiological, genetic, mental, economic, cultural or social identity of this natural person can be identified.

1.2 affected person

Affected person is any identified or identifiable natural person whose personal data is processed by Foto Erhardt, in particular the users of the Foto Erhardt website.

1.3 Processing

Processing means any process or series of operations related to personal data, such as collecting, collecting, organizing, organizing, storing, adapting or modifying, reading out, querying, with or without the aid of automated procedures; the use, disclosure by transmission, dissemination or other form of provision, matching or linking, restriction, erasure or destruction.

1.4 Profiling

Profiling is any type of automated processing of personal data which consists in using that personal data to evaluate certain personal aspects relating to a natural person, in particular aspects relating to job performance, economic position, To analyze or predict health, personal preferences, interests, reliability, behavior, whereabouts or location of this natural person.

1.5 pseudonymization

Pseudonymisation is the processing of personal data in such a way that personal data can no longer be assigned to a specific data subject without additional information, provided that such additional information is kept separate and subject to technical and organizational measures to ensure that: the personal data are not assigned to an identified or identifiable natural person.

1.6 processors

The processor is a natural or legal person, agency, body or agency that processes personal data on behalf of Foto Erhardt.

1.7 Third

Third party means a natural or legal person, public authority, body or agency other than the data subject, Foto Erhardt, the processor and the persons authorized under the immediate responsibility of Foto Erhardt or the processor to process the personal data .

1.8 consent

Consent is any act of volition voluntarily and unambiguously made by the person concerned in an informed and unambiguous manner in the form of a statement or other unambiguous confirmatory act that indicates to the data subject that they are involved in the processing of the person concerned personal data.

2. Name and address of the controller

Person responsible under the GDPR, other data protection laws in the member states of the European Union and other regulations with data protection character is the:

Photo Erhardt GmbH
Garden Camp 101
49492 Westerkappeln
Germany
Tel .: 05404 96330
E-Mail: info@foto-erhardt.de
Website: https://www.foto-erhardt.de

3. Name and address of the Data Protection Officer

Foto Erhardt's privacy officer is:

Axel Kersting
Photo Erhardt GmbH
Garden Camp 101
49492 Westerkappeln
Germany
Tel .: 05404 96330
E-Mail: kersting@foto-erhardt.de
Website: https://www.foto-erhardt.de

Every user can contact our data protection officer at any time with any questions or suggestions regarding data protection.

4. Collection of general data and information

Each time the website is accessed, Foto Erhardt uses an automated system to collect a series of general data and information from the calling computer. This general data and information is stored in the log files of the server.

You can capture
used browser types and versions,
the operating system used by the accessing system,
the website from which an accessing system can be found on our website (so-called referrers),
the sub-web pages which are accessed via an accessing system on our website
the date and time of access to the website,
an internet protocol address (IP address),
the internet service provider (ISP) of the accessing system and
other similar data and information used in the event of attacks on our information technology systems.

The IP address is transmitted on every server request so that the server knows where to send the response. Every Internet user receives the IP address from their ISP as soon as they connect to the Internet. The ISP can understand which IP address was assigned to which of its customers at which time. As long as the IP address is stored, the ID of the ISP can theoretically determine the identity of the subscriber.

The legal basis for the temporary storage of data and logfiles is Art. 6 para. 1 lit. f DSGVO.

The processing of the data serves to deliver the contents of the website, to optimize the contents of the website and to ensure the permanent functioning of the information technology systems and the technology of the website. The data of the log files are always stored separately from other personal data. An evaluation of personal data for marketing purposes does not take place in this context.

This collected data and information are therefore statistically and further evaluated by Foto Erhardt with the aim of increasing the privacy and data security in our company, in order to ultimately ensure an optimal level of protection for the personal data we process.

For these purposes, Foto Erhardt's legitimate interest in the processing of data pursuant to Art. 6 para. 1 lit. f DSGVO.

The data will be deleted as soon as it is no longer necessary to achieve the purpose of its survey. In the case of the collection of data for the provision of the website, this is the case when the respective session is over.

If the data is stored in log files, this is the case after seven days at the latest.

5. Cookies

Foto Erhardt's website uses cookies. Cookies are text files that are stored and stored on a computer system via an internet browser.

Numerous websites and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a string through which Internet pages and servers can be assigned to the specific Internet browser in which the cookie was stored. This allows the visited websites and servers to distinguish the user's individual browser from other internet browsers that contain other cookies. A particular web browser can be recognized and identified by the unique cookie ID.


By using cookies, Foto Erhardt can provide users of this website with more user-friendly services that would not be possible without cookies.

The following data are stored and transmitted in the cookies:
Products that have been added to the cart
Entries made during check-out or during an order
Preferences such as language, location, number of search results etc,

Below we will inform you which cookies are stored, their purpose and the expiration date:

MODsid Runtime to end session
necessary for a smooth shop function e.g. to share important information with other shop pages (e.g., registration, shopping cart, order process).
fe_cookie_accept Runtime 2 years
Confirms the cookie acceptance and suppresses the cookie hint
forbiddenGeoTargeting Runtime max. 30 days
Suppresses the request of the site at Maxmind
the MaxMind opt-out is 2 years
geoTargetingAdShown Runtime max. 30 days
counts how many times a store advertisement has already been displayed and suppresses this
geoTargetingAdShownThisSession Runtime max. 1 day
counts the display of store promotion within a session and suppresses this
nearestBranch Runtime 2 years
stores the nearby branches
sxLatestQueryId Runtime 1 second
Semantic search data cookie

Foto Erhardt also uses cookies on the website, which allow an analysis of users' browsing behavior.

These are the following cookies:

_ga to differentiate visitors runtime 2 years
_gid to get user data runtime 1 day
_gat to throttle requests Runtime 10 min to 1 day
_gali maximum ga_cookie duration runtime 1 day

The user data collected in this way will be pseudonymised by technical means. Therefore, an assignment of the data to the calling user is no longer possible. The data will not be stored together with other personal data of the users.

You can find more information about Google Analytics elsewhere in this privacy policy.

When the website is accessed, the user is informed about the use of cookies and his consent to the processing of the personal data used in this context is obtained.

The legal basis for the processing of personal data using technically necessary cookies is Article 6 (1) lit. f DSGVO in the case of consent Art. 6 para. 1 lit. a ..

The legal basis for the processing of personal data using cookies for analysis is Article 6 (1) lit. f DSGVO.

By means of a cookie, the information and offers on our website can be optimized for the benefit of the user. Cookies allow us, as already mentioned, to recognize the users of our website. The purpose of this recognition is to make it easier for users to use our website.

For these purposes, Foto Erhardt's legitimate interest in the processing of personal data pursuant to Art. 6 para. 1 lit. f DSGVO.

Users can prevent the setting of cookies through our website at any time by means of an appropriate setting of the Internet browser used and thus permanently contradict the setting of cookies. Furthermore, already set cookies can be deleted at any time via an internet browser or other software programs. This is possible in all common internet browsers. If the user deactivates the setting of cookies in the Internet browser used, not all functions of our website may be fully usable. Notes on Handling Analytics Cookies can be found in the section "Google Analytics & raquo; can be taken.

6. Google Analytics

Foto Erhardt integrated the component Google Analytics (with anonymization function) on this website. Google Analytics is a web analytics service. Web analysis is the collection, collection and analysis of data about the behavior of visitors to websites. Among other things, a web analysis service collects data on which website a user came to a website (so-called referrers), which subpages of the website were accessed or how often and for which length of stay a subpage was viewed. A web analysis is mainly used to optimize a website and cost-benefit analysis of Internet advertising.

Google Analytics sets a cookie on the user's information technology system. What cookies are, has already been explained above. By using this cookie Google is enabled to analyze the usage of our website. Each time one of the individual pages on this website, operated by Foto Erhardt and on which a Google Analytics component has been integrated, is accessed, the Internet browser on the user's information technology system is automatically prompted by the respective Google Analytics component for data purposes submit the online analysis to Google. As part of this technical process, Google is aware of personal data, such as the user's IP address, which, among other things, Google serve to track the origin of visitors and clicks, and subsequently to allow commission billing. The cookie stores personally identifiable information, such as access time, the location from which access was made, and the frequency of site visits by the user. Each time you visit our website, this personal information, including the IP address of the Internet connection used by the user, is transmitted to Google in the United States of America. This personal information is stored by Google in the United States of America. Google may transfer such personal data collected through the technical process to third parties.

Foto Erhardt uses the addition "_gat._anonymizeIp" for web analysis via Google Analytics. By means of this addendum, the IP address of the user's Internet connection will be shortened and stored anonymously if Google accesses our website from a Member State of the European Union or from another state party to the Agreement on the European Economic Area.


The operator of the Google Analytics component is Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA. Google Inc. is certified under the terms known as Privacy Shield. The certificate can be found at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI be viewed.

The legal basis for the processing of personal data of Google Analytics is Art. 6 para. 1 lit. f DSGVO. The purpose of the Google Analytics component is to analyze visitor flows on our website. Among other things, Google uses the data and information obtained to evaluate the use of our website, to compile for us online reports showing the activities on our websites, and to provide other services related to the use of our website. This is also the legitimate interest of Foto Erhardt in data processing.

The user can prevent the setting of cookies through our website, as shown above, at any time by means of a corresponding setting of the Internet browser used and thus permanently contradict the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a cookie on the user's information technology system. In addition, a cookie already set by Google Analytics can be deleted at any time via the Internet browser or other software programs.

Furthermore, it is possible for users to object to the detection of Google Analytics generated data related to the use of this website and the processing of this data by Google and to prevent such. To do this, the user must add a browser add-on at the link https://tools.google.com/dlpage/ Download and install gaoptout . This browser add-on informs Google Analytics via JavaScript that no data and information about website visits may be transmitted to Google Analytics. The installation of the browser add-on is considered by Google as a contradiction. If the user's information technology system is deleted, formatted or reinstalled at a later date, the user must reinstall the browser add-on to disable Google Analytics. If the browser add-on is uninstalled or disabled by the user or any other person within their sphere of control, it is possible to reinstall or reactivate the browser add-on. Alternatively, users can declare their opposition by setting an opt-out cookie. To do this, visit the following link: Disable Google Analytics . If the user deletes this opt-out cookie, it may be necessary to reset the cookie.

For more information and Google's applicable privacy policy, please visit https://www.google .de / intl / DE / policies / privacy / and http: // www.google.com/analytics/terms/en.html . Google Analytics will be explained at https://www.google.com/intl/de_de/analytics/.

The data will be deleted as soon as it is no longer necessary to achieve the purpose of its survey. Foto Erhardt has selected in the settings of Google Analytics a deletion of all pseudonymised user profiles 14 months after the last activity.

7. Use and use of Google Remarketing

Photo Erhardt has integrated services from Google Remarketing on this website. Google Remarketing is a feature of Google AdWords that allows a business to show advertisements to such internet users that have previously been on the company's website. The integration of Google Remarketing therefore allows a company to create user-friendly advertising and thus allow Internet users to display interest-based ads. Google Remarketing places a cookie on the user's information technology system. What cookies are, has already been explained above. By setting the cookie, Google will be able to recognize the visitor to our website, if he subsequently calls websites that are also members of the Google ad network. With every visit to a website on which the Google Remarketing service has been integrated, the user's Internet browser automatically identifies with Google. In the course of this technical process, Google receives knowledge about personal data, such as the IP address or the surfing behavior of the user, which Google uses among other things to display interest-relevant advertising.

The cookie stores personal information, such as web pages visited by the user. Whenever you visit our website, your personal information, including the IP address of the Internet connection used by em users, is transferred to Google in the United States of America. This personal information is stored by Google in the United States of America. Google may transfer such personal data collected through the technical process to third parties.

The Google Remarketing Services Company is Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA. Google Inc. is certified under the terms known as Privacy Shield. The certificate can be found at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI be viewed.

The legal basis for the processing of personal data of Google Remarketing is Art. 6 para. 1 lit. f DSGVO.

The purpose of Google Remarketing is to show interest-based advertising. Google Remarketing allows you to view ads on the Google Network or view them on other websites that are tailored to the individual needs and interests of Internet users.

Google Remarketing places a cookie on the user's information technology system. What cookies are, has already been explained above. By setting the cookie, Google will be able to recognize the visitor to our website, if he subsequently calls websites that are also members of the Google ad network. With every visit to a website on which the Google Remarketing service has been integrated, the user's Internet browser automatically identifies with Google. In the course of this technical process, Google receives knowledge about personal data, such as the IP address or the surfing behavior of the user, which Google uses among other things to display interest-relevant advertising.

The cookie stores personal information, such as web pages visited by the user. Whenever you visit our website, your personal information, including the IP address of the Internet connection used by em users, is transferred to Google in the United States of America. This personal information is stored by Google in the United States of America. Google may transfer such personal data collected through the technical process to third parties.

The user can prevent the setting of cookies through our website, as shown above, at any time by means of a corresponding setting of the Internet browser used and thus permanently contradict the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a cookie on the user's information technology system. In addition, a cookie already set by Google Analytics can be deleted at any time via the Internet browser or other software programs.

Users also have the option to opt out of Google interest-based advertising. To do this, the user has to go to the link www.google.com/settings/ads from each of his internet browsers and make the desired settings there.

For more information and Google's applicable privacy policy, please visit https://www.google .de / intl / DE / policies / privacy / .

The data will be deleted as soon as it is no longer necessary to achieve the purpose of the survey.

8. Privacy Policy for Use and Use of Google AdWords

Foto Erhardt has integrated Google AdWords on this website. Google AdWords is an Internet advertising service that allows advertisers to run both Google and Google Network search engine results. Google AdWords allows an advertiser to pre-set keywords that will display an ad on Google's search engine results only when the search engine retrieves a keyword-related search result. In the Google Network, the ads are distributed on topical web pages using an automated algorithm and according to pre-defined keywords.

If a user reaches our website via a Google ad, a so-called conversion cookie will be stored on the user's information technology system by Google. What cookies are, has already been explained above. A conversion cookie loses its validity after thirty days and is not used to identify the user. About the conversion cookie is, if the cookie has not yet expired, traced whether certain sub-pages, such as the shopping cart from an online shop system, were accessed on our website. Thanks to the conversion cookie, both Foto Erhardt and Google can understand whether a user who accessed the website via an AdWords ad generated revenue, ie, completed or canceled a purchase.

The data and information collected through the use of the conversion cookie is used by Google to create visitor statistics for our website. These visit statistics are then used by us to determine the total number of users who have been sent to us through AdWords ads, in order to determine the success or failure of each AdWords ad and to optimize our AdWords ads for the future , Neither our company nor other Google AdWords advertisers receive information from Google that could identify users.

The conversion cookie stores personally identifiable information, such as web pages visited by users. Each time you visit our website, your personal information, including the IP address of the Internet connection used by the user, will be transferred to Google in the United States of America. This personal information is stored by Google in the United States of America. Google may transfer such personal data collected through the technical process to third parties.

The Google AdWords Services Provider is Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA. Google Inc. is certified under the terms known as Privacy Shield. The certificate can be found at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI be viewed.

The legal basis for the processing of personal data of Google AdWords is Art. 6 para. 1 lit. f DSGVO.

The purpose of Google AdWords is to promote the site by displaying interest-based advertising on third-party websites and in the search engine results of the Google search engine and displaying ads on our website.

If a user reaches our website via a Google ad, a so-called conversion cookie will be stored on the user's information technology system by Google. What cookies are, has already been explained above. A conversion cookie loses its validity after thirty days and is not used to identify the user. About the conversion cookie is, if the cookie has not yet expired, traced whether certain sub-pages, such as the shopping cart from an online shop system, were accessed on our website. Thanks to the conversion cookie, both Foto Erhardt and Google can understand whether a user who accessed the website via an AdWords ad generated revenue, ie, completed or canceled a purchase.

The user can prevent the setting of cookies through the website, as shown above, at any time by means of a corresponding setting of the Internet browser used and thus permanently contradict the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a conversion cookie on the user's information technology system. In addition, a cookie already set by Google AdWords can be deleted at any time via the Internet browser or other software programs.

Users also have the option to opt out of Google interest-based advertising. To do this, the user has to go to the link www.google.com/settings/ads from each of his internet browsers and make the desired settings there.

For more information and Google's applicable privacy policy, please visit https://www.google .de / intl / DE / policies / privacy / .

The data will be deleted as soon as it is no longer necessary to achieve the purpose of the survey.

9. Registration on our website

Users have the opportunity to register on the website of Foto Erhardt by providing personal information. Which personal data are transmitted to Foto Erhardt is shown in the respective input mask used for the registration. The personal data entered by the user is collected and stored solely for internal use by Foto Erhardt and for its own purposes. Foto Erhardt may arrange for the transfer to one or more processors, see paragraphs 10, 11 and 12.

By registering on the Foto Erhardt website, the IP address assigned by the Internet service provider (ISP), the date and time of registration are also stored. The storage of this data takes place against the background that only so the misuse of our services can be prevented, and these data in case of need make it possible to clarify committed offenses. In this respect, the storage of this data to secure Photo Erhardt is required. A disclosure of this data to third parties is not possible, provided that there is no legal obligation to pass it on or the disclosure of the criminal prosecution serves.

The registration of the user under voluntary indication of personal data serves Foto Erhardt to offer the user contents or achievements, which can be offered due to the nature of the thing only to registered users. Registered users are free to change the personal data given at registration at any time or to delete them completely from the data of Foto Erhardt.

Legal basis for the processing of the data, which are transmitted with the help of an input mask, is kind 6 Abs. 1 lit. f DSGVO. If the contact is aimed at the conclusion of a contract, additional legal basis for the processing is Art. 6 para. 1 lit. b DSGVO.

Foto Erhardt gives any user anytime on request information about which personal data of the user are stored. Furthermore, Foto Erhardt rectifies or deletes personal data at the request or notice of the user, insofar as this does not conflict with any statutory storage requirements. A data protection officer named by name in this data protection statement and the entire staff of Foto Erhardt are available to the user in this context as a contact person.

The data will be deleted as soon as it is no longer necessary for the purpose of its collection.

10. Extended product information

In order to be able to show video, image and text information of the respective manufacturer on our website for the products offered by us, we cooperate with Flixmedia. For this purpose, your IP address will be sent to Flixmedia Ltd, 70-100 City Road, London, EC1V 9BR, United Kingdom, from where media and text files will be embedded in our website. The transmission of your IP address is technically necessary in order to display the contents. When leaving our website, the data will be deleted automatically at Flixmedia.

More information: http://flixmedia.eu/privacy-policy/ .

On some of our websites we use the loadbee platform to display high quality product information. The loadbee platform is operated by the loadbee GmbH headquartered in 70771 Leinfelden-Echterdingen, Nikolaus-Otto-Str. 13, Germany.

If you visit a loadbee-enabled website on our website, you will be connected to the loadbee servers to view product information. loadbee collects your IP address and information about which product information you have provided by loadbee for this communication and to determine your geo-location. After downloading the product information and collecting the geo-location, your IP address will be deleted by loadbee, so that no personal data will be stored by you. A transfer of your IP address to third parties, such as subcontractors of loadbee, will only take place if you explicitly give your consent beforehand.

For more information on data processing and data protection by loadbee, please visit https://company.loadbee.com / en / privacy.

The legal basis for the processing of data by Flixmedia and loadbee is Art. 6 para. 1 lit. f DSGVO.

11. Geolocation

To provide you with specific services (such as submitting offers from your local store), this website uses software developed by MaxMind (MaxMind Inc., 14 Spring Street, 3rd Floor, Waltham, MA 02451, USA) geolocation. This software analyzes IP addresses to determine your approximate location. You can prevent the transmission of the IP to Maxmind by opting out: disable MaxMind geo-targeting

About MaxMind: https://www.maxmind.com/en/privacy_policy .

In addition, this map display site uses the Google Maps API, a map service of Google Inc., 1600 Amphitheater Parkway Mountain View, CA 94043, USA ("Google"), to display an interactive map. By using Google Maps, information about your use of this website (including your IP address) may be transmitted to and stored by Google on servers in the United States. Google may transfer the information obtained through Analytics & Maps to third parties, if required by law or as far as third parties process this data on behalf of Google. Google will never associate your IP address with other Google data. Nevertheless, it would be technically possible that Google could make an identification of at least individual users on the basis of the data received. You can easily deactivate the service of Google Maps and thus prevent the data transfer to Google: Disable JavaScript in your browser. However, we point out that in this case you can not use the map display.

More information: https://policies.google.com/privacy/update?hl = de.

The legal basis for the processing of data in the context of geolocation services is Art. 6 para. 1 lit. f DSGVO

12. Semantic product search with filter (Semknox)

Our website uses as part of the internal product search a service of SEMKNOX GmbH, Webergasse 1, 01067 Dresden. This will show you the matching products on our website for your search query. Your query will be sent directly to SEMKNOX. This also includes the transmission of your IP address as well as the session ID assigned by us. Both information can have a personal reference. A transmission of further personal data does not take place.

SEMKNOX uses so-called & quot; cookies & quot; Text files that are stored on your computer and that enable you to successfully perform the search function. The information generated by the cookie about the use of the search function by you as a user is transmitted to a SEMKNOX hosted server in Germany and stored there. On our behalf SEMKNOX will use this information to answer your search request.

The processing of the information generated by the cookie and transmitted to SEMKNOX is based on Art. 6 para. 1 lit. f DSGVO for the purpose of the needs-based design of our website.

13. Newsletter

Foto Erhardt's website gives users the opportunity to subscribe to the company's newsletter. The only personal data provided is the e-mail address when ordering the newsletter to Foto Erhardt.

Foto Erhardt informs its customers and business partners at regular intervals by way of a newsletter about company offers. The newsletter of our company can only be received by users if it has a valid e-mail address and registers for the newsletter. For legal reasons, a confirmation e-mail will be sent to the e-mail address registered by a user for the first time for the newsletter dispatch in a double-opt-in procedure. This confirmation email serves to check whether the owner of the e-mail address as a user has authorized the receipt of the newsletter.

When registering for the newsletter, Foto Erhardt also stores the IP address of the user assigned by the Internet Service Provider (ISP) at the time of registration as well as the date and time of registration. The collection of this data is necessary in order to be able to understand the (possible) misuse of a user's e-mail address at a later date and therefore serves the legal protection of Foto Erhardt.

The personal data collected as part of a subscription to the newsletter will be used exclusively to send the newsletter. In addition, subscribers of the newsletter will be informed by e-mail if this is necessary for the operation of the newsletter service or registration, as in the case of changes to the newsletter offer or in the event of a change in the technical conditions. There is no transfer of the personal data collected as part of the newsletter service to third parties.

Legal basis for the processing of the data after registration for the newsletter by the user is in the presence of the consent of the user Art. 6 para. 1 lit. a GDPR.

Subscription to our newsletter may be terminated by the user at any time. The consent to the storage of personal data that the user has given us for the newsletter dispatch can be revoked at any time. For the purpose of revoking the consent, there is a corresponding link in each newsletter. It is also possible to unsubscribe at any time directly from the newsletter via the website or to communicate this photo to Erhardt in any other way.

14. Newsletter tracking

Foto Erhardt's newsletters contain so-called counting pixels. A counting pixel is a miniature graphic that is embedded in such emails that are sent in HTML format to enable log file recording and log file analysis. This allows a statistical evaluation of the success or failure of online marketing campaigns. Based on the embedded pixel, Foto Erhardt can recognize if and when an e-mail was opened by a user, if and why the newsletter could not be delivered and which links in the e-mail were called by the user.

Such data collected via the counting pixels contained in the newsletters are stored and evaluated by Foto Erhardt in order to optimize the newsletter distribution. This personal information will not be disclosed to third parties.

Legal basis for the processing of the data after registration for the newsletter by the user is in the presence of the consent of the user Art. 6 para. 1 lit. a GDPR.

Users are entitled at any time to revoke the separate declaration of consent made via the double-opt-in procedure. After a revocation this data will be deleted by Foto Erhardt. A withdrawal from the receipt of the newsletter automatically interprets Foto Erhardt as a revocation.

15. Klarna as payment method

Photo Erhardt integrated components from Klarna on this website. Klarna is an online payment service provider that allows you to purchase on account or flexible installment payments. In addition, Klarna offers other services, such as a buyer protection or an identity and credit check.

Klarna's operating company is Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden.

If the user chooses during the ordering process in our online shop as a payment option either the & laquo; purchase on account & raquo; or & quot; installment purchase & rquo; from, data of the user are automatically transmitted to Klarna. By selecting one of these payment options, the user consents to the transfer of personal data required to process the invoice or installment purchase or for identity and credit checks.

The personal data transmitted to Klarna are usually the first name, last name, address, date of birth, gender, e-mail address, IP address, telephone number, mobile phone number and other data required to process an invoice or credit card Installment purchases are necessary. For the execution of the purchase contract, also such personal data are necessary, which are in connection with the respective order. In particular, there may be reciprocal exchange of payment information, such as bank details, card number, expiry date and CVC code, number of items, article number, data on goods and services, prices and taxes, information on previous purchasing behavior or other information on the financial situation of the user.

The legal basis for the processing of personal data of Klarna is, after having given its consent, Art. 6 para. 1 lit. a GDPR.

The purpose of the transmission of data is in particular identity verification, payment administration and fraud prevention. Foto Erhardt will transfer personal data to Klarna especially if there is a legitimate interest in the transmission. The personal data exchanged between Klarna and Foto Erhardt are transmitted by Klarna to credit reference agencies. This transfer is for identity and credit checks.

Klarna also transfers the personal data to affiliated companies (Klarna Group) and service providers or subcontractors as far as this is necessary to fulfill the contractual obligations or the data is to be processed in the order.

In order to decide on the establishment, implementation or termination of a contractual relationship, Klarna collects and uses data and information about the past payment behavior of users as well as probability values ​​for their behavior in the future (so-called scoring). The calculation of the scoring is carried out on the basis of scientifically recognized mathematical-statistical methods.

The user has the option to revoke the consent to the handling of personal data against Klarna at any time. A revocation has no effect on personal data that must be processed, used or transmitted for (contractual) payment processing.

Klarna's applicable privacy policy can be found at https: / /cdn.klarna.com/1.0/shared/content/policy/data/en_en/data_protection.pdf .

16. PayPal as payment method

Foto Erhardt integrated PayPal components on this website. PayPal is an online payment service provider. Payments are made through so-called PayPal accounts, which are virtual private or business accounts. In addition, PayPal has the ability to process virtual payments through credit cards if a user does not have a PayPal account. A PayPal account is managed via an email address, which is why there is no classic account number. PayPal makes it possible to initiate online payments to third parties or to receive payments. PayPal also takes on trustee functions and offers buyer protection services.

The European operating company of PayPal is PayPal (Europe) S. & agrave; .r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg.

If a user chooses in our online store as a payment option & laquo; PayPal & raquo; from, data of the user are automatically transmitted to PayPal. By selecting this payment option, he agrees to the transmission of personal data required for payment processing.

The personal data transmitted to PayPal is usually a first name, last name, address, email address, IP address, telephone number, mobile phone number or other data required for payment processing. For the execution of the purchase contract are also necessary personal data that are related to the respective order.

The legal basis for the processing of personal data of PayPal is after consent of the user Art. 6 Abs. 1 lit. a GDPR.

The purpose of the data transfer is to process payment and fraud prevention. Foto Erhardt will transfer personal data to PayPal in particular if a legitimate interest in the transmission is given. The personal data exchanged between PayPal and Foto Erhardt may be transmitted by PayPal to credit reporting agencies. This transfer is for identity and credit checks.

PayPal may share personal information with affiliates and service providers or subcontractors where necessary to fulfill contractual obligations or when the data is to be processed by order.

The user has the option to revoke the consent to the handling of personal data to PayPal at any time. A revocation has no effect on personal data that must be processed, used or transmitted for (contractual) payment processing.

PayPal's applicable privacy policy can be found at https: //www.paypal .com / de / webapps / mpp / ua / privacy-full .

17. Installment payment (Powered by PayPal) as payment method

If you have opted for the payment by installments (Powered by PayPal), you have agreed that we have the following personal data necessary for the execution of the purchase contract and an identity and credit check, such as first and last name, address, Date of birth, gender, email address, IP address, telephone number and the data necessary for the execution of the purchase contract, which are related to the order, such as the number of articles, article number, invoice amount and taxes in percent, collected and transmitted to PayPal to have. The transmission of these data takes place, so that PayPal can carry out an identity and credit check for the processing of your purchase with the desired payment method. In accordance with the Federal Data Protection Act, PayPal has a legitimate interest in the transmission of the buyer's personal data and needs them in order to obtain information from credit reporting agencies for the purposes of identity and credit checks.

Revocation of the use of personal data in relation to PayPal:
1. You may revoke your consent to the use of personal data to PayPal at any time. However, PayPal may continue to be entitled to process, use and transmit the personal data as required for contractual payment processing by PayPal, as required by law, or as required by a court or agency.
2. Of course you can always get information about the personal data stored by PayPal. This right is guaranteed by the Federal Data Protection Act. If you, as a buyer, wish to do so or if you wish to notify PayPal of changes to the stored data, you can contact PayPal directly. For more information about PayPal's privacy policy, please see the following Internet address: https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE .

18. Sofortüberweisung as payment method

Foto Erhardt integrated components of Sofortüberweisung on this website. Sofortüberweisung is a payment service that enables cashless payment for products and services on the Internet. Sofortüberweisung represents a technical procedure by which the online retailer immediately receives a payment confirmation. This will enable a merchant to deliver goods, services or downloads to the customer immediately after ordering.

The operating company of Sofortüberweisung is the SOFORT GmbH, Fußbergstraße 1, 82131 Gauting, Germany.

Chooses a user during the ordering process in our online store as a payment option & laquo; Sofortüberweisung & raquo; from, data of the user are automatically transmitted to Sofortüberweisung. With a selection of this payment option, he agrees to a transmission of personal data required for payment processing.

During the purchase via Sofortüberweisung the buyer transmits the PIN and the TAN to the Sofort GmbH. Sofortüberweisung then executes a transfer to the online retailer after a technical check of the account balance and retrieval of further data to check the account funds. The execution of the financial transaction is then automatically communicated to the online merchant.

The personal data exchanged with Sofortüberweisung is first name, last name, address, email address, IP address, telephone number, mobile phone number or other data necessary for payment processing. The purpose of the transmission of the data is payment processing and fraud prevention. Foto Erhardt will provide Sofortüberweisung other personal data even if a legitimate interest in the transfer is given. The personal data exchanged between Sofortüberweisung and Foto Erhardt may be transmitted by Sofortüberweisung to credit reporting agencies. This transfer is for identity and credit checks.

The legal basis for the processing of personal data of Sofortüberweisung is after consent granted Art. 6 para. 1 lit. a GDPR.

Immediate transfer may transfer personal information to affiliates and service providers or subcontractors, to the extent necessary to fulfill the contractual obligations or to process the data on the order.

The user has the option to revoke the consent to the handling of personal data at any time to Sofortüberweisung. A revocation has no effect on personal data that must be processed, used or transmitted for (contractual) payment processing.

The current privacy policy of Sofortüberweisung can be found at https: //www.sofort. com / ger-DE / datenschutzerklaerung-sofort-gmbh / .

19. Contact via the website

Foto Erhardt's website contains information required by law to allow us to contact our company quickly and to communicate with us directly, which also includes a general address of the so-called electronic mail (e-mail address). < / p>

If a user contacts erhardt via e-mail or via a contact form, the user's submitted personal data will be automatically saved.

This always includes the following data:
E-mail address
Reason for the request

When recalling are additionally relevant:
the salutation
the name
the phone number.

Additional data can be optionally provided by the user.

Such personal data transmitted by a user to Foto Erhardt on a voluntary basis will be stored for purposes of processing or contacting the user. There is no disclosure of this personal data to third parties.

The legal basis for the processing of the data transmitted in the course of sending an e-mail is Article 6 (1) lit. f DSGVO.

The data will be deleted as soon as it is no longer necessary to achieve the purpose of its collection. This is the case when the respective conversation with the user has ended. The conversation ends when it can be inferred from the circumstances that the relevant facts have been finally clarified.

 

20. Applications and application process

Foto Erhardt collects and processes the personal data of applicants for the purpose of processing the application process. The processing can also be done electronically. This is particularly the case if an applicant submits corresponding application documents by electronic means, for example by e-mail or via a web form located on the website, to Foto Erhardt.

If Foto Erhardt concludes a contract of employment with an applicant, the transmitted data will be stored for the purpose of the employment relationship in compliance with the legal requirements. If Foto Erhardt does not conclude a contract of employment with the applicant, the application documents will be automatically deleted two months after notification of the cancellation decision, provided that deletion does not conflict with any other legitimate interests of Foto Erhardt. Other legitimate interest in this sense, for example, a burden of proof in a procedure under the General Equal Treatment Act (AGG).

21. Legal basis of processing in general

Unless otherwise stated in this privacy policy in individual cases, the following applies to the legal basis of data processing:
Art. 6 I lit. A DSGVO serves as the legal basis for Foto Erhardt for processing operations in which Foto Erhardt obtains consent for a particular processing purpose.

If the processing of personal data is necessary for the performance of a contract to which the data subject is a party, as is the case, for example, in processing operations necessary for the supply of goods or the provision of any other service or consideration the processing on Art. 6 I lit. b DSGVO.

The same applies to processing operations that are necessary to carry out pre-contractual measures, such as in cases of inquiries about products or services. If Foto Erhardt is subject to a legal obligation which requires the processing of personal data, such as the fulfillment of tax obligations, the processing is based on Art. 6 I lit. c DSGVO.

In rare cases, the processing of personal data may be required to protect the vital interests of the data subject or another natural person. This would be the case, for example, when a visitor to the premises is injured and then his or her name, age, health insurance or other vital information must be passed on to a doctor, hospital or other third party. In such a case, the processing is based on Art. 6 I lit. d DSGVO.

Finally, processing operations can be based on Art. 6 I lit. f DSGVO are based. Processing operations that are not covered by any of the above mentioned legal bases are based on this legal basis if the processing is necessary to safeguard a legitimate interest of Foto Erhardt or a third party, provided the interests, fundamental rights and fundamental freedoms of the person concerned do not prevail.

22. Routine deletion and blocking of personal data in general

Foto Erhardt processes and stores users' personal data only for the period required to achieve the purpose of the storage or as provided for by the European directive and regulatory body or by any other legislator in laws or regulations which Foto Erhardt is subject to .

If the purpose of the storage is omitted or if a storage period prescribed by the European directive and / or regulatory body or other relevant legislature expires, the personal data will be routinely and in accordance with the statutory provisions blocked or deleted.

23. Rights of the data subject

If personal data of the user is processed, the user is i.S.d. DSGVO and he has the following rights to Photo Erhardt:

23.1 Right to confirm
Each data subject has the right to ask Foto Erhardt for confirmation of the processing of the personal data concerned. If an affected person wishes to make use of this confirmation right, they can contact our data protection officer or another Foto Erhardt employee at any time.

23.2 Right to information
Any person affected by the processing of personal data has the right to receive free information from Foto Erhardt on personal data stored about him and a copy of this information. In addition, the European Di- rective and Regulatory Authority gave the data subject the following information:
a. the processing purposes,
b. the categories of personal data being processed
c. the recipients or categories of recipients to whom the personal data have been disclosed or are still being disclosed, in particular to recipients in third countries or to international organizations,
d. if possible, the planned duration for which the personal data will be stored or, if that is not possible, the criteria for determining that duration,
e. the existence of a right to rectification or deletion of the personal data concerning them or to the restriction of the processing by Foto Erhardt or a right to object to this processing,
f. the existence of a right of appeal to a supervisory authority,
G. if the personal data are not collected from the data subject: All available information on the origin of the data,
H. the existence of automated decision-making including profiling in accordance with Article 22 (1) and (4) of the GDPR and - at least in these cases - meaningful information about the logic involved and the scope and intended impact of such processing on the data subject.
i. In addition, the data subject has a right of access as to whether personal data has been transmitted to a third country or to an international organization. If so, then the data subject has the right to obtain information about the appropriate guarantees in connection with the transfer.

If a data subject wishes to exercise this right to information, they can contact our data protection officer or another Foto Erhardt employee at any time.

23.3 Right to correction
Any person affected by the processing of personal data has the right to demand the immediate correction of incorrect personal data concerning them. Furthermore, the data subject has the right, under consideration of the purpose of the processing, to demand the completion of incomplete personal data, also by means of a supplementary declaration.
If an affected person wishes to exercise this right to rectification, they can contact our data protection officer or another Foto Erhardt employee at any time.

23.4 Right to cancel (right to be forgotten)
Any person affected by the processing of personal data has the right to demand from Foto Erhardt that the personal data concerning him / her be deleted immediately if one of the following reasons applies and processing is not required:
a. The personal data has been collected for such purposes or otherwise processed for which they are no longer necessary.
b. The person concerned revokes the consent on which the processing was based on Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR and lacks any other legal basis for processing.
c. According to Art. 21 (1) GDPR, the data subject submits an objection to the processing and there are no legitimate reasons for the processing or the data subject objects to the processing in accordance with Art. 21 (2) GDPR. < br /> d. The personal data was processed unlawfully.
e. The erasure of personal data is required to fulfill a legal obligation under EU or national law, which is subject to Erhardt photo.
f. The personal data were collected in relation to information society services offered pursuant to Art. 8 (1) GDPR.

If any of the above reasons are correct and a data subject wishes to arrange for the deletion of personal data stored at Foto Erhardt, they may at any time contact our data protection officer or another Foto Erhardt employee. The data protection officer of Foto Erhardt or another employee will arrange that the deletion request be fulfilled immediately.
If Foto Erhardt's personal data has been made public and if our company is responsible for deleting personal data as the person responsible pursuant to Art. 17 (1) GDPR, Foto Erhardt will take appropriate measures, including technical ones, taking into account available technology and implementation costs Inform other data controllers processing the published personal data that the data subject has requested that these other data controllers delete all links to such personal data or copies or replications of such personal data, as far as the processing is not required. The data protection officer of Foto Erhardt or another employee will arrange the necessary in individual cases.

23.4 Right to restriction of processing
Any person affected by the processing of personal data has the right to demand that Foto Erhardt restrict processing if one of the following conditions is met:
a. If the accuracy of the personal data is disputed by a data subject, the restriction may be required for a duration that enables Foto Erhardt to verify the accuracy of the personal data.
b. The processing is unlawful, the data subject refuses to delete the personal data and instead requests the restriction of the use of personal data.
c. Foto Erhardt no longer needs the personal data for processing purposes, but the data subject requires them to assert, exercise or defend their rights.
d. The person concerned has objection to the processing acc. Art. 21 para. 1 DSGVO and it is not yet clear whether the legitimate grounds of Foto Erhardt prevail over those of the person concerned.

If one of the above conditions is met and an affected person wishes to request the restriction of personal data stored by Foto Erhardt, they may at any time contact our data protection officer or another photo colleague Foto Erhardt. The data protection officer of Foto Erhardt or another employee will initiate the restriction of processing.

23.5 The right to data portability
Any person affected by the processing of personal data shall have the right to receive in a structured, common and machine-readable format personal data relating to him / her provided to a controller by the data subject. It also has the right to transfer this data to another person without hindrance by Foto Erhardt, to whom the personal data have been provided, if the processing is based on the consent pursuant to Art. 6 (1) (a) GDPR or Art. 9 (2) Letter a DS-GVO or based on a contract pursuant to Art. 6 (1) (b) GDPR and processing by automated means, unless the processing is necessary for the performance of a task in the public interest or in the exercise of official authority which photo was transferred to Erhardt.
Furthermore, in exercising their right to data portability under Article 20 (1) of the GDPR, the data subject has the right to obtain the personal data from Foto Erhardt directly to another person responsible, provided that this is technically feasible and if not so the rights and freedoms of others are compromised.
In order to assert the right to data portability, the data subject may at any time contact the data protection officer appointed by Foto Erhardt or another employee.

23.6 Right to Opposition
Any person concerned by the processing of personal data shall have the right, at any time, to object to the processing of personal data concerning him / her pursuant to Article 6 (1) (e) or (f) of the GDPR for reasons arising from his particular situation , This also applies to profiling based on these provisions. Foto Erhardt no longer processes personal data in the event of an objection, unless it can prove compelling legitimate grounds for processing that outweigh the interests, rights and freedoms of the data subject, or the processing is for assertion, exercise or defense of legal claims.
If Foto Erhardt processes personal data in order to operate direct mail, the data subject has the right to object at any time to the processing of personal data for the purpose of such advertising. This also applies to the profiling, as far as it is associated with such direct mail. If the data subject objects to Foto Erhardt's processing for direct marketing purposes, Foto Erhardt will no longer process the personal data for these purposes.
In order to exercise the right of opposition, the data subject may directly contact the data protection officer of Foto Erhardt or another employee. The data subject is also free, in the context of the use of information society services, notwithstanding Directive 2002/58 / EC, to exercise its right of objection by means of automated procedures using technical specifications.

23.7 Automated decisions on an individual basis including profiling
Any person affected by the processing of personal data shall have the right not to be subject to a decision based solely on automated processing, including profiling, which has a legal effect or similarly appreciably affects its performance, provided that the decision is
(1) is not required for the conclusion or performance of a contract between the person concerned and photo Erhardt, or
(2) is permitted by Union or Member State legislation to which Foto Erhardt is subject, and where such legislation contains reasonable measures to safeguard the rights and freedoms and legitimate interests of the data subject, or
(3) with the express consent of the data subject.

If the decision (1) is required for the conclusion or performance of a contract between the person concerned and Foto Erhardt or (2) it takes place with the express consent of the person concerned, Foto Erhardt GmbH takes measures to protect the rights and freedoms as well to safeguard the legitimate interests of the data subject, including at least the right to obtain the intervention of a person on the part of Foto Erhardt, to state his own position and to challenge the decision.
If the data subject wishes to assert any rights with regard to automated decisions, they can contact our data protection officer or another Foto Erhardt employee at any time.

23.8 Right to revoke a data protection consent
Any person affected by the processing of personal data has the right to withdraw consent to the processing of personal data at any time.
If the data subject wishes to assert their right to withdraw consent, they can contact our data protection officer or another Foto Erhardt employee at any time.

23.9 Right to complain to a supervisory authority
Without prejudice to any other administrative or judicial remedy, users shall have the right to complain to a supervisory authority, in particular in the Member State of the place of residence, the place of work or the place of alleged infringement, if users consider that the processing of the personal data concerning the user violates the GDPR.
The supervisory authority to which the complaint has been submitted shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy under Article 78 of the GDPR.

24. Existence of automated decision-making

As a responsible company, we abstain from automatic decision-making or profiling.