Photoya

Privacy at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit my website. Personal data is any data that can be used to identify you personally. Detailed information on data protection can be found in the Privacy Policy set out below this text.

Data Collection on My Website

Who is responsible for collecting data on this website?

Data processing on this website is carried out by me, the website operator. You can find my contact details in the Legal Notice.

How do I collect your data?

Some data is collected when you provide it to me. This may, for example, be data that you enter in a contact form.

Other data is collected automatically by my hosting provider when you visit the website. This is primarily technical data (such as your internet browser, operating system or the time at which you accessed the page). This data is collected automatically as soon as you access my website.

What do I use your data for?

Some data is collected to ensure that the website is provided without errors. Other data may be used to analyze your user behavior.

What rights do you have regarding your data?

You have the right at any time to obtain information, free of charge, about the origin, recipients and purpose of your stored personal data. You also have the right to request that this data be corrected, blocked or deleted. For this purpose and for any other questions concerning data protection, you may contact me at any time at the address stated in the Legal Notice. You also have the right to lodge a complaint with the competent supervisory authority.

General Information and Mandatory Disclosures

Data Protection

I take the protection of your personal data very seriously. I treat your personal data as confidential and in accordance with statutory data-protection regulations and this Privacy Policy.

When you use this website, various items of personal data are collected. Personal data is data that can be used to identify you personally. This Privacy Policy explains what data I collect and what I use it for. It also explains how and for what purpose this occurs.

Please note that data transmitted via the internet (for example, when communicating by email) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.

Information About the Controller

The controller responsible for data processing on this website is:

Silvia Ulenberg

Phone: +49 (0)211 6985019
Email: silvia@photoya.de

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data (such as names or email addresses).

Withdrawal of Your Consent to Data Processing

Many data-processing operations are possible only with your express consent. You may withdraw consent that you have already given at any time. An informal notification by email to me is sufficient. The lawfulness of data processing carried out before withdrawal remains unaffected by the withdrawal.

Right to Lodge a Complaint With the Competent Supervisory Authority

In the event of a breach of data-protection law, the data subject has the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority for data-protection matters is the state data-protection officer of the German federal state in which I reside. A list of data-protection officers and their contact details is available at the following link: https://www.bfdi.bund.de/DE/In…schriften_links-node.html.

Right to Data Portability

You have the right to have data that I process automatically on the basis of your consent or in performance of a contract delivered to you or to a third party in a commonly used, machine-readable format. If you request the direct transfer of the data to another controller, this will be done only where technically feasible.

Access, Blocking and Deletion

Within the framework of the applicable statutory provisions, you have the right at any time to receive information, free of charge, about your stored personal data, its origin and recipients, and the purpose of the data processing. Where applicable, you also have a right to correction, blocking or deletion of this data. For this purpose and for any other questions concerning personal data, you may contact me at any time at the address stated in the Legal Notice.

Objection to Promotional Emails

I hereby object to the use of contact details published as part of the legal-notice obligations for sending unsolicited advertising and informational materials. I expressly reserve the right to take legal action in the event that unsolicited promotional information, such as spam emails, is sent.

Data Collection on My Website

Cookies

Some of the web pages use cookies. Cookies do not harm your computer and do not contain viruses. They are used to make my services more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies I use are session cookies. They are automatically deleted at the end of your visit. Other cookies remain stored on your device until you delete them. These cookies enable me to recognize your browser when you next visit and, for example, log you in automatically.

You can configure your browser to notify you when cookies are set, to permit cookies only in individual cases, to reject cookies in certain cases or in general, and to delete cookies automatically when the browser is closed. Disabling cookies may limit the functionality of this website.

Cookies required to carry out electronic communications or to provide certain functions that you request (such as a shopping-cart function) are stored on the basis of Article 6(1)(f) GDPR. As the website operator, I have a legitimate interest in storing cookies to ensure that my services are provided in a technically correct and optimized manner. Where other cookies are stored (for example, cookies used to analyze your browsing behavior), they are addressed separately in this Privacy Policy.

Server Log Files

The website provider automatically collects and stores information in server log files, which your browser automatically sends to it. This information includes:

  • browser type and browser version
  • operating system used
  • referrer URL
  • host name of the accessing computer
  • time of the server request
  • IP address (anonymized)

This data is not combined with data from other sources.

The basis for data processing is Article 6(1)(b) GDPR, which permits the processing of data for the performance of a contract or in order to take steps prior to entering into a contract.

Contact Form

If you send me an inquiry using the contact form, the information you enter in the form, including the contact details you provide, will be stored by me for the purpose of processing the inquiry and in case of follow-up questions. I will not share this data without your consent.

The data entered in the contact form is therefore processed solely on the basis of your consent (Article 6(1)(a) GDPR). You may withdraw this consent at any time. An informal notification by email to me is sufficient. The lawfulness of the data-processing operations carried out before withdrawal remains unaffected by the withdrawal.

The data you enter in the contact form will remain with me until you request its deletion, withdraw your consent to its storage, or the purpose for storing the data no longer applies (for example, after your inquiry has been fully processed). Mandatory statutory provisions, in particular retention periods, remain unaffected.

Registration on This Website

You may register on my website in order to use additional features. I use the data entered during registration only for the purpose of providing the relevant offer or service for which you have registered. The mandatory information requested during registration must be provided in full. Otherwise, I will reject the registration.

For important changes, such as changes to the scope of the service or technically necessary changes, I use the email address provided during registration to inform you.

The data entered during registration is processed on the basis of your consent (Article 6(1)(a) GDPR). You may withdraw consent you have given at any time. An informal notification by email to me is sufficient. The lawfulness of data processing already carried out remains unaffected by the withdrawal.

The data collected during registration is stored by me for as long as you remain registered on my website and is then deleted. Statutory retention periods remain unaffected.

Registration With Facebook Connect

Instead of registering directly on my website, you can register using Facebook Connect. This service is provided by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.

If you choose to register with Facebook Connect, you will be redirected automatically to Facebook's platform, where you can log in using your credentials. This links your Facebook profile to my website and services. Through this link, I gain access to data stored by Facebook about you. This primarily includes:

  • Facebook name
  • Facebook profile picture
  • email address stored by Facebook
  • Facebook ID
  • date of birth
  • gender
  • country

This data is used to set up, provide and personalize your account.

Further information can be found in Facebook's Terms of Service and Privacy Policy at: https://de-de.facebook.com/about/privacy/ and https://www.facebook.com/legal/terms/.

Registration With Google+

Instead of registering directly on my website, you can register using Google+. This service is provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

If you choose to register with Google+, you will be redirected automatically to the Google+ platform, where you can log in using your credentials. This links your Google+ profile to my website and services. Through this link, I gain access to data stored by Google+ about you. This primarily includes:

  • Google+ name
  • Google+ profile picture
  • email address stored by Google+
  • Google+ ID
  • date of birth
  • gender
  • country

This data is used to set up, provide and personalize your account.

Further information can be found in the Google Terms of Service, Google+ Terms of Service and Google Privacy Policy at: https://policies.google.com, https://www.google.com and https://policies.google.com.

Registration With Twitter

Instead of registering directly on my website, you can register using Twitter. This service is provided by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA.

If you choose to register with Twitter, you will be redirected automatically to Twitter's platform, where you can log in using your credentials. This links your Twitter profile to my website and services. Through this link, I gain access to data stored by Twitter about you. This primarily includes:

  • Twitter name
  • Twitter profile picture
  • email address stored by Twitter
  • Twitter ID
  • date of birth
  • gender
  • country

This data is used to set up, provide and personalize your account.

Further information can be found in Twitter's Terms of Service and Privacy Policy at: https://twitter.com/de/tos and https://twitter.com/de/privacy.

Processing Data (Customer and Contract Data)

I collect, process and use personal data only insofar as it is necessary to establish, define the content of, or amend the legal relationship (master data). This is done on the basis of Article 6(1)(b) GDPR, which permits the processing of data for the performance of a contract or in order to take steps prior to entering into a contract. I collect, process and use personal data concerning the use of my web pages (usage data) only insofar as this is necessary to enable the user to use the service or to bill for it.

Customer data collected will be deleted after completion of the order or termination of the business relationship. Statutory retention periods remain unaffected.

Data Transfer When Concluding Contracts for Services and Digital Content

I transfer personal data to third parties only where this is necessary for processing the contract, for example to the financial institution responsible for processing payments.

No further transfer of data will take place unless you have expressly consented to it. Your data will not be passed on to third parties without your express consent, for example for advertising purposes.

The basis for data processing is Article 6(1)(b) GDPR, which permits the processing of data for the performance of a contract or in order to take steps prior to entering into a contract.

Analytics Tools and Advertising

Google reCAPTCHA

I use Google reCAPTCHA (referred to below as “reCAPTCHA”) on my website. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).

reCAPTCHA is used to check whether data entered on my website (for example, in a contact form) is entered by a human or by an automated program. For this purpose, reCAPTCHA analyzes the behavior of website visitors on the basis of various characteristics. This analysis begins automatically as soon as the visitor enters the website. For the analysis, reCAPTCHA evaluates various information (such as the IP address, how long the visitor remains on the website, or mouse movements made by the user). The data collected during the analysis is forwarded to Google.

reCAPTCHA analyses run entirely in the background. Website visitors are not informed that an analysis is taking place.

Data is processed on the basis of Article 6(1)(f) GDPR. As the website operator, I have a legitimate interest in protecting my website from abusive automated scraping and spam.

Further information about Google reCAPTCHA and Google's Privacy Policy is available at the following links: https://www.google.com/ and https://www.google.com/recaptcha.

Use of Matomo

This website uses the Matomo web analytics software (www.matomo.org), a service provided by InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand (“Matomo”), to collect and store data on the basis of my legitimate interest in statistically analyzing user behavior for optimization and marketing purposes in accordance with Article 6(1)(f) GDPR. Pseudonymized user profiles may be created and evaluated from this data for the same purpose. Cookies may be used for this purpose. Cookies are small text files stored locally in the cache of the website visitor's internet browser. Among other things, cookies make it possible to recognize the internet browser. The data collected using Matomo technology (including your pseudonymized IP address) is processed on my server.

The information generated by the cookie in the pseudonymous user profile is not used to identify you personally and is not combined with personal data relating to the person behind the pseudonym.

If you do not agree to the storage and evaluation of this data from your visit, you can object to its storage and use at any time by clicking here. In this case, an opt-out cookie will be stored in your browser, meaning that Matomo will not collect any session data. Please note that completely deleting your cookies will also delete the opt-out cookie, and you may need to activate it again.

Newsletter

Newsletter Data

If you would like to receive the newsletter offered on the website, I require your email address and information that allows me to verify that you are the owner of the email address provided and that you agree to receive the newsletter. No other data is collected, or it is collected only on a voluntary basis. I use this data exclusively to send the requested information and do not pass it on to third parties.

The data entered in the newsletter subscription form is processed solely on the basis of your consent (Article 6(1)(a) GDPR). You may withdraw your consent to the storage of the data and email address and to their use for sending the newsletter at any time, for example by using the unsubscribe link in the newsletter. The lawfulness of data-processing operations already carried out remains unaffected by the withdrawal.

The data you provide to me for the purpose of receiving the newsletter is stored by me until you unsubscribe and is deleted after you unsubscribe. Data stored by me for other purposes (such as email addresses for the members' area) remains unaffected.

Plugins and Tools

YouTube

My website uses plugins from the Google-operated YouTube website. The operator of the website is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.

If you visit one of our pages featuring a YouTube plugin, a connection to YouTube's servers is established. The YouTube server is informed which of my pages you have visited.

If you are logged in to your YouTube account, you enable YouTube to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account.

YouTube is used in the interest of presenting my online services in an appealing manner. This constitutes a legitimate interest within the meaning of Article 6(1)(f) GDPR.

Further information about how user data is handled can be found in YouTube's Privacy Policy at: https://www.google.de/intl/de/policies/privacy.

Google Web Fonts

This website uses web fonts provided by Google to ensure that fonts are displayed consistently. When you open a page, your browser loads the required web fonts into its browser cache in order to display text and fonts correctly.

For this purpose, the browser you use must establish a connection to Google's servers. This informs Google that my website was accessed from your IP address. Google Web Fonts are used in the interest of presenting my online services in a consistent and appealing manner. This constitutes a legitimate interest within the meaning of Article 6(1)(f) GDPR.

If your browser does not support web fonts, a standard font from your computer will be used.

Further information about Google Web Fonts is available at https://developers.google.com/fonts/faq and in Google's Privacy Policy: https://www.google.com/policies/privacy/.

Google Maps

This website uses the Google Maps map service through an API. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

To use the features of Google Maps, your IP address must be stored. This information is generally transmitted to a Google server in the USA and stored there. The provider of this website has no influence over this data transfer.

Google Maps is used in the interest of presenting my online services in an appealing manner and making the locations I identify on the website easy to find. This constitutes a legitimate interest within the meaning of Article 6(1)(f) GDPR.

Further information about how user data is handled can be found in Google's Privacy Policy: https://www.google.de/intl/de/policies/privacy/.

SoundCloud

Plugins from the SoundCloud social network (SoundCloud Limited, Berners House, 47-48 Berners Street, London W1T 3NF, United Kingdom) may be integrated into our pages. You can recognize SoundCloud plugins by the SoundCloud logo on the relevant pages.

When you visit my pages, activating the plugin establishes a direct connection between your browser and the SoundCloud server. SoundCloud thereby receives information that you visited my website using your IP address. If you click the “Like” or “Share” button while logged in to your SoundCloud account, you can link and/or share content from my pages with your SoundCloud profile. SoundCloud can then associate your visit to my pages with your user account. Please note that, as the provider of these pages, I have no knowledge of the content of the data transmitted or how it is used by SoundCloud. Further information is available in SoundCloud's Privacy Policy at: https://soundcloud.com/pages/privacy.

If you do not want SoundCloud to associate your visit to my pages with your SoundCloud account, please log out of your SoundCloud account before activating content from the SoundCloud plugin.

Instagram

Our website uses plugins from the online service Instagram. The provider is Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA.

If you visit one of my pages featuring an Instagram plugin, a connection to Instagram's servers is established. The Instagram server is informed which of my pages you visited. Instagram also obtains your IP address. This applies even if you are not logged in to Instagram or do not have an Instagram account. The information collected by Instagram is transmitted to Instagram's server in the USA.

If you are logged in to your Instagram account, you enable Instagram to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your Instagram account.

Further information about how user data is handled can be found in Instagram's Privacy Policy at: https://instagram.com/about/legal/privacy/.

Imgur

Our website uses plugins from the online service Imgur. The provider is Imgur, Inc., 415 Jackson Street, 2nd Floor, Suite 200, San Francisco, CA 94111, USA.

If you visit one of my pages featuring an Imgur plugin, a connection to Imgur's servers is established. The Imgur server is informed which of my pages you visited. Imgur also obtains your IP address. This applies even if you are not logged in to Imgur or do not have an Imgur account. The information collected by Imgur is transmitted to Imgur's server in the USA.

If you are logged in to your Imgur account, you enable Imgur to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your Imgur account.

Further information about how user data is handled can be found in Imgur's Privacy Policy at: https://imgur.com/privacy.

 

Payment Providers

Stripe

The controller has integrated components from Stripe into this website. Stripe is an online payment service provider. Stripe makes it possible to offer various payment methods, such as credit-card payments or direct debit. In this context, Stripe provides software interfaces that allow these payment methods to be integrated into an online shop, for example. Payments are then credited through a Stripe account held with this service provider by Dunkel und Iwer GbR.

Stripe's operating company is headquartered at 185 Berry Street, Suite 550, San Francisco, CA 94107, USA.

We use the online payment service provider Stripe for the following payment methods offered in our online shop or to process other payments with our customers:

  • credit card
  • Sofort bank transfer (Klarna)
  • Giropay

If the data subject selects one of these payment methods during the ordering process in our online shop, the data subject's data is transferred automatically to Stripe. By selecting this payment option, the data subject consents to the transfer of personal data necessary for payment processing.

The personal data transferred to Stripe generally includes first name, last name, address, email address, IP address, telephone number, mobile telephone number or other data, together with financial transaction data such as a credit-card number or bank-account details required to process payment. Personal data connected with the relevant order is also required to perform the purchase contract.

The purpose of transferring data is payment processing and fraud prevention. The controller will transfer personal data to Stripe in particular where there is a legitimate interest in doing so. In some circumstances, personal data exchanged between Stripe and the controller is transferred by Stripe to credit agencies. The purpose of this transfer is to verify identity and creditworthiness.

Stripe may pass personal data on to affiliated companies and service providers or subcontractors insofar as this is necessary to meet contractual obligations or where the data is to be processed on its behalf.

Stripe's applicable privacy provisions are available at https://stripe.com/de/privacy.

PayPal

Among other options, I offer payment via PayPal on our website. The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (referred to below as “PayPal”).

If you select payment via PayPal, the payment data you enter is transferred to PayPal.

Your data is transferred to PayPal on the basis of Article 6(1)(a) GDPR (consent) and Article 6(1)(b) GDPR (processing for the performance of a contract). You may withdraw your consent to data processing at any time. Withdrawal does not affect the effectiveness of data-processing operations carried out in the past.