Privacy Policy
Personal data (hereinafter referred to mostly as "data") is processed by us only within the scope of necessity and for the purpose of providing a functional and user-friendly website, including its content and the services offered there.
According to Art. 4 Paragraph 1. of Regulation (EU) 2016/679, i.e. the General Data Protection Regulation (hereinafter referred to as "GDPR"), "processing" means any operation or set of operations which is performed on personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
With the following privacy policy, we inform you in particular about the type, scope, purpose, duration and legal basis of the processing of personal data, insofar as we decide either alone or jointly with others on the purposes and means of processing. In addition, we inform you below about the third-party components we use for optimization purposes and to increase the quality of use, insofar as third parties process data on their own responsibility as a result.
Our privacy policy is structured as follows:
I. Information about us as the controller
II. Rights of users and data subjects
III. Information on data processing
I. Information about us as the controller
The responsible provider and data protection officer of this website in terms of data protection law is:
photogravure.studio
Steffen Dibke
Eisenindustriestraße 4
58239 Schwerte | Germany
Telephone: +49 15679 785214
Email: info@photogravure.studio
II. Rights of users and data subjects
With regard to the data processing described in more detail below, users and data subjects have the right
to confirmation as to whether data concerning them is being processed, to information about the processed data, to further information about the data processing, and to copies of the data (see also Art. 15 GDPR);
to the correction or completion of incorrect or incomplete data (see also Art. 16 GDPR);
to the immediate erasure of data concerning them (see also Art. 17 GDPR), or, alternatively, insofar as further processing in accordance with Art. 17 Para. 3 GDPR is required, to the restriction of processing in accordance with Art. 18 GDPR;
to receive the data concerning them and provided by them and to transmit this data to other providers/controllers (see also Art. 20 GDPR);
to lodge a complaint with the supervisory authority if they believe that the data concerning them is being processed by the provider in violation of data protection regulations (see also Art. 77 GDPR).
In addition, the provider is obliged to notify all recipients to whom data has been disclosed by the provider of any correction or erasure of data or restriction of processing carried out in accordance with Articles 16, 17 Para. 1, 18 GDPR. However, this obligation does not apply if this notification is impossible or involves a disproportionate effort. Notwithstanding this, the user has a right to information about these recipients.
Furthermore, users and data subjects have the right under Art. 21 GDPR to object to the future processing of data concerning them, provided that the data is processed by the provider in accordance with Art. 6 Para. 1 lit. f) GDPR. In particular, an objection to data processing for the purpose of direct marketing is permissible.
III. Information on data processing
Your data processed when using our website will be deleted or blocked as soon as the purpose of storage no longer applies, there are no statutory retention requirements to prevent the deletion of the data, and no other instructions regarding individual processing procedures are given below.
Contact inquiries / contact options
If you contact us via contact form or email, the data you provide will be used to process your inquiry. The provision of data is necessary to process and answer your inquiry – without its provision, we cannot answer your inquiry, or at best only to a limited extent.
The legal basis for this processing is Art. 6 Para. 1 lit. b) GDPR.
Your data will be deleted if your inquiry has been conclusively answered and there are no statutory retention obligations preventing deletion.
Emails that are classified as commercial letters or invoice documents will be stored for 6 to 10 years as part of statutory archiving requirements in accordance with § 257 HGB and § 147 AO.
The legal basis for this permanent storage is Art. 6 Para. 1 lit. c) GDPR (fulfillment of legal obligations).
Server data
For technical reasons, in particular to ensure a secure and stable website, data is transmitted to us or to our web space provider (Framer B.V.) by your internet browser. These so-called server log files collect, among other things, the type and version of your internet browser, the operating system, the website from which you switched to our website (referrer URL), the website(s) of our website that you visit, the date and time of respective access, and the IP address of the internet connection from which our website is used.
This data collected in this way is stored temporarily, but not together with other data of yours.
This storage is based on the legal basis of Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in the improvement, stability, functionality, and security of our website.
The data will be deleted within seven days at the latest, unless further storage for evidence purposes is required. Otherwise, the data is wholly or partially excluded from deletion until the final clarification of an incident.
Contract execution
The data you transmit to use our range of goods and/or services will be processed by us for the purpose of executing the contract and is necessary in this respect. Conclusion and execution of the contract are not possible without providing your data.
The legal basis for processing is Art. 6 Para. 1 lit. b) GDPR.
We delete the data upon completion of contract execution, but must comply with tax and commercial retention periods.
As part of contract execution, we forward your data to the transport company commissioned with delivery of goods or to the financial service provider, insofar as forwarding is necessary for delivery of goods or for payment purposes.
The legal basis for forwarding data is then Art. 6 Para. 1 lit. b) GDPR.
To promote our products and services and to communicate with interested parties or customers, we operate a company presence on the Instagram platform.
On this social media platform, we are jointly responsible with Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
The data protection officer of Instagram can be reached via a contact form:
https://www.facebook.com/help/contact/540977946302970
We have regulated joint responsibility in an agreement regarding respective obligations in terms of the GDPR. This agreement, from which the mutual obligations arise, is available at the following link:
https://www.facebook.com/legal/terms/page_controller_addendum
The legal basis for processing personal data that takes place thereby and is shown below is Art. 6 Para. 1 lit. f GDPR. Our legitimate interest lies in analysis, communication, and the sale and promotion of our products and services.
The legal basis can also be consent from the user in accordance with Art. 6 Para. 1 lit. a GDPR towards the platform operator. According to Art. 7 Para. 3 GDPR, the user can withdraw consent at any time for the future by notifying the platform operator.
When calling up our online presence on the Instagram platform, user data (e.g. personal information, IP address, etc.) is processed by Meta Platforms Ireland Limited as the operator of the platform in the EU.
This user data is used for statistical information about the use of our company presence on Instagram. Meta Platforms Ireland Limited uses this data for market research and advertising purposes as well as to create user profiles. Based on these profiles,Meta Platforms Ireland Limited is able, for example, to place interest-based advertisements inside and outside of Instagram. If the user is logged into their Instagram account at the time of access, Meta Platforms Ireland Limited can also link the data with the respective user account.
In the event that the user contacts us via Instagram, the personal data of the user entered on this occasion is used to process the inquiry. The user's data will be deleted by us if the user's inquiry has been conclusively answered and there are no statutory retention obligations, such as in the case of subsequent contract execution.
Cookies may also be set by Meta Platforms Ireland Limited to process the data.
If the user does not agree to this processing, it is possible to prevent the installation of cookies by setting the browser accordingly. Cookies already saved can also be deleted at any time. The settings for this depend on the respective browser. With Flash cookies, processing cannot be prevented via browser settings, but rather through appropriate Flash player settings. If the user prevents or restricts the installation of cookies, this can lead to not all functions of Facebook being fully usable.
Details on processing activities, their prevention, and deletion of data processed by Instagram can be found in the Instagram Privacy Policy:
https://help.instagram.com/519522125107875
It cannot be excluded that processing by Meta Platforms Ireland Limited also takes place via Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025 in the USA.
YouTube
We maintain an online presence on YouTube to present our company and services and to communicate with customers/interested parties. YouTube is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA.
In this respect, we point out that there is a possibility that user data is processed outside the European Union, in particular in the USA. This can result in increased risks for users to the extent that, for example, subsequent access to user data can be made more difficult. Also, we do not have access to this user data. Access is exclusively with YouTube.
YouTube's privacy policy can be found at
https://policies.google.com/privacy
General linking to profiles with third-party providers
The provider uses links to the social networks listed below on the website.
The legal basis here is Art. 6 Para. 1 lit. f GDPR. The provider's legitimate interest lies in improving the quality of use of the website.
The integration of plugins is carried out via a linked graphic. Only by clicking on the appropriate graphic is the user redirected to the service of the respective social network.
After redirection of the customer, information about the user is captured by the respective network. This initially includes data such as IP address, date, time, and page visited. If the user is logged into their user account of respective network during this time, the network operator can optionally associate the collected information of the concrete visit of the user with the personal account of the user. If the user interacts via a "share" button of the respective network, this information can be stored in the personal user account of the user and, if necessary, published. If the user wants to prevent the collected information from being directly assigned to their user account, the user must log out before clicking on the graphic. In addition, there is the option of configuring the respective user account accordingly.
The following social networks are linked by the provider:
Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
Privacy Policy: https://help.instagram.com/519522125107875
Google Analytics
We use Google Analytics on our website, a web analysis service from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as "Google".
Google Analytics helps us analyze website traffic and measure the effectiveness of our marketing campaigns. The legal basis here is Art. 6 Para. 1 lit. a GDPR. The user can withdraw consent to the use of Google Analytics in accordance with Art. 7 Para. 3 GDPR at any time via the "Cookie Settings" of our website with effect for the future.
Information such as time, location, and frequency of website visits as well as interactions with the website (e.g., click paths, ads viewed/clicked, clicks on links) including the user's IP address are transmitted to a Google server in the USA and stored there for a maximum of 2 months.
Google LLC is part of the "Data Privacy Framework", for which the EU Commission has issued an adequacy decision in accordance with Art. 45 GDPR:
https://www.dataprivacyframework.gov/list
Google also collects "demographic characteristics" and can generate statistics that allow statements about the age, gender, and interests of site visitors. This happens through the automated analysis of advertising and information from third-party providers.
If the user has enabled personalized ads in their Google account and consents to Google Analytics, Google can analyze usage behavior across devices – meaning related to all devices the user has linked with their Google account. Google creates cross-device conversion models here; only anonymous statistics are sent to us, no personal data.
If the user wants to disable this cross-device analysis, they can switch off the "Personalized Advertising" function in their Google Account settings under the following link:
https://support.google.com/ads/answer/2662922?hl=en
We use Google Analytics with an anonymization function. This means Google shortens the user's IP address within EU member states or in other contracting states of the EEA Agreement.
Google uses the collected data to evaluate the user's website visit and compile reports on website activity for us. The data is also used to provide other services associated with website and internet usage. Google may also transfer this information to third parties if required by law or if third parties process this data on behalf of Google.
According to its own statements, Google will under no circumstances link the user's IP address with other Google data. Google offers further information and options to prevent data use here:
https://www.google.com/intl/en/policies/privacy/partners
If the user does not agree with the tracking, they can also prevent it by install the Google Analytics opt-out browser add-on once.