Your trust is important to us.

    The protection and security as well as the lawful collection of personal data has a high priority for us. For this reason, we strictly adhere to the rules of the General Data Protection Regulation (GDPR). You will be informed below of the type of data which is collected and the purpose for which it is collected.

    Responsible party under the Data Protection Act:
    Shotshop GmbH
    Hasenheide 12
    10967 Berlin

    1 Visiting our website
    When you visit our website, our web server will temporarily store a record of that access in a log file. We temporarily store the following data: IP-address, website from which the file was retrieved, name of the file, date and time of access, amount of data transferred and the success of the access (web log). These access data will be used exclusively in non-personalized form for the ongoing improvement of our site and for statistical purposes. However, we only store your IP address for the duration of your visit (known as a session ID); your personal data is not analyzed.

    In addition, we use cookies and web analytics services when you visit our website. Please refer to §7 and 8 below.

    Insofar as we obtain the consent of the data subject for processing personal data, Art. 6 Para. 1 lit. d GDPR applies as the legal basis.

    In processing personal data necessary for performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b GDPR applies as the legal basis. This also applies to processing operations that are necessary for carrying out pre-contractual measures.

    Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 Para. 1 lit. c GDPR applies as the legal basis.

    In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 Para. 1 lit. d GDPR applies as the legal basis.

    If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 Para. 1 lit. f GDPR applies as the legal basis for processing.

    2 Collection, processing and use of personal data
    When registering in our online shop, we collect the following data from you: your email address, your full name, your company name, your address and other contact details. This data will only be stored for internal purposes. Personal data will not be sold to third parties.

    This data is collected for the purpose of gaining knowledge of the identity of our contractual partner. Logged-in users can also be provided with personalized services such as administration and storage of their own lightboxes or a shopping basket as well as image upload and image management. This data is stored temporarily in addition to the personal data.

    If you contact us via the contact form or by email, we will store the information you provide in order to answer your inquiry and ask possible follow-up questions.

    Your personal data will be deleted or blocked as soon as the purpose of storage ceases to apply.

    3 Data transfer for billing purposes
    When placing an order, we collect and use your personal data only insofar as this is necessary to fulfil and process your order and to process your enquiries. We also need information about your transactions for billing purposes. Further information, such as bank details or credit card number, will be collected if you wish to pay with the respective payment method or receive remuneration from the sale of photos. Your personal information will only be disclosed to third parties or otherwise transferred if this is required for the purpose of the contract or billing. In the course of processing your order, payment service providers such as PayPal and Wirecard AG will receive the necessary data to process the transaction. The data may only be used by our service providers to fulfill orders.

    4 Use of PayPal and Wirecard
    PayPal transactions are subject to the PayPal Privacy Policy. This can be found at https://www.paypal.com/de/webapps/mpp/ua/privacy-prev?locale.x=en_EN

    Wirecard transactions are subject to the Wirecard Privacy Policy. This can be found at 
    https://www.wirecardbank.com/GDPR

    5 Newsletter
    If you register on our site for our newsletter, we use the data you provide exclusively to inform you about interesting offers for our products and services or about the circumstances relevant to this service or registration.

    A valid email address is required to receive the newsletter. We also store your full name, the IP address you use to subscribe to the newsletter, and the date on which you signed up. This data serves as proof of misuse if an external email address is registered for the newsletter. The data is transmitted to an external service provider which handles the sending of our newsletters.
    We use the Cleverreach service provided by the external service provider CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede. By subscribing to the newsletter, you consent to Cleverreach being given your email address and name as described below.

    Our contract with Cleverreach includes the standard EU contract clauses. Cleverreach sends out our newsletter on our behalf. In addition, Cleverreach offers options for statistical evaluation of sage data. Any evaluation we perform based on the data provided by Cleverreach is only done in the aggregate. This means that we can only generate statistics for a large number of users and an individual evaluation does not take place. However, we would like to point out that Cleverreach uses Google Analytics, to which we have no access and which cannot be influenced by us. If you do not wish Cleverreach to evaluate your usage behavior via Google Analytics, you can object to this by downloading and installing the browser plug-in available under the link http://tools.google.com/dlpage/gaoptout?hl=en.

    You can revoke your consent to the storage of your personal data and its use for sending the newsletter at any time. Each newsletter contains a link that will allow you to revoke consent. You can also send us an email at kontakt@shotshop.com with your request.

    6 Security
    Your personal data provided to us will be secured by taking all technical and organizational security measures so that they are inaccessible to unauthorized access by third parties. To ensure the security of your data during transmission, we encrypt your personal data using SSL (Secure Socket Layer) encryption.

    7 Cookies
    On some of our web pages, we use what are called "session cookies" to facilitate your use of our website. These are small text files stored on your hard drive only for the duration of your visit to our website and deleted depending on the setting of the browser program when you exit the browser. They allow our servers to recognize you, but do not allow any personal identification of you as an individual. In this way your search result and your Lightbox can be assigned to you and saved.

    Cookies help us to make it easier for you to navigate through our website and enable the website to be displayed correctly. These cookies do not retrieve data stored on your hard drive through your information and do not interfere with your PC or files.

    Most browsers are initially set to accept cookies automatically. You can deactivate the storing of cookies or set your browser so it notifies you that cookies are sent. Disabling cookies may prevent you from using all the features of our website.

    8 Google Analytics
    This website uses Google Analytics, a web analysis service provided by Google Inc. ("Google"). Google Analytics uses "cookies", text files that are stored on your computer and that permit analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, if IP anonymization is activated on this website, your IP address will be stored by Google in shortened form within member states of the European Union or in other countries that are contracting parties to the Agreement in the European Economic Area. In exceptional cases only, the complete IP address may be transmitted to a Google server in the USA and truncated there. Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity, and to provide other services regarding website activity and Internet usage for the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with any other data held by Google. You can prevent cookies from being stored by selecting the appropriate settings in your browser; however, we wish to point out that by doing so, you may not be able to enjoy the full functionality of this website.

    If you do not want an evaluation of your usage behavior via Google Analytics, you can object to this by downloading and installing the browser plug-in available under the link http://tools.google.com/dlpage/gaoptout?hl=en.

    9 Use of social media plug-ins

    a. LinkedIn
    Our site uses functions from the LinkedIn network. The service is provided by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. Each time one of our pages containing LinkedIn features is accessed, your browser establishes a direct connection to the LinkedIn servers. LinkedIn is informed that you have visited our webpages from your IP address. If you use the LinkedIn “Recommend” button and are logged into your LinkedIn account, it is possible for LinkedIn to associate your visit to our website to your user account. We would like to point out that, as the provider of these pages, we have no knowledge of the content of the data transmitted or how it will be used by LinkedIn.

    b. Xing
    Our website uses features provided by the XING network. The provider is XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany. Each time one of our pages containing XING features is accessed, your browser establishes a direct connection to the XING servers. To the best of our knowledge, no personal data is stored in the process. In particular, no IP addresses are stored nor is usage behavior evaluated. For more information, see https://www.xing.com/app/share?op=data_protection.

    10 Changes to this Privacy Policy
    We will update this policy from time to time to protect your personal information. You should read this policy every now and then to stay up to date on how we protect your data and continuously improve our website's content. If we make material changes to the collection, use and/or disclosure of your personal data, we will advise you via a clear and prominent notification on the web site. By using this site, you agree to the terms of this policy for the protection of your personal data.

    11 Right to information, correction, blocking, deletion and revocation
    You can obtain information about the personal data stored by you at any time (Art. 15 GDPR). You have the right to correct, delete or block incorrect data (Art. 16/17 GDPR). You may restrict or revoke your consent to the collection, processing or use of your personal data at any time with future effect (Art. 21 GDPR). In this case, the affected personal data stored by us will be deleted immediately, provided and as soon as this is not necessary for business transactions and there are no legal archiving obligations to the contrary. Data that may not be deleted due to legal regulations will be blocked until the archiving obligation expires and then deleted.

    In addition, you have a right to data transmission (Art. 20 GDPR).

    In addition to the rights listed here, you have the right of appeal to a supervisory authority, in particular in the Member State where you reside, work or where the infringement is suspected, if you believe that the processing of personal data that concerns you is in contravention of GDPR.

    Please send your questions regarding data protection or requests for correction, deletion or blocking to datenschutz@shotshop.com.

    [Last updated: May 15, 2018]