Privacy policy
§ 1 General
Your personal data (e.g. title, name, address, e-mail address, telephone number, bank details, credit card number) will only be processed by us in accordance with the provisions of German data protection law and the data protection laws of the European Union (EU). The following regulations inform you not only about the processing purposes, recipients, legal bases, storage periods, but also about your rights and the person responsible for your data processing. This data protection declaration only refers to our web pages. If you are forwarded to other sites via links on our pages, please inform yourself there about the respective handling of your data.
§ 2 Data processing for contract fulfilment
(1) Processing purpose
Your personal data, which you make available to us in the ordering process, is required for the conclusion of a contract with us. You are not obliged to provide your personal data. However, we cannot send you the goods without informing you of your address. For some payment methods we need the necessary payment data to pass them on to a payment service provider commissioned by us. The processing of your data entered in the ordering process is therefore for the purpose of fulfilling the contract.
If you send us an enquiry by e-mail, via a contact form etc. before the contract is concluded, we process the data received in this way to carry out pre-contractual measures and answer e.g. your questions about our products.
(2) Legal basis
The legal basis for this processing is Article 6(1)(b) DPA.
(3) Categories of recipients
Payment service provider, shipping service provider, hosting provider, possibly merchandise management system, possibly suppliers (dropshipping).
(4) Storage period
We store the data required for the execution of the contract until the expiry of the statutory warranty and, if applicable, contractual warranty periods.
We store the data required under commercial and tax law for the legally specified periods, regularly ten years (see §257 HGB, §147 AO).
The data processed for the implementation of pre-contractual measures will be deleted as soon as the measures have been carried out and it is evident that the contract will not be concluded.
§ 3 Your rights as a data subject
If personal data is processed by you, you are a data subject within the meaning of the DSGVO and you have the following rights against us as the person responsible:
1. Right to information
Within the scope of Art. 15 DSGVO, you can request information about your personal data processed by us.
2. Right of rectification
If the information concerning you is not (or is no longer) correct, you can request a correction in accordance with Art. 16 DSGVO. If your data is incomplete, you may request that it be completed.
3. Right to deletion
You can request the deletion of your personal data under the conditions of Art. 17 DSGVO.
4. Right to limit processing
Within the framework of the provisions of Art. 18 DSGVO, you have the right to request a restriction on the processing of data concerning you.
5. Right to data transferability
According to Art. 20 DSGVO, you have the right to receive the personal data concerning you that you have provided us with in a structured, common and machine-readable format or to request that it be transferred to another responsible party.
6. Right to revoke the declaration of consent under data protection law
According to Art. 7 para. 3 DSGVO you have the right to revoke your declaration of consent under data protection law at any time. This does not affect the legality of the processing that has taken place on the basis of the consent until the revocation.
7. Right to complain to a supervisory authority
If you believe that the processing of personal data relating to you is in breach of the DPA, you have the right under Article 77 DPA to lodge a complaint with a supervisory authority (in particular in the Member State in which you are resident, your place of work or the place where the alleged breach occurred).
Please also note your right of objection under Art. 21 DSGVO:
a) General: justified objection required
If the processing of personal data concerning you takes place
- to safeguard our overriding legitimate interest (legal basis under Art. 6 para. 1 f) DSGVO) or
- in the public interest (legal basis according to Art. 6 para. 1 e) DSGVO),
you have the right to object to the processing at any time for reasons arising from your particular situation; this also applies to profiling based on the provisions of the DSGVO.
In the event of an objection, we will no longer process the personal data concerning you, unless we can prove compelling reasons for processing that are worthy of protection and outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
b) Special case of direct advertising: simple objection is sufficient
If the personal data concerning you are processed for the purpose of direct marketing, you have the right to object to such processing at any time and without giving reasons, including profiling, insofar as it is related to such direct marketing.
If you object to processing for the purposes of direct marketing, the personal data concerning you will no longer be processed for those purposes.
Person in charge of data processing:
Teddy Marks
Calle San Lorenzo 18/3
ES-07012 Palma
E-Mail: mail@teddymarksphotography.com
Website: www.teddymarksphotography.com