Privacy Policy

The security and protection of your data is important to us, Prof. Dr. Wölfl GmbH & Co. Betriebs KG (hereinafter "PWKG" or "we"). We operate this website in accordance with the applicable regulations on the protection of personal data and data security, in particular the provisions of the General Data Protection Regulation (EU) 2016/679 (GDPR), the Federal Data Protection Act (BDSG) and the Act on Data Protection and the Protection of Privacy in Telecommunications and Telemedia (TTDSG).

At this point we would like to inform you about which data we process when you use the website, for what purpose and on what legal basis this is done, to whom we may make it available and what rights you are entitled to in this regard.

1. Scope, responsible body

This privacy policy applies to the domains:

and the app

Accessible web presences (hereinafter "website").

The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws and other data protection provisions is:

Prof. Dr. Wölfl GmbH & Co. Betriebs KG
Schillerstr. 27
3049 Regensburg
Regensburg District Court, HR Regensburg A 9404
info@thesimplephotobox.com

2. General information on data processing

We generally only process your personal data to the extent that this is necessary for the provision of the website and the services, content and functionalities provided through it. The legal basis for this is Art. 6 (1) (f) GDPR. In addition, we only process your personal data if you actively make it available to us when using the website, e.g. by filling out forms or sending e-mails and enquiries. We will only use the personal data you provide for the purpose of processing any enquiries you may have. In this case, the legal basis is Art. 6 (1) (b) GDPR if the processing is necessary to fulfill a contract or a pre-contractual measure. If you have previously consented to the processing and use of your personal data, the legal basis is Art. 6 (1) (a) GDPR.

You can revoke your consent to the use of your personal data at any time with effect for the future by sending an email to the email address provided at the beginning of this privacy policy. The revocation does not affect the effectiveness of the processing of your data carried out on the basis of your consent until the revocation.

Your data may also be processed if we are authorized or obliged to do so by law. In this case, the legal basis for processing is Art. 6 (1) (c) GDPR.

3. Storage period

Unless a specific storage period is specified in this privacy policy, we will only store your personal data for as long as is necessary to achieve the purpose for which it was originally collected. If you make a legitimate request for deletion or revoke your consent to data processing (see also section 11 below), your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. accounting or tax retention periods of 10 years in accordance with the German Fiscal Code and the German Commercial Code); in the latter case, deletion will take place once these reasons no longer apply.

4. Provision of the website and server log files

If you use the website purely for information purposes (i.e. without actively providing us with data of your own accord, e.g. by sending enquiries by email or using contact forms or otherwise providing data), we will only collect the data that is technically necessary to enable you to use the website and to ensure the stability and security of the IT systems we use (the legal basis is Art. 6 Para. 1 Sentence 1 lit. f GDPR). We also use the data to optimize the website, Art. 6 Para. 1 Sentence 1 lit. f GDPR and Section 25 Para. 2 TTDSG. The web server access logs record which page views took place at what time. They contain the following data:

We only evaluate this data for statistical purposes. The legal basis is Art. 6 Paragraph 1 Clause 1 Letter f of GDPR. Personal evaluation does not take place. The temporary storage of your IP address is necessary to enable the website to be delivered to your device. For this purpose, the user's IP address must be stored for the duration of the session. The data is stored in log files to ensure the functionality of the website.

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. If the data is collected to provide the website, this is the case when the respective session has ended. If the data is stored in log files, this is the case after 7 days at the latest.

A personal evaluation and/or a merging of this data with other data sources will not be carried out.

5. Data security

We use suitable technical and organizational measures to ensure that the data collected when using the services we provide is protected against loss, incorrect changes or unauthorized access by third parties. Our security measures are continually revised and adapted accordingly in line with technological developments.

For security reasons and to protect the transmission of confidential content, such as data that you send to us as the website operator, the website uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data that you send to us cannot be read by third parties.

6. Cookies

Cookies are small files that a site or its service provider transfers to your computer’s hard drive through your web browser (if you allow) that enables the site’s or service provider’s systems to recognize your browser and capture and remember certain information. You can choose to disable cookies through your individual browser options. However, if you disable cookies, some features that make your site experience more efficient may not function properly.

7. Use of Google Analytics

We use Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses cookies, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States.

Data Collection and Processing

Google Analytics collects information anonymously. It provides website trends without identifying individual visitors. The data collected includes:

The data collected through Google Analytics is used to:

Third-Party Disclosure

Google will not associate your IP address with any other data held by Google. We do not use Google Analytics to track or collect Personally Identifiable Information, nor do we upload any data that allows Google to personally identify an individual (such as name, email address, or billing information).

Opt-Out

You can opt-out of Google Analytics by installing the Google Analytics opt-out browser add-on. The add-on prevents the Google Analytics JavaScript (ga.js, analytics.js, and dc.js) from sharing information with Google Analytics about visit activity.

For More Information

For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page: https://policies.google.com/privacy

8. Contact form

You have the option of sending us an inquiry using the contact form on the website. To do this, you must send us your name, email address and the message with your contact request. We only process this personal data to process your inquiry. This data is processed on the basis of Art. 6 (1) (b) GDPR if your inquiry is related to the fulfillment of a contract or is necessary to carry out pre-contractual measures. In other cases, the processing is based on your consent (Art. 6 (1) (a) GDPR) if this was requested.

The data you enter in the contact form will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for storing the data no longer applies (e.g. after your request has been processed). Mandatory legal provisions - in particular retention periods - remain unaffected if the data is information relevant to billing or tax. In this case, the statutory retention periods of 10 years according to the German Commercial Code and the German Fiscal Code apply.

9. Your rights

To the extent that we process your personal data, you as the data subject within the meaning of the GDPR have the following rights:

9.1 Right to information

You can ask us to confirm whether we process personal data about you. If this is the case, you can request the following information from us:

You have the right to request information as to whether the personal data concerning you will be transferred to a third country or to an international organization. In this context, you can request to be informed of the appropriate guarantees in accordance with Art. 46 GDPR in connection with the transfer.

9.2 Right of objection

If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 Paragraph 1 Clause 1 Letter f) of GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided there are reasons for doing so that arise from your particular situation. Your personal data will then no longer be processed unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert or defend legal claims.

9.3 Right to rectification

You have the right to rectification and/or completion if your personal data processed by us is incorrect or incomplete. If this is the case, we will carry out the rectification immediately.

9.4 Right to restriction of processing

You can request the restriction of the processing of your personal data under the following conditions:

If the processing of your personal data has been restricted, these data may – with the exception of storage – only be processed with your consent or for the establishment, exercise or defence of legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

If the restriction of processing has been restricted in accordance with the above- mentioned requirements, we will inform you of this before the restriction is lifted.

9.5 Right to erasure

Duty of deletion

You can request that we delete your personal data immediately if one of the following reasons applies:

Exceptions

The right to erasure does not exist if processing is necessary

9.6 Right to data portability

You have the right to receive the personal data concerning you that you have made available to us in an appropriate portable format for the purpose of transmission or, where appropriate, to transmit the data directly to another provider.

9.7 Right to lodge a complaint with a supervisory authority

Without prejudice to any other legal remedies, you have the right to lodge a complaint with a competent supervisory authority if you consider that the processing of your personal data violates the GDPR.

10. Changes

This privacy policy will be updated from time to time. The date of the last update can be found below.

Status: 03 Octobre 2024