Data Protection Declaration
Data protection has a high priority for vario images. Use of the web pages of vario images is basically possible without any indication of personal data. But if you want to use the further offers and service on our website, the processing of personal data will be required. Basically we only offer our service to commercial users and exclusively for commercial purposes. If the processing of personal data is required and there is no legal basis for such processing, we will generally obtain your permission.
The processing of personal data, such as the name, address, e-mail address or telephone number of an affected person, is always in accordance with the General Data Protection Regulation and in accordance with the for vario images applicable country-specific data privacy policies. By this data protection declaration vario images informs you about the nature, scope and purpose of the personal data collected, used and processed by us. Furthermore, you will be informed about your granted rights under this data protection declaration.
vario images as the responsible processor has implemented numerous technical and organizational measures to ensure the most possible protection for your personal data processed through this website. Nevertheless, internet-based data transmissions can in principle have security gaps so that absolute protection can not be guaranteed. For this reason, it is open to everyone, to transfer personal data on alternative ways, such as by phone.
We use the following terms in this data protection declaration, including but not limited to:
- Personal Data
Personal data is any information relating to an identified or identifiable natural person (hereinafter the “affected person”). A natural person is considered to be identifiable who, directly or indirectly, in particular by association with an identifier such as a name, an identification number, location data, an online identifier or one or more special features, expresses the physical, physiological, genetic, mental, economic, cultural or social identity of this natural person can be identified.
- Affected Person
Affected person is any identified or identifiable natural person whose personal data is processed by the controller.
Processing means any process or series of operations related to personal data, such as collecting, organizing, storing, adapting or modifying, reading, querying, using, with or without the aid of automated procedures; disclosure by submission, dissemination or other form of provision, reconciliation or association, restriction, erasure or destruction.
- Restriction of Processing
Restriction of the processing is the marking of stored personal data with the aim to limit their future processing.
Profiling is any kind of automated processing of personal data that consists in using that personal information to evaluate certain personal aspects relating to a natural person, in particular aspects relating to job performance, economic situation, health, personal to analyze or predict preferences, interests, reliability, behaviors, whereabouts or relocation of that natural person.
Pseudonomization is the processing of personal data in such a way that personal data can no longer be attributed to a specific affected person without the need for additional information, provided that such additional information is kept separate and subject to technical and organizational measures to ensure that the personal data not assigned to an identified or identifiable natural person.
- Responsible or the Responsible Processor
The responsible or the responsible processor is the natural or legal person, public authority, body or that one, alone or in concert with others, decides on the purposes and means of processing personal data. Where the purposes and means of such processing are determined by Union law or the law of the Member States, the controller or the specific criteria for his designation may be provided for under Union or national law.
- Commissioned Processor
The commissioned processor is a natural or legal person, public authority, agency or other body that processes personal data on behalf of the controller.
Recipient is a natural or legal person, agency, agency or other entity to which personal data are disclosed, whether or not it is a third party. However, authorities which may receive personal data under Union or national law in connection with a particular mission are not considered as beneficiaries.
Third is a natural or legal person, public authority, agency or body other than the affected person, the responsible processor, the commissioned processor and the persons who are authorized under the direct authority of the responsible processor of the commissioned processor to process the personal data.
Consent is any voluntarily given and unambiguously expressed in the form of a statement or other unambiguous confirmatory act by the affected person for the particular case, by which the affected person indicates that they consent to the processing of the personal data concerning.
2. Name and address of vario images
Responsible within the meaning of the General Data Protection Regulation, other data protection laws in the Member States of the European Union and other provisions of a data protection character is:
vario images, Inh. Susanne Baumgarten e.K.
3. Name and address of the data protection officer
Mr. Patrik Mueller
vario images, Inh. Susanne Baumgarten e.K.
If you have any questions or suggestions regarding data protection, you can contact our data protection officer at any time.
You can prevent the setting of cookies through our website at any time by means of an appropriate setting of the internet browser used and thus permanently deactivates cookies. Furthermore, already set cookies can be deleted at any time via an internet browser or other software programs. This is possible in all common internet browsers. If you deactivate cookies in the internet browser used, not all functions of our website may be fully usable.
5. Collecting general data and information
The website of vario images collects each time the website is visited by an affected person or an automated system a set of general data and information. This general data and information is stored in the log files of the server. The (1) browser type and versions used, (2) the operating system used by the accessing system, (3) the internet page from which an accessing system accesses our website (so-called referrers ), (4) the sub web pages which can be accessed via an accessing system, (5) the date and time of access to the website, (6) the internet protocol address (IP address), (7) the Internet Service Provider (ISP) of the accessing system and (8) other similar data and information that can used in the event of attacks on our information technology systems.
When using this collected general data and information vario images makes no conclusions about the affected person. Rather, this information is required to (1) correctly deliver the contents of our website, (2) to optimize the content of our website and to advertise it, (3) to ensure the continued functioning of our information technology systems and the technology of our website, and (4) to provide law enforcement authorities with the information necessary for law enforcement in the event of a cyber attack. This anonymously collected data and information is provided by vario images therefore on the one hand statistically and further evaluated with the aim to increase the data protection and the data security in our company, in order to ensure in the long run an optimal level of protection for the personal data processed by us. The anonymous data of the server log files are stored separately from all other personal data provided by you.
6. Registration on our website
You have the opportunity to register on our website by providing personal data. The personal data that are transmitted is derived from the corresponding form used for the registration. The personal data you enter will be used exclusively for internal use by vario images, stored and collected only for our own purposes. vario images may arrange the submission of this personal data to one or more commissioned processors, such as a parcel service, who also collects the personal data for internal uses only.
By registering on our website, vario images also stores the IP address assigned to you by the Internet Service Provider (ISP) and as well the date and time of the registration. The storage of this data takes place by the background that only by this the misuse of our services can be prevented, and these data in case of need make it possible to clarify committed offenses. In this respect, the storage of this data is required for protection. A submission of these data to third parties is not happening unless there is a legal obligation to pass on or the disclosure of law enforcement serves.
Your registration under this personal data declaration enables vario images to offer you content or services that we can only offer to registered, commercial users. Registered users are free to change the personal data provided during registration at any time or to delete it completely from the database of the responsible processor.
vario images gives you on request at any time information about which personal data is stored about you. In addition, vario corrects or deletes the stored personal data at your request or reference, as far as no statutory storage requirements preclude. The employees of vario images will be happy to help you in this regard.
7. Subscription to our newsletter
The website of vario images gives users the opportunity to subscribe to our newsletters. Which personal data is transmitted to us when ordering the newsletter results from the form used for this purpose.
vario images informs customers and business partners about our offers at regular intervals by means of a newsletter. The newsletter can basically only be received by you, if (1) you have a valid email address and (2) register for these newsletters. For legal reasons, a confirmation e-mail will be sent to the e-mail address entered by you for the first time for the newsletter registration in the Double-Opt-In procedure. This confirmation email is used to check whether the owner of the e-mail address has authorized the receipt of the newsletter or not.
When registering for the newsletter, we also store the IP address of the computer system used by you at the time of registration, as well as the date and time of registration, as assigned by the Internet Service Provider (ISP). The collection of this data is required to complete the (possible) misuse of an e-mail address at a later time to understand and therefore serves the legal protection.
The personal data collected in the context of registering for the newsletter will be used exclusively to send our newsletter. Subscribers to the newsletter may also be notified by e-mail if this is necessary for the operation of the newsletter service or registration, as might be the case in the event of changes to the newsletter or technical changes. There will be no transfer of the personal data collected as part of the newsletter service to third parties. The subscription to our newsletter can be terminated by you at any time. The consent to the storage personal data you have given us for our newsletter service can be revoked at any time.
8. Contact via the website
The website of vario images due to legal regulations contains information that enables you to contact us quickly and communicate directly with us, which also includes a general e-mail address. If you contact us by e-mail or via the contact form, the transmitted personal data will be automatically saved. Such personal data transmitted by you to us on a voluntary basis will be stored for the purposes of processing or contacting. There is no transfer of this personal data to third parties.
9. Routine deletion and blocking of personal data
vario images processes and stores personal data of the affected person only for the period necessary to achieve the purpose of storage or, if so required by the European directives and regulations or any other legislator in laws or regulations was provided.
If the storage purpose is omitted or if a storage period prescribed by the European directives and regulations or any other relevant legislator expires, the personal data will be routinely blocked or deleted in accordance with the statutory provisions.
10. Rights of the person concerned
- Right of confirmation
Each affected person has the right, as granted by the European Regulators and Regulators, to require the responsible processor to confirm whether personal data relating to him / her is being processed. If an affected person wishes to make use of this right of confirmation, they can contact an employee of the responsible processor at any time.
- Right of information
Any person concerned by the processing of personal data shall have the right, granted by the European Directive and Regulatory Authority, at any time to obtain from the responsible processor information free of charge on the personal data stored and to get a copy of that information. Furthermore, the European Legislator and Regulator has provided the affected person with the right to get the following information:
- the processing purposes
- the categories of personal data being processed
- the recipients or categories of recipients to whom the personal data have been submitted or are still being submitted
- if possible, the planned duration for which the personal data will be stored or, if that is not possible, the criteria for determining that duration
- the existence of a right to rectification or erasure of the personal data or of a restriction of the processing by the responsible processor or of a right to object to such processing
- the existence of a right of appeal to a supervisory authority
- if the personal data are not collected directly from the affected person: All available information on the source of the data
- the existence of automated decision-making including profiling under Article 22 (1) and (4) of the GDPR and – at least in these cases – meaningful information on the logic involved and the scope and intended impact of such processing on the affected person
If an interested party wishes to exercise this right to information, they may at any time contact an employee of the responsible processor.
- Right of rectification
Any person affected by the processing of personal data has the right granted by the European legislator to demand the immediate correction of inaccurate personal data concerning him / her. Furthermore, the affected person has the right to request the completion of incomplete personal data, also by means of a supplementary statement, taking account of the purposes of the processing.
If an affected person wishes to exercise this right of rectification, they may, at any time, contact an employee of the responsible processor.
- Right of cancellation (right to be forgotten)
Any person affected by the processing of personal data shall have the right, granted by the European Directives and Regulators, to require the responsible processor to immediately delete the personal data concerning him / her, as far as one of the following reasons is satisfied and the processing is not required:If one of the above reasons is true and one affected person requests the deletion the personal data deleted stored from vario images, he / she could contact an employee of the responsible processor for assistance at any time. The employee of vario images will take care that the deletion request will be fulfilled immediately.
- The personal data has been collected for such purposes or otherwise processed for which they are no longer necessary.
- The affected person withdraws the consent on which the processing was based in accordance with Article 6 (1) (a) of the GDPR or Article 9 (2) (a) of the GDPR and lacks any other legal basis for the processing.
- The affected person objects to the processing in accordance with Art. 21 (1) or (2) GDPR, and there are no legitimate reasons for the processing.
- The personal data were processed unlawfully.
- The erasure of personal data is necessary to fulfill a legal obligation under Union or national law to which the responsible processor is subject.
- The personal data were collected in relation to information society services offered pursuant to Art. 8 (1) GDPR.
- Right of restriction of processing
Any person affected by the processing of personal data has the right, granted by the European Directive and Regulatory Authority, to require the responsible processor to restrict the processing of the personal data if one of the following conditions applies:
- The processing is unlawful, and the affected person refuses to delete the personal data and instead requests the restriction of the use of personal data.
- The responsible processor no longer needs the personal data for the purposes of processing, but the affected person requires them to assert, exercise or defend legal claims.
- The person concerned has objection to the processing according Art. 21 (1) GDPR and it is not yet clear whether the legitimate reasons of the responsible processor outweigh those of the person concerned.
- The accuracy of the personal data is contested by the affected person for a period of time that enables the responsible processor to verify the accuracy of the personal data.
If one of the above conditions is true and an affected person wants to restrict the personal data stored by vario images, he / she may request it at any time to an employee of the vario images. The employee of vario images will take care of the processing of the requested restriction.
- Right of data portability
Any person affected by the processing of personal data shall have the right conferred by the European Directives and Regulations to obtain the personal data concerning him / her provided to a responsible processor in a structured, common and machine-readable format. He / she also has the right to transfer this data to another person responsible without hindrance by the controller to whom the personal data was provided, provided that the processing is based on the consent pursuant to Article 6 (1) (a) of the GDPR or Article 9 (1) (b) 2 (a) of the GDPR or on a contract pursuant to Article 6 (1) (b) of the GDPR and processing by means of automated processes, unless the processing is necessary for the performance of a task of public interest or in the exercise of public authority, which has been assigned to the responsible person.
Furthermore, in exercising their right to data portability under Article 20 (1) of the GDPR, the affected person has the right to obtain that the personal data are transmitted directly from one responsible processor to another, insofar as this is technically feasible and if so this does not affect the rights and freedoms of others.
To assert the right to data portability, the affected person may contact at any time a vario images employee.
- Right of contradiction
Any person concerned by the processing of personal data shall have the right conferred by the European Directive and Regulatory Authority at any time, for reasons arising from its particular situation, to object against the processing of personal data relating to it pursuant to Article 6 (1) (e) or (f) GDPR. This also applies to profiling based on these provisions.
vario images in the event of an objection, we will no longer process the personal data of the affected person unless we can demonstrate compelling legitimate grounds for the processing that outweigh the interests, rights and freedoms of the affected person, or the processing is for the purpose of asserting, exercising or defending legal claims.
Processes vario images personal data in order to operate direct mail, the affected person has the right to object at any time to the processing of personal data for the purposes of such advertising. This also applies to the profiling, as far as it is associated with such direct mail. Does the affected person objects vario images processing for the purpose of direct marketing, vario images will no longer process the personal data for these purposes.
In addition, the affected person has the right, for reasons arising from his / her particular situation, to object against the processing of personal data relating to him or her, which is made at vario images for scientific or historical research purposes or for statistical purposes pursuant to Art. 89 (1) of the GDPR, unless such a processing is necessary to fulfill a task of public interest.
In order to exercise the right of opposition, the person concerned may directly contact any member of staff of vario images. The affected person is also free, in the context of the use of information society services, notwithstanding Directive 2002/58 / EC, to exercise his right of opposition by means of automated procedures using technical specifications.
- Right to revoke a data protection consent
Any person affected by the processing of personal data has the right, granted by the European Directive and Regulatory Authority, to revoke the confirmation to the processing of personal data at any time.
If the affected person wishes to assert their right to withdraw the confirmation, he / she may at any time contact an employee of vario images.
11. Data protection in applications and in the application process
vario images collects and processes the personal data of applicants for the purpose of processing the application process. The processing can also be done electronically. This is especially the case if an applicant submits the corresponding application documents to us digital, for example by e-mail or via a web form located on our website. Makes vario images a contract of employment with an applicant, the data transmitted for the purpose of the employment relationship are stored in compliance with the legal requirements. If no contract of employment is made with the applicant, the application documents will be automatically deleted two months after notification of the rejection decision, so far as no other legitimate interests state against the deletion. Other legitimate interests in this sense are for example a burden of proof in a procedure under the General Equal Treatment Act (AGG).
12. Data protection at the use of Facebook
vario images has integrated components of the company Facebook on this website. Facebook is a social network. The operating company of Facebook is Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. The responsible processor for the processing of personal data, if an affected person lives outside the US or Canada, is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland.
By every call of our website, on which a Facebook component (a so called Facebook plug-in) is integrated, your internet browser causes through the Facebook plug-in a download of the corresponding Facebook content from Facebook. An overview of all Facebook plug-ins can be found at https://developers.facebook.com/docs/plugins/?locale=en_US. As part of this technical process, Facebook receives information about which specific subpage you visited.
Unless you are logged in simultaneously at Facebook, Facebook recognizes by the Facebook plug-in which of our websites you visted and throughout the duration of your respective stay on our website, which concrete sub webpage u visit, if the Facebook plug-in is there integrated too. This information is collected through the Facebook component and assigned by Facebook to the respective Facebook account of the affected person. Do you press an on our website integrated Facebook-Button, for example the “Like” button, or leave a comment, Facebook assigns these information to the personal Facebook user account of the person concerned, and stores this personal information.
Facebook receives via the Facebook component always information about the visited website when you simultaneously logged in at Facebook; this happens regardless of whether you click on the Facebook component or not. If you want to prevent the transmission of this information to Facebook you can do it by logging out at Facebook before you visit one of our websites.
The data protection policy of Facebook, that is available at https://de-de.facebook.com/about/privacy/, provides information on the collection, processing and use of personal data by Facebook. It also explains which options Facebook offers to protect the privacy of the affected person. In addition, different applications are available, which make it possible to prevent data transmission to Facebook. Such applications can be used by you to prevent a data transmission to Facebook in general.
13. Data protection at the use of Instagram
vario images uses the service Instagram. Instagram is a social network. The operation company is Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. When you are logged in in your Instagram account you could link content from our Instagram account with your Instagram account and Instagram could track your activities on our Instagram site. We notice you that we as provider of the content of our Instagram account have no control about the data Instagram collects or about in which way Instagram use these data.
More information could be found here: http://instagram.com/about/legal/privacy/
If you are logged into your LinkedIn account, you can link the contents of our LinkedIn page to your LinkedIn profile. This allows LinkedIn to associate the visit to our Instagram page with your user account. We point out that we, as provider of the pages, are not aware of the content of the transmitted data and their use by LinkedIn.
vario images uses the service Twitter. Twitter is a multilingual, publicly accessible microblogging service where users can post and distribute tweets, which are limited to 280 characters. These short messages are available to anyone, including non-Twitter subscribers. The tweets are also displayed to the so-called followers of the respective user. Operating company of Twitter International Company, One Cumberland Place, Fenian Street Dublin 2, D02 AX07, Ireland.
If you are logged into your Twitter account, you can link the contents of our Twitter page to your Twitter profile, like posts and follow us. This allows Twitter to assign the visit to our Twitter page to your user account. We point out that we as the provider of the pages are not aware of the content of the transmitted data and their use by Twitter.
The applicable privacy policies of Twitter are available at https://twitter.com/privacy?lang=en.
vario images uses the service Xing. Xing is an Internet-based social network that allows users to connect to existing business contacts and make new business contacts. The individual users can create a personal profile at Xing. Companies can, for example, create company profiles or publish job offers on Xing. The operating company of Xing is XING SE, Dammtorstraße 30, 20354 Hamburg, Germany.
If you are logged into your Xing account, you can link the contents of our Xing page to your Xing profile. This allows Xing to associate the visit of our Xing page with your user account. We point out that we as the provider of the pages are not aware of the content of the transmitted data and their use by Twitter.
17. Legal base of processing
Art. 6 (1) (a) GDPR serves our company as the legal base for processing operations where we obtain consent for a particular processing purpose. If the processing of personal data is necessary to fulfill a contract of which the affected person is a party, as it is the case for example in processing operations necessary for the supply of goods or the provision of any other service or consideration, processing shall be based on Art. 6 (1) (b) GDPR. The same applies to processing operations that are necessary to carry out pre-contractual measures, for example in cases of inquiries regarding our products or services. If our company is subject to a legal obligation which requires the processing of personal data, such as the fulfillment of tax obligations, the processing is based on Art. 6 (1) (c) GDPR. In rare cases, the processing of personal data may be required to protect the vital interests of the affected person or another natural person. This would be the case, for example, if a visitor to our offices is injured and his or her name, age, health insurance or other vital information would have to be passed on to a doctor, hospital or other third party. Than the processing of the personal data is based on Art. 6 (1) GDPR. Ultimately, processing operations could be based on Art. 6 (1) GDPR. On this legal basis, processing operations that are not covered by any of the above legal bases are required if processing is necessary to safeguard the legitimate interests of our company or a third party, unless the interests, fundamental rights and fundamental freedoms of the person concerned prevail. Such processing operations are particularly allowed to us because they have been specifically mentioned by the European legislator. In that regard, it considered that a legitimate interest could be assumed if the affected person is a customer of the responsible processor (recital 47, 2nd sentence, GDPR).
18. Legitimate interests in processing
Bases the processing of personal data on Article 6 (1) GDPR, so is our legitimate interest in conducting our business for the benefit of all of our employees.
19. Duration for which the personal data is stored
The criterion for the duration of the storage of personal data is the respective statutory retention period. After the deadline, the corresponding data will be routinely deleted, if they are no longer required to fulfill the contract or to initiate a contract.
20. Legal or contractual regulations for the provision of personal data; Necessity for the conclusion of the contract; Obligation of the affected person to provide the personal data; possible consequences of non-provision
We clarify that the provision of personal data is partly required by law (e.g. tax regulations) or can also result from contractual provisions (e.g. information about the contracting party). Sometimes it may be necessary for you for concluding a contract that you provide us with personal data that must be processed by us subsequently. For example, you are required to provide us with personal information when our company concludes a contract with you. Failure to provide the personal data would mean that the contract could not be concluded. Our employees inform you on a case-by-case basis, whether the provision of personal data is required by law or required for the conclusion of the contract, and if there is an obligation to provide the personal data, and the consequences of the non-provision of personal data.
21. Existence of automated decision-making
As a responsible company vario images abstain from automatic decision-making or profiling.
22. Transmission of personal data to a third country
vario images does not transfer any personal data to a third country or international organizations.
As stated in this data protection declaration, the duties and obligations of vario images relate solely to personal information that are collected through the use of the website, or by opening of a business relationship or a contractual relationship of commercial users with vario images. Excepted from this are any personal data that may arise from the content that is provided by vario images (photographs and other media) and that for the purpose of marketing is being processed.
(as of 05/2019)