Privacy policy
At CEWE your privacy is respected. All data collected is used to improve our range of products and services. Data protection and data security for customers and users have a high priority for CEWE. The protection of your personal data throughout our business processes is therefore a matter of particular concern to us.
We, CEWE Stiftung & Co. KGaA, Meerweg 30-32, 26133 Oldenburg, take the protection of your personal data very seriously as the responsible party within the meaning of the General Data Protection Regulation and comply with the statutory provisions on data protection.
In accordance with Article 13 of the EU Data Protection Regulation (EU-DSGVO), this data protection declaration explains what information is collected on our website and the use of CEWE Online Photo Services through your visit and how this information is used. However, the declaration does not apply to websites of other companies which contain a link to this website or to which our website has provided links.
1. collection and processing of personal data
When you visit our website, our web servers temporarily store access data by default, i.e. the IP address of your access, the upload software used for the purpose of the order (ActiveX, Flash, Java, etc.), the Session_ID to identify your connection session, and the date and time of the visit. The legal basis for the temporary storage of the data is Art. 6 para. 1 lit. f) EU-DSGVO. This data is deleted after the session has ended in accordance with legal regulations. In addition, personal data is only stored if you provide it to us voluntarily, e.g. as part of a registration, an order and the associated order processing, a survey, a competition or an online application on the basis of Art. 6 para. 1 lit. a) or Art. 6 para. 1 lit. b) EU-DSGVO. You will be informed about the purpose of the data collection in the respective entry and contact forms. You have the option of deleting your registration data in your customer account or via our customer service at any time.
For the purpose of creating photo products, your image data will automatically be stored for 30 days after uploading in the online gallery which is only accessible to you. In addition, CEWE provides you with an album memory online which you can optionally use to store the image data for a longer period of time. You have the option of deleting your image data in the online gallery and the album memory at any time or making it accessible to third parties at your request.
After your order has been completed and delivered, the image data will be kept in production for up to 6 weeks in order to process any complaints or repeat orders. After this period, the data will be irretrievably deleted.
2. transmission of data via the internet
Sensitive data, such as image data, login, password, address data, details of your payment methods, credit card data or account data in the case of direct debit are transmitted exclusively in encrypted connections (HTTPS / SSL) and stored on security servers. The electronic payment process is handled by a certified payment service provider.
3. note on data transfer to third countries
To ensure the high accessibility of our customer service, we are selectively supported by service providers outside the area of application of the EU-DSGVO. We have concluded contracts with the service providers in accordance with Article 44 of the EU Data Protection Regulation in conjunction with the EU standard contractual clauses and regularly assure ourselves that our very high data protection requirements are also fully met.
4. contacting us
You have the option of contacting us in several ways: By email, by phone, by WhatsApp or by post. When you contact us, we use the personal data that you voluntarily provide to us in this context. This is done solely for the purpose of contacting you and to be able to process your enquiry appropriately.
When contacting us by telephone, no higher costs will be incurred than the transmission costs according to the basic tariff.
5. use and forwarding of personal data and purpose limitation
The processing and forwarding of your data is based on the following legal grounds: Art. 6 para. 1 lit. a) EU-DSGVO for all processing requiring consent, Art. 6 para. 1 lit. b) EU-DSGVO for contract fulfilment, Art. 6 para. 1 lit. c) EU-DSGVO for consent management to fulfil legal obligations and Art. 6 para. 1 lit. f) EU-DSGVO for further processing with legitimate interest.
We use the data you provide to fulfil and process your order in accordance with Art. 6 para. 1 lit. b) EU-DSGVO. Your data will be used in accordance with the applicable data protection regulations solely for the purpose associated with the respective collection and to protect our own legitimate business interests pursuant to Art. 6 (1) f) EU-DSGVO, in particular the technical administration of the websites. We will only use this data for product-related surveys and marketing purposes if you have given us your prior consent in accordance with Art. 6 para. 1 lit. a) EU-DSGVO. You can revoke any consent you may have given at any time with effect for the future.
CEWE commissions other companies and individuals to perform tasks, such as packaging, shipping and delivery of items. These service providers have access to personal information which is required for the fulfilment of your tasks. However, you may only use this information for these purposes. We have required our service providers to handle the information in accordance with the relevant data protection laws and our privacy statements.
In order to process payments, we pass on the payment and order data required for this purpose to the credit institution commissioned with the payment and, if applicable, to payment service providers commissioned by us or to the payment service selected by you in the ordering process.
Personal data will only be passed on to state authorities within the framework of mandatory legal provisions. Your data will not be disclosed to private third parties without your express consent.
Our employees are obliged by us to maintain confidentiality and to comply with the relevant data protection regulations.
When registering for the newsletter, your e-mail address will be used for our own advertising purposes on the basis of Art. 6 para. 1 lit. a) EU-DSGVO until you unsubscribe from the newsletter. You can unsubscribe at any time. If you register for our newsletter, we will use the data required for this purpose or separately provided by you to send you our e-mail newsletter on a regular basis. You can unsubscribe from the newsletter at any time via a link provided for this purpose in the newsletter, via your customer account or via customer service.
Unsubscribing by telephone does not incur higher costs than the transmission costs according to the basic rates.
In order to draw the attention of existing customers to products from their area of interest, we will inform you about these products by e-mail. Existing customers receive these individual product recommendations even if they have not subscribed to our newsletter. We select the individual produc recommendations on the basis of the data and information that you have provided during your purchases and which we use on a legal basis, legitimate interest Art. 6 para. 1 lit. f) DGSVO.
You can object to the individual product recommendation at any time when placing your order/in your customer account, as well as by notifying customer service or using the link provided at the end of the product recommendation.
6 Use of cookies
In order to enabl you to use certain functions when visiting our website and to make it more attractive, we use so-called cookies on various pages.
Cookies are small text files that are stored on your terminal device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your terminal device and enable us or our partner companies to recognise your browser on your next visit (persistent cookies). Further information and individual cookie settings here.
When calling up the pages, the user is informed about the use of cookies for analysis purposes and his consent to the processing of personal data used in this context is obtained. To fulfil our legal obligation, we use the consent management solution of Usercentrics, which stores consent on the basis of Art. 6 (1) lit. c) EU-DSGVO in order to comply with the documentation obligations pursuant to Art. 7 (1) EU-DSGVO.
You can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or generally exclude cookies. If you do not accept session cookies, the functionality may be limited.
7. collection of anonymous user data
This website uses web analysis technologies from Adobe Systems Inc. and Google Inc. (web analysis technology Google Remarketing) on the basis of Art. 6 para. 1 lit. a) and Art. 6 para. 1 lit. f) EU-DSGVO for marketing and optimisation purposes, from which user profiles are created using pseudonyms. These usage profiles are used to analyse visitor behaviour and are evaluated to improve and design our offer in line with requirements. The pseudonymised user profiles are not combined with personal data about the bearer of the pseudonym without the express consent of the person concerned, which must be given separately. Further information on the individual marketing and analysis cookies can be found here.
Further information on terms of use and data protection can be found here:
Google Inc: https://policies.google.com/technologies/partner-sites?hl=en
Adobe Systems Inc.: https://www.adobe.com/privacy/policy.html
YouTube
Our website uses the provider YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA, represented by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, for the integration of videos. We integrate YouTube videos using an extended data protection mode, which means that no personal data is evaluated by Google when you visit our website. When you click on the video, your IP address is transmitted to YouTube and YouTube learns that you have viewed the video. We have no influence on the possible collection and use of your data by YouTube. You can find more information in YouTube's privacy policy at https://policies.google.com/privacy?hl=en&gl=en. If you are logged in to YouTube, this information will also be assigned to your user account. If you do not want this assignment, you can log out of your user account before viewing the video.
8. security measures
CEWE uses extensive technical and operational security measures to protect your personal data managed by us against misuse, accidental or intentional manipulation or against access by unauthorised persons. Our security procedures are continuously improved in line with technological developments.
9. data subject rights
When processing your personal data, the EU General Data Protection Regulation grants you certain rights:
1. right of access (Art. 15 EU GDPR):
You have the right to request confirmation as to whether personal data relating to you is being processed. If this is the case, you have the right to be informed about this personal data and to receive the information listed in detail in Art. 15 EU-DSGVO.
2. Right to rectification (Art. 16 EU GDPR):
You have the right to request without undue delay the rectification of any inaccurate personal data concerning you and, where applicable, the completion of any incomplete personal data.
3. right to erasure (Art. 17 EU GDPR):
You also have the right to request that personal data concerning you be deleted without delay, provided that one of the reasons listed in detail in Art. 17 EU-DSGVO applies, e.g. if the data is no longer required for the purposes pursued.
4. right to information (Art. 19 EU GDPR):
If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.
You have the right to be informed about these recipients.
5. right to restriction of processing (Art. 18 EU-DSGVO):
You have the right to request the restriction of processing if one of the conditions listed in Art. 18 EU GDPR applies, e.g. if you have objected to the processing, for the duration of any review.
6. right to data portability (Art. 20 EU-DSGVO):
In certain cases, which are listed in detail in Art. 20 EU-DSGVO, you have the right to receive the personal data concerning you in a structured, common and machine-readable format or to request the transfer of this data to a third party.
7. revocation of consent (Art. 7 para. 3 EU-DSGVO):
You have the right to revoke your consent at any time. This means that we will no longer continue the data processing that we previously carried out on the basis of your consent. Your revocation does not affect the lawfulness of the processing of the data that has already taken place.
8. right to lodge a complaint with a supervisory authority (Art. 77 EU-DSGVO):
According to Art. 77 EU-DSGVO, you have the right to lodge a complaint with a supervisory authority if you are of the opinion that the processing of the data concerning you violates data protection regulations. The right to lodge a complaint may in particular be asserted before a supervisory authority in the Member State of your place of residence, your place of work or the place of the alleged infringement.
9. right to object (Art. 21 EU-DSGVO):
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) or Article 6(1)(f) EU GDPR, in accordance with Article 21(2) EU GDPR.
The controller shall no longer process the personal data concerning you unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims.
If the personal data concerning you is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is related to such direct marketing.
10. data protection officer
If you have any questions on the subject of data protection at CEWE, please do not hesitate to contact:
CEWE Stiftung & Co. KGaA
Data Protection
Meerweg 30-32
26133 Oldenburg
Tel.: +49 (0)441 404299
(datenschutz@cewe.de)
Ms Elwira Wall
CEWE Foundation & Co. KGaA
26133 Oldenburg, 25.05.2020