Privacy policy

Through our online shop and other websites, data relevant to data protection, including personal data, is processed. Kamera Express places great importance on the careful handling of personal data. Consequently, we process and protect personal data with due care.

Data processing is carried out in accordance with the requirements of applicable data protection legislation. This means, among other things, that we:

clearly state the purposes for which personal data is processed in this Privacy Policy before processing such data;
limit the collection of personal data to data that is necessary for legitimate purposes;
where your consent is required, obtain your explicit consent to the processing of personal data;
take appropriate measures to adequately protect your personal data and impose this requirement on third parties who process personal data on our behalf;
respect your right, upon request, to access, correct or delete your personal data.

We also place great importance on providing appropriate protection for personal data. To protect your privacy, we implement the following measures:

Access to personal data is protected by a username and password.
Access to personal data is protected by a username and login token.
We take physical measures, such as implementing locks and safes, to protect the systems in which personal data is stored against unauthorised access.
We use secure connections (Secure Sockets Layer or SSL), which protect the transmission of all information between you and our website when you enter your personal data.
We keep logs of all access to personal data.

I. Information about us as the controller
The controller responsible for this website and for the processing of personal data is:

Kamera Express Rotterdam B.V.
Essebaan 55
2908 LJ Capelle aan den IJssel
The Netherlands

Tel. 05 118 7989 434
Email: [email protected]
www.photospecialist.at

For further information, please refer to the legal notice (Impressum) on our website.

In this Privacy Policy, we explain which personal data we collect and process in the online shop www.photospecialist.at/ and for what purposes this is done. We recommend that you read this Privacy Policy carefully.

If you have any questions or would like to know which personal data relating to you is stored, please contact us using the contact details above or via [email protected].

II. General information on data processing
Scope and processing of personal data

Legal basis for the processing of personal data
Where we obtain your consent for processing operations involving your personal data, Art. 6(1)(a) GDPR serves as the legal basis.

Where processing is necessary for the performance of a contract or for taking steps at your request prior to entering into a contract, Art. 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations necessary to take steps prior to entering into a contract.

Where processing of data is necessary to comply with a legal obligation to which we are subject, Art. 6(1)(c) GDPR serves as the legal basis.

Where processing is necessary to safeguard a legitimate interest pursued by us or a third party, and where the interests, fundamental rights and freedoms of the data subject (the user) do not override that interest, Art. 6(1)(f) GDPR serves as the legal basis for the processing.

In this Privacy Policy, we always indicate the legal basis on which we rely for processing your data.

Data deletion and storage period
The data of the data subject will be deleted or blocked as soon as the purpose for which it was stored no longer applies. Data may be stored for longer if this is provided for by European or national legislation to which we, as the controller, are subject. In such cases, we will delete or block the data after the relevant requirements have expired.

III. Order processing
When you place an order with us, we use your personal data to properly process the order. In this case, we are entitled to transmit your personal data to the logistics company commissioned by us so that it can deliver the goods you have ordered to you. In addition to address details, we also transmit payment information to the companies responsible for processing payments. We ensure that our partners also comply with data protection regulations. The legal basis for this is Art. 6(1)(b) GDPR. The processing of your personal data is necessary for the performance of the contract with you. We store the data for as long as it is necessary to fulfil the contract. In addition, we store this data to fulfil post-contractual obligations and due to statutory retention periods under commercial and tax law for the period prescribed by law. This retention period is generally 10 years from the end of the respective calendar year.

Your account
Access to certain areas of our online shop requires prior registration. To register, you are required to provide information about yourself and choose a username. Using the information you provide, we create an account that you can log into using your username and a password of your choice. We store this information so that you do not have to enter it again each time and so that we can contact you as necessary in connection with the performance of our contractual services.

For this purpose, we use your name, address, email address, IP address, billing address and telephone number. The legal basis for processing data for registration, where consent is given, is Art. 6(1)(a) GDPR. Where you register with us for the performance or initiation of a contract, the legal basis for processing the data is additionally Art. 6(1)(b) GDPR. We store this information for up to six months after you have deleted your account. If we determine that there has been no activity for a period of three years, the contact status will be set to inactive. You may request deletion of your account at any time.

You also have the option of adjusting and correcting your data at any time via your account.

PayPal
You have the option of processing the payment through the online payment service PayPal. PayPal enables online payments to third parties. PayPal's European operating company is PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg. If you select PayPal as your payment method, the data required for the payment process will automatically be transmitted to PayPal (name, address, company, email address, telephone and mobile number, IP address, shopping cart information). The data transmitted to PayPal may be transferred by PayPal to credit reference agencies. This transfer is intended for identity and creditworthiness checks. PayPal may also disclose your data to third parties where this is necessary to fulfil contractual obligations or where the data is to be processed on its behalf. You can view PayPal's Privacy Policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full/.

The use of the PayPal service corresponds to our legitimate interest in offering an efficient and secure payment method (Art. 6(1)(f) GDPR). In this context, we pass payment data to PayPal insofar as this is necessary for contract performance (Art. 6(1)(b) GDPR).

Sofortüberweisung Klarna
We also offer you the option of processing payment through the payment service provider Klarna GmbH, Theresienhöhe 12, 80339 Munich, Germany (Klarna). Depending on the payment method you select, your payment data (name, address, company, email address, telephone and mobile number, IP address, shopping cart information) will be transmitted to the payment service provider Klarna. Your data is transferred to Klarna exclusively for the purpose of processing the payment and, where applicable, checking creditworthiness, to the extent necessary for this purpose. The currently applicable Klarna Privacy Policy, including information about the data protection officer and a list of the categories of personal data processed by CrefoPay, can be found at https://www.sofort.com/payment/wizard/getCmsContent/data_protection/DE/0/de.

The use of Sofortüberweisung Klarna corresponds to our legitimate interest in offering an efficient and secure payment method (Art. 6(1)(f) GDPR). In this context, we pass payment data to Klarna insofar as this is necessary for contract performance (Art. 6(1)(b) GDPR).

GiroPay
You can also make payment using GiroPay. The provider of this payment service is GiroPay GmbH, An der Welle 4, 60322 Frankfurt/Main, Germany. If you make payment using GiroPay, GiroPay collects various transaction data and forwards it to the bank with which you are registered for GiroPay. The data required for payment includes, for example, your name, address, company, email address, telephone and mobile number, IP address and shopping cart information. GiroPay then authenticates the transaction using the authentication procedure stored with the bank for this purpose. The payment amount is then transferred from your account to our account. Neither we nor third parties have access to your account details.

For details on payment with giropay, please refer to the giropay terms and conditions and Privacy Policy at: https://www.giropay.de/rechtliches/datenschutz-agb/

The use of GiroPay corresponds to our legitimate interest in offering an efficient and secure payment method (Art. 6(1)(f) GDPR). In this context, we pass payment data to GiroPay insofar as this is necessary for contract performance (Art. 6(1)(b) GDPR).

Credit card payment (Visa, Mastercard or American Express)
If you wish to pay for your order by credit card, we require the data necessary for payment processing, in particular your name, address, email address, credit card number, name of the credit card holder and the credit card's expiry date. We check the data you enter together with your order data in order to detect misuse of the credit card or credit card payment option at an early stage and, after successful verification, use the data to process the agreed credit card payment. Information on the data protection practices of the individual credit card providers can be found at https://www.visa.de/promotions/geldzurueck/datenschutz.html, https://www.mastercard.de/de-de/datenschutz.html and https://www.americanexpress.com/de/legal/online-datenschutzerklarung.html.

Offering credit card payment corresponds to our legitimate interest in offering an efficient and secure payment method (Art. 6(1)(f) GDPR). The legal basis for the associated data processing is Art. 6(1)(b) GDPR, i.e. processing your payment data is necessary to fulfil the agreement concerning payment for your purchase by credit card.

We store the above data for a maximum of 24 months in order to compare it with other credit card payments for the purposes of combating fraud and misuse, after which it is deleted. The legal basis for this data storage is Art. 6(1)(f) GDPR.

IV. Contact options
Email / Contact form
We offer you the opportunity to contact us by email and/or via a contact form. You can decide for yourself what information you provide when contacting us. The legal basis for processing your data is your consent pursuant to Art. 6(1)(a) GDPR.

After we have dealt with the matter, the data will initially be stored in case of any follow-up questions. You may request deletion of the data at any time; otherwise, the data will be deleted once the matter has been fully resolved, subject in each case to statutory retention obligations.

Communication via WhatsApp
You can also contact us via the WhatsApp messaging service. We would like to inform you below about the use of WhatsApp and the associated risks. We use WhatsApp through our business account only for general information and messages that are not legally relevant, such as information about our products and new products and answering other general enquiries. For this purpose, we process personal data such as your telephone number, profile name and picture, message content, and the date and time of messages sent. This communication channel is not available for personal or contract-related enquiries. For these, please use the contact options via email or the contact form. The WhatsApp messaging service is provided by WhatsApp Inc., which is a subsidiary of Meta Platforms Inc.; the entity responsible for the European region is WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Your personal data may also be processed by WhatsApp in the USA, among other places. We point out that, according to the European Court of Justice, there is currently no adequate level of protection for data transfers to the USA and therefore risks to the lawfulness and security of data processing may exist. In the European region, WhatsApp operates under the Standard Contractual Clauses (SCCs) provided by the European Commission, which are intended to safeguard data processing in an unsafe third country such as the USA and raise the level of protection to one that is substantively equivalent to the level of protection guaranteed in the EU. Although WhatsApp uses end-to-end encryption for messages, WhatsApp has access to so-called metadata, which indicates when, with whom and using which device you have communicated. Further information about data protection at WhatsApp can be found in WhatsApp's Privacy Policy: https://www.whatsapp.com/legal/privacy-policy-eea.

We will only contact you via WhatsApp if you initially initiate contact through this communication channel or if you have previously given us consent to send product information via WhatsApp. The use of WhatsApp either serves to initiate or perform a contract pursuant to Art. 6(1)(b) GDPR or is based on our legitimate interest in fast and efficient communication via a messaging service pursuant to Art. 6(1)(f) GDPR.

You may object to communication via WhatsApp at any time with effect for the future by asking us via WhatsApp or another specified contact channel to delete your telephone number from the WhatsApp contact list.

V. Marketing tools
Bloomreach Engagement
For the analysis and support of online marketing activities, in particular for sending newsletters and emails and for personalising content and recommendations, we use services provided by Bloomreach B.V., Fred. Roeskestraat 109, 1076 EE, Amsterdam, the Netherlands. This enables us to determine how our web services are received by customers and whether emails and newsletters sent are opened and used (e.g. clicks on links in a newsletter), allowing us to measure and assess the success of certain marketing activities. This information is used in the form of pseudonymous user profiles to improve our website and newsletter and associated marketing activities, in particular to tailor offers and information to users' interests and preferences. Bloomreach Engagement processes data (e.g. email addresses) exclusively according to our instructions and will neither use the data for its own purposes or those of third parties, sell it, nor disclose it to third parties. Data is collected and processed on the basis of your consent (Art. 6(1)(a) GDPR). Even after giving your consent, you can deactivate this service at any time via our website or prevent it through an appropriate setting in your browser software or by unsubscribing from our newsletter. You will then no longer receive newsletters from us.

Mailgun
For sending emails, we use the email delivery service Mailgun, provided by Mailgun Technologies, 112 E Pecan St 1135, San Antonio, TX 78205, USA. Mailgun is an email service provider that enables us to send and receive emails. We have also integrated Mailgun with Bloomreach Engagement by configuring Mailgun as an SMTP server in Bloomreach. The integration of Mailgun into Bloomreach Engagement enables us to send and manage emails efficiently. Your contact details, such as your email address and, where applicable, your name, are used to send you relevant information, updates and offers. Mailgun processes the personal data referred to above as our processor exclusively according to our instructions and will neither use the data for its own purposes or those of third parties, sell it, nor disclose it to third parties. Your data is collected and processed on the basis of your consent (Art. 6(1)(a) GDPR). Even after giving your consent, you can deactivate this service at any time via our website or unsubscribe from our newsletter.

Criteo
For the services offered on our website, we use the advertising platform Criteo, a service provided by Criteo SA, 32 Rue Blanche, 75009 Paris, France. Criteo enables us to display personalised advertising by analysing website traffic and using this information to display individually tailored and placed advertisements. Information about Criteo's data protection can be found at https://www.criteo.com/de/privacy/corporate-privacy-policy/.

Through Criteo, we collect data about your browsing behaviour, the browser you use and your operating system, among other things. Criteo stores this data in the form of cookies on website visitors' computers.

We have concluded an agreement with Criteo on joint controllership. Data is collected and processed on the basis of your consent (Art. 6(1)(a) GDPR). Even after giving your consent, you can deactivate this service at any time via our website.

Google DoubleClick Floodlights
We use "DoubleClick Floodlight" on our website, a service provided by Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland ("Google"). Google stores and processes information about your user behaviour on our website. For this purpose, Google uses cookies, among other things, i.e. small text files that are stored locally in the cache of your web browser on your device and enable an analysis of your use of our website.

In addition to blocking all cookies through your browser, you can prevent Google from processing your data by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de

Further information about DoubleClick Floodlight can be found in Google's Privacy Policy: https://policies.google.com/technologies/ads.

We use DoubleClick Floodlight for marketing and optimisation purposes, in particular to analyse the use of our website and to continuously improve individual functions and offers as well as the user experience. The statistical analysis of user behaviour enables us to improve our services and make them more interesting for users. This also constitutes our legitimate interest in the processing of the above data by the third-party provider. The legal basis is Art. 6(1)(f) GDPR.

Google Analytics
We use Google Analytics on our website, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google uses cookies to collect information about your use of this website (including your IP address), which is transmitted to and stored on Google's servers. It cannot be ruled out that data processing may take place outside the scope of EU law. However, we use Google Analytics exclusively with an anonymisation function whereby the IP address is shortened by Google before transmission within Member States of the European Union or in other contracting states of the European Economic Area. Only in exceptional cases is the full IP address transmitted to Google in the USA and shortened there. Data transfers to the USA are based on the EU Commission's Standard Contractual Clauses. Google analyses the information collected and provides us with reports on activities on our website and provides us with other services in this regard. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.

Further information about Google Analytics can be found in Google's Privacy Policy: https://policies.google.com/technologies/ads.

The use of Google Analytics is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR in statistically analysing the use of our website and continuously optimising it.

Facebook Pixel
We use "Facebook Pixel", a tracking technology offered by Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland ("Facebook"). Facebook Pixel automatically collects and stores data (IP address, time of visit, device and browser information, and information about your use of our website based on events defined by us, such as visiting a webpage or subscribing to a newsletter), from which pseudonymous usage profiles are created. As part of so-called advanced matching, additional information is collected and stored for matching purposes that can be used to identify individuals (e.g. names, email addresses and telephone numbers). When you visit our website, Facebook Pixel automatically sets a cookie that uses a pseudonymous Cookie ID to recognise your browser when visiting other websites. Facebook combines this information with other data from your Facebook account and uses it to compile reports on website activity and to provide other services related to website use, in particular personalised and group-based advertising. In connection with the use of Facebook Pixel, your personal data is transferred to the USA; this transfer is based on the EU Commission's Standard Contractual Clauses. Further information about data processing by Facebook can be found in Facebook's Privacy Information: https://www.facebook.com/about/privacy/update.

Email advertising / SMS advertising / Direct mailing
If we receive your address, email address or mobile phone number in connection with the sale of a product or service and you have not objected, we reserve the right, on the basis of Section 7(3) UWG, to regularly send you offers for similar products to those you have already purchased from our range by post, email or SMS. This serves to safeguard our legitimate interests, which prevail following a balancing of interests, in advertising to our customers. You may object to the use of your address, email address or mobile phone number at any time by sending a message to the contact option described below or via a designated link in the advertising message, without incurring any costs other than the transmission costs according to the basic rates.

Newsletter
If you subscribe to our free newsletter, we use the data required for this purpose or separately provided by you to regularly send you our email newsletter on the basis of your consent pursuant to Art. 6(1)(a) GDPR.

To receive our newsletter, you need a valid email address. We will verify the email address you provide to determine whether you are actually the owner of the email address or whether its owner has authorised receipt of the newsletter (double opt-in). When you register for our newsletter, we store your IP address and the date and time of registration. This serves as a safeguard on our part in the event that a third party misuses an email address and subscribes to our newsletter without your knowledge. We do not collect any further data. You can unsubscribe from the newsletter at any time by sending a message to the contact option described below or via a designated link in the newsletter. After unsubscribing, we will delete your email address unless you have expressly consented to further use of your data or we reserve the right to use the data in a manner that is legally permitted and about which we inform you in this statement.

Newsletter tracking
We use so-called newsletter tracking in our newsletter. This enables us to record recipient responses (opening a mailing, clicking on text and image links, downloading images with an email programme) and store them anonymously for statistical purposes. It is not possible to draw conclusions about individual users from the stored data.

If you, as a user, have previously expressly consented, the recipient responses described above (usage data) are collected and stored on a personal basis. Using this usage data, we can better tailor the content of the newsletter to your personal interests. We use several data sources for this purpose, such as interactions on the website, data from sales history and the user account. You also have the option to withdraw your consent to the collection and analysis of personalised usage behaviour separately from your consent to receive the newsletter at any time via the withdrawal link included in every newsletter.

The legal basis for our newsletter tracking is our legitimate interest pursuant to the General Data Protection Regulation, Art. 6(1)(f), in designing a newsletter that is suitable and easy for you to read while increasing efficiency at the same time.

VI. Disclosure of personal data to third parties
As a general rule, we use your personal information only to provide the services you have requested and consented to. Where we use external service providers to provide these services, their access to the data is also exclusively for the purpose of providing the services and on the basis of your consent. We use technical and organisational measures to ensure compliance with data protection requirements and also require our external service providers to comply with them.

We also do not disclose data to third parties without your explicit consent, in particular not for advertising purposes. Your personal data will only be disclosed if you have expressly consented to the disclosure or if we are authorised or obliged to do so under statutory provisions and/or official or court orders. This may include, in particular, providing information for the purposes of criminal prosecution, preventing danger or enforcing intellectual property rights.

VII. Cookies
We use cookies on our website, as are found on most websites. Cookies are small text files that your internet browser stores on your computer. These are usually so-called "session cookies", which are deleted at the end of your visit. In some cases, cookies with a longer storage period, known as persistent cookies, may also be used so that your settings and preferences can be taken into account the next time you visit our website. You can delete cookies at any time in your browser's security settings and configure the use of cookies according to your preferences. Please note, however, that you may then not be able to use all functions of the website.

Cookies help us improve and simplify your use of the website. They enable us to recognise your computer and make any preferences immediately available. This constitutes a legitimate interest in processing the data pursuant to Article 6(1)(f) GDPR. The use of cookies that are not technically necessary for the use of our online services is permitted only with your explicit consent pursuant to Art. 6(1)(a) GDPR. This applies in particular to the use of advertising, targeting or sharing cookies. In addition, we will only disclose your personal data processed through cookies to third parties if you have expressly consented to this.

Below you will find an overview of the various types of cookies that we have placed on our website.

Functional cookies
These cookies are used to technically ensure that the website functions properly. The cookies help recognise you when you visit again and store certain data. These cookies may contain information about your shopping cart, language settings or login behaviour, for example. The use of functional cookies constitutes a legitimate interest in processing the data pursuant to Article 6(1)(f) GDPR.

Analytical cookies
We use analytical cookies to improve and optimise the quality of our online services and their content and to check and improve the reach and discoverability of our online services. These purposes also constitute our legitimate interest as the legal basis for processing pursuant to Art. 6(1)(f) GDPR. You may object to the collection and storage of data through analytical cookies at any time with effect for the future.

Advertising tracking and sharing cookies
Kamera Express has a wide range of products and we want to show you only the products, offers and advertisements that are relevant to you. For this purpose, we use tracking cookies. This enables us to show you relevant advertising and offers on our (partner) websites. We can track how often you have already seen an advertisement, whether you click on advertisements and whether you subsequently place an order. These cookies are used only on the basis of your explicit consent pursuant to Art. 6(1)(a) GDPR.

Cookie | Name | Function and purpose | Expiry
1P_JAR | Google | Google uses these cookies to show you personalised advertising on Google websites based on your recent searches and previous interactions. | 1 year
IDE | Google | These cookies come from Google DoubleClick and are used to show you personalised advertising based on your previous visits to our website. | 1 year
Adx_ts / App_ts / Id_ts / Viewer / Spx_ts | Adscience | These cookies ensure that relevant advertising is displayed on external websites. | 1 year
Uid / cto_lwid / cto_idcpy / Eid / Criteo_cookie_header / tmp_uid | Criteo | This cookie is used to show you personalised advertising based on your previous searches and interactions. | 1 year / 13 months / 6 months / 4 months / 1 day
xs / C_users / datr / Fr | Facebook | This cookie is used to show you personalised advertising based on your previous searches and interactions on Facebook. | 3 months / 1 year / 2 years / 2 years
YSC | YouTube | This cookie is set by the YouTube video service on pages with embedded YouTube videos. | Session
PREF | YouTube | This cookie stores your preferences and other information, in particular your preferred language and the number of search results you want to see, etc. | 2 years

VIII. Social media
We use links or plugins to the social media networks Facebook, YouTube, Twitter and Instagram on our website. The share buttons are an automated embedding of layout buttons with links and identical click events to the individual services. No content from the services is embedded and no data is transferred before you click on the links. After clicking the button, the operator of the social media platform receives information that the respective page has been accessed, for which personal data is transmitted to the platform operator. If you are logged into some services at that time, e.g. your YouTube account, you allow the individual social media service providers to directly associate your browsing behaviour with your personal profile. You can prevent this by logging out of your social media account beforehand.

The individual providers are responsible for ensuring that your privacy is protected in accordance with data protection regulations; this Privacy Policy does not apply to the services of the social media providers. For further details about the provisions applicable to these social media services, please refer to the providers' respective Privacy Policies. These can be found at:

Facebook: https://de-de.facebook.com/policy.php

YouTube: https://policies.google.com/privacy?hl=de

Twitter: https://twitter.com/de/privacy

Instagram: https://de-de.facebook.com/help/instagram/

The use of links or plugins on our website to social media networks enables us to provide you with further information about us and our products; this also constitutes our legitimate interest within the meaning of Art. 6(1)(f) GDPR.

IX. Your rights
We are committed to explaining how we process personal data and informing you about your rights as transparently as possible. If you require further information or wish to exercise your rights, you can contact us at any time using the contact details above ([email protected]), so that we can deal with your request. We would like to inform you of the following rights:

under Art. 15 GDPR, the right to request information about the personal data concerning you that we process, to the extent specified therein;
under Art. 16 GDPR, the right to request without undue delay the correction of inaccurate personal data or completion of your personal data stored by us;
under Art. 17 GDPR, the right to request the deletion of your personal data stored by us, unless further processing is necessary for:
the exercise of the right to freedom of expression and information;
compliance with a legal obligation;
reasons of public interest; or
the establishment, exercise or defence of legal claims;
under Art. 18 GDPR, the right to request restriction of the processing of your personal data insofar as:
you dispute the accuracy of the data;
the processing is unlawful but you oppose its deletion;
we no longer need the data, but you require it for the establishment, exercise or defence of legal claims; or
you have objected to processing pursuant to Art. 21 GDPR;
under Art. 20 GDPR, the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format or to request its transfer to another controller;
under Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. As a rule, you may contact the supervisory authority of your habitual place of residence or workplace or the location of our company's registered office.

Automated decision-making or the use of profiling does not take place on our website.

Validity of this Privacy Policy
We reserve the right to amend our Privacy Policy in order to adapt it to changes in the relevant laws and regulations and to better meet your needs as a user of our website.

Privacy policy

Need help?

Stay up to date

Customer Service

Our Services

Stores

Kamera Express

What our customers think of us