Privacy Policy
Thank you for visiting our websites and your interest in our company and products.
The protection of personal data is very important to us. We want to offer you comprehensive services while at the same time protecting your privacy.
Please note therefore our Privacy Policy, given below.
Content
01. General information about the collection of personal data
02. Contact details
03. Explanations of the legal bases and period of storage
04. Your rights
05. Visits to the picturemaxx website and creating of log files
06. Contact form
07. Use of cookies and analytical processes
08. Use of Google Maps
09. Social Media Links
10. Disclosure to third parties
11. Security standards
12. Changes to this statement
1. General information about the collection of personal data
picturemaxx AG ("picturemaxx") attaches great importance to the protection of your personal data. This Data Protection Statement describes how picturemaxx ("we", "us" and "our") uses and protects personal data collected at www.picturemaxx.com and at other websites and SaaS solutions which we offer ("picturemaxx website").
Personal data are all data which might refer to you personally, including for example your form of address, name, address, e-mail address, IP address, etc. We only collect and process your personal data in compliance with the provisions of the EU General Data Protection Regulation ("GDPR") and other provisions of European and applicable national data protection law.
Personal data is only collected and used with your consent or if the processing of such data is permitted by law. The following provisions provide information about the type, scope and purpose of the collection and processing of your personal data.
In the event that we make use of the services of a processor for the purpose of providing specific functions of our services or if we use your data for advertising or analysis purposes, we will also inform you in detail in the following about the action taken. We also provide information about the stipulated criteria for and the period of storage. We also inform you about your rights with regard to every kind of data processing.
This Data Privacy Policy refers exclusively to our picturemaxx website. If links on our picturemaxx website take you to third-party websites, please find out how your data are used at such websites.
2. Contact details
2.1. Name and address of the person responsible for data processing
picturemaxx is the responsible legal person for data protection within the meaning of the GDPR and under all other applicable EU data protection law ("controller"). If you have any questions, suggestions or criticisms relating to data protection regarding our website, please contact:
picturemaxx AG
Stefan-George-Ring 2
81929 Munich
Email: info@picturemaxx.com
2.2. Name and address of the data protection officer
Anyone affected (“data subject”) can contact our data protection officer directly with questions and suggestions at any time. Contact details of the data protection officer:
PROLIANCE GmbH
Leopoldstr. 21
80802 Munich
Germany
Email: datenschutzbeauftragter@datenschutzexperte.de
When contacting the Data Protection Officer, please state the company to which your enquiry relates, here "picturemaxx AG". Please, avoid including sensitive information in your request, such as a copy of an identity card etc.
3. Explanations of the legal basis and period of storage
3.1. Legal basis for the processing of personal data
In the event that we asked for your consent for processing of your personal data Article 6 (1) sentence 1 a) GDPR is the legal basis for processing your personal data. You are entitled to withdraw any consent you have given at any time with effect for the future.
Under Article 6 (1) sentence 1 b) GDPR, the processing of your personal data is legitimate if such processing is necessary for the performance of a contract with you or your company. This also applies to all processing operations which are relevant prior to entering into a contract.
Under Article 6 (1) sentence 1 c) GDPR, the processing of your personal data is legitimate if such processing is necessary for compliance with one of our legal obligations.
Under Article 6 (1) sentence 1 f) GDPR, the processing of your personal data is legitimate if such processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by your interests or fundamental rights and freedoms.
3.2. Period of storage and erasure of data
Any personal data which we collect, process and store will be kept by us for as long as there is a specific purpose for such storage. Your data will be erased or their processing restricted as soon as the specific purpose for which they were stored no longer applies.
It is possible, however, that European regulations, applicable national laws or other rules may require us to store data which we have processed for a longer period of time. We will erase or restrict the processing of your data when these periods of storage have expired.
4. Your rights
For the purposes of the GDPR you are the data subject of any of your personal data which we process. As a data subject you have the following rights with regard to picturemaxx:
4.1. Right of access by the data subject
You have the legal right to request information about whether we are processing your personal data. If this is the case, you have the right to be informed about the extent to which your personal data are being processed.
4.2. Right to rectification
You have the right to obtain from picturemaxx the rectification of inaccurate personal data concerning you and/or to have incomplete personal data completed.
4.3. Right to restriction of processing
In certain circumstances you have the right to restrict the processing of your personal data.
4.4. Right to erasure
In certain circumstances you have the right to obtain from picturemaxx the erasure of personal data concerning you without undue delay. The right to erasure does not apply if processing is necessary.
4.5. Notification obligation
If you have asserted your right to rectification, erasure or restriction to picturemaxx, picturemaxx must communicate any rectification or erasure of personal data or restriction of processing to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort.
4.6. Right to data portability
You have the right to receive, in a structured, commonly used and machine-readable form, any personal data concerning you which you have provided to picturemaxx. You also have the right in certain circumstances to transmit those data to another company without hindrance from picturemaxx to which the personal data have been provided initially.
4.7. Right to object
You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you based on Article 6 (1) sentence 1 f) GDPR. picturemaxx may then no longer process the personal data relating to you unless picturemaxx demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
If the personal data relating to you are processed for the purposes of engaging in direct advertising, you have the right to object at any time to the processing of your personal data for such advertising purposes. You can inform us of such objection by contacting us as follows:
picturemaxx AG
Stefan-George-Ring 2
81929 Munich
Email: dataprotection@picturemaxx.com
4.8. Right to withdraw the consent
You have the right to withdraw your consent at any time. The withdrawal of consent does not affect the legitimateness of processing based on consent before its withdrawal.
4.9. Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.
5. Visits to the picturemaxx website and creation of log files
Our system automatically collects data and information from your computer system every time you visit our picturemaxx website. The following data are then collected:
-
Information about the type of browser you are using
-
Information about your operating system
-
Information about your internet service provider
-
Your IP address
-
The date and time of your visit to our website
-
Information about the website from which your system has reached our website
-
Information about the website which you access from our website
The data which we collect on you are stored in our system's log files. As a rule, these data are not stored with other personal data. One exception to this rule is the information collected by us about your browser settings.
The temporary storage of data and log files is legitimate under Article 6 (1) sentence 1 f) GDPR. We have a legitimate interest in collecting and temporarily storing the data referred to because temporarily storing the IP address by the system is necessary in order to deliver the website to your computer.
Data are stored in log files to ensure the functioning of the website. This information is also used to optimise our website and to warrant the security of our information technology systems. Your log files are not assessed for marketing purposes.
The data will be erased or altered in a way that prevents them being assigned to you as soon as they cease to be necessary for the purposes referred to here. Data which are stored in log files are erased after 30 days.
6. Contact form
6.1. Processing by picturemaxx Germany
You can make contact with us by electronic means using the contact form on our website. If you wish to contact us in this way, the data which you enter will be sent to us and stored. This applies to the following data in particular:
-
Your form of address
-
Your full name
-
Your e-mail address
-
Your telephone number (optional)
-
Your company
-
Your country of origin or that of your company
-
The subject of your enquiry
-
The type of enquiry
-
The question and reason for your enquiry
The processing of this data is legitimate under Article 6 (1) sentence 1 a), b) or f) GDPR. We only process any personal data which you enter to deal with your request, which is in our interest. This may involve the initiation of a contract. The data are erased as soon as they are no longer required for the purpose for which they have been collected and provided that they are not subject to any legal or contractual archiving obligations. The conversation has come to an end when it is apparent from the circumstances that the matter being discussed has been finally clarified.
If we have obtained your consent and your data are processed by us for marketing purposes, the following applies: You can withdraw your consent to picturemaxx for the processing or any other use of your personal data at any time with effect for the future. In this case, the conversation cannot be continued. All personal data which are stored when contact is made are then erased if they are not required to be retained by law and if no other legal grounds for processing the data exist.
The following data are also stored at the time you send your message:
-
Your IP address
-
The date and time at which you have made contact
These additional personal data processed during the transmission operation are used to prevent the contact form from being misused and to ensure the security of our information technology systems. Other personal data collected during transmission will be erased after a period of 30 days at the latest. The data are used exclusively to process the conversation. The processing of this data is legitimate under Article 6 (1) b) or f) GDPR.
6.2. Transmission to affiliated international offices
In certain circumstances the data entered by you may be passed on to the picturemaxx international offices, if the thematic and regional content of your enquiry relates to the relevant office (order processing). In this case also picturemaxx remains your first point of contact and you can continue to assert your rights against picturemaxx.
In some circumstances, picturemaxx may transfer the data to countries outside the European Economic Area (EEA), for example to the USA. This is just the case, if picturemaxx employees abroad are the right picturemaxx contact partners to answer your request. picturemaxx will, however, take the necessary steps to ensure that an appropriate level of data protection is maintained. If picturemaxx sends your data to the United States, for example, additional measures are taken, such as concluding EU-compliant data transmission agreements with the data importer, if this is necessary.
By sending off the contact form you declare that you agree to transmission of the data entered in the contact form to regional picturemaxx offices abroad (for example USA), if the thematic and regional content of your enquiry relates to the relevant international office. You may withdraw your consent from picturemaxx at any time with effect for the future.
The transmission of your data is legitimate under Article 6 (1) sentence 1 a) b) and f) GDPR. If your request is related to a foreign picturemaxx office, picturemaxx has an interest in contacting the employees in the foreign offices in order to be able to process your request. We erase your data as soon as they are no longer needed to achieve their intended purpose and if they are not subject to contractual or legal retention periods.
7. Use of cookies and analytical processes
7.1. Use of cookies and similar technologies
In addition to the data mentioned above, various types of cookies are used and stored on your computer when you use our picturemaxx website.
Cookies are small text files that are stored on your computer or mobile device when you visit our website. Various types of information are provided to us by cookies placed on your devices.
In addition to cookies, some services use so-called “localStorage entries”. A localStorage entry is functionally similar to a cookie. The difference is that localStorage stores information in your browser’s cache. Insofar as services on our website use localStorage, we expressly point this out in this privacy policy.
In addition, some services also use so-called “tracking pixels”.
Strictly necessary cookies
For proper operation of our website and display of content, certain cookies are technically essential for us to display our website to you at all. These “strictly necessary cookies” cannot be deselected because our website cannot be offered without them.
Cookies and similar technologies for statistics and external content
We use cookies to record the use of our website statistically. You do not have to select these cookies.
Cookies and similar technologies from external services are used to expand and optimize the functionality of our website and to make it more convenient for you to use. You do not have to accept the cookies and similar technologies used for this purpose, but if you do not, you will be unable to use the extended functions. You can also adjust the cookie settings in your browser. However, this could limit the functionality of our site. The same applies to localStorage entries, which you can delete from your browser cache.
7.2. Objection / Revocation of consent
Cookies are stored on your computer. You can decide to delete the cookies from your computer at any time. Through the settings in your browser, you can determine yourself whether the transmission of information by cookies from your computer to us should be disabled, restricted or the cookies should even be deleted completely. If you disable all cookies for our website, it may no longer be possible to use all the functions of the website to their full extent. In addition, you have the option to adjust your cookie settings directly on our website: if you have given your consent to cookies and other technologies, you can revoke this at any time on our Consent Management Platform by switching the corresponding button to “Off”.
7.3. Consent Management Platform
If necessary, our picturemaxx websites obtain the necessary user consent via the Consent Management Platform Usercentrics. Usercentrics GmbH can be reached at Sendlinger Str. 7, 80331 Munich, Germany. The company's data protection regulations can be found at https://usercentrics.com/privacy-policy/
Data processing purposes are compliance with legal obligations and the storage of consent.
Collected data is device information, browser information, anonymised IP Address, opt-in and opt-out data, date and time of visit.
7.4. Drupal homepage builder
We use the content management system Drupal (Website: https://www.drupal.org/ , privacy policy: https://www.drupal.org/privacy) to set up this page.
8. Use of Google Maps
Google Maps API, a map service operated by Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”), is used on some specific pages of the picturemaxx website. This allows us to show you interactive maps directly on the website and provide you with convenient use of the map function.
When you visit a page of our website on which the map services are offered, Google receives the information that you have accessed the sub-page in question. In addition, the following data in particular are transmitted to Google:
-
your IP address;
-
date and time of the request;
-
content of the request (specific page);
-
information about your location;
-
website from which the request comes;
-
your browser type;
-
your operating system and its interface;
-
the language setting and version of the browser software.
This occurs regardless of whether Google provides a user account through which you are logged in or no user account exists. If you are logged in to Google, your data are directly assigned to your account. If you do not want the data to be assigned to your Google profile, you must log out before clicking the button. Google stores your data as a usage profile and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) for the provision of demand-based, customer-oriented advertising and to inform other users of the Google network about your activities on our website. You have the right to object to the creation of these user profiles; you must contact Google directly to exercise this right.
Our cooperation with Google in relation to this data processing is based on a joint controller agreement pursuant to Article 26 GDPR. You can find the agreement under the following link https://privacy.google.com/intl/de/businesses/mapscontrollerterms/
You have the option to disable the Google Maps service easily and thus prevent the transfer of data to Google: to do so, disable JavaScript in your browser. However, we would like to point out that in this case you will not be able to use the map display.
Data may be transferred to the USA and this is protected by the agreement of standard data protection clauses pursuant to Art. 46(2) point (c) GDPR. You can find more information about this under https://policies.google.com/privacy/frameworks?hl=de.
We use Google Maps API to provide you with a map function. This is justified on the basis of Art. 6(1) point (a) GDPR insofar as you have given us your consent in advance. You can revoke this at any time with effect from that point forward, as described above under point 10.2. In this case, you will no longer be able to use the Google Maps service.
For more information about the purpose and scope of data collection and processing by Google, please see Google’s privacy policy. There you will also find further information about your rights in this regard and your setting options for protecting your privacy https://policies.google.com/privacy?hl=de.
9. Social Media Links
9.1. Principles
We use the following simple social media links on the picturemaxx website. When you are visiting the picturemaxx website, your personal data is not automatically shared or passed on to providers of social media networks. Your data is only sent to the provider of the social media network and stored there, in case you click the link (which is placed as a button) and are already logged in or respectively you proceed the log in by entering your access data into a pop-up window which is opened by clicking the link in case you are not already logged in. You can control which data you wish to release by altering the data protection settings which are available on most social media platforms. More information about how you can change your data protection settings and how external social media sites handle your personal identifiable data is provided in the following:
9.2. Facebook
We link to Facebook ("Facebook"). Facebook is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. The link is recognisable by the Facebook logo. As soon as you click the link a connection is created between your web browser and Facebook's servers. The type, scope, purposes and processing of the data by Facebook and the rights and settings options for the protection of the user's privacy are detailed in Facebook's data protection statement (https://www.facebook.com/about/privacy).
9.3. Twitter
We link to the Twitter network. ("Twitter"), a service of Twitter Inc. 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. The link is recognisable by the Twitter logo. Your web browser will establish a connection to the Twitter server every you click the Twitter logo on the picturemaxx website. Details relating to the processing of your data by Twitter and your rights and setting options to protect your personal data are contained in the Twitter data protection statement (https://twitter.com/de/privacy).
9.4. LinkedIn
We link to the LinkedIn network ("LinkedIn") on the picturemaxx website. LinkedIn is operated by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. The link is recognisable by the LinkedIn logo. Your web browser will establish a connection to the LinkedIn server when you click the link. LinkedIn's data protection statement is available at https://www.linkedin.com/legal/privacy-policy. LinkedIn's cookie regulations are available at https://www.linkedin.com/legal/cookie-policy.
9.5 Xing
This service uses a link to the social network xing.com, which is operated by XING AG ("Xing"), Gänsemarkt 43, 20354 Hamburg, Germany. When you click on the link, your web browser connects to the Xing server. This link is recognisable by the Xing logo. The purpose and scope of data collection and further processing and use of the data by Xing as well as your rights and settings options for the protection of your privacy are detailed in the Xing data protection statement at https://privacy.xing.com/en.
9.6. Instagram
We link to the Instagram network ("Instagram"), which is operated by Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA. The link is identified by the Instagram logo in the form of an "Instagram camera". If you click such an Instagram logo your browser will establish a direct connection to the Instagram servers. The purpose and scope of data collection and further processing and use of the data by Instagram as well as your rights and settings options for the protection of your privacy are detailed in the Instagram data protection statement at: https://help.instagram.com/155833707900388.
10. Disclosure to third parties
10.1. Principles
We will only pass on your personal data – and will inform you appropriately – in compliance with the applicable data protection laws to service providers, business partners, affiliated undertakings and other third parties.
We may disclose personal data to service providers working on our behalf and require them to perform services in our name (order processing). These service providers may be affiliated undertakings of picturemaxx or external service providers. In this context we comply with stringent national and European data protection regulations. These service providers are bound by our instructions and are subject to stringent contractual limitations on the processing of personal data. Accordingly, data may only be processed if this is necessary for the performance of services in our name or in order to comply with legal requirements. We stipulate precisely and in advance the rights and obligations of our service providers in relation to personal data.
We may disclose personal data to a third party if we are required to do so by law or in legal proceedings or in order to supply and manage our products and services. We may also be required to provide information to law enforcement agencies or other public authorities. We are also authorised to release data if such disclosure of information is necessary for the purposes of collaboration and thus of providing picturemaxx services to you or if you declare your consent to such disclosure. Disclosure can also rarely be avoided in the course of tax audits.
10.2. Hosting
Our website and thus also your data are housed on picturemaxx’s servers with QSC AG ("QSC"), Mathias-Brüggen-Str. 55, 50829 Cologne in Munich, Germany. QSC may only access the servers or respectively the data on the servers in accordance with our instructions (order processing). QSC also adopts stringent technical measures to protect your personal data. Your data are held exclusively on picturemaxx servers in Germany and QSC has only access to those servers in a case of emergency and only in line with our instructions.
The processing of your data is legitimate under Article 6 (1) sentence 1 f) GDPR. The purpose of processing data is that QSC provides the premises and infrastructure to run the picturemaxx servers. More information about data protection and the period for which your data etc. are stored by QSC is available at: https://www.qsc.com/privacy-policy/
10.3. Amazon
For the provision of cloud infrastructure services, picturemaxx uses Amazon Web Services EMEA SARL, Luxembourg (see https://aws.amazon.com/de/legal/aws-emea#1). Amazon may only access the data within the scope of our instructions (commissioned data processing). Amazon also takes strict technical measures to protect your personal information. Amazon does not share your personal information with third parties unless it is necessary to perform the agreed services or Amazon must do so to comply with the law or a valid and binding order of a governmental or regulatory authority. The data transmitted for this purpose are limited to the minimum necessary.
We have commissioned Amazon to store the data on servers within the EU or EEA. Amazon may also store the data outside the EEA. If data are transferred outside the EU/EEA, an adequate level of data protection is ensured by appropriate safeguards. For this purpose, we have concluded the standard data protection clauses of the EU Commission pursuant to Art. 46 (2) point (c) GDPR with Amazon.
The legal basis for processing your data is Article 6(1) sentence 1 point (f) GDPR. The purpose of the data processing is for Amazon to offer us the option of storing data on Amazon servers.
We store the data at most as long as it is necessary or legally required to fulfil the processing purposes.
For more information about Amazon’s privacy policy, please visit:
https://aws.amazon.com/de/compliance/gdpr-center/.
10.4. Other service providers
Other picturemaxx service providers that are recipients of personal data are our freelancers, who support us in the following areas:
-
Customer support
-
Administration
-
Development
-
Programming
-
CRM
These service providers are also obliged within the framework of order processing agreements in accordance with Section 13.1.
The legal basis for the processing of your data is Article 6 (1) sentence 1 f) GDPR. The duration of the data storage depends on the legal storage obligations.
11. Security standards
picturemaxx has implemented appropriate physical, technical and administrative security standards to protect personal data against loss, misuse, modification or destruction. Our service providers and associated undertakings are contractually committed to safeguarding the confidentiality of personal data. They are also prohibited from using data for purposes not approved by us.
12. Changes to this statement
We may update this Data Protection Statement from time to time. We, therefore, recommend that you regularly read this Data Protection Statement to ensure that you are familiar with our data protection practice. This Data Protection Statement was last updated on July 5, 2022.