As with the Terms and Conditions, the following information is based on the German Datenschutzerklärung and was translated with the help of internet translation services. The translation at hand serves to provide non-German speakers with an overview of Kajade Photography’s Data Privacy Statement. Please be aware that the following translation is not legally binding but only the original in German language.
I. Data Protection at a Glance
General Information
The following information gives you an overview of what happens to your personal data when you visit my website or contact me. Personal data is all data which allows to identify you personally. You will find detailed information about data protection in the following data privacy statement.
Data Collection on my Website
Who is responsible for the data collection on this website (responsible body)?
As the website operator, the data processing on this website is carried out by me,
Ka Yee Kowalski
Friedhofstr. 11
76887 Bad Bergzabern
Rhineland-Palatinate
Germany
Phone: +49176-8791-7829
Email: echo(a)kajade.de
How do I collect your data?
Your data is collected in two ways.
First, your personal data (such as your name or mobile phone number), which you provide to me via the contact form, via email, WhatsApp, on the phone or in similar ways.
Second, some technical data such as the Internet browser you use, the operating system or the time the page was viewed. After you enter my website and agree to the collection of data, this data is automatically recorded by the IT systems of this website.
What do I use your data for?
I use your personal data exclusively to answer your request and, if you decide to use my service, for the contracts concluded between us, for invoices, etc. For these purposes I only record your name, your mobile phone number, your email address and, if applicable, your address.
On the one hand, your technical data is collected to ensure that the website functions without errors. Moreover, the analysis of user behaviour allows me to draw conclusions about the marketing tools I use. For example, I can measure whether and which of my advertising expenses were used successfully or for which screen sizes my homepage should be optimised to offer the largest possible group of interested parties a pleasant user experience on my website.
What rights do you have regarding your data?
You have the right to receive information about the origin, recipient, and purpose of your stored personal data at any time free of charge. You also have the right for me to correct or delete this data and you may revoke any consent you may have given to data processing for the future at any time, or object to the processing of your personal data under certain circumstances. You also have the right to lodge a complaint with the responsible supervisory authority.
If you have any further questions on this or on data protection in general, you are welcome to contact me at any time.
Analysis Tools and Third-Party Tools
When you visit my website, technical data is recorded that can be statistically evaluated using so-called analysis programs. Detailed information on these analysis programs can be found below.
II. Hosting
WIX
My website is powered by Wix.com Ltd. hosted at 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel. Wix is a software tool for creating and hosting websites. Wix records e.g., the user behaviour, the visitor sources, the number and the region of the website visitors. Wix stores cookies on your browser that are required for the presentation of the website and to ensure security (necessary cookies).
The data collected by Wix can be stored on various servers worldwide e.g., also in the USA. Details can be found in the WIX data protection declaration: https://de.wix.com/about/privacy. Details on this data transfer to third countries, which according to Wix are based on the standard contractual clauses of the EU Commission or comparable guarantees in accordance with Art. 46 DSGVO, can be found here: https://de.wix.com/about/privacy-dpa-users.
Since I have a legitimate interest in my website being displayed as reliably as possible and in accordance with the design I created, WIX is used based on Article 6 Paragraph 1 lit. f GDPR. The processing of consent to the storage of cookies or access to information in the user's end device (e.g., device fingerprinting) takes place based on Article 6 Paragraph 1 lit. a GDPR and Section 25 Paragraph 1 TTDSG. Your consent can be revoked at any time by deleting the cookie.
Order Processing
As a Wix customer, I have automatically concluded an order processing contract with Wix. This contract, which is required by data protection law, ensures that personal data of my website visitors is only processed according to my instructions and in compliance with the DSGVO.
III. General Information and Mandatory Information
Data Protection
As the operator of this website, I take the protection of your personal data very seriously. I treat all your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration. However, it is important to know in connection with any data transmissions on the Internet (e.g., if you fill out the contact form or write me an email) that these data transmissions can have security gaps, so that third parties may be able to intercept data.
Storage Duration
I keep your personal data until the purpose for data processing is no longer given. If you would like me to delete your data or if you withdraw your consent for the data processing, I will delete your data immediately, provided there are no legal reasons to the contrary (e.g. tax or commercial retention periods). In these cases, the deletion takes place after the legally stipulated deadlines.
Note on Data Transfer to the USA and other Third Countries
Among other things, I use tools from companies based in the USA or other third countries that are deemed not secure under the data protection law. If these tools are active, your personal data may be transferred to and processed in these third countries. Please note that in these countries no level of data protection comparable to that of the EU can be guaranteed. For example, US companies are obliged to hand over personal data to security authorities without you as the person concerned being able to take legal action against this. It can therefore not be ruled out that US authorities (e.g., secret services) will process, evaluate, and permanently store the data you have stored on US servers for monitoring purposes. Unfortunately, I have no influence on these processing activities.
Revocation of Consent to Data Processing
You can revoke consent that you have already given at any time and without giving reasons by sending me a revocation. This written revocation can be made informally. The legality of the data processing that took place up until the revocation remains unaffected by the revocation. Your personal data will be deleted subject to the legal periods specified in the “Storage Duration” section.
Right of Appeal to the Responsible Supervisory Authority
If you feel that the way I process your data is not in line with the GDPR, I would appreciate your notification and openly discuss this matter together with you.
Irrespective of this, in such cases you also have the right to lodge a complaint with a supervisory authority based in the member state of your habitual residence, your place of work or the place of the alleged infringement. Your right to lodge a complaint is without prejudice to any other administrative or judicial remedy.
SSL and TSL Encryption
For security reasons and to protect the transmission of confidential content via the contact form, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the “https://” in the address line of your browser (instead of “http://”) and by the lock symbol next to it. If SSL or TLS encryption is activated, the data you send to me can only be read by third parties if they use undocumented or unknown weak points on the communication channels.
Information, Deletion, Correction, and Right to Data Portability
Within the framework of the applicable legal provisions, you have the right at any time to receive free information about which personal data I have stored about you, where I got this data from (data origin) and what the purpose of my data processing is. Upon request, I would be happy to provide you with this information, including all personal data stored about you, in a standard format.
You also have the right to have your data corrected or deleted.
Right to Restricting the Processing
You have the right that I only process your data to a limited extent. This would be the case, for example, if you need the data I have stored for the exercise, defence, or assertion of legal claims, at a time when I should actually delete them in accordance with the statutory deadlines. If you think that I should only process your data to a limited extent, please contact me and we will find a solution together.
Objecting to Promotional Emails
As part of the obligation for having an imprint on my website, I have published my contact details. I hereby expressly object to the use of this data for sending unsolicited advertising and information material and expressly reserve the right to take legal action in the event of unsolicited advertising being sent, such as spam emails.
IV. Data Collection on this Website
Cookies
My website uses so-called "cookies" i.e., small text files that are stored on your end device either temporarily for the duration of a session (session cookies) or permanently (permanent cookies).
Session cookies are automatically deleted after your visit, while permanent cookies remain stored on your device until you delete them yourself or until they are automatically deleted by your web browser. In addition, cookies from third-party companies (so-called third-party cookies) for the use of certain services can be stored on your end device when you enter my site.
Cookies have different functions. Numerous cookies are technically necessary because certain website functions would not work without them (e.g., displaying small videos). Other cookies are used to evaluate user behaviour e.g., to enable me to optimise my website.
Cookies that are required to carry out electronic communication, to provide certain functions, or to optimise my website (e.g., cookies for measuring web audience) (necessary cookies) are stored based on Article 6 Paragraph 1 lit. f GDPR, provided that no other legal basis is indicated.
As a website operator, I have a legitimate interest in the storage of necessary cookies so that my services can be provided in a technically error-free and optimised manner. If consent to the storage of cookies and comparable recognition technologies was requested, processing takes place exclusively based on this consent (Art. 6 Para. 1 lit. a DSGVO and § 25 Para. 1 TTDSG); this consent can be revoked at any time.
Please note that you can set your browser so that you are informed about the setting of cookies. You can then only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when the browser is closed. However, if cookies are deactivated, the functionality of my website may be restricted. Information about cookies from third-party companies or for analysis purposes is explained separately in this data privacy statement.
Contact Form
If you send me an inquiry via the contact form, I will save your details from the inquiry form, including the contact details you provided there, so that I can process your inquiry and answer any questions you may have. I will never pass on your data to other people without your consent.
This data is processed based on Article 6 (1) (b) GDPR if your request is related to the fulfilment of a contract or is necessary to carry out pre-contractual measures. In all other cases, the processing is based on my legitimate interest in the effective processing of the request addressed to me (Art. 6 Para. 1 lit. f GDPR) or on your consent (Art. 6 Para. 1 lit. a GDPR) if this was queried; the consent can be revoked at any time.
The data you enter in the contact form will remain with me until the purpose for data storage no longer applies (e.g., after your request has been processed), until you ask me to delete your data, or you revoke your consent to storage. Mandatory legal provisions - in particular retention periods e.g., for invoices - remain unaffected.
Request via Email or Phone
If you contact me by e-mail or telephone, I will save and process your request, including all the resulting personal data that I need to process your request. I will never pass this data on without your consent.
This data is processed based on Article 6 (1) (b) GDPR if your request is related to the fulfilment of a contract or is necessary to carry out pre-contractual measures. In all other cases, the processing is based on my legitimate interest in the effective processing of the request addressed to me (Art. 6 Para. 1 lit. f GDPR) or on your consent (Art. 6 Para. 1 lit. a GDPR) if this was queried; the consent can be revoked at any time.
You can also communicate with me via the messenger service WhatsApp. In this case, your mobile number will be sent to me automatically, which I will save and process as described under "Request by email or telephone". When communicating via WhatsApp, WhatsApp's terms of use and privacy policy apply, which you can read here: www.whatsapp.com/legal.
V. Social Media / Facebook and Instagram Plugins
Plugins from the social networks Facebook and Instagram are integrated on this website. The provider of these services is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to Meta, however, the data collected is also transferred to the USA and other third countries.
Facebook
You can recognize the Facebook plugin on my site by the Facebook logo. You can find an overview of the Facebook plugins here:
https://developers.facebook.com/docs/plugins/?locale=de_DE.
When you visit my website, a direct connection is established between your browser and the Facebook server via the plugin. Facebook receives the information that you have visited my website with your IP address. Please note that as the provider of these pages, I am not aware of the content of the data transmitted or how it is used by Facebook. You can find more information on this in Facebook's privacy policy at: https://de-de.facebook.com/privacy/explanation. If you do not want Facebook to be able to associate your visit to this website with your Facebook user account, please log out of your Facebook user account for the duration of your visit to my website.
Instagram
If you are logged into your Instagram account, you can link the content of this website to your Instagram profile by clicking on the Instagram button. This allows Instagram to associate your visit to this website with your user account. Please note that as the provider of these pages, I am not aware of the content of the transmitted data or how it is used by Instagram.
General
The Facebook and Instagram plugins are used based on Article 6 (1) (f) GDPR. As a website operator, I have a legitimate interest in the widest possible visibility in social media. If a corresponding consent was requested, the processing takes place exclusively based on Art. 6 Para. 1 lit. a DSGVO and § 25 Para (i.e., device fingerprinting) within the meaning of the TTDSG. The consent can be revoked at any time.
Insofar as your personal data is collected on my website with the help of the tools described here and forwarded to Facebook or Instagram, I and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland are jointly responsible for this data processing (Article 26 GDPR). Joint responsibility is limited to collecting the data and passing it on to Facebook or Instagram. The processing by Facebook after the forwarding is not part of the joint responsibility. Our joint obligations have been set out in a joint processing agreement. You can find the wording of the agreement at: https://www.facebook.com/legal/controller_addendum.
According to this agreement, I am responsible for issuing data protection information when using the Facebook or Instagram tool and for implementing the tool on my website in a secure manner in accordance with the data protection law. Facebook is responsible for the data security of Facebook and Instagram products. You can assert your rights (e.g., requests for information) regarding the data processed on Facebook or Instagram directly on Facebook. If you want to assert the rights of the data subjects with me, I am obliged to forward them to Facebook.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. You can find details here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://de-de.facebook.com/help/566994660333381 and here https://www.facebook.com/policy.php, as well as here https://www.facebook.com/legal/EU_data_transfer_addendum, here https://help.instagram.com/519522125107875 and here https://de-de.facebook.com/help/566994660333381. You can find more information on this in Instagram's privacy policy: https://instagram.com/about/legal/privacy/.
VI. Plugins and Tools
Google Web Fonts (Local Hosting)
On my website I use so-called web fonts provided partially by Google for the uniform display of fonts. The Google Fonts are installed locally. There is no connection to Google servers. You can find more information about Google Web Fonts at https://developers.google.com/fonts/faq and in Google's data protection declaration: https://policies.google.com/privacy?hl=de.
VII. User Behaviour Tracking
Google Tag Manager
The Google Tag Manager is a tool that can be used to manage so-called website tags. This supports me, for example, in integrating Google Analytics and other Google marketing services into my online offering. The Google Tag Manager only implements tags but does not process any personal data of the users. You can read the usage guidelines here: https://www.google.com/intl/de/tagmanager/use-policy.html.
Google Analytics
I use Google Analytics based on my legitimate interest within the meaning of Article 6 Paragraph 1 Letter f. This web analytics tool from Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA, ("Google") uses cookies to collect information about how visitors use my homepage.
This data is usually transferred to a Google server in the USA and stored there. Due to the certification under the Privacy Shield Agreement, Google offers a guarantee that European data protection law is complied with. You can find more information about the Privacy Shield Framework here: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
Google uses the information collected on my behalf to evaluate the use of my website by visitors. User behaviour and their activities on my website are summarized in reports and used by Google to offer and provide me with other services related to the use of my website.
Pseudonymous usage profiles of the visitors can be created from the processed data since I use Google Analytics with activated IP anonymisation. This means that the IP address you use will be shortened by Google within member states of the European Union or in other contracting states of the agreement. Google states that the full IP address is only transmitted to a Google server in the USA and shortened there in exceptional cases. The IP address transmitted by your browser will not be merged with other Google data.
To prevent Google from processing the data, you can object to the storage of cookies or completely deactivate the use of cookies in your browser. Furthermore, Google offers a browser plug-in which, after downloading and installing, prevents processing by Google. You can find this tool here: http://tools.google.com/dlpage/gaoptout?hl=de.
Further information on data use by Google as well as your setting and objection options can be found in Google's data protection declaration: https://policies.google.com/privacy. To change your settings for how Google displays ads, you can find more information here: https://adssettings.google.com/authenticated.
Google Universal Analytics
I use Google Analytics in the “Universal Analytics” design, in which the user analysis is based on your pseudonymous user ID and a pseudonymous profile is created for you with information from the use of different devices (so-called “cross-device tracking").
Building of Target Groups with Google Analytics
Google Analytics supports me in the placement of advertisements on the advertising services of Google and its partners. I aim to use my tight marketing budget in the best possible way by only showing it to users who are interested in my services or have certain characteristics, such as an interest in weddings or photography, which are determined based on the websites visited and which I transmit to Google (so-called "remarketing" or "Google Analytics audiences"). With the help of remarketing audiences, I want to ensure that my ads match the potential interests of my users.
Google AdWords and Conversion Measurement
I use the online marketing tool "Google AdWords" to place ads in Google's search results so that they are displayed to users who are presumed to be interested in my services. This allows me to target ads for my website on Google to show users only those ads that potentially match their interests. If, for example, a user is shown an advertisement for a product that he or she was interested in on other websites, this is referred to as "remarketing".
For this purpose, when my and other websites on which the Google advertising network is active are accessed, a Google code is executed directly by Google and so-called re-marketing tags are integrated into the website. These are invisible graphics or code, also known as "web beacons". With their help, an individual cookie or comparable technology is stored on the user's device, and it is noted which websites the user has visited, what content he or she is interested in, or which offers a user has clicked on. In addition, technical information about the browser and the operating system is collected, visiting times and other information relating to the use of our website.
I also use an individual "conversion cookie" that Google uses to generate conversion statistics for me. This means I can understand which advertisements led to an inquiry via the contact form. However, I only learn the anonymous total number of users who clicked on my ad and were forwarded to the confirmation page of my contact form, which contains a conversion tracking tag. I do not receive any information with which a user can be personally identified.
Google processes this data as part of the Google advertising network in a pseudonymous manner, which means that neither names nor e-mail addresses of a user are used, but rather pseudonymous user profiles are created and used based on cookie-related data. From Google's point of view, ads are not managed and displayed for specifically identifiable persons, but for the owner of certain cookies - regardless of who the owners of these cookies are. This does not apply to users who have expressly allowed Google to process the data without this pseudonymization. In this case, the information collected about the user is transmitted to Google and stored on Google's servers in the USA.
You can find out more information about data use by Google, setting and objection options in Google's data protection declaration (https://policies.google.com/technologies/ads) and in the settings for the display of advertisements by Google (https:// adssettings.google.com/authenticated).
This document is created with the help of https://www.e-recht24.de
August 2024
