Privacy policy
CEWE respects your privacy. All data collected is used to improve our services. Data protection and data security for customers and users are a high priority for CEWE. The protection of your personal data throughout our business processes is therefore of particular concern to us.
In accordance with Art. 13 of the EU General Data Protection Regulation (EU GDPR), this privacy policy explains what information is collected on our website and the use of CEWE Online Photo Services by your visit and how this information is used. However, the declaration does not apply to websites of other companies that contain a link to this website or to which our website has created links.
1. Collection and processing of personal data
When you visit our websites, our web servers temporarily store access data by default, i.e. the IP address of your access, the upload software used for the purpose of the order (ActiveX, Flash, Java, etc.), the Session_ID to identify your connection session, as well as the date and time of the visit. The legal basis for the temporary storage of the data is Art. 6 para. 1 lit. f) EU GDPR. This data is deleted after the end of the session in accordance with the statutory provisions. In addition, personal data is only stored if you provide it to us voluntarily, e.g. as part of a registration, an order and the associated order processing, a survey, a competition or an online application on the basis of Art. 6 para. 1 lit. a) or Art. 6 para. 1 lit. b) EU GDPR. You will be informed about the purpose of data collection in the respective input and contact forms. You have the option of deleting your registration data in your customer account or via our customer service at any time.
For the purpose of creating photo products, your image data is automatically saved for 30 days after uploading in the online gallery, which is only accessible to you. In addition, CEWE provides you with an online album memory, which you can optionally use to save the image data over a longer period of time. You can delete your image data from the online gallery and the album memory at any time or make it accessible to third parties at your request.
After your order has been completed and delivered, the image data will be kept in production for up to 6 weeks so that any complaints or repeat orders can be processed. After that, this data is irretrievably deleted.
2. Transmission of data via the Internet
Sensitive data, such as login, password, address data, information about your payment methods, credit card data or account data for direct debit are transmitted exclusively via encrypted connections (HTTPS / SSL) and stored on security servers. The electronic payment process is handled by a certified payment service provider.
3. Note on data transfer to third countries
To ensure the high availability of our customer service, we are occasionally supported by service providers outside the scope of the EU GDPR. We have concluded contracts with the service providers in accordance with Art. 44 GDPR in conjunction with the EU standard contractual clauses and regularly ensure that our very high data protection requirements are also fully met.
4. Making contact
You have the option of contacting us in several ways: By e-mail, by telephone or by post. When you contact us, we use the personal data that you voluntarily provide to us in this context. This is done solely for the purpose of contacting you and to be able to process your enquiry properly.
When contacting us by telephone, there are no costs higher than the transmission costs according to the basic rate.
5. Use and disclosure of personal data and purpose limitation
Your data is processed and forwarded on the following legal bases: Art. 6 para. 1 lit. a) EU GDPR for all processing that requires consent, Art. 6 para. 1 lit. b) EU GDPR for contract fulfilment, Art. 6 para. 1 lit. c) EU GDPR for consent management to fulfil legal obligations and Art. 6 para. 1 lit. f) EU GDPR for further processing with legitimate interest.
We use the data provided by you to fulfil and process your order in accordance with Art. 6 para. 1 lit. b) EU GDPR. Your data will be used in accordance with the applicable data protection regulations solely for the purpose associated with the respective collection and to safeguard our own legitimate business interests in accordance with Art. 6 para. 1 lit. f) EU GDPR, in particular the technical administration of the websites. We will only use this data for product-related surveys and marketing purposes if you have given us your prior consent in accordance with Art. 6 (1) (a) GDPR. You can revoke any consent you have given at any time with effect for the future.
CEWE commissions other companies and individuals with the fulfilment of tasks, such as packaging, shipping and delivery of articles. These service providers have access to personal information that is necessary for the fulfilment of your tasks. However, they may only use this information for these purposes. We have required our service providers to handle the information in accordance with the relevant data protection laws and our privacy policies.
In order to process payments, we pass on the necessary payment and order data to the credit institution commissioned with the payment and, if applicable, to the payment service provider commissioned by us or to the payment service selected by you in the ordering process.
Personal data will only be transferred to state authorities within the framework of mandatory legal provisions. Your data will not be disclosed to private third parties without your express consent.
Our employees are obliged by us to maintain confidentiality and to comply with the relevant data protection regulations.
When registering for the newsletter, your e-mail address will be used for our own advertising purposes on the basis of Art. 6 para. 1 lit. a) EU GDPR until you unsubscribe from the newsletter. You can unsubscribe at any time. If you subscribe to our newsletter, we will use the data required for this or separately provided by you to send you our e-mail newsletter on a regular basis. Unsubscribing from the newsletter is possible at any time and can be done via a link provided for this purpose in the newsletter, via your customer account or via customer service.
Cancellation by telephone does not incur any costs higher than the transmission costs according to the basic tariffs.
To draw the attention of existing customers to products in their area of interest, we inform them about these products by e-mail. Existing customers also receive these personalized product recommendations if they have not subscribed to our newsletter. We make the selection of individual product recommendations based on the data and information that you have provided when making your purchases and which we use on a legal basis, legitimate interest Art. 6 para. 1 lit. f) GDPR.
You can object to the individual product recommendation at any time during the order/your customer account, as well as by notifying customer service or using the link provided at the end of the product recommendation.
6. Use of cookies
We use so-called cookies on various pages to enable you to use certain functions when visiting our website and to make it more attractive.
Cookies are small text files that are stored on your end device. Some of the cookies we use are deleted again at the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your end device and enable us or our partner companies to recognize your browser on your next visit (persistent cookies). Further information and individual cookie settings here.
When accessing the pages, the user is informed about the use of cookies for analysis purposes and their consent to the processing of the personal data used in this context is obtained. To fulfil our legal obligation, we use the consent management solution from Usercentrics, which stores your consent on the basis of Art. 6 para. 1 lit. c) EU GDPR in order to comply with the documentation obligations pursuant to Art. 7 para. 1 EU GDPR.
You can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or generally exclude cookies. If you do not accept session cookies, the functionality may be limited.
7. Collection of anonymous user data
On this website, web analysis technologies from Adobe Systems Inc. and Google Inc. (web analysis technology Google Remarketing) are used to collect and store data for marketing and optimization purposes on the basis of Art. 6 para. 1 lit. a) and Art. 6 para. 1 lit. f) EU GDPR, from which user profiles are created using pseudonyms. These user profiles are used to analyze visitor behavior and are evaluated in order to improve and tailor our offering. The pseudonymized user profiles are not merged with personal data about the bearer of the pseudonym without the express consent of the person concerned, which must be given separately. Further information about the individual marketing and analysis cookies can be found here.
Further information on terms of use and data protection can be found here:
Google Inc.: http://www.google.com/intl/de/policies/privacy/partners/
Adobe Systems Inc.: https://www.adobe.com/lu_de/privacy/policy.html
YouTube
Our website uses the provider YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA, represented by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, for the integration of videos. YouTube videos are integrated via an extended data protection mode, which means that no personal data is analyzed by Google when you visit our website. If you click on the video, your IP address is transmitted to YouTube and YouTube learns that you have watched the video. We have no influence on the possible collection and use of your data by YouTube. You can find more information in YouTube's privacy policy at http://www.google.lu/intl/de/policies/privacy/. If you are logged in to YouTube, this information will also be assigned to your user account. If you do not want this assignment, you can log out of your user account before accessing the video.
8. Safety measures
CEWE uses extensive technical and operational security measures to protect your personal data managed by us against misuse, accidental or intentional manipulation or access by unauthorized persons. Our security procedures are continuously improved in line with technological developments.
9. Rights of data subjects
When processing your personal data, the EU General Data Protection Regulation grants you certain rights:
1. right to information (Art. 15 EU GDPR):
You have the right to request confirmation as to whether personal data concerning you is being processed. If this is the case, you have a right to information about this personal data and to the information listed in detail in Art. 15 EU GDPR.
2. right to rectification (Art. 16 EU GDPR):
You have the right to demand the immediate correction of incorrect personal data concerning you and, if necessary, the completion of incomplete personal data.
3. right to erasure (Art. 17 EU GDPR):
You also have the right to demand that personal data concerning you be deleted immediately if one of the reasons listed in Art. 17 EU GDPR applies in detail, e.g. if the data is no longer required for the purposes pursued.
4. right to information (Art. 19 EU GDPR):
If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.
You have the right to be informed about these recipients by the controller.
5. right to restriction of processing (Art. 18 EU GDPR):
You have the right to request the restriction of processing if one of the conditions listed in Art. 18 EU GDPR is met, e.g. if you have objected to the processing, for the duration of any examination.
6. right to data portability (Art. 20 EU GDPR):
In certain cases, which are listed in detail in Art. 20 GDPR, you have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format or to request the transfer of this data to a third party.
7. revocation of consent (Art. 7 para. 3 EU GDPR):
You have the right to withdraw your consent at any time. This means that we will no longer continue the data processing that we previously carried out on the basis of your consent. Your cancellation does not affect the legality of the data processing that has already taken place.
8. right to lodge a complaint with a supervisory authority (Art. 77 EU GDPR):
In accordance with Art. 77 EU GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of the data concerning you violates data protection regulations. The right to lodge a complaint can be exercised in particular with a supervisory authority in the Member State of your habitual residence, place of work or place of the alleged infringement.
9. right to object (Art. 21 EU GDPR):
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) of Article 6(1) or point (f) of Article 6(1) GDPR pursuant to Article 21(2) GDPR.
The controller will no longer process the personal data concerning you unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.
If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing.
10. data protection officer
If you have any questions about data protection at CEWE, please contact us:
CEWE BENELUX
Data protection
Industrieweg 73
8071 CS Nunspeet
Tel.: +31 (0)341 255355
(privacy@cewe.nl)
Leo Kruger
CEWE Benelux
Mechelen, 25 May 2020