Privacy Policy

of MediaSupply, a data base of proFoto Werbeagentur GmbH („MediaSupply")

Date: April 2020

1. Person Responsible

The controller responsible for data processing is proFoto Werbeagentur GmbH, Alfred-Nobel-Straße 6, 97080 Wuerzburg, Germany.

2. Purpose, duration and legal bases for data processing

Your personal data are processed on the basis of your consent (Art. 6 para. 1 p. 1 lit. a) GDPR). If you send us your personal data by e-mail when you contact us, we will process your personal data to process your requests, to contact you and possibly also to execute pre-contractual measures or to fulfil a contract (Art. 6 para. 1 p. 1 lit. b) GDPR). If required, the processing of your data will extend beyond the actual fulfilment of the contract to include the safeguarding of our legitimate interests or those of third parties as follows: The review and optimisation of processes for needs analysis and direct contact, advertising or market and opinion research, provided you have not objected to the use of your data, the assertion of legal claims and defence in the event of legal disputes, to guarantee IT security and IT operation, the facilitation of various different payment methods for your online order(s), to guarantee the operation of our website, the use of social media functions and measures for business management and the further development of services and products (Art. 6 para. 1 p. 1 lit. f) GDPR).

We are also subject to various retention and documentation obligations and may also be legally obliged to share personal data to authorities (Art. 6 para. 1 p. 1 lit. c) GDPR).

Data are transferred to third countries (states outside the EU and the European Economic Area - EEA) only if to do so is required to execute contracts concluded with you or by law, or if you have given us your consent to do so.

We will provide details to you separately, if required by law.

3. Processing of personal data

3.1 Logfiles

However, when the website of MediaSupply is accessed, the following data is automatically logged by the web server:

  • IP address of the requesting PC;
  • Date and time of the request;
  • Access method/function requested by the requesting PC;
  • Entry values (e.g. file name) requested by the requesting PC;
  • Web server access status (file transferred, file not found, command not executed etc.);
  • Name of the requested file and
  • URL from which the file was requested/the desired function was released.

This information is used exclusively for the purpose of identifying and tracing unauthorised accesses to the web server and other criminal acts. The legal basis for data processing is Art. 6 para. 1 p. 1 lit. f) GDPR. Our legitimate interests are the assurance of IT security as well as the assurance of the operation of our Internet presence.

3.2 Cookies

This website uses the following types of cookie, the scope and functionality of which is outlined below:

  • Transient cookies
  • Persistent cookies

Transient cookies are automatically deleted when you close your browser. These particularly include session cookies. These save a 'session ID', which is used to assign various requests from your browser to the overall session. This allows us to recognise your computer when you revisit our website. Session cookies are deleted when you sign out or close the browser.

Persistent cookies are automatically deleted after a set period of time that can differ depending on the cookie. You can delete cookies in your browser's security settings at any time.

You can configure your browser settings as you wish and, for example, reject third-party cookies or all cookies. Please note that you may then be unable to use all the functions of this website.

We use cookies to identify repeat visits if you have an account with us. Otherwise, you will have to sign in again every time you visit us. In accordance with Art. 6 para. 1 p. 1 lit. f) GDPR, the data processing is justified by our legitimate interest in our website being designed in a user-friendly manner.

3.3 Google Analytics

This website uses Google Analytics, a web analysis service of Google Inc. ("Google"). Google Analytics uses so-called "cookies", text files that are stored on your computer and that allow an analysis of your use of the website. The information generated by the cookie about your use of this website will normally be transmitted to a Google server in the USA and stored there. However, in case the IP anonymity function on this website is activated, Google will first abbreviate your IP address within the member states of the European Union or in other signatory states to the agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and abbreviated there. Google will use this information on behalf of the person responsible for this website, to compile reports on website activities and to provide the website operator with additional services associated with use of the website and of the Internet.

The IP address transmitted from your browser within the scope of Google Analytics will not be brought into contact with other data held by Google.

You can prevent storage of the cookies by using a corresponding setting of your browser software; however, please note that by doing so you may not be able to fully use all the functions of this website.You can also prevent the recording and processing by Google of the data generated by the cookie relating to your use of the website (incl. your IP address) by downloading and installing the browser plug-in available via the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

This website uses Google Analytics with the 'anonymizeIp()' extension. This means that IP address are processed in a truncated form to prevent the possibility of direct reference to a particular individual. If it should prove possible to associate data collected concerning your person directly with you as an individual, this will immediately be excluded and the personal data deleted without delay.

We use Google Analytics to analyse the use of our website and to make regular improvements. We can use these statistics to improve our products and make them more interesting to our users. In exceptional cases in which personal data is sent to the USA, Google is subject to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Art. 6 para. 1 p. 1 lit. f) GDPR.

Information about the third-party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, fax: +353 (1) 436 1001. Terms of use: https://www.google.com/analytics/terms/de.htmlOverview of privacy: https://www.google.com/intl/de/analytics/learn/privacy.html, and the privacy policy: https://www.google.com/intl/de/policies/privacy.

3.4 Google reCAPTCHA

We also use the reCAPTCHA function by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ('Google'), on this website. It is primarily used to determine whether the data has been entered by a natural person or improperly carried out by mechanical and automated processing. The service includes the processing of the IP address, all cookies set by Google over the past six months, browser language settings, browser plug-ins, Java scripts, website dwell time, mouse or touchpad movements and the cookie ID, as well as any other data Google may require for the reCAPTCHA service. The legal basis for data processing is Article 6(1)(1)(f) GDPR. Our legitimate interest lies in determining individual responsibility online and preventing fraudulent use and spam on our website. When using Google reCAPTCHA, personal data may also be transferred to Google LLC servers in the USA.

In the event that personal data is transferred to Google LLC, whose headquarters are in the USA, Google LLC has been certified under the EU-US Privacy Shield, which guarantees compliance with the data protection level applicable in the EU. The current certificate can be found at: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.

Further information on Google reCAPTCHA and Google's privacy policy can be found at: https://www.google.com/intl/policies/privacy/.

3.5 Contact form

You will find a contact form on MediaSupply's website. The data you enter there will be stored for the purpose of individual communication with you, and the data processing is justified, in accordance with Art. 6 para. 1 p. 1 lit. f) GDPR, by our desire to offer you a simple contact option. Your data will also be stored for the purpose of answering your request, as well as for possible follow-up questions.

If you contact us in order to request a quote, the legal basis for data processing is Art. 6 para. 1 p. 1 lit. b) GDPR.

4. User's rights

4.1 Withdrawing consent, objecting

If you have given MediaSupply your consent to process personal data in the context of your use of MediaSupply services, you can withdraw this consent at any time pursuant to Article 7 (3) GDPR. The revocation can be sent by email to info@mediasupply.euor in writing to the address listed below. The effects of the revocation will be limited to the storage and use of personal data that may not be used or stored without your consent based on statutory permissions. This withdrawal of consent, once declared to us, will have an impact on the permissibility of the processing of your personal data. However, please note that it may not then be possible to process the data concerned in the future.

If we base the processing of personal data on the balance of interests, you may object to the processing pursuant to Article 21 GDPR. This will be the case if the processing is not specifically required to fulfil a contract with you. If you lodge such an objection, we would ask you to tell us why we should no longer process your data in the manner in which we have previously done so. If you provide a reasoned objection, we will review the matter and either cease or adapt our data processing or present you with the compelling legitimate reasons which permit us to continue to process your data. If you have exercised your right to object, the data controller will no longer process your personal data unless it can prove that there are compelling legitimate grounds for the processing that outweigh the data subject's interests, rights and freedoms or that the processing serves the purpose of the assertion, exercise or defence against legal claims.

You can of course object at any time to the processing of your personal data for the purposes of advertising and data analysis. You can notify us of your objection to advertising by e-mailing us at: info@mediasupply.euor via the address given below.

4.2 Your other rights

On request, MediaSupply will provide you pursuant to Article 15 GDPR with information concerning the personal data stored by MediaSupply. You also have the option at any time to require MediaSupply to correct your data pursuant to Article 16 GDPR, to erase it pursuant to Article 17 GDPR or to restrict the processing thereof pursuant to Article 18 GDPR. Pursuant to Article 20 GDPR, you have the right to require us to hand over to you or a third party in a common machine-readable format data that we have automatically processed on the basis of your consent or for the fulfilment of a contract. If you have requested that the data be directly transferred to another controller, this will be done only if it is technically feasible.

You also have the right to lodge a complaint with a data protection supervisory authority pursuant to Article 77 GDPR.

The only data that will be excluded from deletion are those that MediaSupply requires for processing outstanding orders or for asserting existing rights and claims, as well as data that MediaSupply has to store as required by law. Such data will however be blocked.

You also have the right to lodge a complaint with a data protection supervisory authority pursuant to Article 77 GDPR.

We will be happy to provide you with further assistance.

Address: pro Foto Werbeagentur GmbH,
Alfred-Nobel-Str. 6,
97080 Wuerzburg,
Germany.
info@mediasupply.eu