Declaration on the duty to inform

Name and contact details of the controller and the company data protection officer

The following information on data protection applies to data processing by:

Person responsible:

Mr. Andreas Reichherzer

Haselweg 11

89180 Berghuelen

Phone: +49 (0) 7344 – 9521973

Email: hello[@]blue-sky-dronephotography.com

An in-house data protection officer is not required.

Collection and storage of personal data and type and purpose of use

The legal basis for processing operations in which we obtain consent for a specific processing purpose is always Art. 6 para. 1 p. 1 lit. a GDPR. Insofar as the processing of personal data is necessary for the performance of a contract (shipment of goods, provision of services) to which you are a party, the processing is based on Art.6 para. 1 p. 1 lit. b GDPR. The above legal basis also applies in the event of the implementation of pre-contractual measures (e.g. inquiries about our products or services).

If our company is subject to a legal (statutory) obligation by which a processing of personal data becomes necessary and which has its basis in Union law or the law of the Member State to which we are subject, the processing is based on Art. 6 (1) sentence 1 lit. c GDPR. Furthermore, the processing may be based on Art. 6 (1) p. 1 lit. d GDPR if vital interests are affected (danger to life and limb and/or disasters).

In addition, the legal basis for the processing of personal data may be Art. 6 (1) p. 1 lit. f GDPR. In this case, we will inform you separately about our legitimate interest according to Art. 6 para. 1 p. 1 lit. f GDPR.

a) Visiting our website

When you visit our website, your browser automatically sends information to our website server, which is temporarily stored in a so-called log file. This is the following information:

IP address of the requesting computer,
Date and time of access,
Name and URL of the retrieved file,
Website from which the access is made (referrer URL),
The browser used and, if applicable, the operating system of your computer as well as the name of your access provider.

The data is stored until automatic deletion after seven days. We process this data for the following purposes:

Ensuring a smooth connection of the website,
Ensuring a comfortable use of our website,
Evaluation of system security and stability, and
for other administrative purposes.

The data processing carried out by us is based on Art. 6 para. 1 p. 1 lit. f GDPR as the legal basis. The purposes of data collection listed above justify our legitimate interest. We do not draw any conclusions about your person from the collected data. In addition, we use cookies and analysis services on our website, which are explained in more detail in sections 4 and 5 of this privacy policy.

b) Contact form

On our website there is a contact form, which you can use for questions of any kind. This type of data processing takes place according to Art. 6 para. 1 p. 1 lit. a GDPR with your voluntary consent. A valid e-mail address is required so that we know the sender of the request and can answer it. All other information is voluntary.

There is an automatic deletion of all personal data collected by us through the use of the contact form as soon as your request has been completed.

c) Business processing

If you enter into a contract with us, for example by placing an order via our online store, the data is processed in accordance with Art. 6 (1) p. 1 lit. b GDPR. In addition, we have a legitimate interest according to Art. 6 para. 1 p. 1 lit. f GDPR in a credit and identity check. The data you provide as part of the conclusion of the contract or during registration, in particular name, address and email address, are necessary for the performance and execution of the contract. The contract cannot be executed without them. This is expressly pointed out to you in accordance with Art. 13 para. 2 lit e GDPR. The data will also be passed on to third parties (item 3) if this is absolutely necessary (e.g. shipping service providers).

The registration data or the data of your customer profile will be stored as long as the account exists. If this is deleted, the account data will also be deleted. All data relating to the conclusion of the contract will be stored until the end of the limitation period. At the longest, the data will be stored until the expiry of the statutory retention period (e.g. retention periods under commercial and tax law). If they are already no longer required for the above-mentioned purposes before then, they will be deleted immediately.

Data sharing

As a matter of principle, your personal data will not be forwarded to third parties. A forwarding only takes place in the following cases:

You have given your express consent in accordance with Art. 6 (1) p. 1 lit. a GDPR for the forwarding of data to third parties;
According to Art. 6 (1) p. 1 lit. f GDPR, the disclosure is necessary to protect our legitimate interests or those of a third party, in particular to assert or defend legal claims, and you have no overriding legitimate interest in not disclosing your data;
A legal obligation according to Art. 6 para. 1 p. 1 lit. c GDPR exists;
The data will be forwarded in accordance with Art. 6 para. 1 p. 1 lit. b GDPR for the processing of contractual relationships with you. In this case, your personal data will be passed on to third parties exclusively to the service partners involved in the processing of the contract, such as the logistics company commissioned with the delivery, the credit institution commissioned with payment matters or the service company responsible for merchandise management and accounting, insofar as this is absolutely necessary for the fulfillment and processing of the contract. In cases where data is passed on to third parties, the scope of the data passed on is limited to the minimum required for the execution of the contract.

Cookies

Our website uses cookies. Cookies are text files that are placed and stored on a computer system via an Internet browser. They enable websites and servers to recognize and identify your browser. We do not have direct knowledge of your identity. Through the use of cookies, we can provide you, the user, with special services that would not be possible without the cookie. The use of temporary cookies makes it easier to use the website, as you do not have to re-enter your access data each time you visit the website, for example, or re-populate the shopping cart of an online store. So-called session cookies allow us to see which individual pages of our website you have already visited. These are automatically deleted after you leave our website. We also use cookies for statistical purposes. They record the use of our website and in this way we can optimize our offer for you (see point 5). These cookies are automatically deleted after a defined period of time.

The data processed by cookies is necessary for the aforementioned purposes and serves to protect our legitimate interests as well as those of third parties pursuant to Art. 6 (1) p. 1 lit. f GDPR.

As a data subject, you can oppose the setting of cookies by our website at any time by means of an appropriate setting of your Internet browser and thus permanently object to the setting of cookies. Cookies that have already been set can be deleted at any time using an Internet browser or other software programs. We would like to point out that deactivating the setting of cookies may mean that you cannot use all the functions of our website.

Cookie settings

Analysis tools and tracking tools

The legal basis for the use of the following tools is Art. 6 para. 1 p. 1 lit. f GDPR. Only with these measures can a needs-based design and continuous optimization of our website be ensured. In addition, this allows us to compile statistics on the use of our website and continuously optimize our offer. These interests are considered legitimate in the sense of the aforementioned provision.

The respective purposes of data processing and the type of data can be found in the corresponding tools.

Google Analytics

We use Google Analytics, a web analytics service provided by Google Inc (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter “Google”), to help us design and continually improve our website.

The tool creates pseudonymized usage profiles and uses cookies for this purpose (see section 4),

which generate the following information:

Browser type/version
Operating system used
Referrer URL (the previously visited page)
Host name of the accessing computer (IP address)
Time of the server request

This information is transferred to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on the activities of the website and to provide other services associated with the use of the website and the Internet for the purposes of market research and the design of these Internet pages to meet requirements. If necessary, this information may also be transferred to third parties if this is required by law or if third parties process this data on our behalf.

By default, Analytics uses the full IP addresses of website users to generate general geographic reports. If the use of IP masks is enabled, Analytics removes the last octet of the user’s IP address before it is used and stored. The IP addresses are then anonymized so that assignment is not possible (IP masking). Google will not link your IP address with other data.

As shown in section 4, the installation of cookies can be prevented by a corresponding setting of the browser software, which may, however, influence the use of the website. The data collection by this tool can also be prevented by a browser add-on, which you can find at the following link: https://tools.google.com/dlpage/gaoptout?hl=de

On mobile devices, you can simply click on the link to prevent Google Analytics from collecting data. For our website, this sets an opt-out cookie on your device. This exists until you delete it.

For more information on data protection in connection with Google Analytics, please refer to the “Help” information available at the following link: https://support.google.com/analytics/answer/6004245?hl=de

We have concluded the required commissioned data processing agreement with Google. The contract defines the subject and duration of the processing, the type and purpose of the processing, the type of personal data, the categories of data subjects and the obligations and rights incumbent on us under the GDPR. The contract ensures that Google is bound to us to comply with these obligations accordingly. The processing of your data by Google is carried out exclusively on our instructions. We have ensured that Google provides sufficient guarantees that appropriate technical and organizational measures are implemented in such a way that the processing is carried out in accordance with the requirements of the GDPR and ensures the protection of the rights of the data subjects. The Processor shall not use any other Processor without our prior separate or general written consent.

Borlabs Cookie - Test Environment active!

Data subject rights

The new General Data Protection Regulation has significantly expanded your rights. These are listed below and briefly explained, citing the legal basis.

Information, Art. 15 GDPR: You have the right to request information about your personal data processed by us. This includes, for example, information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, and about the existence of automated decision-making, including profiling, and, if applicable, meaningful information about its details;
Right to rectification, Art. 16 GDPR: You can immediately request the rectification of inaccurate or incomplete personal data stored by us;
Right to erasure (“right to be forgotten”), Art. 17 GDPR: You have a right to have your personal data stored by us erased, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defense of legal claims;
Right to restriction of processing, Art. 18 GDPR: You may request that the processing of your personal data be restricted. The prerequisite is that the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer need the data, but you need it for the assertion, exercise or defense of legal claims or you have objected to the processing pursuant to Art. 21 GDPR (item 7);
Right to data transfer, Art. 20 GDPR: You may request to receive the personal data you have provided to us in a structured, commonly used and machine-readable format or to have it transferred to another controller;
Revocation of consent, Art. 7 (3) GDPR: Once you have given your consent, you may revoke it at any time. This has the consequence that we may no longer continue the data processing based on this consent for the future. However, this does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation;
Right of complaint, Art. 77 GDPR: You have the right to lodge a complaint with a supervisory authority if you are of the opinion that the processing of your personal data violates the provisions of data protection law. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our registered office for this purpose.

Right of objection

You also have the right to object according to Art. 21 GDPR. This applies to your personal data that is processed on the basis of legitimate interests pursuant to Art. 6 (1) p. 1 lit. e or f GDPR and insofar as there are grounds for objecting to the processing that arise from your particular situation. If the objection is directed against direct marketing, you have an unrestricted right to object, even without specifying a particular situation.

You can exercise your right to object and also your other rights, for example, by sending an email to hello[@]blue-sky-dronephotography.com.

Data security

For our website, we use the widespread SSL (Secure Socket Layer) procedure in conjunction with the highest encryption level supported by your browser. As a rule, this is a 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser.

It is important to us to protect your data. Therefore, we take appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

Existence of automated decision making

Automatic decision-making or profiling does not take place.

Actuality and change of this privacy policy

It may also be necessary to adapt this data protection declaration to the further development of our website or to update it due to changes in legal requirements. You can find the current data protection declaration for retrieval and printout purposes under the following link: https://blue-sky-dronephotography.com/en/privacy

Current status: April 5, 2022