The information in this section is designed to give you a brief initial overview of what personal information about you we collect and process when you visit this website, and how we and third parties use cookies and similar technologies.

You can find detailed information about our handling of personal data, and also about your rights, in the following paragraphs of this Privacy and Cookie Statement.

So that you can visit this website and use our services, we collect, process and use the following categories of personal data.

Access data: Each time you visit this website, our web servers temporarily record technical data that your browser automatically transmits to us. This includes browser type, operating system used and time of page visit. The IP address of the requesting system is also collected. We process this data, including the IP address, exclusively for the technical administration of the website, to detect misuse and eliminate faults. [Details]

Personal data that you provide to us: In connection with the use of special functions of this website, such as use of the comment functions or contact forms, we collect and store the personal data specified by you. This includes your email address, and other information required for the provision and use of the service. [Details]. The same applies to registration for our newsletter. [Details]

Usage data: We also collect information about your use of this website and available offerings, such as the time and duration of the page interaction, subpages visited, search queries and clicks on banners and links. We use the information collected for different purposes, in particular to better understand the needs and preferences of visitors to our website so that we can improve the website and its functions in order to create usage profiles and display more individualised and more relevant content and offers for you. [Details]

Cookies and similar technologies: We collect this data in an automated way by means of cookies, web beacons and similar technologies. In some cases we store unique identifiers in cookies in order to recognise your browser on your next visit.[Details].

Third-party technologies: We also use third-party analysis, tracking and advertising technologies or allow the third parties to place cookies and similar technologies on this website. These third parties include service providers and advertising networks, which help us to understand better how you use our website and offers so that we can present you with more relevant and personalised offers. These third parties may also collect data to identify your device, for example, the IP address or other unique device IDs. [Details]

Social networks: In addition, we sometimes also insert on some of the pages of this website functions of social networks ("plug-ins") to give you the opportunity to share or recommend interesting offers quickly and easily on these networks.

While interacting with the plug-ins, these networks can also collect data about your use of our website. [Details]

Disclosure/transfer to third parties: We will only disclose your personal data to third parties (business partners or service providers) if this is necessary for the purpose of providing this website and our services, or we are contractually or legally obliged or authorised to do so, or if you have previously consented. Sometimes we also cooperate with service providers outside the European Union (EU)/European Economic Area (EEA).

However, we work exclusively with companies that have an adequate level of protection for the data according to the provisions of the GDPR. [Details]

2 WHO WE ARE AND WHAT WE DO

Our mantra is "Experience images", and myphotobook GmbH, based in Berlin Waiblingen, distributes high-quality photo printing products. Our product range includes more than 200 items, from photo books to calendars and gift articles, to more unusual interior products that our customers can personalise and customise with personal digital photos.The operator of this website ("Website") is

myphotobook GmbH

Oranienstr. 183

10999 Berlin

Commercial register: HRB 94377, Berlin

Country court: Charlottenburg

VAT ID no.: DE814126751

(hereinafter: “we”),

a company of the Elanders group, address

Elanders AB (publ)

Designvägen 2

P.O. Box 137

435 23 Mölnlycke

Sweden.

We use your data in accordance with the applicable data protection provisions, in particular the General Data Protection Regulation (“GDPR”). To the extent that we obtain your consent to the processing of your personal data (e.g. in the framework of newsletter subscriptions), Art. 6 (1) sentence 1 lit. a) GDPR and Art. 6 (1) sentence 1 lit. c) GDPR serve as the legal basis for the processing and storage of this data. For all other processing operations in the context of the use of this website, Art. 6 (1) sentence 1 lit. f) GDPR serves as the legal basis. According to this, the processing of personal data is allowed if it is necessary for the protection of legitimate interests, unless the interests of the data subject prevail.

3 ACCESS AND GENERAL USAGE OF THE WEBSITE

3.1 LOG FILES

With every access of this website, our servers automatically store general access data about this process in server log files (“log files”).

This data includes:

the website accessed
the IP address of the requesting system
information about the browser type and version used
the operating system used

We do not combine this data with other data sources. The temporary storage of the IP address in the log files is required for technical reasons and to ensure system security, in particular for detecting abuse. These purposes also encompass our legitimate interest in data processing in accordance with Art.

6 (1) s. 1 lit f) GDPR

We delete the data as soon as it is no longer necessary to achieve the purpose for which it was collected. The IP addresses of users are deleted or shortened no later than 14 days afterwards.

3.2 OTHER DATA WE ACTIVELY COLLECT

We also actively collect information about your use of the website and offers.

This includes the following information:

Java on/off
Cookies on/off
Shortened IP address (the last three digits are deleted)
Referrer URL (the last visited page)
Operating system
Date and time of visit
Information about the page interaction (such as scrolling height, clicks and mouse movements)
Time and duration of page interactions
Subpages visited and duration of the visit.
Search queries
Clicks on banners and links

We collect this information automatically using cookies, web beacons and similar technologies, as well as selected third-party technologies (see Clause 9).

In some cases, unique identifiers are stored in the cookies so that your browser can be recognized on your next visit. The identifiers do not make it possible to deduce information concerning your identity. For detailed information on cookies and similar technologies used by us, please see our Cookie Policy [Cookie Policy].

We process the abovementioned information for the following purposes:

To provide and improve our services

This includes the use of the information to manage and improve technical and functional aspects of the website. We use the information to improve our service to you, make the website more user-friendly and to optimise the selection of content and functionality.

To deliver personalized offers

We also use this information to tailor our content and offering to suit your needs. To this end, we use cookies to create pseudonymous user profiles. These usage profiles will help us to better understand the needs and preferences of our users, so that we can provide you with more individual and usage-based content and offers on this website.

The pseudonymous user profiles do not contain any information from which we can directly find out your identity. We also do not combine the usage profiles with data that directly identifies the bearer of the pseudonym (e.g. email address), unless you have expressly given your consent (e.g. in the context of the newsletter registration pursuant to Clause 5 of this Privacy Policy).

For usage-based advertising ("Re-targeting")

We also use this information to be able to individually recommend relevant offers based on your previous visit to our website and third-party websites. Those users who are already interested in our offers will therefore receive targeted advertising on third-party websites.

We consider creating and optimising our websites, offers and advertising on a needs-orientated basis and adapting them according to the interests and habits of users to be a legitimate interest within the meaning of Art. 6 (1) lit f) GDPR Our users expect that we will show them the most relevant offers, which also provide real added value to their purchase.

You can object at any time to the use of your usage data to create pseudonymised user profiles for advertising purposes, with effect for the future using this email to datenschutz@myphotobook.de . In this case, we store a so-called "opt-out" cookie on your computer. This opt-out cookie deletes the previously stored information and prevents the further capture of pseudonymised information.

Alternatively, you can disable the use of cookies in your browser. For more information about cookies, please refer to Clause7.

We process the data as long as it is necessary to fulfil the purposes mentioned above. The data will subsequently be deleted.

Pseudonymous user profiles will be stored for a maximum of 24 months.

4 USE OF SPECIAL FEATURES OF THE WEBSITE

4.1 CONTACT FORM AND EMAIL CONTACT

On the website, we offer you a range of options for contacting us. If a contact form is provided on the website for general or specific requests or messages, you can use this to contact us by electronic means. Take advantage of this opportunity to enter the following data in the input screen:

Name
Email address
Message body
Any further information for specific requests or messages

Alternatively, you can send us an email.

The relevant data from the email or input mask will automatically be sent to the staff member at our company who is responsible for processing customer requests.

At the time of sending the contact form, your IP address and the date and time of the request is also automatically stored on our servers.

The processing of personal data in the input screen or email is used to handle your request.

The other data collected (IP address etc.) during the dispatching process is used to prevent misuse of the contact form and to ensure the security of our information technology systems.

The personal data transmitted by you when you contact us will be stored for the duration of the respective conversation with you, and for no longer than 6 months after the end of the conversation, except when there are longer statutory retention periods in certain cases. The conversation will have ended when circumstances make it evident that the matter at hand has been conclusively resolved.

Personal data that was additionally collected during the dispatch procedure will be deleted at the latest after a period of 14 days. You have the option of withdrawing your consent to the processing of personal data at any time. To do this, please send an email to: datenschutz@myphotobook.de. All personal data stored in the course of contacting us will be deleted immediately in this case.

5 ORDERING THE NEWSLETTER

You have the option of subscribing to our free newsletter on our website. The newsletter keeps you informed about the latest vouchers, discount codes or similar special offers for different product categories, such as fashion, travel or electronics in connection with offers that are published on our website. Your email address will only be disclosed to business partners if, at the time of the data collection, you expressly consented to also receive from those business partners newsletters about certain products and/or services.

5.1 DATA COLLECTION WHEN YOU SUBSCRIBE AND DOUBLE-OPT IN

When you subscribe to our newsletter, the personal data entered from the input mask is transmitted to us. Usually, you only need to enter your email address. In some cases, further information such as last name, first name and gender are requested.

In addition, your IP address and the date and time of the request are automatically collected and stored on our servers.

If it is the first time you have subscribed to the newsletters, you will receive a confirmation email to the specified email address. This email confirmation contains a link that you must click on to confirm your registration. This so-called double opt-in procedure is used to check whether the holder of the email address has actually authorised, and agrees to, the receipt of this newsletter.

All subscription procedures are logged to satisfy the legal requirements for recording the subscription process. The record includes the subscription and time of confirmation as well as the relevant IP address.

5.2 USE OF E-MAIL DELIVERY SERVICE PROVIDERS

For shipping and evaluating our newsletter, we use the services of external service providers ("email delivery service providers"). Some of the email delivery service providers have their headquarters outside the EU/EEA. However, we work exclusively with companies that have an adequate level of protection for the data according to the provisions of the GDPR. For more information about the transfer to companies in third countries, see Clause 10.3.

We currently work with the following email delivery service providers:

“MailChimp”, a service of the company Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA .
”Selligent”, a service of the company Selligent Marketing Cloud, Avenue de Finlande, 2 boite 2, 1420 Braine-l’Alleud - Belgium

The email addresses of the newsletter recipients and also any data described in the context of this Clause 5are stored on the servers of the email delivery service provider. Our email delivery service providers use the information collected on our account for dispatch and for evaluating use of the newsletter. Our email delivery service providers are in any case authorised to use the data of our newsletter subscribers in order to write to them themselves or pass the data on to third parties.

5.3 NEWSLETTER TRACKING

Insofar as you have agreed to this by registering for the newsletter, we can evaluate your use of the newsletter using tracking technology provided by the email delivery service provider. So-called web beacons or tracking pixels are embedded in the HTML emails sent with the newsletter. If the newsletter is opened, the external server of the email delivery service provider can use these web beacons to collect certain data about the recipient.

The name of the image file will be individualised for each newsletter recipient by appending a unique ID to it. The mail sender uses this to remember which email address belongs to which ID, and by retrieving the image, can determine which newsletter recipient has opened the email.

The following data is collected via the tracking pixel when the email is opened:

Information about the browser and your system
Your IP address
Time and frequency of the opening of the email
Links clicked

We combine the data about your use of our newsletter with your other usage data that we have saved in the context of your general use of the website under a pseudonymous profile (see Clause 3.2).

The data collected about you in the past is thereby pseudonymised. This summary entry helps us better understand your needs and preferences, so that we can optimally adapt the contents of the newsletter and our website to your personal interests.

The text of the declarations of consent, which you may have submitted when you registered for the newsletter, is listed at the end of this privacy policy.

5.4 STORAGE DURATION AND RIGHT OF WITHDRAWAL

The personal data processed within the framework of the order and the dispatch of the newsletter will be stored as long as the subscription to the newsletter is active. Ordering the newsletter and your consent to the processing of your data for the purposes stated above can be revoked at any time, either by using the link provided in the newsletter or by an email to: datenschutz@myphotobook.de.

Separate revocation with respect to the described tracking is not possible. However, you have the possibility of configuring your mail program so that emails are displayed in text form and not in HTML format. As a result, picture files and graphic files are hidden so that tracking is not possible. You can also prevent the use of web beacons by using the appropriate settings in your browser to prevent the installation of cookies.

Web beacons are used in conjunction with cookies.

In this case, the newsletter will not be displayed correctly and you may not be able to use all functions.

6 INFORMATION ABOUT YOU THAT WE PROCESS

6.1 REGISTRATION AND CUSTOMER ACCOUNT

When you register with us, we use your data to create a customer account and to identify all data and orders with your person. Your customer account will remain active until you delete it or entrust us with the deletion.

6.2 PROCESSING YOUR ORDER

We use the data you have provided to fulfil your product order. Photo book data is deleted 60 days after shipment.

6.3 PAYMENT PROCESSING

After successful ordering and execution of an order, we will use the information you provide for invoicing. We will maintain the relevant order data and correspondence in accordance with the statutory retention periods, but for at least 7 years.

6.4 CUSTOMISED OFFERS

We use the data communicated by you and the history of your orders with our company to provide you with individual offers.

6.5 APPLICATION

When you apply via our online portal, we use the information that you provide exclusively for the application process. We will keep your application for up to a maximum of 6 months after rejection, unless we employ you.

7 COOKIES STATEMENT

When you visit this website for the first time, we inform you about the use of cookies and your choices relating to these. If you continue your visit to this website, without changing your cookie settings, you accept the use of cookies on this site. You can change your settings at any time. You can view the wording of the declaration of consent to cookies at the end of the privacy policy.

Below, we explain how cookies and similar technologies work, and also their use on our website.

7.1 GENERAL INFORMATION ABOUT COOKIES

Cookies: Cookies are small data files that are transferred to your browser and stored by it on your device when you visit a website. Unique identifiers, consisting of a character string by which websites and servers can be assigned to the specific Internet browser in which the cookie is saved, can be stored in cookies.

This enables the visited web pages to recognize the browser, if a web page is accessed again.

Cookies can store a variety of information such as browser type, operating system, language settings or other personal page settings, your use of the website, ordering information or logon credentials. As a rule, cookies are not used to collect data that directly identify a person. Information collected with cookies may, however, be assigned to a natural person if they are combined with personal data for this person, such as an email address.

Our website basically uses two different types of cookies.

Session cookies are used to store information about your activities on our website for the duration of your visit. Session cookies are deleted once you close your browser.

Permanent cookies are stored on your device over a certain period of time, so that we can recognize your browser when you access the site again within this period. These cookies make it possible to generate anonymous usage profiles in order to, among other things, create and display personalised offers specific to your interests.

Web beacons and similar technologies: Web beacons (also known as pixel tags or GIFs) are also used on this website. Web beacons are small graphics (approximately 1x1 sized GIF files) embedded in web pages or in HTML e-mails and usually are not visible to the user. Web beacons are usually used in conjunction with cookies and enable tracking of user interaction with the content of websites or newsletters. With the help of web beacons, we can, for example, determine whether the emails were opened or certain links were clicked on, and certain overall trends, and also determine individual usage patterns and statistics about use of the website.

In addition, other technologies are sometimes used that operate in a similar way to cookies and store data in your browser or on your device. You do not have the option of refusing or disabling these tracking technologies through your browser settings, but they generally only work in conjunction with cookies. Accordingly, refusing cookies in your browser will also disable these technologies in most cases.

All these technologies are hereinafter jointly referred to as "cookies".

7.2 TYPES OF COOKIES THAT WE USE ON OUR WEBSITE

First-party and third-party cookies are used on this website for a variety of reasons. Below you will find a more detailed overview of the various categories of cookies used on this website and the reasons for their use:

MANDATORY COOKIES These cookies are necessary to ensure that the basic functions of our website are operating properly, that you are able to navigate on the website and move within the website and use certain functions. We use cookies that are strictly necessary to uniquely identify registered users so that they can be recognized when they visit the website again, or to make contact forms available.

These cookies will not be used for promotional purposes or to create a visitor or usage profile.

They will be stored for the duration of your Internet session.

TRACKING COOKIES: We use tracking cookies to charge commissions to business partners with whom we cooperate. To this end,the tracking cookies document if and when a specific offer is clicked on. If you buy something at a participating business partner, the cookie identifies you as having come from our website and we earn a commission. The cookies are used solely for the purpose of the correct assignment of sales to the respective offer on our website.

FUNCTIONAL COOKIES: These cookies can be used to save your chosen settings (for example, cookie settings) for your next visit.

PERFORMANCE AND WEB ANALYTICS COOKIES: These cookies collect information about how you use the website, for example, headings and sub-pages you frequently visit, at what time most accesses are made or if you receive any error messages. All information collected by these cookies will only be made available in an aggregated form. They only serve to further develop and improve the functioning and performance of the website. Web analytics cookies may be set by us or by third parties on our behalf and are stored for the duration of your Internet session.

ADVERTISING AND TARGETING COOKIES: These cookies help us to capture your surfing habits and to make available coordinated and personalised offers matching your interests on this website as well as interest-based ads about our offers on the websites of third parties.

For example, cookies record information about which of the offers on this website you are interested in. The collection and analysis is carried out exclusively pseudonymously and does not enable us to identify you. We also use these cookies to control the frequency with which offers are displayed, so that you do not see the same offer again and again. We can also record and evaluate the effectiveness of our advertising, that we operate on the websites of third parties, for statistical and market research purposes. These cookies are mostly set by third parties on our behalf, e.g. by advertising networks or providers of social networks.

SOCIAL MEDIA COOKIES: In addition, this website can contain plug-ins from social networks such as Facebook, so that you can share contents of these web sites via these networks. If you take advantage of these features, these networks may also place cookies for their own advertising purposes in your browser.

7.3 YOUR OPTIONS

Most internet browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or to always be notified before a new cookie is created. Each browser is a little different, so please refer to the Help settings on your browser toolbar to find out how you can manage your browser settings.

If you have multiple devices (e.g., smartphone, tablet, computer, etc.), please make sure that any browser on any device reflects your cookie settings.

You also have the possibility of disabling the receipt of all cookies on this website that are not absolutely necessary for the functionality of the site (click here). In this case, we store a so-called "opt-out" cookie on your device. If you delete the "opt-out cookie set by us", use another browser or change the device, you will need to re-activate the opt-out cookie.

Please also note that "opt-out cookies" will only work if the browser is set so that the use of cookies is generally permitted.

Some Internet browsers offer the option of transmitting "Do Not Track" or "DNT” signals. Uniform standards for "DNT" signals have not yet been developed, this web site does not currently process or respond to "DNT" signals.

Please note that completely disabling cookies, however, may result in your being unable to use all the functions of this website.

If you have any questions about the use of cookies and similar technologies through this website, please send an email to us at: datenschutz@myphotobook.de.

For more information on cookies, please visit www.aboutcookies.org or visit www.allaboutcookies.org.

8 INTEGRATION OF SOCIAL NETWORK PLUG-INS

We sometimes use on this website so-called social plug-ins ("plug-ins") of social networks and similar platforms in order to give you the option of quickly and easily sharing or recommending interesting deals in social networks, in order to make our company better known. Plug-ins are used to increase familiarity with our company. We consider the underlying advertising purpose to be in our legitimate interest within the meaning of Art. 6 (1) lit f) GDPR

We currently use plug-ins of the following companies:

Plug-ins from the social network facebook.com, operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook“)
Plug-ins from the social network instagram.com, operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA, 94025, USA (“Instagram”)
Plug-ins from Google+, operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”)
Plug-ins from the video platform YouTube, operated by YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA, - which belongs to Google Inc. - (“YouTube”)
Plug-ins from Twitter, which is operated by Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA (“Twitter“)

You can identify the plug-ins used by the respective logo of the corresponding social network (e.g. a white "f" on a blue background for Facebook or and an “Instagram camera” for Instagram).

Embedding a plug-in in a web page usually has the consequence that when you access the website, your browser is establishes a direct connection to the servers of the respective provider and loads the appropriate plug-in as well as its contents into your browser loads, in order to integrate it into the website you visited. However, we have integrated the plug-ins in such a way that contact to the corresponding social network is only made if you actively interact with the plug-ins, for example, by clicking on the "Like" or the "Instagram" buttons and/or share content using the Share button. If you interact with the plug-ins without being logged in to the provider, the respective provider then only receives information about which website the corresponding page is accessed from. Only if you confirm that you want to share the information, will there be direct contact between you and the social network. The shared information may be sent directly to the server of the respective provider and stored there. The data collected from the provider may contain user data, including your IP address and geographical location, as well as technical data, such as the type of browser or operating system.

The collection, storage and use of such data by the social networks are not controlled by us. We do not have access to the data collected. For the purpose, scope and extent of data collection and further processing and use of the data by the provider, as well as your rights in this respect and setting options for protecting your privacy, please see the privacy policy of the provider.

Facebook privacy policy: http://www.facebook.com/policy.php

Instagram privacy policy: https://help.instagram.com/155833707900388/

Google privacy policy: https://www.google.de/intl/de/policies/privacy/

YouTube privacy policy: https://www.google.de/intl/de/policies/privacy/

Twitter privacy policy: https://twitter.com/de/privacy

9 USE OF THIRD-PARTY TECHNOLOGIES

We use third-party technologies within our website for analysis, optimisation and advertising purposes.

These third-party providers may collect data about your use of this website and your interactions with its content and functions, including the total number of visitors to this website, the referrer URL, the pages you visit, the date, time and duration of your visit, frequency, clicked on banner/links, as well as information about device type, browser version, language preferences and geographical location (including country, city, region). The third party provider may also use cookies and collect your device ID and IP address.

All information collected will be transmitted to and stored directly on the servers of the third party. The information will only be made available to us anonymously and in statistical form. We do not have access to data that will allow us to identify you.

In some cases, we work with third-party providers that are based in the US. The transfer of data to service providers in the United States is carried out in accordance with the principles of the so-called EU-US Privacy Shield or on the basis of so-called standard contractual clauses of the EU commission. For further details, please see Clause 10.3.

In the following, we give you an overview and a description of the third-party technologies that may be used on this website.

9.1 PERFORMANCE OR WEB ANALYTICS TOOLS

We use all performance or web analytics tools only with activated IP anonymisation, so that the last three digits of the IP address will be erased immediately after collecting the data, and only the shortened IP address is stored on the servers of the respective third party.

9.1.1 GOOGLE ANALYTICS

Google Analytics is a web analytics service provided by Google Inc., Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google“). Google uses cookies to collect information about the use of our website by users. Google uses the data collected on our behalf to evaluate the use of our website, to compile reports about the activities on our website and to provide further services associated with the use of our website to us.

The information collected by Google about the use of this website (including the shortened IP address) is stored on Google's servers in the US. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and truncated there. The truncated IP address according to Google is not associated with any other data held by Google. Google automatically deletes from Google Analytics the stored user identifiers (e.g. cookie IDs) after 14 months.

More information on the Google Analytics Terms of Use and the Privacy Policy can be found at: https://support.google.com/analytics/answer/6004245?hl=de.

Opt-out: You may refuse the processing of your data by Google Analytics by downloading and installing the browser add-on available from Google to disable Google Analytics https://tools.google.com/dlpage/gaoptout?hl=de.

9.1.2 SNOWPLOW

Snowplow is an open source web tracking solution managed by Snowplow Analytics Ltd, EC2A 4RQ London, UK. The variant of Snowplow we use employs a tracking pixel and a cookie, allowing us to track when and how many users have visited our website, how often they visit, which of our pages they have visited and in which order, which browser or operating system they use, and which external links to an online shop they have clicked on. This information is used to evaluate how the website is used and to enable the demand-oriented design of our website.

For more information, please see SnowPlow's privacy policy: https://snowplowanalytics.com/privacy-policy/.

If you do not agree with the storage and application of the usage data taken via Snowplow as described above, you can declare your objection to the collection and usage of data that takes place as part of these web analysis procedures. To do so, please click here.

9.1.3 HOTJAR

"Hotjar" is analysis software provided by Hotjar Ltd, Level 2, St Julians Business Center, 3, Elia Zammit Street, St Julians STJ 1000, Malta.

We use Hotjar to identify ways of improving our website, diagnose technical problems, analyse user trends and, more generally, to optimise the website.

For more information, see the privacy policy of Hotjar: https://www.hotjar.com/privacy.

Opt-out: https://www.hotjar.com/opt-out .

9.2 ADVERTISING TECHNOLOGIES

We use third-party advertising technology on this website in order to provide you with personalised content which we believe may be of interest to you. If the third-party provider uses cookies to perform these services, the use of the cookies and the resulting collection of information is only within our control to a limited extent. We may only select segments and target groups (e.g. according to age, interests) that we want to address with our advertising. The third-party providers may sometimes combine information about your use of this website with information that they have collected during your use of other websites in which the advertising technologies are integrated.

For more detailed information about what information might be collected by the advertising technologies, how it is used and transferred, please refer to the respective privacy policies of the third party provider via the links below.

9.2.1 GOOGLE

On the website we use marketing and remarketing features of Google Inc. 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google“). These functions allow us to display more targeted advertisements for this website.

Google stores, by its own admission, the following data in connection with the display of adverts: Your web request, IP address, browser type, browser language, the date and time of your request and one or more cookies that may uniquely identify your browser.

For more information about how Google handles your data, please refer to the Google privacy policy: https://www.google.de/policies/privacy/.

(A) GOOGLE ADWORDS CONVERSION TRACKING

In the framework of the Google AdWords Conversion Tracking, a cookie is set on your computer ("Conversion Cookie") by Google when you click on a Google ad click and are redirected to this website. The conversion cookie enables us to identify whether and how many people who have accessed this website via an AdWords advertisement make use of our offers (e.g. a voucher code.

Google provides us with the data collected about you anonymously and makes it available only in statistical form, so we cannot draw conclusions about your identity. We use this information to create visitor statistics and to optimise our advertisements on Google.

(B) GOOGLE DYNAMIC REMARKETING

Using the remarketing technology from Google, we can target users of our website on other websites with specific interest-based advertising.

To this end, when you access our websites directly via Google, a code is activated by Google and so-called (re)marketing tags (invisible graphics or code, also known as "web beacons") are incorporated in the website. This is used to store an individual cookie on your device. The cookies can be set by different domains, including google.com, doubleclick.net, invitemedia.com, admeld.com, googlesyndication.com or googleadservices.com. In this file it will be recorded what content you are interested in and what offers you clicked, additional technical information about the browser and operating system, the IP address, referring websites, time of visit as well as further details about your use of the website. If, at a later point in time, you access another website, which is also part of the Google advertising network, targeted product recommendations and interest-based advertisements will be presented to you, which are related to the offers viewed on our website.

(C) GOOGLE DOUBLECLICK FOR PUBLISHERS

DoubleClick for Publishers is also an advertising service from Google. We use this service on our website to display offers to you based on your previous or concurrent visit to partner websites. For this purpose, cookies which contain a pseudonymous identification number are used. If you create a shopping basket in the online shop of a business partner, but have not yet paid, and then access this web page, sometimes information about your open shopping basket (for example, purchase value and product category) is automatically and pseudonymously transmitted by this cookie to Google. This is the case when our business partners also use Google DoubleClick and has expressly agreed to the transmission of the information. We may then offer you suitable gift vouchers in your open shopping basket. This form of advertising is completely automated and pseudonymous. We can only define general segmentation criteria (such as purchase value, product category), on the basis of which certain gift vouchers are displayed.

The cookie-generated information regarding your use of this website is transferred to a Google server in the USA and stored there.

Opt-out: If you have a Google Account, you can disable personalized advertising from Google using the settings for advertisements in your account: https://myaccount.google.com/intro/privacy#ads. To do so, you will first need to log into Google. Alternatively, you can turn off personalized advertising from Google using this link or download and install the browser plug-in available at the following link: https://www.google.com/settings/ads/plugin?hl=de.

In addition, we offer you the possibility of at any time refusing advertising-related cookies and similar technologies in connection with this website, by clicking here.

9.2.2 FACEBOOK

We use on the website pixels of the social network Facebook, which is operated for users from its headquarters in the EU from the Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland.

The pixels are integrated directly by Facebook when you access the website and they store a cookie on our users’ device.

Facebook receives information from your browser that our site has been accessed from your device. If you are logged in to Facebook at the same time or log in to Facebook in connection to the visit to our web page, Facebook can also directly assign your visit to our website to your user account. If you visit other websites that also use Facebook pixels, this information is associated with your user account. It is not possible for us to see what other web sites you visit.

(A) CUSTOM AUDIENCES FROM WEBSITE (USER-DEFINED TARGET GROUP)

These pixels make it possible for Facebook to determine the users of a website as a target group for the display of ads for this website on Facebook ("re-targeting"). Accordingly, we insert these pixels so that our ads on Facebook are only displayed to those users who have already visited this website and have shown interest in our offer. These pixels collect information about the user's browser session, and in particular the banners and links clicked, a hashed version of the Facebook ID and the URL which is viewed.

Every Facebook user has a unique and device-independent Facebook ID, so it is possible for us to address the users again on Facebook. We will not transfer any data sets, including, but not limited to email addresses of our users, to Facebook.

(B) CONVERSION TRACKING

We may also use the pixels to record and evaluate the effectiveness of our Facebook advertisements for statistical and market research purposes. Facebook can therefore use the pixels to determine how many users clicked on a switched advertisement and were redirected to our website.

(C) FACEBOOK IMPRESSIONS

We also receive from Facebook a report with information on the interactions of the user with our switched ads on Facebook (e.g. the number of "views", "Likes", or "Comments").

Facebook provides us with the data collected anonymously and only in statistical form, without reference to a specific person. We can only select which segments of Facebook users (such as age, interests) should be shown our advertising. However, as the data will be stored and processed by Facebook, Facebook can theoretically link this data with your Facebook account and also use it for their own advertising purposes.

For information about how Facebook handles your data, please refer to the Facebook Privacy Policy, which you can view here: https://www.facebook.com/about/privacy.

Opt-out: If you have a Facebook Account, you can disable personalized advertising from Google using the settings for advertisements in your account: https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To do so, you will first need to log into Facebook. Alternatively, you can click the website (http://www.youronlinechoices.com/de/praferenzmanagement/) of the European Interactive Digital Advertising Alliance of opposition against usage-based advertising through Facebook.

In addition, we offer you the possibility of at any time refusing advertising-related cookies and similar technologies in connection with this website, by clicking here.

9.2.3 CRITEO

Using the technology of Criteo (Criteo GmbH, Unterer Anger 3, 80331 Munich) information about the surfing behaviour of website visitors for marketing purposes is collected on our pages in a purely anonymous form and cookies are inserted for this purpose. Criteo can thus analyse the surfing behaviour and then display targeted product recommendations as appropriate advertising banners when other web pages are visited. Under no circumstances can the data collected be used to personally identify a visitor to this website. The data collected by Criteo will only be used to improve the advertising offer. On each pop-up banner, located at the bottom righthand side is a small "i" (for information), which opens on mouseover. When you click it redirects you to a page on which the system is explained and opt-out is offered. When you click on opt-out, an "opt-out" cookie is inserted, which prevents the display of this banner in the future. Any other use or disclosure to third parties will not take place. You can find out more from Criteo in general about the privacy policy and the data protection guidelines
(http://www.criteo.com/de/privacy/corporate-privacy-policy/) and object to the anonymous analysis of your browsing behaviour (Opt-Out) (http://www.criteo.com/de/deactivate-criteo-banners/).

10 DISCLOSURE OF INFORMATION TO THIRD PARTIES

We will only disclose your personal data to third parties if this is necessary for the purpose of providing this products and services, or we are contractually or legally obliged or authorised to do so, or if you have expressly consented to this.

10.1 DISCLOSURE TO SUPPLIERS

We work with various suppliers (printers, postal services, photo optimizer), which produce the products offered in our online shop.

The transfer of data is therefore carried out for the purposes of performance of the contract, according to Art. 6 (1 ) lit. b) GDPR.

10.2 DISCLOSURE TO SERVICE PROVIDERS

We also work with technical service providers, which, on the basis of Art. 28 GDPR are authorized to provide services on our behalf and in accordance with our instructions. These companies can gain access to your personal data, but only to the extent necessary to fulfil their respective tasks. So, for example, we employ service providers to send out our newsletter or other marketing services, to perform customer service, analytics or infrastructure and IT services as well as website hosting.

10.3 TRANSMISSION OF YOUR DATA TO COMPANIES OUTSIDE THE EU

It may happen that the service provider commissioned by us is in a third country, i.e. in countries outside the European Union (EU) / The European Economic Area (EEA). However, we work exclusively with companies that have an adequate level of protection for the data according to the provisions of the GDPR.

We are currently working with a number of service providers, which are located in the US.

The transfer of data to service providers in the United States is carried out in accordance with the principles of the so-called EU-US Privacy shield and also on the basis of so-called standard contractual clauses of the EU Commission. The EU-US Privacy Shield is an agreement between the European Union (EU) and the US to ensure compliance with European privacy standards in the United States. For the purposes of the Standard Contractual Clauses adopted by the EU Commission, this is a contract in which the service providers undertake to protect user data on our behalf in accordance with our data protection regulations and, in particular, not to pass it on to third parties.

We will be happy to provide you with a copy of the standard contractual clauses. Please send a letter and a stamped self-addressed envelope to the address specified under Clause 12

11 Your rights

With regard to our processing of your personal data, the following rights are available to you free of charge.

11.1 RIGHT OF WITHDRAWAL ACCORDING TO ART. 7 GDPR

If you have given us your consent for the processing of your data, you have the right, at any time, to withdraw your consent by email or letter to our contact address as specified below. We will cease processing your data if necessary.

11.2 RIGHT TO INFORMATION ART. 15 GDPR

You always have the right to request information about the personal data stored by us at no charge. However, we would point out that we are not in a position to assign the pseudonymous user profiles created by us to the respective individuals.

Accordingly, we do not provide information about this data, unless you provide us with information that makes it possible to assign the Usage Profile to your person. We will advise you separately in the event of a request.

11.3 SUPPLEMENTARY AND DELETION RIGHTS ACCORDING TO ART. 16 AND 17 GDPR

You can request us to correct incorrect data, and - as far as the statutory conditions are met - to complete or delete your data.

11.4 RIGHT TO LIMIT THE PROCESSING OF YOUR DATA ACCORDING TO ART. 18 GDPR

You can request us to limit the processing of your data - to the extent that the statutory prerequisites are fulfilled.

11.5 RIGHT TO DATA PORTABILITY ART. 20 GDPR

Provided that the processing of your data is based on consent (e.g. newsletter), you have the right to obtain this data in a structured, common and machine-readable format.

11.6 RIGHT TO OBJECT BY RECOURSE TO THE LEGAL BASIS OF "LEGITIMATE INTEREST" ACCORDING TO ART. 21 GDPR

Under the conditions of the Art. 21 (1) of the GDPR, you also have the right to object to the data processing for reasons that may arise in relation to your specific situation. The above general right of objection is valid for all processing purposes described in this privacy policy, which are not processed on the basis of consent granted by you. In contrast to the special right of objection directed at data processing to create a usage profile-related, pursuant to Clause3.2 of this Privacy and Cookie Statement, we are only obliged to implement such a general objection if you give us reasons of overriding importance (e.g. a possible danger to life or health). If you want to make use of this right, please contact us at the contact address specified in Clause 12

11.7 RIGHT TO FILE COMPLAINTS WITH REGULATORY AUTHORITIES

You also have a right of appeal to a supervisory authority to, if you are of the opinion that the processing of your data violates applicable laws. You can contact the data protection authority which is responsible for your place of residence or state, or the competent data protection authority for us.

For us, the competent data protection authority is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit

Friedrichstr. 219

Visitor entrance: Puttkamerstr. 16 – 18 (5. Etage)

10969 Berlin

Telephone: 030 13889-0

Fax: 030 2155050

Email: mailbox@datenschutz-berlin.de

12 CONTACTING US AND DATA PROTECTION OFFICER

If you have any questions about this privacy policy, would like to assert your rights or have any suggestions or complaints regarding the processing of your personal data, please contact us by emailing: datenschutz@myphotobook.de. You can also contact us at any time using the following contact data:

myphotobook GmbH

Datenschutz

Oranienstraße 183, 10999 Berlin

Telephone: +49 7151 16517 0

Our Data Protection Officer Michael Mayer can also be contacted in this way.

13 CHANGES TO THIS PRIVACY AND COOKIE STATEMENT

We reserve the right to make changes to this Privacy and Cookie Statement at any time in the future. The currently valid version of this Privacy and Cookie Statement will be published on the website. Please always take note of the most current version of our Privacy and Cookie Statement.

APPENDIX: DECLARATIONS OF CONSENT

In connection with your use of this website, you have expressly made one or more of the following declarations of consent.

When accessing our website (cookie consent)

"This website uses cookies and similar technologies in order to analyse the use of the website and to provide you with personalized content. Third parties may also use cookies on this website for advertising, tracking and analysis purposes. You can find out more about the cookies used on this website and your relevant options in our [Cookie policy]. Through your continued use of our website, e.g. by clicking on the content, you agree to this use of cookies and similar technologies. You can change your cookie settings at any time.

When you register

"I have read the [Privacy Policy] and agree to the processing of my personal data for the purposes of registration.

I can revoke my consent at any time.”

When you subscribe to the newsletter

 Yes I would like to subscribe to the newsletter and agree to receive regular email updates from myphotobook Ltd. about current offers, events and/or other information.

 I also agree that a personalised user profile will be created to match the contents of the newsletter to my personal interests. This is done by evaluating my use of the newsletter (e.g. opening the email and clicking on the offers), as well as of the website, using tracking pixels and cookies, as described in our [Privacy and Cookie policy] in greater detail.

You can cancel your newsletter subscription at any time with effect for the future and withdraw your consent to the creation of a user profile. To do this, click on the link at the end of the newsletter or send us an email to cuponation@datenschutz.de.

When you use a contact form

"I have read and agree to the [Privacy Policy] and consent to the described processing of my personal data for processing my request.

I can revoke my consent at any time.”

LAST UPDATED May 2018