Data Protection / Privacy Notice

Thank you for your interest in our online shop. The protection of your privacy is very important to us. Details about the handling of your data can be found below.

Access data and hosting

You may visit our websites without having to provide any personal information. Each time a web page is visited, the web server merely automatically stores a website request documenting server log file, which contains the name of the requested file, your IP address, the date and time of the visit, the amount of data transferred and the requesting provider (access data). These log files are evaluated exclusively for the purpose of ensuring trouble-free operation of the site and improving our services. This serves to protect our legitimate interests according with Art. 6 para. 1 sentence 1 lit. f GDPR in a correct presentation of our offer, which predominate within the scope of a balancing of interests. All log files will be deleted no later than ten days after the end of your visit to the site.

Third party hosting services

Within the framework of processing on our behalf, a third-party provider provides us with hosting and website presentation services. This serves to protect our legitimate interests in a correct presentation of our offer, which predominate within the scope of a balancing of interests. All data collected in the context of the use of these websites or in the forms provided for this purpose in our online shops as described below are processed on its servers. Processing on other servers only takes place in the framework described here.
This service provider, including the servers location, is located within a country of the European Union or the European Economic Area.

Data collection and use for contract processing

We collect personal data when you voluntarily provide it to us in connection with your order or when you contact us (e.g. via contact form or e-mail). Mandatory fields are marked as such, then in these cases we require the data for contract processing, or for processing of your contact, otherwise you would not be able to complete the order or would not be able to send the contact without that information. Which data is collected can be seen from the respective input fields. We use the data provided by you according to Article 6 (1) sentence 1 lit. b GDPR to process contracts and your enquiries. After complete processing of the contract or deletion of your customer account, your data will be restricted for further processing and deleted after expiry of the storage periods under tax and commercial law, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.

Data Transfer

For the fulfilment of the contract according to Article 6 (1) sentence 1 lit. b GDPR we pass on your data to the shipping company commissioned with the delivery, as far as this is necessary for the delivery of ordered goods. Depending on which payment service provider you select in the order process, we pass on the payment data collected for the processing of payments to the credit institution commissioned with the payment and, if applicable, to payment service providers commissioned by us or to the selected payment service. In some cases, the selected payment service providers also collect this data themselves if you create an account there. In this case, you must log in to the payment service provider with your access data during the ordering process. The data protection declaration of the respective payment service provider applies in this respect.

Data transfer to shipping service providers

If, when or after placing your order, you have given your express consent to us doing so, we disclose your e-mail address to the selected shipping provider based on that consent according to art. 6 (1) 1 lit. a GDPR, in order to enable the shipping provider to contact you to advise you of the delivery or agree with you the delivery details.
You may revoke your consent at any time by sending a message to the contact option described below or by directly notifying the shipping provider at the contact address specified below. After you revoke your consent, we will delete the data disclosed for this purpose, unless you expressly consent to the further use of your data or we reserve the right to further use your personal data in the scope and manner permitted by the law, of which we inform you in this notice.

United Parcel Service Deutschland S.à r.l. & Co. OHG
Görlitzer Straße 1
41460 Neuss

DHL Paket GmbH
Sträßchensweg 10
53113 Bonn

E-mail newsletter and postal advertising

E-mail advertising without registration for the newsletter and your right to contradict
If we receive your e-mail address in connection with the sale of a product or a service and you did not contradict, we reserve the right on the basis of section 7 Para 3 UWG (German law against unfair competition) to regularly send offers of similar products from our range by e-mail.
This serves to protect our legitimate interests in an advertising approach to our customers according to to Article 6 (1) sentence 1 lit. f GDPR, which predominate within the scope of a balancing of interests.
You may object to this use of your e-mail address at any time by sending a message to the contact option described below or through a dedicated link in every newsletter, without incurring any costs other than the transmission costs according to the basic tariffs.
The newsletter is sent within the framework of a processing on our behalf by a service provider to whom we pass on your e-mail address for this purpose. This service provider is located within a country of the European Union or the European Economic Area.

Postal advertisment and your right of objection

Furthermore, we reserve the right to use your first and last name as well as your postal address for our own advertising purposes, e.g. to send offers and information about our products by post. This serves to protect our legitimate interests in an advertising approach to our customers according to Article 6 (1) sentence 1 lit. a GDPR, which predominate within the scope of a balancing of interests.
The advertising mailings are processed on our behalf by a service provider to whom we pass on your data. You can object to the storage and use of your data for these purposes at any time by sending a message to the contact option described below.

Use of Data for payment processing

Use of personal information when selecting the payment method Klarna invoice
In order to be able to offer you the payment options of Klarna, we provide Klarna with certain information about you, such as contact and order information, in order for Klarna to evaluate if it can offer its payment method and to tailor the payment method for you. The information is disclosed only if you choose to use Klarna’s services as your payment method. General information about Klarna can be found here. Your personal information will be handled by Klarna in accordance with the applicable privacy regulations and in accordance with the information in the privacy policy of Klarna.

Integration of the Trustbadge “Trusted Shop”

To display our Trusted Shops seal of approval and the collected evaluations as well as to offer Trusted Shops products to buyers after an order, the Trustbadge Trusted Shops is integrated on our websites. This serves the protection of our legitimate interests in an optimal marketing of our offer, which predominate in the context of a balancing of interests according to Article 6(1) sentence 1 lit. f GDPR. The Trustbadge and the services advertised with it are an offer of Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne.
When the trust badge is called, the web server automatically saves a request documenting server log file, which contains e.g. your IP address, date and time of the request, transferred data volume and the requesting internet service provider (access data). This access data is not evaluated and is automatically overwritten at the latest seven days after the end of your visit.
Further personal data will only be transferred to Trusted Shops if you have consented to this or if you decide to use Trusted Shops products after completing an order or if you have already made a registration. In this case the contractual agreement between you and Trusted Shops applies.

Cookies and webanalysis

To make visiting our website attractive and to enable the use of certain functions, to display suitable products or for market research purposes, we use on various pages so-called cookies. This serves in accordance with Article 6 (1) sentence 1 lit. f GDPR to protect our legitimate interests in an optimized presentation of our offer, which predominate in the context of a balancing of interests. Cookies are small text files that are automatically stored on your end device. Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your device and enable us to recognize your browser on your next visit (persistent cookies). You can see the duration of storage in the overview in the cookie settings of your web browser. You can set your browser in such a way that you are informed about the setting of cookies and decide individually about their acceptance or exclude the acceptance of cookies for certain cases or generally. Each browser differs in the way it manages the cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You will find these for the respective browsers under the following links:
Internet Explorer™
Firefox™
Chrome™
Safari™
Opera™

If cookies are not accepted, the functionality of our websites may be limited.

Use of Google analytics for web analysis

If you have given your consent according to Article 6 (1) sentence 1 lit. a GDPR, our website uses Google (universal) Analytics, a web analysis service of Google LLC (www.google.com). This serves to protect our legitimate interests in an optimized presentation of our offer, which predominate in the context of a balancing of interests. Google Analytics 360 uses methods that enable an analysis of your use of our websites, such as cookies. The automatically collected information about your use of our website is usually transferred to a Google server in the USA and stored there. By activating IP anonymization on our websites, the IP address is reduced prior to transmission within the member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The anonymous IP address transmitted by your browser within the framework of Google Analytics is not merged with other Google data.
Google LLC is headquartered in the USA and is certified under the EU-US Privacy Shield. A current certificate can be viewed here. As a result of this agreement between the US and the European Commission, the latter has established an adequate level of data protection for companies certified under the Privacy Shield.
You can prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link.
As an alternative to the browser plugin, you can click this link to prevent Google Analytics from collecting data on this website in the future. An opt-out cookie is stored on your mobile device. If you delete your cookies, you must click the link again.

Advertising via marketing networks

Use of Google Adwords conversion tracking
We use Google Adwords to advertise our websites in Google search results and on third-party websites. When you visit our website, Google uses the so-called remarketing cookie, which automatically uses a pseudonym CookieID and, based on the pages you visit, enables interest-based advertising. This serves according with Art. 6 para. 1 sentence 1 lit. f GDPR the protection of our legitimate interests in an optimal marketing of our websites.
Any additional processing will only take place if you have agreed with Google that your web and app browsing history will be linked to your Google Account and information from your Google Account will be used to personalise ads you see on the web. In this case, if you are logged in to Google while visiting our website, Google will use your data together with Google Analytics data to create and define target group lists for cross-device remarketing. To this end, Google temporarily links your personal data with Google Analytics data to form target groups.
Google AdWords Remarketing is a service of Google LLC (www.google.com). Google LLC is headquartered in the USA and is certified under the EU-US Privacy Shield. A current certificate can be viewed here. As a result of this agreement between the US and the European Commission, the latter has established an adequate level of data protection for companies certified under the Privacy Shield.
You can disable the remarketing cookie via this link. You can also contact the Digital Advertising Alliance to find out how to set cookies and to make the relevant settings.

Voucher offers of Sovendus GmbH
In order to select a currently interesting voucher offer for you, we will transmit your pseudonymised hash value of your e-mail address and your IP-address in encrypted form to Sovendus GmbH, Moltkestrasse 11, D-76133 Karlsruhe (Sovendus) (Art. 6 par. 1 f GDPR). The pseudonymised hash value of your e-mail address is used to consider a possibly existing objection to receive offers from Sovendus (Art. 21 par.3, Art. 6 par. 1 c GDPR). The IP-address will be exclusively used for data security purposes and as a rule the same will be anonymised after seven days (Art. 6 par.1 f GDPR). Furthermore, we will transmit order number, order value with currency, session ID, coupon code, and time stamp in pseudonymised form to Sovendus for billing purposes (Art. 6 par.1 f GDPR). If you are interested in a voucher offer of Sovendus, while there is no objection existing to receive such offers, and if you click on the voucher banner, we will transmit your form of address, your name and your e-mail address in encrypted form to Sovendus to prepare a voucher (Art. 6 par. 1 b, f GDPR).
You will find further information about the processing of your data by Sovendus in their online data protection notice: Sovendus privacy notice.

Social media plugins

Youtube video plugins
On our web pages own contents (and if necessary third) are merged over Youtube video Plugins. This content is provided by Google LLC (“Provider”). Youtube is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).
For videos from Youtube, which are integrated on our site, the extended data protection setting is activated. This means that no information from website visitors is collected and stored on YouTube unless they play the video. The integration of the videos serves the preservation of our legitimate interests, which predominate in the context of a weighing up of interests, in an optimal marketing of our offer in accordance with Art. 6 (1) sentence 1 lit. f DSGVO.
The purpose and scope of the data collection and the further processing and use of the data by the providers as well as your relevant rights and setting options for the protection of your privacy can be found in the data protection information of google’s privacy notice.

Sending evaluation reminders by e-mail

Rating reminders by Trusted Shops
If you have given us your explicit consent according to section 7 Para 3 UWG (German law against unfair competition) during or after your order, we will send your e-mail address to Trusted Shops GmbH, Subbelrather Straße 15c, 50823 Cologne, so that they can send you a rating reminder by e-mail. This consent can be revoked at any time by sending a message to the contact option described below or directly to Trusted Shops.

Contact possibilities and your rights

As an affected person you have the following rights:

According to Article 15 GDPR you have the right to request information about the personal data processed by us in the scope described therein.
According to Article 16 GDPR you have the right to immediately demand the correction of incorrect or complete personal data stored with us.
According to Article 17 GDPR you have the right to demand the removal of your personal data stored with us, unless further processing is necessary
-for the right to freedom of expression and information;
-for the fulfillment of a legal obligation;
-for reasons of public interest;
-for asserting, exercising or defending claims.
According to Article 17 GDPR you have the right to demand the limitation of the processing of your personal data stored with us, in so far as
-the accuracy of the data is disputed by you;
-the processing is illegal, but you contradict the removal;
-we no longer need the data, but you need it for asserting, exercising or defending claims or if you;
- submitted an objection to the processing in accordance with Article 21 of the GDPR;
According to article 20 GDPR you have the right to receive your personal data, which you have provided to us, in a structured, standard and machine-readable format or to request the transfer to another responsible person;
According to article 77 AVG you have the right to file a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or work or our headquarters.

If you have questions about the collection, processing or use of your personal data, information, correction, blocking or deletion of data, as well as the withdrawal of a given consent or objection to a particular use of data, please contact our supervisor for data protection:

puzzle & play GmbH
Matthias Weiss
Auf der Haide 2
92665 Altenstadt
Germany
privacy@myphotopuzzle.co.uk

Right of objection

Insofar as we process personal data as described above in order to protect our legitimate interests, which predominate within the scope of a balance of interests, you can object to this processing with effect for the future. If the data is processed for direct marketing purposes, you can exercise this right at any time as described above. If the processing takes place for other purposes, you are only entitled to a right of objection if there are reasons arising from your particular situation.
After exercising your right of objection, we will not process your personal data further for these purposes, unless we can prove compelling reasons worthy of protection for the processing, which outweigh your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.