Privacy Policy

1) Information on the collection of personal data and contact details of the data controller

1.1 We appreciate your visit and thank you for your interest. In the following we inform you about the handling of your personal data when using our offer. Personal data are all data with which you can be personally identified.

1.2 The data controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Saal Digital UK Limited, C/O Tax Concept Iveco House, Station Road, Watford WD17 1ET, United Kingdom, e-mail: support@saal-digital.co.uk. The data controller is the natural or legal person who alone or together with others decides on the purposes and means of processing personal data. The recipient of any personal data is Saal Digital UK Limited. A passing on to third does not take place, if not otherwise indicated.

2) Data collection when you visit our website

This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the data controller). You can recognize an encrypted connection by the character string "https://" and the lock symbol in your browser line.

When using our website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data that is technically necessary for us to display the website to you:

- Our visited website
- date and time at the time of access
- Amount of data sent in bytes
- Source/reference from which you came to the page
- Browser used
- Operating system used
- IP address used in anonymous form

Processing is carried out in accordance with Art. 6 Para. 1 point f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files subsequently if there are any concrete indications of illegal use.

3) Cookies

In order to make your visit to our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your mobile device. Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your terminal and enable us or our partner companies (third-party cookies) to recognize your browser on your next visit (persistent cookies). If cookies are set, they collect and process specific user information such as browser and location data as well as IP address values to an individual extent. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie.

In some cases, cookies are used to simplify the ordering process by saving settings (e.g. remembering the contents of a virtual shopping basket for a later visit to the website).

If personal data is also processed by individual cookies implemented by us, the processing is carried out in accordance with Art. 6 para. 1 point b GDPR either for the execution of the contract or in accordance with Art. 6 para. 1 point f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.

We may work with advertising partners who help us to make our website more interesting for you. For this purpose, cookies from partner companies are also stored on your hard disk (third-party cookies) when you visit our website. If we work with the aforementioned advertising partners, you will be informed individually and separately about the use of such cookies and the extent of the information collected in each case within the following paragraphs.

Please note that you can set your browser in such a way that you are informed about the setting of cookies and can decide individually about their acceptance or exclude the acceptance of cookies for certain cases or generally. Each browser differs in the way it manages the cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings.

4) Data processing for contract execution

Pursuant to Art. 6 para. 1 point b GDPR, personal data is further collected and processed if you provide it to us in order to execute a contract. The data that is collected depends on which data is required for processing the contract. Generally, this includes the first name, surname, street, house number, postal code, town, e-mail address, telephone number and, optionally, title and company name. In individual cases also bank data, subject of the order and image data.

In this case, your data will be processed by us for the duration of the existing contractual relationship to execute the contract. After termination of the contractual relationship, your data will be stored by us for a further 3 years on the basis of legitimate interest. Insofar as statutory archiving periods exist, the final storage period is based on the relevant specifications.

Your image data is automatically stored in Germany for 30 days after upload for the purpose of creating photo products in accordance with data protection regulations. The image data will only be used for this purpose and will not be passed on to third parties. After your order has been completed and delivered, the image data will be kept for production for up to 4 weeks in order to process any complaints or reorders. Should a complaint arise, this period will be extended by another 4 weeks.

5) Establishment of contact

When contacting us (e.g. via contact form or e-mail), personal data is collected. Title, first name, last name, e-mail address and optionally telephone number, order number and uploaded images are collected. Depending on the form or topic, further information is collected, as can be seen in the respective contact form. This data is stored and used exclusively for the purpose of answering your request or for contacting you and the associated technical administration. The legal basis for processing the data is our legitimate interest pursuant to Art. 6 Para. 1 point f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 (1) point b GDPR. In this case, your data will be processed by us for the duration of the existing contractual relationship necessary for the performance of the contract. After termination of the contractual relationship with you, your data will be stored by us for a further 3 years on the basis of our legitimate interest. Insofar as statutory archiving periods exist, the final storage period is based on the relevant specifications.

6) Use of your data for direct advertising

Your order data as well as the usage behaviour in the newsletter and the website will be analysed by us in order to provide you with the best possible content. This can be price information or information about new products, for example, and can be transmitted as notifications by e-mail or as a package insert.

6.1 Subscription to our e-mail newsletter

If you subscribe to our e-mail newsletter, we will send you regular information about our offers. The only mandatory information for sending the newsletter is your e-mail address. The indication of further possibly data is voluntary and is used to be able to address you personally. We use the so-called double opt-in procedure for sending the newsletter. This means that we will not send you an e-mail newsletter until you have expressly confirmed to us that you agree to the sending of the newsletter. We will then send you a confirmation e-mail asking you to confirm that you wish to receive future newsletters by clicking on an appropriate link.

By activating the confirmation link, you give us your consent to the use of your personal data in accordance with Art. 6 para. 1 point a GDPR. When you register for the newsletter, we store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration so that we can trace any possible misuse of your e-mail address at a later point in time. The data collected by us when registering for the newsletter will be used exclusively for the purpose of addressing you in advertising by means of the newsletter. You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a message to the data controller named above. After your cancellation, your e-mail address will be deleted from our newsletter distribution list immediately, unless you have expressly consented to further use of your data or we reserve the right to use data in excess thereof, which is permitted by law and about which we inform you in this declaration.

6.2 Sending the e-mail newsletter to existing customers

If you have provided us with your e-mail address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services from our range by e-mail. Pursuant to Article 7 Para. 3 UWG (Act Against Unfair Competition), we do not need to obtain separate consent from you for this. In this respect, data processing is carried out solely on the basis of our legitimate interest in personalised direct advertising pursuant to Art. 6 para. 1 point f GDPR. If you have initially objected to the use of your e-mail address for this purpose, we will not send you an e-mail. You are entitled to object to the use of your e-mail address for the aforementioned advertising purpose at any time with effect for the future by notifying the data controller named at the beginning. For this you only have to pay the transmission costs according to the basic tariffs. Upon receipt of your objection, the use of your e-mail address for advertising purposes will cease immediately.

7) Data processing for order processing

7.1 For the processing of your order we work together with several service providers, who support us in whole or in part in the execution of concluded contracts. Certain personal data is transferred to these service providers in accordance with the following information. The personal data collected by us will be passed on to the transport company commissioned with the delivery within the scope of contract processing, to the extent that is necessary for the delivery of the goods. We will pass on your payment data to the commissioned credit institution within the framework of payment processing, if this is necessary for payment processing. If payment service providers are used, we explicitly inform you of this below. The legal basis for the transfer of data is Art. 6 para. 1 point b GDPR.

7.2 Use of payment service providers

- Paypal
We offer payment via Paypal. Payment shall be made by PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). For further information on data protection law, please refer to PayPal's data protection declaration: https://www.paypal.com/uk/webapps/mpp/ua/privacy-full

- Computop
We offer payment by credit card. Payment is made by Computop Wirtschaftsinformatik GmbH, Schwarzenbergstr. 4, 96050 Bamberg, Germany. For further information on data protection law, including information on the credit agencies used, please refer to Computop's data protection declaration: https://computop.com/uk/data-protection

- Novalnet AG
We offer payment via iDeal. Payment is made by Novalnet AG, Zahlungsinstitut (ZAG), Feringastraße 4, 85774 Unterföhring, Germany. For further information on data protection law, including information on the credit agencies used, please refer to Novalnet’s data protection declaration: https://www.novalnet.com/privacy-policy/

8) YouTube (videos)

We have integrated YouTube components on this website. The operating company of YouTube is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

YouTube is an Internet video portal that allows video publishers to post video clips free of charge and other users to view, rate and comment on them, also free of charge. YouTube allows the publication of all types of videos, which is why complete film and television programmes, but also music videos, trailers or videos made by users themselves can be accessed via the internet portal. Each time you call up one of the individual pages of this website that is operated by us and on which a YouTube component (YouTube video) has been integrated, the internet browser on your IT system is automatically prompted by the respective YouTube component to download a representation of the corresponding YouTube component from YouTube. Further information on YouTube can be found at https://www.youtube.com/yt/about/. Within the scope of this technical procedure, YouTube and Google receive information about which specific sub-page of our website is visited by you.If you are logged in to YouTube at the same time, YouTube recognises which specific sub-page of our website you are visiting when you call up a sub-page that contains a YouTube video. This information is collected by YouTube and Google and assigned to your YouTube account.

YouTube and Google always receive information via the YouTube component that you have visited our website if you are logged into YouTube at the same time as calling up our website; this takes place regardless of whether you click on a YouTube video or not. If you do not want this information to be transmitted to YouTube and Google, you can prevent the transmission by logging out of your YouTube account before accessing our website.

These processing operations are only carried out if you have given your express consent in accordance with Art. 6 (1) lit. a DS-GVO.

You can view YouTube's privacy policy at https://www.google.com/intl/en/policies/privacy/.

9) DoubleClick

This website contains components of DoubleClick by Google. DoubleClick is a brand of Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland), under which special online marketing solutions are marketed to advertising agencies and publishers.

DoubleClick by Google transfers data to the DoubleClick server with each impression as well as with clicks or other activities. Each of these data transfers triggers a cookie request to your browser. If the browser accepts this request, DoubleClick sets a cookie on your IT system. The purpose of the cookie is to optimise and display advertising. The cookie is used, among other things, to serve and display user-relevant advertising and to create reports on advertising campaigns or to improve them. Furthermore, the cookie is used to avoid multiple displays of the same advertisement.

DoubleClick uses a cookie ID, which is required to process the technical procedure. The cookie ID is needed, for example, to display an advertisement in a browser. DoubleClick can also use the cookie ID to record which advertisements have already been displayed in a browser in order to avoid duplicate placements. Furthermore, the cookie ID enables DoubleClick to record conversions.

A DoubleClick cookie does not contain any personal data. However, a DoubleClick cookie may contain additional campaign identifiers. A campaign identifier serves to identify the campaigns with which you have already been in contact.

Each time you call up one of the individual pages of this website which is operated by us and on which a DoubleClick component has been integrated, the internet browser on your IT system is caused by the respective DoubleClick component to transmit data to Google for the purpose of online advertising and the settlement of commissions. As part of this technical process, Google obtains knowledge of data that Google also uses to generate commission statements. Among other things, Google can track that you have clicked on certain links on our website.

You can prevent DoubleClick and our website from setting cookies at any time by adjusting your internet browser settings accordingly. In addition, cookies that have already been set can be deleted at any time via the Internet browser or other software programmes.

These processing operations are only carried out if express consent is given in accordance with Art. 6 (1) lit. a DSGVO.

You can view the privacy policy of DoubleClick by Google at: https://www.google.com/intl/de/policies/.

10) Google Analytics

On our websites, we use Google Analytics, a web analytics service provided by Google Ireland Limited (https://www.google.de/intl/de/about/), Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). In this context, pseudonymised usage profiles are created and cookies (see point "Cookies") are used. The information generated by the cookie about your use of this website, such as

  1. the browser type/version,
  2. the operating system used,
  3. the referrer URL (the previously visited page),
  4. the host name of the accessing computer (IP address) and
  5. time of the server request,

are transmitted to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services associated with the use of the website and the Internet for the purposes of market research and the design of these Internet pages in line with requirements. This information may also be transferred to third parties if this is required by law or if third parties process this data on our behalf. Under no circumstances will your IP address be merged with other Google data. The IP addresses are anonymised so that an allocation is not possible (IP masking).

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

These processing operations will only be carried out if you have given your express consent in accordance with Art. 6 (1) lit. a DS-GVO.

Furthermore, you can prevent the collection of the data generated by the cookie and related to your use of the website (incl. your IP address) as well as the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de).

As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent the collection by Google Analytics by clicking on the following link: Deactivate Google Analytics. An opt-out cookie will be set, which prevents the future collection of your data when visiting this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again.

You can view the Google Analytics privacy policy at: https://support.google.com/analytics/answer/6004245?hl=de.

11) LiveChat (LiveChat Software S.A.)

This website uses technologies from LiveChat Software S.A., al. Dębowa 3, 53-134 Wrocław, Poland (www.livechatinc.com) to collect and store anonymous data for the purpose of web analysis and to operate the live chat system to respond to live support requests. These anonymous data can be used to create user profiles under a pseudonym. Cookies may be used for this purpose. Cookies are small text files that are stored locally in the cache of the visitor's Internet browser. The cookies enable the recognition of the Internet browser. If the information collected in this way is personal, it is processed in accordance with Art. 6 Para. 1 point f GDPR on the basis of our legitimate interest in effective customer service and statistical analysis of user behaviour for optimization purposes.

The data collected with LiveChat technologies will not be used to personally identify the visitor to this website and will not be combined with personal data about the bearer of the pseudonym without the separately given consent of the person concerned. In order to avoid the storage of LiveChat cookies, you can set your Internet browser so that cookies can no longer be stored on your computer in the future or cookies that have already been stored are deleted. However, deactivating all cookies may result in some functions on our Internet pages no longer being able to be executed. You can object to the collection and storage of data for the purpose of creating a pseudonymised user profile at any time with future effect by sending us your objection informally by e-mail to the e-mail address stated in the imprint.

12) Rights of the data subject

12.1 The applicable data protection law grants you comprehensive rights of data subjects (rights of information and intervention) with regard to the data controller for the processing of your personal data, about which we inform you below:

- Right to information pursuant to Art. 15 GDPR: In particular, you have a right of access to your personal data processed by us, the processing purposes, the categories of personal data processed, the recipients or categories of recipients to whom your data have been or will be disclosed, the planned storage period or the planned storage period, the criteria for determining the duration of the storage, the existence of a right to rectification, deletion, restriction of processing, objection to processing, a complaint to a supervisory authority, the origin of your data if these were not collected by us from you, the existence of automated decision-making including profiling and, where applicable, meaningful information about the logic involved and the scope concerning you and the desired effects of such processing, as well as your right to be informed of the guarantees provided in accordance with Article 46 GDPR for the transfer of your data to third countries;

Right to rectification pursuant to Article 16 of the GDPR: You have a right to immediate rectification of incorrect data concerning you and/or completion of your incomplete data stored by us;

- Right of deletion pursuant to Art. 17 GDPR: You have the right to request the deletion of your personal data if the requirements of Art. 17 para. 1 GDPR are met. However, this right shall not apply in particular if the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;

- Right to restrict processing pursuant to Art. 18 GDPR: You have the right to request the restriction of the processing of your personal data as long as the accuracy of your data contested is verified, if you refuse to delete your data due to inadmissible data processing and instead request the restriction of the processing of your data, if you need your data to assert, exercise or defend legal claims, after we no longer need this data after the purpose has been achieved, or if you have filed an objection for reasons of your particular situation, as long as it is not yet clear whether our legitimate reasons prevail;

- Right to information in accordance with Art. 19 GDPR: If you have exercised your right to have the data controller correct, delete or limit the processing, he/she is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this correction or deletion of the data or restriction on processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed of these recipients.

- Right to data transferability pursuant to Art. 20 GDPR: You have the right to receive the personal data you have provided us in a structured, current and machine-readable format or to request its transfer to another person responsible, insofar as this is technically feasible;

- Right to revoke consent given pursuant to Art. 7 para. 3 GDPR: You have the right to revoke consent once given to the processing of data at any time with effect for the future. In the event of revocation, we will delete the data concerned without delay, unless further processing can be based on a legal basis for processing without consent. The revocation of consent shall not affect the legality of the processing carried out on the basis of the consent until revocation. The revocation can be carried out by message to the contact data of the responsible person;

- Right of appeal under Article 77 of the GDPR: If you believe that the processing of personal data concerning you infringes the GDPR, you have the right of appeal to a supervisory authority, in particular in the Member State where you reside, work or suspected infringement, without prejudice to any other administrative or judicial rem

12.2 RIGHT OF OBJECTION

IF, WITHIN THE FRAMEWORK OF A CONSIDERATION OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR PREDOMINANT LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE ON THE GROUNDS THAT ARISE FROM YOUR PARTICULAR SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN PROVE COMPELLING REASONS WORTHY OF PROTECTION FOR PROCESSING WHICH OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU MAY EXERCISE THE CONTRADICTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT ADVERTISING PURPOSES.

13) Duration of storage of personal data

The duration of the storage of personal data is determined by the respective legal retention period (e.g. commercial and tax retention periods). After expiry of this period, the corresponding data will be routinely deleted, provided that they are no longer necessary for the performance or initiation of the contract and/or there is no longer any legitimate interest on our part in the further storage.

14) Changes to the data protection declaration

We reserve the right to occasionally adapt this data protection declaration so that it always complies with current legal requirements or to implement changes to our services in the data protection declaration, e.g. when introducing new services. The new data protection declaration will then apply for your next visit.

15) Applicability

This translation is for information purposes only and is not a legally binding document. The original provisions are set out in the original German version.

Data protection officer

THALES Rechtsanwälte.Datenschutz
Dr. Christian Szidzek & Partner
Prymstraße1
97070 Würzburg
E-Mail: info@thales-datenschutz.de

Supervisory authority

LDA Bayern
Bayerisches Landesamt für Datenschutzaufsicht
Promenade 18
91522 Ansbach

Status: 11.08.2022