Privacy policy

At CEWE your privacy is respected. All data collected is used to improve our range of products and services. Data protection and data security for customers and users have a high priority for CEWE. The protection of your personal data throughout our business processes is therefore of particular concern to us.

We, CEWE Stiftung & Co. KGaA, Meerweg 30-32, 26133 Oldenburg, take the protection of your personal data very seriously as the responsible party within the meaning of the General Data Protection Regulation and comply with the statutory provisions on data protection.

In accordance with Art. 13 of the EU Data Protection Regulation (EU-DSGVO), this declaration on data protection explains what information is collected on our website and the use of CEWE Online Photo Services through your visit and how this information is used. However, the declaration does not apply to websites of other companies which contain a link to this website or to which our website has provided links.

When you visit our website, our web servers temporarily store access data by default, i.e. the IP address of your access, the upload software used for the purpose of the order (ActiveX, Flash, Java, etc.), the Session_ID to identify your connection session, and the date and time of the visit. The legal basis for the temporary storage of the data is Art. 6 para. 1 lit. f) EU-DSGVO. This data is deleted after the session has ended in accordance with legal regulations. In addition, personal data is only stored if you provide it to us voluntarily, e.g. as part of a registration, a survey, a competition or an online application on the basis of Art. 6 para. 1 lit. a) or Art. 6 para. 1 lit. b) EU-DSGVO. You will be informed about the purpose of the data collection in the respective entry and contact forms. You have the option of deleting your registration data in your customer account or via our customer service at any time.

Sensitive data, such as login, password, address data, information about your payment methods, credit card data or account data in the case of direct debit are transmitted exclusively in encrypted connections (HTTPS / SSL) and stored on security servers. The electronic payment process is handled by a certified payment service provider.

To ensure the high accessibility of our customer service, we are selectively supported by service providers outside the area of application of the EU-DSGVO. We have concluded contracts with the service providers in accordance with Article 44 of the EU Data Protection Regulation in conjunction with the EU standard contractual clauses and regularly assure ourselves that our very high data protection requirements are also fully met.

You have the option of contacting us in several ways: By email, by phone, by WhatsApp or by post. When you contact us, we use the personal data that you voluntarily provide to us in this context. This is done solely for the purpose of contacting you and to be able to process your enquiry appropriately.

When contacting us by telephone, no higher costs will be incurred than the transmission costs according to the basic tariff.

The processing and forwarding of your data is based on the following legal grounds: Art. 6 para. 1 lit. a) EU-DSGVO for all processing requiring consent, Art. 6 para. 1 lit. b) EU-DSGVO for contract fulfilment, Art. 6 para. 1 lit. c) EU-DSGVO for consent management for the fulfilment of legal obligations and Art. 6 para. 1 lit. f) EU-DSGVO for further processing with legitimate interest.

When registering for the newsletter and/or press distribution list, your e-mail address will be used for our own advertising purposes until you unsubscribe from the newsletter and/or press distribution list. You can unsubscribe at any time. If you register for our newsletter and/or press distribution list, we will use the data required for this purpose or separately provided by you to send you our e-mail newsletter or press releases on a regular basis. You can unsubscribe from the newsletter and/or press distribution list at any time by sending a message to the contact option described below or via a link provided for this purpose in the newsletter or in the e-mail. According to the applicable data protection regulations, you have a right to free information about your stored data and, if applicable, a right to correction, blocking or deletion of this data.

Personal data will only be passed on to state authorities within the framework of mandatory legal provisions. Your data will not be disclosed to private third parties without your express consent.

Our employees are obliged by us to maintain confidentiality and to comply with the relevant data protection regulations.

In order to enable you to use certain functions when visiting our website and to make it more attractive, we use so-called cookies on various pages.

Cookies are small text files that are stored on your terminal device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your terminal device and enable us or our partner companies to recognise your browser on your next visit (persistent cookies). Further information and individual cookie settings here.

When calling up the pages, the user is informed about the use of cookies for analysis purposes and his consent to the processing of personal data used in this context is obtained. To fulfil our legal obligation, we use the consent management solution of Usercentrics, which stores consent on the basis of Art. 6 (1) lit. c) EU-DSGVO in order to comply with the documentation obligations pursuant to Art. 7 (1) EU-DSGVO.

You can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or generally exclude cookies. If you do not accept session cookies, the functionality may be limited.

This website uses web analysis technologies from Adobe Systems Inc. and Google Inc. (web analysis technology Google Remarketing) on the basis of Art. 6 para. 1 lit. a) and Art. 6 para. 1 lit. f) EU-DSGVO for marketing and optimisation purposes, from which user profiles are created using pseudonyms. These usage profiles are used to analyse visitor behaviour and are evaluated to improve and design our offer in line with requirements. The pseudonymised user profiles are not combined with personal data about the bearer of the pseudonym without the express consent of the person concerned, which must be given separately.  The use of Google Ads makes it possible to measure the success of job advertisements and enables an improvement in applicant management.

Further information about the individual marketing and analysis cookies can be found here.

Further information on terms of use and data protection can be found here:

Google Inc: www.google.com/intl/de/policies/privacy/partners/

Adobe Systems Inc.: www.adobe.com/de/privacy/policy.html

YouTube

Our website uses the provider YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA, represented by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, for the integration of videos. We integrate YouTube videos using an extended data protection mode, which means that no personal data is evaluated by Google when you visit our website. When you click on the video, your IP address is transmitted to YouTube and YouTube learns that you have viewed the video. We have no influence on the possible collection and use of your data by YouTube. You can find more information in YouTube's privacy policy at www.google.de/intl/de/policies/privacy/. If you are logged in to YouTube, this information will also be assigned to your user account. If you do not want this assignment, you can log out of your user account before viewing the video.

CEWE uses extensive technical and operational security measures to protect your personal data managed by us against misuse, accidental or intentional manipulation or against access by unauthorised persons. Our security procedures are continuously improved in line with technological developments.

When processing your personal data, the EU General Data Protection Regulation grants you certain rights:

1. right of access (Art. 15 EU GDPR):

You have the right to request confirmation as to whether personal data relating to you is being processed. If this is the case, you have the right to be informed about this personal data and to receive the information listed in detail in Art. 15 EU-DSGVO.

2. Right to rectification (Art. 16 EU GDPR):

You have the right to request without undue delay the rectification of any inaccurate personal data concerning you and, where applicable, the completion of any incomplete personal data.

3. right to erasure (Art. 17 EU GDPR):

You also have the right to request that personal data concerning you be deleted without delay, provided that one of the reasons listed in detail in Art. 17 EU-DSGVO applies, e.g. if the data is no longer required for the purposes pursued.

4. right to information (Art. 19 EU-DSGVO):

If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.

You have the right to be informed about these recipients.

5. right to restriction of processing (Art. 18 EU-DSGVO):

You have the right to request the restriction of processing if one of the conditions listed in Art. 18 EU GDPR applies, e.g. if you have objected to the processing, for the duration of any review.

6. right to data portability (Art. 20 EU-DSGVO):

In certain cases, which are listed in detail in Art. 20 EU-DSGVO, you have the right to receive the personal data concerning you in a structured, common and machine-readable format or to request the transfer of this data to a third party.

7. revocation of consent (Art. 7 para. 3 EU-DSGVO):

You have the right to revoke your consent at any time. This means that we will no longer continue the data processing that we previously carried out on the basis of your consent. Your revocation does not affect the lawfulness of the processing of the data that has already taken place.

8. right of complaint to a supervisory authority (Art. 77 EU-DSGVO):

Pursuant to Art. 77 EU-DSGVO, you have the right to lodge a complaint with a supervisory authority if you are of the opinion that the processing of the data concerning you violates data protection provisions. The right of complaint can be asserted in particular before a supervisory authority in the member state of your residence, your place of work or the place of the alleged infringement.

9. right to object (Art. 21 EU-DSGVO):

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) or Article 6(1)(f) EU GDPR, in accordance with Article 21(2) EU GDPR.

The controller shall no longer process the personal data concerning you unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims.

If the personal data concerning you is processed for the purposes of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purposes of such marketing; this also applies to profiling insofar as it is related to such direct marketing.

If you have any questions on the subject of data protection at CEWE, please do not hesitate to contact:

CEWE Stiftung & Co. KGaA
Data Protection
Meerweg 30-32
26133 Oldenburg
Tel.: +49 (0)441 404299
(datenschutz@cewe.de)

Ms Elwira Wall
CEWE Stiftung & Co. KGaA
26133 Oldenburg, 26.01.2021