Data protection

Welcome to Our Website

We are pleased to welcome you to our website db-photolounge.ch and appreciate your interest in our company.

Protecting your personal data, such as birth date, name, phone number, address, etc., is a matter of great importance to us.

The purpose of this privacy statement is to inform you about the processing of your personal data that we collect during your visit to our site. Our privacy practices are in accordance with the legal requirements of the Swiss Federal Data Protection Act (DSG) and the EU General Data Protection Regulation (GDPR). The following privacy statement is to fulfill the information obligations under the DSG and GDPR, which are found, for example, in Art. 8 ff. DSG and Art. 13 ff. GDPR. Owner or Responsible Party

The owner or responsible party in the sense of Art. 3 Bst. i DSG or Art. 4 No. 7 GDPR is the one who alone or jointly with others decides on the purposes and means of processing personal data. The responsible party according to Art. 4 No. 7 GDPR is also the recipient of the personal data in the sense of Art. 4 No. 9 GDPR. Any third-party recipient will be identified separately.

Regarding our website, the owner or responsible party is:

Denise Bertram Rebbergstrasse 1C 8425 Oberembrach Switzerland Email: info@db-photolounge.ch

Website Provision and Creation of Log Files

Each time our website is accessed, our system automatically collects data and information from the device accessing the site (e.g., computer, mobile phone, tablet, etc.).

What personal data is collected and to what extent is it processed?

(1) Information about the browser type and version used; (2) The operating system of the accessing device; (3) Hostname of the accessing computer; (4) The IP address of the accessing device; (5) Date and time of access; (6) Websites and resources (images, files, other page content) that were accessed on our website; (7) Websites from which the user's system accessed our website (referrer tracking); (8) Notification of whether the access was successful; (9) Amount of data transmitted.

This data is stored in the log files of our system. This data is not stored together with personal data of a specific user, so individual visitors to the site are not identified.

Legal Basis for Processing Personal Data

The processing of personal data is based on the principle of legality (Art. 4 DSG) and the principle of good faith (Art. 2 ZGB) as well as Art. 6 para. 1 lit. f GDPR (legitimate interest).

Purpose of Data Processing

The temporary (automated) storage of the data is necessary for the course of a website visit in order to enable the delivery of the website. The storage and processing of personal data are also carried out to maintain the compatibility of our website for as many visitors as possible and to combat abuse and eliminate malfunctions. For this purpose, it is necessary to log the technical data of the accessing computer in order to be able to react as quickly as possible to display errors, attacks on our IT systems and/or functional errors of our website. In addition, the data is used to optimize the website and to ensure the general security of our information technology systems.

Duration of Storage

The deletion of the aforementioned technical data takes place as soon as they are no longer needed to ensure the compatibility of the website for all visitors, but no later than 3 months after accessing our website.

Objection and Deletion Option

You may object to the processing at any time in accordance with Art. 21 GDPR and request deletion of the data according to Art. 17 GDPR. You can find out what rights you have and how to exercise them in the lower part of this privacy policy.

Special Features of the Website

Our site offers you various functions, during the use of which we collect, process, and store personal data. Below we explain what happens with these data:

Order Form

What personal data is collected and to what extent are they processed?

The data you entered in the form fields, such as address, name, first name, etc., are processed by us for the purpose mentioned below.

Legal basis for processing personal data

The processing of personal data is based on the principle of legality (Art. 4 DSG) and the principle of good faith (Art. 2 ZGB) as well as Art. 6 para. 1 lit. b GDPR (execution of (pre)contractual measures).

Purpose of Data Processing

The purpose of data processing is to process your order so that we can fulfill or initiate the contract with you.

Duration of Storage

The data is deleted as soon as it is no longer needed for the processing of the order and there are no longer any legal retention obligations. In general, the legislator provides for a retention period of 10 years.

Objection and Deletion Option

Necessity of Providing Personal Data

The information in the order form is necessary for the conclusion of a contract. If you do not fill in the required fields completely or at all, the order you desire cannot be executed.

Rating Function

Scope of processing personal data

The data you entered in the fields of our rating form will be processed by us for the purpose mentioned below.

Legal basis for processing personal data

The processing of personal data is based on the principle of legality (Art. 4 DSG) and the principle of good faith (Art. 2 ZGB) as well as Art. 6 para. 1 lit. a GDPR (consent by clear affirmative action or behavior).

Purpose of Data Processing

Acceptance and publication of your rating on our website - and if you explicitly agree - also on the internet platforms of our rating service providers.

Duration of Storage

Your rating will be stored and published indefinitely. We reserve the right to delete it without giving reasons and without prior or subsequent information.

Objection and Deletion Option

Necessity of Providing Personal Data

The information in the rating function is voluntary. If you do not fill in the required fields completely or at all, the rating you desire cannot be published on our platform.

Comment Function

What personal data is collected and to what extent are they processed?

The personal data you leave in your comment, such as the content of your comment, your name or pseudonym, your email address, etc.

Legal basis for processing personal data

Purpose of Data Processing

Acceptance and publication of your comment on our website.

Duration of Storage

Your comment will be stored and published indefinitely. We reserve the right to delete it without giving reasons and without prior or subsequent information.

Objection and Deletion Option

You can delete your own comments. If this does not work, you can have us delete them at any time. Please contact us for this purpose.

Necessity of Providing Personal Data

The use of the comment function is not legally required or necessary for the conclusion of a contract. You create comments for your own reasons and by submitting them immediately agree to their publication. If you provide personal information, you do so on your own initiative and responsibility. The use of the comment function is voluntary. You are not obliged to write a comment on our site. If you wish to leave a comment, you must fill in the fields marked as necessary. If you do not enter the necessary information, your comment cannot be published.

Scope of Processing Personal Data and Collected Personal Data

The registration and login data you enter or communicate to us.

Legal Basis for Processing Personal Data

The processing of personal data is based on the principle of legality (Art. 4 DSG) and the principle of good faith (Art. 2 ZGB), as well as Art. 6 Para. 1 lit. b GDPR (execution of (pre)contractual measures).

Purpose of Data Processing

On our website, you have the option to use a separate login area. To verify your authorization to use the protected area or documents, you must enter your login details (email or username and password) into the corresponding form. If needed, we can send you your login details or the option to reset your password via email upon request.

Duration of Storage

The collected data will be stored as long as you maintain an account with us.

Options for Objection and Deletion

You may object to the processing at any time in accordance with Art. 21 GDPR and request deletion of the data according to Art. 17 GDPR. You can find out which rights you have and how to exercise them in the lower part of this privacy statement.

Necessity of Providing Personal Data

Certain pages and their content are not publicly accessible. Via the login area on our site, certain users can gain access to the protected area. Use of the content protected by the login area is not possible without entering personal data. If you wish to use our login area, you must fill in the fields marked as mandatory (username and password). The entry of the data presupposes the existence of a user account. Registration is not possible if the data you enter is incorrect. If the data is entered incorrectly or not at all by you, the protected area cannot be used. However, the rest of the site is still accessible without login.

Transfer of Data to Third Parties

The processing of personal data is based on the principle of legality (Art. 4 DSG) and the principle of good faith (Art. 2 ZGB).

The transfer of data to third parties depends on the scope of the activities or offers described below of our website or our business model.

In principle, we retain your data only as long as necessary and treat it confidentially. Exceptions include the transfer of personal data to debt collection agencies, public authorities and bodies, and private individuals who are entitled to this data based on legal regulations, court decisions, or official orders, as well as the transfer to authorities for the initiation of legal proceedings or for law enforcement purposes if our legally protected rights are violated.

Integration of External Web Services and Processing of Data Outside the EU

On our website, we use active content from external providers, so-called web services. By visiting our website, these external providers may receive personal information about your visit to our website. In this case, data processing outside Switzerland and the EU may occur. You can prevent this by installing a suitable browser plugin or disabling the execution of scripts in your browser. This may result in functional restrictions on websites you visit.

We use the following external web services:

Legally ok Legal Text Snippet and Modules

We use the service Legally ok Legal Text Snippet and Modules from Legally ok GmbH, Schochenmühlestrasse 6, 6340 Baar, Switzerland, Email: hello@legally-ok.com, Website: https://www.legally-ok.com/. The processing takes place exclusively in Switzerland according to the applicable data protection legislation there. Processing also occurs in a third country outside the EU. For this third country, there is an adequacy decision by the Commission. You can find a current list of all adequacy decisions on the EU Commission's page (Link: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_de).

The legal basis for the transmission and processing are Art. 13 Para. 1 DSG and Art. 6 Para. 1 lit. c GDPR. The use of the service helps us to comply with our legal obligations.

With the help of the service, content from our legal texts is reloaded on our website. Through the integration on our site, the current legal texts are reloaded. Through this integration, further technical modules regarding legal texts or legally necessary elements can also be reloaded.

You can find out which rights you have regarding processing at the end of this privacy statement.

For more information on the handling of the transferred data, please refer to the privacy policy of the provider at https://www.legally-ok.com/datenschutz/.

Information on the Use of Cookies

Scope of Processing Personal Data

On various pages, we integrate and use cookies to enable certain functions of our website and to integrate external web services. The so-called "cookies" are small text files that your browser can store on your access device. These text files contain a characteristic string of characters that uniquely identifies the browser when you return to our website. The process of storing a cookie file is also referred to as "setting a cookie." Cookies can be set both by the website itself and by external web services.

Legal Basis for Processing Personal Data

Relevant are Art. 4 ff. DSG (Principles) and Art. 6 Para. 1 lit. f GDPR (legitimate interest) or Art. 6 Para. 1 lit. a and Art. 9 Para. 2 lit. a GDPR (consent).

Which legal basis is applicable is determined from the cookie table listed later in this section.

In general, for cookies collected based on a legitimate interest, our legitimate interest lies in ensuring the functionality of our website and the services integrated therein (technically necessary cookies). Moreover, it may be that the cookies increase user-friendliness and enable a more individual approach. We have balanced your interests against our interests in this regard.

With the help of cookie technology, we can identify, analyze, and track individual website visitors only if the website visitor has consented to the use of the cookie according to Art. 6. Para. 2 DSG or Art. 6 Para. 1 lit. a GDPR.

Purpose of Data Processing

The cookies are set by our website or the external web services to maintain the full functionality of our website, to improve user-friendliness, or to pursue the purpose indicated with your consent. Cookie technology also enables us to recognize individual visitors by pseudonyms, e.g., an individual or random ID, so we can offer more individual services. Details are listed in the following table.

Duration of Storage

The cookies listed below are stored in your browser until they are deleted or, in the case of a session cookie, until the session has expired. Details are listed in the following table:

Cookie NameServerProviderPurposeLegal BasisDurationType

987f7f016cd00a88cd903e30c27913d1www.db-photolounge.chWebsite OperatorThis cookie allows us to save individual comfort settings you have chosen and keep them for your current and future site visits.ConsentSessionConfiguration

987f7f016cd00a88cd903e30c27913d1db-photolounge.chWebsite OperatorThis cookie allows us to save individual comfort settings you have chosen and keep them for your current and future site visits.ConsentSessionConfiguration

If cookies are set based on your consent, you can revoke your consent at any time in the cookie settings of the cookie banner. You can adjust the cookie settings here.

Options for Objection, Revocation of Consent, and Deletion

You can set your browser as you wish to generally prevent the setting of cookies. You can then decide on a case-by-case basis whether to accept cookies or accept cookies in general. Cookies can be used for various purposes, e.g., to recognize that your access device has already been connected to our website (permanent cookies) or to save recently viewed offers (session cookies). If you have expressly given us permission to process your personal data, you can revoke this consent at any time. Please note that the lawfulness of the processing carried out on the basis of the consent until revocation is not affected by this.

Data Security and Data Protection, Communication via Email

Your personal data is protected by technical and organizational measures during collection, storage, and processing so that it is not accessible to third parties. In the case of unencrypted communication via email, we cannot guarantee complete data security on the transmission path to our IT systems, so we recommend encrypted communication or the postal route for information with a high need for confidentiality.

Duration of Data Storage and Rights of the Data Subject

Duration of Storage

We store personal data only to the extent and as long as necessary for fulfilling the purposes for which the personal data was collected, we have a legitimate overriding interest in storing it, or we are legally obliged to do so.

Right to Information

You have the right to request confirmation as to whether we process personal data concerning you. If this is the case, you have a right to information about the information named in 8 ff. DSG or Art. 15 Para. 1 GDPR, provided that the disclosure by the owner of the data collection cannot be refused, restricted, or postponed (cf. Art. 9 f. DSG or Art. 15 Para. 4 GDPR). We are also happy to provide you with a copy of the data.

Correction Right

Under Art. 5 Para. 2 DPA or Art. 16 GDPR, you have the right to have us correct any personal data, such as address, name, etc., that may have been stored incorrectly. You can also request a completion of the data stored with us at any time. The corresponding adjustment is made immediately.

Right to Deletion

According to Art. 17 Para. 1 GDPR, you have the right for us to delete personal data collected about you if:

The data is no longer needed;
The legal basis for processing has ceased to exist due to your withdrawal of consent;
There are no legitimate reasons for processing;
Your data has been unlawfully processed;
A legal obligation requires it.

The right does not exist according to Art. 17 Para. 3 GDPR if:

Processing is necessary for the exercise of the right to freedom of expression and information;
Your data has been collected based on a legal obligation;
Processing is necessary for reasons of public interest;
The data is necessary for the assertion, exercise, or defense of legal claims.

Right to Restriction of Processing

Under Art. 18 Para. 1 GDPR, you have the right to request the restriction of processing of your personal data in certain cases. This is the case if:

The accuracy of the personal data is contested by you;
The processing is unlawful, and you refuse deletion;
The data is no longer needed for processing purposes, but the collected data serves the assertion, exercise, or defense of legal claims;
An objection to processing under Art. 21 Para. 1 GDPR has been lodged and it is still unclear which interests prevail.

Right to Withdrawal

If you have given us explicit consent to process your personal data (Art. 4 Para. 5 DPA and Art. 13 Para. 2 Letter a DPA; Art. 6 Para. 1 Letter a GDPR or Art. 9 Para. 2 Letter a GDPR), you can revoke this at any time. Please note that the lawfulness of the processing carried out based on the consent until the revocation is not affected by this. Data for which we are legally obliged to retain will be deleted after the expiry of the retention period.

Right to Object

According to Art. 21 GDPR, you have the right to object at any time to the processing of personal data concerning you, which is collected based on Art. 6 Para. 1 Letter f GDPR (within the framework of a legitimate interest). If you have given us explicit consent to process your personal data (Art. 4 Para. 5 DPA and Art. 13 Para. 2 Letter a DPA), you can revoke this at any time. Please note that the lawfulness of the processing carried out based on the consent until the revocation is not affected by this. The right is only available to you if special circumstances speak against storage and processing. Data for which we are legally obliged to retain will be deleted after the retention period has expired.

How to Exercise Your Rights

You can exercise your rights at any time by contacting the contact details below:

Denise Bertram Rebbergstrasse 1C 8425 Oberembrach Switzerland Email: info@db-photolounge.ch Phone: +41 43 541 66 07

Right to Data Portability

Under Art. 20 GDPR, you have the right to transfer the personal data concerning you. The data will be provided by us in a structured, common, and machine-readable format. The data can optionally be sent to you or to a responsible person named by you.

On request, we provide you with the following data:

Data collected based on consent (Art. 13 Para. 1 DPA and Art. 6 Para. 1 Letter a GDPR);
Data we have received from you in the context of existing contracts (Art. 13 Para. 2 Letter a DPA as well as Art. 6 Para. 1 Letter b GDPR and Art. 9 Para. 2 Letter a GDPR);
Data processed in the context of automated procedures.

We will transfer the personal data directly to a responsible person of your choice, as far as technically feasible. Please note that we may not or only partially transfer data that interferes with the predominant interests of third parties according to Art 9 Para. 1 Letter b DPA or Art. 20 Para. 4 GDPR.

Notifications to the FDPIC and Possibility of Complaint

Affected persons have a right to complain to a competent data protection supervisory authority according to Art. 29 DPA. The supervisory authority for data protection in Switzerland is the Federal Data Protection and Information Commissioner (FDPIC).

Further information can be found in the contact form of the FDPIC: https://www.edoeb.admin.ch/edoeb/de/home/der-edoeb/kontakt/kontaktformular.html

If you suspect that your data is being processed unlawfully on our site, you can initiate a legal clarification of the issue according to Art. 15 DPA. As a rule, a lawsuit according to Art. 28 ff. CC should be sought. If you are affected by data processing by federal bodies, the procedure is according to Art. 25 DPA. In this case, you can also contact the FDPIC (see note on the contact form above).

Right to Lodge a Complaint with the Supervisory Authority According to Art. 77 Para. 1 GDPR

If you suspect that your data is being processed unlawfully on our site, you can of course initiate a legal clarification of the issue at any time. Furthermore, every other legal option is open to you. Regardless of this, you have the option according to Art. 77 Para. 1 GDPR to contact a supervisory authority. The right to complain according to Art. 77 GDPR is available to you in the EU member state of your residence, your workplace, and/or the place of the alleged violation, i.e., you can choose the supervisory authority to which you turn from the above-mentioned places. The supervisory authority with which the complaint was lodged will then inform you of the status and results of your submission, including the possibility of a judicial remedy according to Art. 78 GDPR.