FOTOBLECH - Privacy Policy
General Information
The following information provides a brief overview of how your personal data is processed when you visit our website.
Personal data includes any information that can directly or indirectly identify you.
Detailed information on data protection can be found in our comprehensive privacy policy, which follows this section.
Controller. Data processing on this website is carried out by the website operator.
Please refer to the "Controller" section in our privacy policy for contact details.
Data Collection Methods. Your data is collected either through your active input, such as details provided in a contact form,
or automatically by our IT systems, with or without your consent, capturing technical data like browser information, operating system, or the time of your visit when you access our website.
Purpose of Data Processing. Some data is collected to ensure the error-free provision of the website.
Other data is not used, neither to analyze user behavior nor to optimize the website.
Your Rights. You have the right at any time to request free information about the origin, recipients, and purpose of your stored personal data.
You may also request the correction, deletion, or restriction of the processing of your data.
Any consent given for data processing can be revoked at any time for the future.
Additionally, you have the right to lodge a complaint with the competent supervisory authority.
For data protection inquiries, please contact us using the provided contact details.
Analytics Tools and Third-Party Providers. Not used.
Website Hosting
External Hosting. Our website is hosted externally by a professional provider to ensure a secure, fast, and reliable provision of our online services.
Personal data, such as IP addresses, contact requests, meta and communication data, contract and contact details, names, website access logs, and other data generated via the website, are stored on the host’s servers.
The processing of this data is carried out to fulfill contracts with our potential and existing customers (Art. 6(1)(b) GDPR) and in the legitimate interest of providing our website efficiently and securely (Art. 6(1)(f) GDPR).
Where required, processing is based on your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TTDSG, particularly for access to device information (e.g., device fingerprinting).
You may revoke this consent at any time.
Our host processes your data solely in accordance with our instructions and to the extent necessary to fulfill its contractual obligations.
Host
World4You Internet Services GmbH
Wolfgang-Pauli-Straße 2, BT3
A-4020 Linz, Austria
Data Processing Agreement. We have concluded a Data Processing Agreement (DPA - pursuant to Art. 28(3) GDPR) with World4You.
This legally required contract ensures that the personal data of our website visitors is processed solely in accordance with our instructions and in compliance with the GDPR.
Data Protection
Personal Data. The operators of this website take the protection of your personal data very seriously.
We handle your data confidentially and in compliance with statutory data protection regulations, particularly the GDPR, as well as this privacy policy.
When you visit our website, personal data is collected, meaning information that can directly or indirectly identify you.
This privacy policy explains which data we collect, for what purpose we use it, and how it is processed.
Please note that data transmission over the internet (e.g., via email) may have security vulnerabilities.
Complete protection against unauthorized access by third parties cannot be guaranteed.
Controller
Data Processing. The entity responsible for processing personal data on this website is:
Lunova GmbH
Ubellstraße 6
4020 Linz, Austria
Contact:
Phone: +43 (0)669-11815611
Email: info18@lunova.at
The controller is the legal entity that, alone or jointly with others, determines the purposes and means of processing personal data (e.g., names, email addresses).
Data Storage
Storage Duration. Unless a specific storage period is stated in this privacy policy, we retain your personal data until the purpose of its processing no longer applies. Upon a legitimate request for deletion or revocation of your consent to data processing, your data will be deleted, provided there are no other legally permissible reasons for retention (e.g., tax or commercial retention obligations). In such cases, deletion will occur once these reasons no longer apply.
Legal Bases
General Information. The processing of your personal data on this website is based on the following legal grounds:
Consent. If you have given consent to data processing, it is based on Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR for special categories of data (Art. 9(1) GDPR).
Consent for data transfers to third countries is based on Art. 49(1)(a) GDPR.
For cookies or access to your device (e.g., device fingerprinting), § 25(1) TTDSG applies.
You may revoke your consent at any time.
Contract Fulfillment. If your data is necessary for the performance of a contract or pre-contractual measures, we process it under Art. 6(1)(b) GDPR.
Legal Obligation. Data required to fulfill legal obligations is processed under Art. 6(1)(c) GDPR.
Legitimate Interest. Processing may be based on our legitimate interest under Art. 6(1)(f) GDPR).
The applicable legal bases are explained in the subsequent sections of this privacy policy.
Revocation of Your Consent to Data Processing. Many data processing activities require your explicit consent. You You can revoke your consent at any time for the future.
This The revocation does not affect the lawfulness of the data processing carried out prior to the revocation based on your consent.
Objection in Specific Cases. If your personal data is processed under Art. 6(1)(e) or (f) GDPR, you may object to this processing at any time for reasons arising from your particular situation.
This also applies also to to profiling based on these provisions.
The relevant legal basis can be found in this privacy policy.
If you object, we will cease processing your data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the assertion, exercise, or defense of legal claims (objection under Art. 21(1) GDPR).
Objection to Direct Marketing. If your personal data is processed for direct marketing purposes, you may object to this processing at any time, including any related profiling.
Following your objection, your data will no longer be used for direct marketing (objection under Art. 21(2) GDPR).
Right to Lodge a Complaint with a Supervisory Authority. In case of GDPR violations, you may lodge a complaint with a supervisory authority, particularly in the Member State of your residence, workplace, or the place of the alleged violation.
This right exists without prejudice to other administrative or judicial remedies.
Right to Data Portability. You have the right to receive personal data that we process automatically based on your consent or for contract fulfillment in a commonly used, machine-readable format, or to have it transferred to a third party.
If you request direct transfer to another controller, this will be done where technically feasible.
Access, Rectification, and Deletion. Under applicable law, you have the right at any time to obtain free information about your stored personal data, its origin, recipients, and the purpose of processing.
You may also request the correction or deletion of this data. For questions about your personal data or to exercise your rights, please contact us.
Right to Restriction of Processing. You may request the restriction of the processing of your personal data.
Please contact us at any time for this purpose.
The right to restriction applies in the following cases:
- If you contest the accuracy of your stored data, you may request restriction of processing for the duration of the verification.
- If your data is processed unlawfully, you may request restriction instead of deletion.
- If we no longer need your data, but you require it for the exercise, defense, or assertion of legal claims, you may request restriction instead of deletion.
- If you have objected under Art. 21(1) GDPR, you may request restriction pending the balancing of your and our interests.
Restricted data may only be processed—except for storage—with your consent, for the assertion or defense of legal claims, for the protection of the rights of another person, or for reasons of important public interest of the EU or a Member State.
SSL/TLS Encryption. For security reasons and to protect the transmission of confidential content, such as orders or inquiries you send to us as the website operator, this site uses SSL/TLS encryption.
You can recognize an encrypted connection by the browser address bar changing from "http://" to "https://" and by the lock icon in the browser bar.
With SSL/TLS encryption enabled, the data you transmit to us is protected from being intercepted by third parties.
Data Collection
Server Log Files. Our website provider automatically collects and stores data in server log files, which your browser transmits with each visit. These include:
- Browser type and version
- Operating system
- Referrer URL
- Hostname of the accessing device
- Time of the server request
- IP address
These data are not combined with other data sources.
The collection is based on Art. 6(1)(f) GDPR, as the website operator has a legitimate interest in the technically error-free presentation and optimization of the website, for which server log files are necessary.
Forms. When you send us inquiries or information via one of the website’s forms, we store your details, including the provided contact information, to process the inquiry and for potential follow-up questions.
These data are not shared without your consent.
The processing is based on Art. 6(1)(b) GDPR if your inquiry relates to contract fulfillment or pre-contractual measures.
Otherwise, it is based on our legitimate interest in efficiently handling inquiries (Art. 6(1)(f) GDPR) or your consent (Art. 6(1)(a) GDPR), if obtained.
You may revoke your consent at any time.
The data entered in the contact form remain stored with us until you request deletion, revoke your consent, or the purpose of storage ceases (e.g., after processing completion).
Statutory retention periods remain unaffected.
Inquiries via Email or Phone. When you contact us via email or phone, we store and process your inquiry and the resulting personal data (e.g., name, request) to address your concern.
These data are not shared without your consent.
The processing is based on Art. 6(1)(b) GDPR if your inquiry relates to contract fulfillment or pre-contractual measures.
Otherwise, it is based on our legitimate interest in efficiently handling inquiries (Art. 6(1)(f) GDPR) or your consent (Art. 6(1)(a) GDPR), if obtained.
You may revoke your consent at any time.
The transmitted data remain stored with us until you request deletion, revoke your consent, or the purpose of storage ceases (e.g., after processing completion).
Statutory retention periods remain unaffected.
Upload of Images. When you upload images via our website, we store and process the uploaded data and related personal data to handle your request and for potential follow-up questions.
These data are not shared with third parties without your consent.
The processing is based on Art. 6(1)(b) GDPR if the upload relates to contract fulfillment or pre-contractual measures.
Otherwise, it is based on our legitimate interest in efficiently handling your request (Art. 6(1)(f) GDPR) or your consent (Art. 6(1)(a) GDPR), if obtained.
You may revoke your consent at any time.
The uploaded images and related data remain stored with us until you request deletion, revoke your consent, or the purpose of storage ceases (e.g., after processing completion).
Statutory retention periods remain unaffected.
