This statement describes how ĀTMA Portrait Studio, (“we”) processes your personal data as joint controllers (Art. 26 DS-GVO). The declaration is addressed to our existing and former customers, and the persons taken by our customers to photo shoots (e.g. family members, friends).
1. Purposes of the data processing
We process your personal data for the following purposes:
1.1 Customer management: Recording of booked appointments, creation of data records for the management of photo shoots, creation of director cards for the processing of photo shoots, invoicing / accounting, cash book, management of cross-participant (system-wide) customer accounts, to which, for example, picture credits can also be credited, joint marketing campaigns.
1.2 Direct advertising: administration of approvals for direct customer information
1.3 Voucher management: issuing and use of vouchers issued by participants of the franchise system, which can also be redeemed by customers at other participants of the franchise system.
Insofar as we collect your personal data from you ourselves, the provision of your data is generally voluntary. However, we will not be able to fulfil our mission, or not completely, if you do not provide your personal data.
2. Legal bases of the processing
If you are an interested party or potential future customer, we will only process your contact data for the purpose of direct marketing by sending you electronic mail or contacting you by telephone with your consent pursuant to Art. 6 (1) a of the General Data Protection Regulation (“DSGVO”).
If you are our customer, we process your personal data because this is necessary to fulfil the contract concluded with you (Art. 6 para. 1 lit. b DSGVO).
Otherwise, we process your personal data on the basis of our overriding legitimate interest in achieving the purposes stated under point 1 (Art. 6 (1) (f) DSGVO).
3. Transmission of your personal data
Insofar as this is absolutely necessary for the purposes mentioned under point 1, we will transfer your personal data to the following recipients:
4. Storage Period
We generally store your personal data until the termination of the business relationship in the context of which we (i.e. at least one member of our franchise system) have collected your data or until the expiry of the applicable statutory limitation and retention periods; furthermore, until the termination of any legal disputes in which the data is required as evidence. Insofar as you are a customer, former customer, interested party or potential future customer or a contact person at one of the aforementioned, we store your personal data for the purposes of marketing until you object or revoke your consent, insofar as the marketing measure is based on your consent.
5.1 Session cookies (cookie PHPSESSID), which are required for a session and for login. This is a unique identifier that is sent by the browser to the server with every request so that the server can resolve the actual data (e.g. the user data of the logged-in user or the address during an order process). The session data on the server is automatically deleted at the end of the session. Session cookies are automatically deleted by the browser after closing.
5.2 Cookie userIdentifer, stores a user ID for logging errors. This cookie remains for one year in order to be able to track a user in the long term. It is mainly used, for example, to be able to clearly identify a user between the individual sessions after errors have occurred in the logs. -> The data of our cookies are not transmitted to third parties.
6. Your rights in connection with personal data
You are entitled, inter alia, (i) to verify whether and which personal data we process about you and to obtain copies of such data, (ii) to request the rectification, integration or erasure of your personal data where it is inaccurate or not processed in accordance with the law, (iii) to request us to restrict the processing of your personal data, (iv) object in certain circumstances to the processing of your personal data or withdraw consent previously given for the processing, where withdrawal does not affect the lawfulness of the processing carried out prior to withdrawal, (v) request data portability where you are our customer (vi) know the identity of third parties to whom your personal data is transferred and (vii) lodge a complaint with the data protection authority.
7. Our contact details
If you have any questions about this statement or wish to make any requests, please contact us via:
ĀTMA Portrait Studio
Eisenbahnstr. 4, 10997, Berlin
© 2023 ĀTMA Portrait Studio