Data Protection / Privacy Notice

Thank you for your interest in our online shop. The protection of your privacy is very important to us. Details about the handling of your data can be found below.

Access data and hosting

You may visit our websites without having to provide any personal information. Each time a web page is visited, the web server merely automatically stores a website request documenting server log file, which contains the name of the requested file, your IP address, the date and time of the visit, the amount of data transferred and the requesting provider (access data). These log files are evaluated exclusively for the purpose of ensuring trouble-free operation of the site and improving our services. This serves to protect our legitimate interests according with Art. 6 para. 1 sentence 1 lit. a GDPR in a correct presentation of our offer, which predominate within the scope of a balancing of interests. All log files will be deleted no later than ten days after the end of your visit to the site.

Third party hosting services

Within the framework of processing on our behalf, a third-party provider provides us with hosting and website presentation services. This serves to protect our legitimate interests in a correct presentation of our offer, which predominate within the scope of a balancing of interests. All data collected in the context of the use of these websites or in the forms provided for this purpose in our online shops as described below are processed on its servers. Processing on other servers only takes place in the framework described here. This service provider, including the servers location, is located within a country of the European Union or the European Economic Area.

Data collection and use for contract processing

We collect personal data when you voluntarily provide it to us in connection with your order or when you contact us (e.g. via contact form or e-mail). Mandatory fields are marked as such, since in these cases we require the data for contract processing, or for processing of your contact and you cannot complete the order or cannot send the contact without that information. Which data is collected can be seen from the respective input fields. We use the data provided by you according to Article 6 (1) sentence 1 lit. a GDPR to process contracts and your enquiries. After complete processing of the contract or deletion of your customer account, your data will be restricted for further processing and deleted after expiry of the storage periods under tax and commercial law, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.

Data Transfer

For the fulfilment of the contract according to Article 6 (1) sentence 1 lit. a GDPR we pass on your data to the shipping company commissioned with the delivery, as far as this is necessary for the delivery of ordered goods. Depending on which payment service provider you select in the order process, we pass on the payment data collected for the processing of payments to the credit institution commissioned with the payment and, if applicable, to payment service providers commissioned by us or to the selected payment service. In some cases, the selected payment service providers also collect this data themselves if you create an account there. In this case, you must log in to the payment service provider with your access data during the ordering process. The data protection declaration of the respective payment service provider applies in this respect.

E-mail newsletter and postal advertising

E-mail advertising without registration for the newsletter and your right to contradict
If we receive your e-mail address in connection with the sale of a product or a service and you did not contradict, we reserve the right on the basis of section 7 Para 3 UWG (German law against unfair competition) to regularly send offers of similar products from our range by e-mail.
This serves to protect our legitimate interests in an advertising approach to our customers according to to Article 6 (1) sentence 1 lit. f GDPR, which predominate within the scope of a balancing of interests.
You may object to this use of your e-mail address at any time by sending a message to the contact option described below or through a dedicated link in every newsletter, without incurring any costs other than the transmission costs according to the basic tariffs.
The newsletter is sent within the framework of a processing on our behalf by a service provider to whom we pass on your e-mail address for this purpose. This service provider is located within a country of the European Union or the European Economic Area.

Postal advertisement and your right of objection
Furthermore, we reserve the right to use your first and last name as well as your postal address for our own advertising purposes, e.g. to send offers and information about our products by post. This serves to protect our legitimate interests in an advertising approach to our customers according to Article 6 (1) sentence 1 lit. a GDPR, which predominate within the scope of a balancing of interests.

The advertising mailings are processed on our behalf by a service provider to whom we pass on your data. You can object to the storage and use of your data for these purposes at any time by sending a message to the contact option described below.

Use of Data for payment processing

Use of personal information when selecting the payment method Klarna invoice
In order to be able to offer you the payment options of Klarna, we provide Klarna with certain information about you, such as contact and order information, in order for Klarna to evaluate if it can offer its payment method and to tailor the payment method for you. The information is disclosed only if you choose to use Klarna’s services as your payment method. General information about Klarna can be found here. Your personal information will be handled by Klarna in accordance with the applicable privacy regulations and in accordance with the information in the privacy policy of Klarna.

Integration of the Trustbadge “Trusted Shop”

To display our Trusted Shops seal of approval and the collected evaluations as well as to offer Trusted Shops products to buyers after an order, the Trustbadge Trusted Shops is integrated on our websites.
This serves the protection of our legitimate interests in an optimal marketing of our offer, which predominate in the context of a balancing of interests. The Trustbadge and the services advertised with it are an offer of Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne, Germany.

The Trustbadge is provided as part of a order processing by a CDN provider (Content Delivery Network). Trusted Shops GmbH also uses service providers from the USA. An adequate level of data protection is ensured. Further information on the data protection of Trusted Shops GmbH can be found here.
When the trust badge is called, the web server automatically saves a request documenting server log file, which contains e.g. your IP address, date and time of the request, transferred data volume and the requesting internet service provider (access data).  Individual access data are stored for the analysis of security peculiarities in the security database. The logfiles will be automatically deleted no later than 90 days after creation. 
Further personal data will only be transferred to Trusted Shops if you have consented to this or if you decide to use Trusted Shops products after completing an order or if you have already made a registration. In this case the contractual agreement between you and Trusted Shops applies. For this purpose, personal data are automatically collected from the order data. Whether you are already registered as a Trusted Shops customer is automatically checked by means of a neutral parameter, the e-mail address hashed by cryptological one-way function. The e-mail address is converted to this hash value, which cannot be decrypted by Trusted Shops before it is transmitted. After being checked for a match, the parameter is deleted automatically. 

This is required to fulfill our and Trusted Shops' predominant legitimate interests in providing Buyer Protection and transactional rating services connected to the corresponding order and according to Article 6 (1) sentence 1 lit. b GDPR. Further details, e.g about objecting, can be found in the Trusted Shops Privacy Policy (link above or via the link in the Trustbadge).

Cookies and webanalysis

If you have given your consent according to Article 6 (1) sentence 1 lit. a GDPR, as part of the use of Google Analytics (see below), this website also uses the so-called DoubleClick cookie for advertising purposes, which allows your browser to be recognized when visiting other websites. The automatically collected information about your use of our website is usually transferred to a Google server in the USA and stored there. By activating IP anonymization on our websites, the IP address is reduced prior to transmission within the member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases, the full IP address will be transmitted to a Google server in the USA and shortened there. The anonymous IP address transmitted by your browser within the framework of Google Analytics is not merged with other Google data.

Google will use this information to compile reports on website activity and to provide other -to the used website related- services. Google may also transfer this information to third parties, if required by law or as far as third parties process this data on behalf of Google. After the expiration of the purpose and end of the use of Google DoubleClick by us, the data collected in this context will be deleted.
Google Double Click is an offer made by Google Ireland Limited, a company registered and incorporated under Irish law and located at Gordon House, Barrow Street, Dublin 4, Ireland. (www.google.ie). In case that information is transferred to and stored on Google's servers in the United States, the American company Google LLC is certified under the EU-US Privacy Shield.
A current certificate can be viewed here. As a result of this agreement between the US and the European Commission, the latter has established an appropriate level of data protection for companies certified under the Privacy Shield.
You may revoke your consent at any time with future effect by disabling the DoubleClick cookie through this link. In addition, you may get information from the Digital Advertising Alliance about the setting of cookies and make adjustments in this regard. Finally, you may set your browser in a way that you will be informed about the setting of cookies. You may then decide individually on their acceptance or exclude the acceptance of cookies for specific cases or in general. Not accepting these cookies may however limit the functionality of our website.

Use of Google analytics for web analysis

If you have given your consent according to Article 6 (1) sentence 1 lit. a GDPR, our website uses Google (universal) Analytics, a web analysis service of Google LLC (www.google.com). The web analytics service is an offer made by Google Ireland Limited, a company registered and incorporated under Irish law and located at Gordon House, Barrow Street, Dublin 4, Ireland. (www.google.ie). This serves to protect our legitimate interests in an optimized presentation of our offer, which predominate in the context of a balancing of interests. Google Analytics 360 uses methods that enable an analysis of your use of our websites, such as cookies. The automatically collected information about your use of our website is usually transferred to a Google server in the USA and stored there. By activating IP anonymization on our websites, the IP address is reduced prior to transmission within the member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The anonymous IP address transmitted by your browser within the framework of Google Analytics is not merged with other Google data. In case that information is transferred to and stored on Google's servers in the United States, the American company Google LLC is certified under the EU-US Privacy Shield. A current certificate can be viewed here
As a result of this agreement between the US and the European Commission, the latter has established an adequate level of data protection for companies certified under the Privacy Shield.
You can prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link.
As an alternative to the browser plugin, you can click this link to prevent Google Analytics from collecting data on this website in the future. An opt-out cookie is stored on your mobile device. If you delete your cookies, you must click the link again.

Advertising via marketing networks

Use of Google Ads conversion tracking
We use Google Ads to advertise our websites in Google search results and on third-party websites. When you visit our website, Google uses the so-called remarketing cookie, which automatically uses a pseudonym CookieID and, based on the pages you visit, enables interest-based advertising. This serves according with Art. 6 para. 1 sentence 1 lit. f GDPR the protection of our legitimate interests in an optimal marketing of our websites.
Any additional processing will only take place if you have agreed with Google that your web and app browsing history will be linked to your Google Account and information from your Google Account will be used to personalise ads you see on the web. In this case, if you are logged in to Google while visiting our website, Google will use your data together with Google Analytics data to create and define target group lists for cross-device remarketing. To this end, Google temporarily links your personal data with Google Analytics data to form target groups. 

Google Adverts is an offer made by Google Ireland Limited, a company registered and incorporated under Irish law and located at Gordon House, Barrow Street, Dublin 4, Ireland. (www.google.co.uk). In case that information is transferred to and stored on Google's servers in the United States, the American company Google LLC is certified under the EU-US Privacy Shield.

 A current certificate can be viewed here. As a result of this agreement between the US and the European Commission, the latter has established an adequate level of data protection for companies certified under the Privacy Shield.
You may revoke your consent at any time with future effect by deactivating the remarketing cookie via this link. You can also contact the Digital Advertising Alliance to find out how to set cookies and to make the relevant settings.

Voucher offers of Sovendus GmbH
In order to select a currently interesting voucher offer for you, we will transmit your pseudonymised hash value of your e-mail address and your IP-address in encrypted form to Sovendus GmbH, Moltkestrasse 11, D-76133 Karlsruhe (Sovendus) (Art. 6 par. 1 f GDPR). The pseudonymised hash value of your e-mail address is used to consider a possibly existing objection to receive offers from Sovendus (Art. 21 par.3, Art. 6 par. 1 c GDPR). The IP-address will be exclusively used for data security purposes and as a rule the same will be anonymised after seven days (Art. 6 par.1 f GDPR). Furthermore, we will transmit order number, order value with currency, session ID, coupon code, and time stamp in pseudonymised form to Sovendus for billing purposes (Art. 6 par.1 f GDPR). If you are interested in a voucher offer of Sovendus, while there is no objection existing to receive such offers, and if you click on the voucher banner, we will transmit your form of address, your name and your e-mail address in encrypted form to Sovendus to prepare a voucher (Art. 6 par. 1 b, f GDPR).
You will find further information about the processing of your data by Sovendus in their online data protection notice: Sovendus privacy notice.

BingAds Remarketing
We use BingAds to advertise this site in Bing, Yahoo, and MSN search results, as well as on third party websites. If you have given your consent according to Article 6 (1) sentence 1 lit. a GDPR, a cookie is automatically set, when you visit our website. This cookie automatically enables interest-based advertising by means of a pseudonymous CookieID and based on the pages you visit. After expiration of the purpose and end of the use of BingAds Remarketing by us, the data collected in this context will be deleted.
BingAds is offered by the Microsoft Corporation (www.microsoft.com). The Microsoft Corporation is based in the US and is certified under the EU-US Privacy Shield.
A current certificate can be viewed here. As a result of this agreement between the US and the European Commission, the latter has established an appropriate level of data protection for companies certified under the Privacy Shield.
You may revoke your consent at any time with future effect by disabling the DoubleClick cookie through this link. In addition, you may get information from the Digital Advertising Alliance about the setting of cookies and make adjustments in this regard. 

Social media plugins

Youtube video plugins
On our web pages own contents (and if necessary third) are merged over Youtube video Plugins. This content is provided by Google LLC (“Provider”). YouTube ist ein Angebot der Google Ireland Limited, einer nach irischem Recht eingetragenen und betriebenen Gesellschaft mit Sitz in Gordon House, Barrow Street, Dublin 4, Irland (www.google.ie). For videos from Youtube, which are integrated on our site, the extended data protection setting is activated. This means that no information from website visitors is collected and stored on YouTube unless they play the video. The integration of the videos serves the preservation of our legitimate interests, which predominate in the context of a weighing up of interests, in an optimal marketing of our offer in accordance with Art. 6 (1) sentence 1 lit. f DSGVO.
The purpose and scope of the data collection and the further processing and use of the data by the providers as well as your relevant rights and setting options for the protection of your privacy can be found in the data protection information of google’s privacy notice.

Sending evaluation reminders by e-mail

Rating reminders by Trusted Shops
If you have given your consent according to Article 6 (1) sentence 1 lit. a GDPR during or after your order, we will send your e-mail address to Trusted Shops GmbH, Subbelrather Straße 15c, 50823 Cologne, so that they can send you a rating reminder by e-mail. This consent can be revoked at any time by sending a message to the contact option described below or directly to Trusted Shops.

Contact possibilities and your rights

As an affected person you have the following rights:

If you have questions about the collection, processing or use of your personal data, information, correction, blocking or deletion of data, as well as the withdrawal of a given consent or objection to a particular use of data, please contact our supervisor for data protection:

puzzle & play GmbH
Matthias Weiss
Auf der Haide 2
92665 Altenstadt
Germany
privacy@photopuzzle.ie

Right of objection

Insofar as we process personal data as described above in order to protect our legitimate interests, which predominate within the scope of a balance of interests, you can object to this processing with effect for the future. If the data is processed for direct marketing purposes, you can exercise this right at any time as described above. If the processing takes place for other purposes, you are only entitled to a right of objection if there are reasons arising from your particular situation.
After exercising your right of objection, we will not process your personal data further for these purposes, unless we can prove compelling reasons worthy of protection for the processing, which outweigh your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.