This post is also available in: German

Imprint & Privacy Policy

 

Imprint

The copyright of all photographs belongs to Sarah Russ.

The use, duplication or further processing in any medium as a whole or in parts requires written consent.

Responsible for the content according to § 55 Abs. 2 RStV:
Sarah Russ
Nerlichsweg
20535 Hamburg
Mail: info@sarahruss.de
Phone: +49 173 2100 498

Disclaimer

Liability for contents and photographs

The contents and photographs of my pages were created with the utmost care. However, we can not guarantee the accuracy, completeness and timeliness of the content. As a service provider, we are responsible for our own content and photos on these photographer pages under the general laws according to § 7 Abs.1 TMG. According to §§ 8 to 10 TMG, we are not obligated to monitor transmitted or stored foreign information or to investigate circumstances that indicate illegal activity. Obligations to remove or block the use of information and photos under the general laws remain unaffected. However, liability in this regard is only possible from the time of knowledge of a concrete infringement. If we become aware of any such infringements, we will remove such content and photographs immediately.

Liability for links

Our offer contains links to external websites of third parties, on whose contents we have no influence. Therefore, we cannot assume any liability for these external contents. The respective operator of the sites is always responsible for the content of the linked websites. The linked pages were checked for possible legal violations at the time of linking. Illegal contents were not recognizable at the time of linking. However, a permanent control of the contents of the linked pages is not reasonable without concrete evidence of a violation of the law. If we become aware of any infringements, we will remove such links immediately.

Copyright

The contents and photographs created by the site operators on these pages are subject to German copyright law. Duplication, processing, distribution, or any form of commercialization of such material beyond the scope of the copyright law shall require the prior written consent of its respective author or creator. Downloads and copies of this site are only permitted for private, non-commercial use. Insofar as the content on this site was not created by the operator, the copyrights of third parties are respected. In particular, third-party content is identified as such. Should you nevertheless become aware of a copyright infringement, please inform us accordingly. If we become aware of any infringements, we will remove such content immediately.

Data protection

The use of our photographer website is generally possible without providing personal data. As far as on our sides personal data (eg: name / address / e-mail addresses) are collected, this is as far as possible, on a voluntary basis. This data will not be passed on to third parties without your express consent.
We point out that data transmission over the Internet (eg communication by mail) security gaps. A complete protection of data against access by third parties is not possible.
The use of contact data published within the framework of the imprint obligation by third parties for the purpose of sending unsolicited advertising and information material is hereby expressly prohibited. The operators of the pages expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as spam e-mails.

Privacy policy

Terminology & legal basis

This data protection declaration is based on the terminology used by the European Directive and Regulation Maker when adopting the DSGVO. The data protection declaration is intended to be easy to read and understand. To ensure this, the following is a concise explanation of the terms used and the legal basis (Article 4 of the GDPR).

Data subject is any identified or identifiable natural person whose personal data are processed by the controller (i.e. in this case Sarah Russ Photography).
Personal data means any information relating to a data subject; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. Processing is any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organization, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

The processing of personal data is lawful only if at least one of the following conditions is met:

Art. 6 (1) a) DSGVO serves as the legal basis for processing operations where consent is obtained for a specific processing purpose.

If the processing of personal data is necessary for the performance of a contract to which the data subject is a party, as is the case, for example, with processing operations that are necessary for a service or the provision of another service or consideration, the processing is based on Art. 6 (1) b) DSGVO. The same applies to such processing operations which are necessary for the performance of pre-contractual measures, for example in cases of inquiries about products or services of Sarah Russ Photography.

If the company is subject to a legal obligation which requires the processing of personal data, such as for compliance with tax obligations, the processing is based on Art. 6 (1) c) DSGVO.
In rare cases, the processing of personal data might become necessary to protect vital interests of the data subject or another natural person. This would be the case, for example, if a customer needs medical assistance and as a result his or her name, age or other vital information would have to be disclosed to a doctor, hospital or other third party. Then the processing would be based on Art. 6 (1) d) DSGVO.

Ultimately, processing operations may be based on Art. 6 (1) f) DSGVO. Processing operations which are not covered by any of the aforementioned legal bases are based on this legal basis, if the processing is necessary for the protection of a legitimate interest of Sarah Russ Photography or a third party, unless such interest is overridden by the interests, fundamental rights and freedoms of the data subject. If the legal basis ceases to exist in the course of time – for example, due to revocation of consent or cessation of the legitimate interest – the personal data must be deleted or withdrawn from processing, taking into account any statutory retention periods.

Data processing

The use of the website is possible without providing personal data. For the use of individual services on the website, different regulations may apply, which in this case are explained separately below. Personal data (e.g. name, address, e-mail, telephone number, etc.) are processed exclusively within the framework of the legal regulations of the Federal Data Protection Act (BDSG) as well as the European Data Protection Regulation (DSGVO) and the country-specific data protection regulations applicable to Sarah Russ Photography and in particular only for our own purposes.

Data are personal if they can be clearly assigned to a specific natural person. In this respect, the following regulations inform you about the type, scope and purpose of the collection, use and processing of personal data by the provider Sarah Russ Fotografie.
In principle, no data of customers are stored centrally.

If Sarah Russ Photography passes on personal data to third parties (usually service providers for the processing of orders), the transfer is made in accordance with the provisions of the Federal Data Protection Act (BDSG) and the European Data Protection Regulation (DSGVO). The scope of the transmitted data is limited to the minimum necessary.

Personal data is generally deleted by Sarah Russ Photography or withdrawn from processing as soon as the purpose of processing ceases to apply. Any storage beyond this will only take place if this is provided for by the European or national legislator in Union regulations, laws or other provisions to which the controller is subject.

For all processing operations, Sarah Russ Photography has implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed by it. Nevertheless, Internet-based data transmissions in particular may be subject to security vulnerabilities, so that absolute protection cannot be guaranteed.

Objective

By means of this data protection declaration, Sarah Russ Fotografie would like to inform the public about the type, scope and purpose of the personal data processed in the context of the use of the Internet offers (point 2). Special processing operations accessible to the public, such as contact forms, are also addressed here.

Furthermore, all data subjects are informed of the rights to which they are entitled by means of this data protection declaration under point 5.

The data protection declaration is thus an instrument of Sarah Russ Photography to comply with its obligations resulting from Articles 13, 14 and 21 of the GDPR.

Publicly accessible internet offers

In principle, personal data of the users of the web offers are only processed insofar as this is necessary for the provision of a functional website as well as the contents and services. If a data subject wishes to use special services via the website, processing of personal data could thus become necessary.

If processing of personal data is necessary from the point of view of Sarah Russ Photography, and if there is no legal basis for such processing except consent, such consent will generally be obtained from the data subject. An exception applies to those cases in which prior obtaining of consent is not possible for factual reasons and the processing of the data is permitted by legal regulations.

The declaration thus also extends to the contact form offered on the website, to order transactions and to processing operations in the course of contacting or e-mail inquiries, etc.

Provision of the website & creation of log files

A merely informational use of the Internet pages of Sarah Russ Photography, i.e. if you do not register or otherwise submit information, is generally possible without any indication of personal data. Nevertheless, the system automatically records data about each server access concerning our offer (so-called server log files) every time the Internet pages are called up. The access data includes the name of the website accessed, file, date and time of access, amount of data transferred in bytes, notification of successful access, browser used and version, operating system used, referrer URL (the previously visited page), IP address and the requesting provider. The log data is used without attribution to the person of the user or other profiling only for statistical analysis for the purpose of operation, security and optimization of the offer. However, we reserve the right to check the log data retrospectively if there is a justified suspicion of unlawful use on the basis of concrete indications.

The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session. The legal basis for the temporary storage of data and log files is Art. 6 (1) f) DSGVO.

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the websites, this is the case when the respective session has ended. In the case of storage of data in log files, this is the case after 14 days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the person concerned are deleted or alienated, so that an assignment of the calling user is no longer possible.

The collection of data for the provision of the web pages and the storage of the data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility for the user to object.

What personal data we collect and why we collect it
Comments

From your email address, an anonymized string may be created (also called a hash) and given to the Gravatar service to check if you are using it. You can find the Gravatar service’s privacy policy here: https://automattic.com/privacy/. After your comment is approved, your profile picture is publicly visible in the context of your comment.

Cookies

When you post a comment on our website, it may be a consent to store your name, email address and website in cookies. This is a convenience feature so that when you post another comment, you don’t have to re-enter all this data. These cookies are stored for one year.

If you have an account and log in to this website, we will set a temporary cookie to determine if your browser accepts cookies. This cookie does not contain any personally identifiable information and is discarded when you close your browser.

When you log in, we will set some cookies to store your login information and viewing options. Login cookies expire after two days and display option cookies expire after one year. If you select “Stay logged in” when you sign up, your login will be kept for two weeks. When you log out of your account, the login cookies are deleted.

When you edit or publish an article, an additional cookie is stored in your browser. This cookie does not contain any personal data and only refers to the post ID of the article you just edited. The cookie expires after one day.

Embedded content from other websites

Posts on this website may contain embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves exactly as if the visitor had visited the other website.

These websites may collect information about you, use cookies, embed additional third-party tracking services, and record your interaction with that embedded content, including your interaction with the embedded content if you have an account and are logged into that website.

Google Analytics Analytics Service

The Websites use Google Analytics, a web analytics service provided by Google, Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about – if available – sociodemographic data, your use of this website (including your IP address, which is, however, shortened with the method _anonymizeIp(), i.e. anonymized, so that it can no longer be assigned to a connection) is transmitted to a Google server in the USA and stored there. In the event that IP anonymization is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage to the website operator. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. Google will not associate your IP address with any other data held by Google. You can prevent the installation of cookies by selecting the appropriate settings on your browser software.

You can object to the collection of data by Google Analytics as well as the processing of the data by Google with effect for the future by installing a deactivation add-on for your browser (http://tools.google.com/dlpage/gaoptout?hl=de).

Sarah Russ Photography uses Google Analytics to analyze and regularly improve the use of the websites. The statistics obtained can thus be used to improve the offer and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Art. 6 (1) f) DSGVO.

The data sent by us will be automatically deleted after 14 months. The deletion after the expiry of the retention period takes place automatically once a month.

Third-party provider information: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. user conditions:

http://www.google.com/analytics/terms/de.html, Privacy Policy Overview: http://www.google.com/intl/de/analytics/learn/privacy.html, and Privacy Policy: http://www.google.de/intl/de/policies/privacy.

Social media

Sarah Russ Photography maintains online presences within social networks and platforms in order to communicate with the customers, interested parties and users active there and to be able to inform them about the services there. When calling up the respective networks and platforms, the terms and conditions and data processing policies of their respective operators apply.

Unless otherwise stated within the scope of the data protection declaration, users’ data is processed if they communicate with us within the social networks and platforms, e.g. write posts on the online presences or send messages directly.

Facebook

Sarah Russ Photography uses components of the provider facebook.com on its site. Facebook is a service of facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA.

Each time you access the website that is equipped with such a component, this component causes the browser you are using to download a corresponding representation of the component from facebook. This process informs facebook which specific page of the website you are currently visiting.

If you visit Sarah Russ Photography’s page and are logged in to facebook during this time, facebook recognizes which specific page you are visiting through the information collected by the component and assigns this information to your personal account on facebook. If, for example, you click on the “Like” button or make corresponding comments, this information is transmitted to your personal user account on facebook and stored there. In addition, the information that you have visited Sarah Russ Photography’s page is passed on to facebook. This happens regardless of whether you click on the component or not.

If you want to prevent this transmission and storage of data about you and your behavior on the website by facebook, you must log out of facebook before you visit the site. The data protection information of facebook provides more detailed information on this, in particular on the collection and use of data by facebook, on your rights in this respect and on the setting options for protecting your privacy: https://de-de.facebook.com/about/privacy/.

In addition, external tools are available on the market with which Facebook social plugins can be blocked with add-ons for all common browsers http://webgraph.com/resources/facebookblocker/.

An overview of Facebook plugins can be found at https://developers.facebook.com/docs/plugins/

Instragram

Sarah Russ Photography uses the service Instagram on its website. Instagram is a service of Instagram Inc. Through the embedded “Insta” button on our site, Instagram receives the information that you have accessed the corresponding page of the website. If you are logged in to Instagram, Instagram can assign this visit to the page to your Instagram account and thus link the data. The data transmitted by clicking the “Insta” button will be stored by Instagram. For more information on the purpose and scope of data collection, its processing and use, as well as your rights in this regard and setting options for protecting your privacy, please refer to the Instagram privacy policy, which you can access via https://help.instagram.com/519522125107875.

To prevent Instagram from associating your visit to our site with your Instagram account, you must log out of your Instagram account before visiting the site.

Email contact & contact form

Contacting Sarah Russ Fotografie is possible via the email addresses provided on the websites. By means of the contact forms provided, e-mails are also generated to Sarah Russ Fotografie. The personal data of the users transmitted with the email are stored in Sarah Russ Fotografie’s email archive. In this context, the data will not be passed on to third parties. The data is used exclusively for the processing of the conversation.

The legal basis for the processing of data transmitted in the course of an e-mail is Art. 6 (1) f) DSGVO. When contact is made by e-mail, the necessary legitimate interest in processing the personal data lies in the processing of the contact. The data processing operations can also be based on Art. 6 (1) b) DSGVO. They take place for the completion of the request as a relationship similar to a contract. The storage of this data can also be justified for the period of the completion of the task via the permissive element in Art. 6 (1) a DSGVO.

Sarah Russ Photography generally treats e-mails as business letters and has set a standard retention period of 10 years for its e-mail archive. After that, automatic deletion takes place.

How long we store your data

When you post a comment, it is stored indefinitely, including metadata. This allows us to automatically detect and approve follow-up comments instead of holding them in a moderation queue.

For users who register on our site, we also store the personal information they provide in their user profiles. All users can view, change, or delete their personal information at any time (the username cannot be changed). Administrators of the website can also view and modify this information.

What rights you have to your information

If you have an account on this website or have posted comments, you may request an export of your personal information from us, including any information you have provided to us. In addition, you can request the deletion of all personal data we have stored about you. This does not include data that we are required to retain due to administrative, legal or security needs.

What data protection rights do I have

Every data subject has the right to information under Article 15 of the GDPR, the right to rectification under Article 16 of the GDPR, the right to erasure under Article 17 of the GDPR, the right to restriction of processing under Article 18 of the GDPR, the right to object under Article 21 of the GDPR, and the right to data portability under Article 20 of the GDPR. With regard to the right to information and the right to erasure, the restrictions pursuant to Sections 34 and 35 BDSG apply. You may assert these rights against the Banking Association. In addition, you have the right to lodge a complaint with a competent data protection supervisory authority (Art. 77 DSGVO in conjunction with Section 19 BDSG). The data protection supervisory authority responsible for us is:

You can revoke a given consent to the processing of personal data at any time vis-à-vis us. This also applies to the revocation of declarations of consent given to us before the DSGVO came into force, i.e. before May 25, 2018. Please note that the revocation only takes effect for the future. Processing that took place before the revocation is not affected.

Information about your right of objection according to Article 21 DSGVO

Individual right of objection

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6 (1) f) DSGVO (data processing based on a balance of interests). This also applies to profiling based on this provision within the meaning of Article 4 No. 4 DSGVO.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims.

Recipients of an objection

The objection can be made informally with the subject “Objection” stating your name, address and date of birth and should be addressed to:

Sarah Russ
Nerlichsweg 11
D-20535 Hamburg

Our contact information

The responsible party within the meaning of the DSGVO, other data protection laws applicable in the Member States of the European Union and other provisions of a data protection nature is:

Sarah Russ Photography, Nerlichsweg 11 , D-20535 Hamburg, Germany.
phone: + 49 173 2100 498
e-mail: info@sarahruss.de
Owner: Sarah Russ

Change of the privacy policy

We reserve the right to change the privacy policy in order to adapt it to changed legal situations or in the event of changes to the service or data processing. Changes in the privacy policy have no effect on the validity of other contracts or agreements.

Status of the privacy policy: 13.02.2019