Data Protection Policy

for the website www.cramers-gallery.com and in relation to the acquisition of licences to use the images displayed there.

It is the policy of Cramers Gallery of Nature S.a.g.l. to respect the privacy of its online visitors. Protecting your personal data is something we at Cramers Gallery of Nature S.a.g.l. take extremely seriously.

1. Controller

The controller (person who determines the purposes for which your personal data are processed) is:

Cramers Gallery of Nature S.a.g.l.
Via Monte Brè 6 b
6605 Locarno-Monti
Switzerland

E-mail: info@cramers-gallery.com

Tel.: +41-91-75167-54
Fax: +41-91-75167-55

2. Personal data

Personal data means all information which you disclose to us on our website or in dealings with us and which can be used to identify you personally. Examples include your name, physical address, e-mail address and IP address.

We process this data in accordance with the applicable laws exclusively for the purposes stated below and within the scope stated below.

3. Collection, processing and use of contractual data

3.1 Acquisition of licences

If you wish to acquire licences to use images available via our online image service, then, in order for us to conclude the necessary licence agreement with you and process your order, we need you to provide us with certain personal details. You can do this via telephone, fax, e-mail or our online contact form. The personal details in question are: your name, your complete physical address and your e-mail address for delivery of the images that you order. We will use this data exclusively for the purposes of processing your order and granting and managing your licences to use our images. The legal basis for this processing of your personal data is Art. 6(1)(b) of the EU General Data Protection Regulation (GDPR).

We are required by commercial and taxation law to store your address, payment and order data for a period of ten years beyond the end of the contract term. At the end of this retention period, your data will be deleted unless you explicitly consent to their continued use. In addition, two years after the end of the contract term we will restrict the processing of your personal data. From that point forward, your data will be usable only for the purpose of compliance with the above-stated statutory obligations.

3.2 Enquiries by telephone, fax, e-mail or contact form

If you contact us via telephone, fax, e-mail or our contact form, the details you provide to us in the course of the contact (your name, your physical address, your e-mail address and, depending on the circumstances, your telephone or fax number) will be stored by us for the purpose of responding to your enquiry. The legal basis for this processing of your personal data is Art. 6(1)(b) GDPR. We will delete all of these data once they are no longer required for this purpose, unless statutory data retention duties apply, in which case we will restrict their processing.

4. Usage data: Processing of data when you access the website “cramers-gallery.com”

You can use our website without having to register or log in.

4.1 Storage of access metadata in server log files

If you merely browse our website without ordering services or otherwise actively disclosing information, we will collect only such personal data as your browser sends to the server on which our website is hosted. These data are stored temporarily in what are known as server log files. Specifically, whenever you browse our website, we collect the following types of data, which are required for technical reasons relating to our ability to display our website on your computer and to ensure the problem-free operation and security of our website (legal basis is Art. 6(1)(f) GDPR):

• IP address of the requesting computer/end device

• date and time of server request

• time zone difference relative to Greenwich Mean Time (GMT)

• content of the request (specific page requested)

• access status of the web server (file transferred, file not found, command not executed, etc.)

• volume of data transferred in each case

• the website from which the request originated

• browser type and version

• operating system of the end device used to make the request

These data are collected exclusively in anonymised form and can therefore not be used to identify specific persons. The data collected are not combined or cross-matched with other data sources that may potentially be used to identify specific persons. The data are used exclusively for statistical purposes and are automatically deleted after four weeks.

The servers which host the website “www.cramers-gallery.com” and which store the personal data collected and processed when you visit our website are located in Hamburg, Germany, and are operated by a provider of hosting services.

4.2 Use of cookies

We use cookies in order to enhance your user experience of our website and to enable you to use certain functions. Cookies are small data files that are stored on your end device. The legal basis for this is Art. 6(1)(f) GDPR.

Cookies can contain only information which we ourselves have sent to your end device for the purpose of collecting certain data. They cannot be used to access private data. The data collected via cookies includes your browser type and version, the URL clickstream (the pages on our website that you visit and the order in which you visit them), the date and time of your visit, and the cookie number. Thus, your acceptance of the cookies used on our website will not give us access to your private, personal information, but it will help us to identify your end device. We use the information collected by cookies in order to analyse patterns and structures of usage on our website, with a view to optimising the website by improving its content or personalization and making it easier to use.

Certain of the cookies used by us are automatically deleted at the end of your browser session, i.e. when you close your browser (session cookies). Other cookies remain on your end device for a defined expiration period and enable us to recognise your browser the next time you visit our website (persistent cookies). Persistent cookies are automatically deleted at the end of their expiration period. Expiration periods vary from cookie to cookie. You can delete these cookies via the settings area of your browser.

You can set your browser so that you receive notifications each time a site wants to set cookies. You will then be prompted to allow or block cookies on a case-by-case basis. Alternatively, you can set it so that only certain types of cookies are allowed or so that all cookies are blocked by default. Please be aware that if you do not allow cookies from our website, this may limit or impair your ability to use some of the site’s functionality. Most browsers (Firefox, Chrome, Internet Explorer, Safari, etc.) accept cookies by default. In your browser settings you can allow or block temporary and persistent cookies separately.

5. Your rights as a data subject

As a data subject, you have the following rights against us:

• right of access (Art. 15(1) and (2) GDPR)

• right to rectification (Art. 16, sentence 1 GDPR),

• right to erasure (Art. 17 GDPR),

• right to restriction of processing (Art. 18 GDPR),

• right to object to processing of personal data (Art. 21 GDPR), and

• right to data portability (Art. 20 GDPR).

To exercise these rights, please contact the controller named in clause 1 above.

You also have the right to lodge complaints with a supervisory authority regarding the processing of your personal data.

6. Objection to processing of your data

Where processing of your personal data by us is based on a weighing-up of interests (the requirements of our legitimate business interests vs. your fundamental rights and freedoms – Art. 6(b)(f) GDPR), then you have the right to object to that processing. If you choose to make such an objection, please also outline the reasons why you believe we should not be processing your personal data. If we receive a reasoned objection from you, we will review the circumstances and then either cease/modify the data processing in question or outline to you our compelling legitimate grounds for continuing the processing.

To exercise your right to object, please contact the controller named in clause 1 above.

7. Questions regarding data protection

If you have any questions regarding our data protection policy, please do not hesitate to contact us using the contact details provided in clause 1 above.