Privacy Policy
Privacy Policy
Your trust is important to us. That is why we take data protection seriously and pay attention to appropriate security. We observe the applicable provisions of the Federal Data Protection Act (DSG), the Ordinance to the Federal Data Protection Act (VDSG), the Telecommunications Act (Fernmeldegesetz, FMG) and other applicable data protection regulations.
In order for you to know what personal data we collect from you and for what purposes we use it, please take note of the following information.
1. Person responsible for www.cortesiphotoart.com
Responsible for the website is:
CORTESI PHOTO ART
Reto Cortesi
Hardstrasse 69
8004 Zurich, Switzerland
2. Data processing when visiting the website (log file)
When you visit our website, our servers temporarily store each access in a log file. Without your intervention, the following data will be processed and stored by us until automatic deletion after 12 months at the latest:
- the IP address of the requesting computer
- the name of the owner of the IP address range (usually your Internet access provider)
- the date and time of access
- the website from which access was made (referrer URL), if applicable with the search term used
- the name and the URL of the retrieved file
- the status code (e.g. error message)
- the operating system of your computer
- the browser you use (type, version and language)
- the transmission protocol used (e.g. HTTP/1.1)
- Your user name from a registration/authentication
The data collected is only used for statistical analysis and to improve the website and is not linked to or stored with personal data. We reserve the right to subsequently check the log files if there are concrete indications of illegal use.
3. Data processing when using the contact form
If you contact us using the contact form on the website, we collect the following data from you (mandatory *):
- First name and last name*
- Email address *
- How did you hear about me
- Subject*
- Message*
We use this data exclusively to answer the questions you ask or to provide the services you request.
4. Data processing when shopping in the online shop
For the processing of the purchase contract we mandatorily collect the following data:
- First and last name*
- Postal and delivery address*
- E-mail address*
- Payment details (depending on the selected payment method)*
- Phone number
The provision of further data is voluntary.
Unless otherwise stated in this data protection declaration or unless you have given your separate consent, we will only use the aforementioned data to process the contract, namely to process your orders, to deliver the ordered products and to ensure correct payment.
5. Central storage
We store the data specified in the above-mentioned paragraphs in a central electronic data processing system (so-called CRM). The data concerning you is systematically collected, linked and evaluated for the purpose of processing your enquiries and handling our services. For this purpose, we use software from Pixieset Media Inc, Vancouver, Canada (https://pixieset.com).
6. Transfer of data to third parties
We will only pass on your personal data if you have expressly consented to this, if there is a legal obligation to do so or if this is necessary to enforce our rights, in particular to enforce claims arising from the contractual relationship. In addition, we pass on your data to third parties as far as this is necessary within the scope of the use of the website and the execution of the contract. The use of the data passed on for this purpose by the third parties is strictly limited to the stated purposes.
7. Transmission of personal data abroad
We are also entitled to transfer your personal data to third companies abroad, in particular subsidiaries, if this is necessary within the scope of the processing purpose. In doing so, the legal regulations for the transfer of personal data to third parties will of course be observed. The third parties are obliged to the same extent as we ourselves to protect data. If the level of data protection in a country does not correspond to that in Switzerland, we will contractually ensure that the protection of your personal data is equivalent to that in Switzerland at all times.
8. Note on data transfers to the USA
For the sake of completeness, we would like to point out to users who are resident or domiciled in Switzerland that surveillance measures are in place in the USA by US authorities which generally allow the storage of all personal data of all persons whose data has been transferred from Switzerland to the USA. This is done without any differentiation, restriction or exception based on the objective pursued and without any objective criterion that would make it possible to limit access to the data by the US authorities and its subsequent use to very specific, strictly limited purposes that could justify the interference associated with both access to and use of the data. Furthermore, we would like to point out that there are no legal remedies available in the United States for data subjects from Switzerland that would allow them to gain access to the data concerning them and to obtain its correction or deletion, or that there is no effective judicial protection against general access rights of US authorities.
We would also like to point out to users resident in Switzerland that, from Switzerland's point of view, the USA does not provide an adequate level of data protection, partly due to the issues mentioned in this section. For recipients of data that are based in the USA, we will ensure that your data is adequately protected, either through contractual agreements with these companies or by ensuring that these companies are certified under the Swiss-US Privacy Shield.
9. Cookies
Cookies help in many ways to make your visit to our website easier, more pleasant and more meaningful. Cookies are information files that your web browser automatically stores on the memory of your device when you visit our website. Cookies neither damage the memory of your device nor do they transmit personal data from you to us.
We use cookies, for example, to temporarily save your selected services and entries when you fill out a form on the website so that you do not have to repeat the entry when you open another subpage. Cookies may also be used to identify you as a registered user after you have registered on the website, so that you do not have to log in again when you access another subpage.
Most internet browsers accept cookies automatically. However, you can set-up your browser to not store cookies on your device or to explicitly inform you when a new cookie is activated. On the following webpages you will find explanations on how to configure cookies with the most common browsers:
- Microsoft Windows Internet Explorer
- Mozilla Firefox
- Google Chrome for Desktop
- Google Chrome for Mobile
- Apple Safari for Desktop
Disabling cookies may mean that you will not be able to use all the features of our website.
10. Google analytics
On our website, we use Google Analytics, a web analytics service provided by Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA, or Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses methods that enable an analysis of the use of the website, such as cookies. The information generated by the cookie about your use of our website such as
- Navigation path that a visitor follows on the website
- Time spent on the website or a subpage
- the page on which you leave the website
- the country, region or city from where access is made
- End device (type, version, color depth, resolution, width and height of the browser window)
- Returning or new visitor
- Browser type/version
- Operating system in use
- Referrer URL (i.e. the previously visited website)
- Host name of the accessing computer (IP address)
- Time of the server request
are usually transferred to a Google server in the USA and stored there. The IP address is shortened by activating the IP anonymization ("anonymizeIP") on this website before transmission within the member states of the European Union or to other signatory states of the Agreement on the European Economic Area or Switzerland. According to Google, the masked IP address transmitted by your browser within the scope of Google Analytics is not merged with other Google data. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. In these cases, we ensure through contractual guarantees that Google maintains an adequate level of data protection.
The information is used to evaluate the use of the website, to compile reports on the activities on the website and to provide further services associated with the use of the website and the internet for the purposes of market research and the design of the website in line with its requirements. This information may also be transferred to third parties if required by law or if third parties process this data on our behalf.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can prevent the collection of data generated by the cookie and relating to your use of the website (including your IP address) from being transmitted to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
11. Social media and your data
13.1 Own social media presence
On our website you will find links to social media networks. These are not plug-ins provided by the social media network, which already transmit data to the provider without user influence when the page is loaded. Behind the buttons to the social media networks there is only a link to our presence on the respective social media network. User data is not automatically transmitted to the social media network when the page is loaded.
The links lead to our presence in the following networks:
- Facebook of Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, and
- Instagram of Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA.
If you click on the link to one of our social media profiles, a direct connection is established between your browser and the server of the social network concerned. This informs the network that you have used your IP address to visit our website and clicked on the link. If you click on the link of a network while logged into your account on that network, the content on our site may be linked to your profile on the network, which means that the network can associate your visit to our site with your user account. If you wish to prevent this, you should log out before clicking on any links. In any case, an association is made when you log in to the relevant network after clicking on the link.
13.2 Social Plugins
On our website, we provide you with certain social media functionalities, in particular the sharing of product information on Facebook, the tweeting of product information etc. You will find the respective functionalities on the individual product pages under the heading "Share". If you click on the relevant social network icons, you will be linked to the social network in question to exercise the selected functionality, e.g. to share content on Facebook or to tweet on Twitter. To do this, however, you must be logged in to your user account or already be logged in.
We provide you with plugins of the following social networks:
- Facebook of Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland,
- Twitter of Twitter Inc., 795 Folson St., Suite 600, San Francisco, CA 94106, USA, and
- Pinterest of Pinterest Inc. at 651 Brannan Street, San Francisco, CA 94107, USA.
If you select one of the functionalities provided and click on the icon of the social network concerned, a direct connection is established between your browser and the server of the social network concerned. This informs the network that you have used your IP address to visit our website and clicked on the link. If you click on the link of a network while logged into your account on that network, the content on our site may be linked to your profile on the network, which means that the network can associate your visit to our site with your user account. If you wish to prevent this, you should log out before clicking on any links. In any case, an association is made when you log in to the relevant network after clicking on the link.
With regard to the purpose and scope of the collecting of data and the further processing and use of the data by the respective social network as well as your rights and setting options for the protection of your privacy, please refer to the data protection information of the social network.
12. Data security
We use suitable and appropriate technical and organizational security measures to protect your personal data stored with us against manipulation, partial or complete loss and unauthorized access by third parties. Our security measures are continuously adapted and improved in line with technological developments.
You should always keep your access data confidential and close the browser window when you have finished communicating with us, especially if you share your computer or device with others.
We take the internal data protection very seriously. Our employees and service providers are subject to strict confidentiality and are obliged to comply with any applicable data protection provisions.
13. Storage period
We only store personal data for as long as necessary to achieve the above-mentioned data processing purposes. Contract data will be stored by us for a longer period of time, as this is required by the applicable legal provisions. Storage obligations result, among other things, from accounting provisions and from tax provisions. According to these provisions, business communication, contracts and accounting documents must be stored for up to 10 years. If we no longer need this data for the performance of services for you, the data will be blocked. This means that the data may then only be used for very specific purposes, such as accounting and for tax purposes.
14. Your rights as a data subject
You can object to data processing at any time. You also have the following rights:
Right to information: You have the right to demand free access to your personal data stored with us at any time if we are processing it. This gives you the opportunity to check which personal data we process about you and that we use it in accordance with the applicable data protection regulations.
Right to correction: You have the right to have incorrect or incomplete personal data corrected and to be informed of the correction.
Right of deletion: You have the right to have your personal data deleted under certain circumstances. In individual cases, the right to deletion may be excluded.
Right to limit processing: You have the right, under certain conditions, to request that the processing of your personal data be limited.
Right of revocation: In principle, you have the right to revoke a given consent at any time with effect for the future. Processing activities based on your consent in the past will not become unlawful by your revocation.
15. Contact
If you have any questions regarding data protection on our website, would like to request information or request the deletion of your data, please contact us by sending an e-mail to mail@reto-cortesi.com.
You can send your request by letter to the following address:
CORTESI PHOTO ART
Reto Cortesi
Hardstrasse 69
8004 Zurich, Switzerland
Zurich: 1 June 2020