data protection

general information
As a user of our website, this privacy policy provides you with all the necessary information about how, to what extent, and for what purpose we or third-party providers collect and use data from you. I therefore ask you to read the following privacy policy carefully before you agree to it and continue to use the website. The collection and use of your data is carried out strictly in accordance with the provisions of the Federal Data Protection Act (BDSG) and the Telemedia Act (TMG). We are particularly committed to the confidentiality of your personal data and therefore work strictly within the limits set by legal requirements. The collection of this personal data is voluntary where possible. We also only pass this data on to third parties with your express consent. For particularly confidential data, such as payment transactions or your inquiries, we use SSL encryption to ensure a high level of security. However, we would like to take this opportunity to point out the general risks of using the Internet, over which we have no influence. In e-mail traffic in particular, your data is not secure without further precautions and may, under certain circumstances, be collected by third parties. We would like to point out that data transmission over the Internet (e.g., when communicating via email) may be subject to security gaps. Complete protection of data from access by third parties is not possible.

Information, deletion, blocking
You will receive information about the personal data we have stored about you, as well as the origin, recipient, and purpose of data collection and processing, free of charge at any time. You also have the right to request the correction, blocking, or deletion of your data. This does not apply to data that is retained due to legal regulations or required for proper business processing. To ensure that data can be blocked at any time, data is stored in a blocked file for control purposes. If data is not subject to a legal archiving obligation, we will delete your data at your request. If the archiving obligation applies, we will block your data. For all questions and concerns regarding the correction, blocking, or deletion of personal data, please contact the address stated in the imprint:
Andrea Mittermeier
Oberübermoos 148 A
d-83539 Pfaffing / Wasserburg a. Inn
EMail: hello(at)andreamittermeier.de

Cookies
We use cookies on our website. These small text files are stored on your PC by our server. They support the display of our website and help you navigate our website. Cookies collect data about your IP address, your browser, your operating system, and your internet connection. We do not link this information to personal data and do not share it with third parties. Under no circumstances will we use cookies to install malware or spyware on your computer. You can also use our website without cookies, although some of the displays and functions of our offering may not function as intended. If you wish to deactivate cookies, you can do so via special settings in your browser. Please use the help function to make the necessary changes. You can manage online advertising cookies using the following links: http://www.aboutads.info/choices for the USA
http://www.youronlinechoices.com/uk/your-ad-choices for Europe

Provision of paid services
If you wish to use the paid services offered on our website, we may need to collect additional data from you for billing and security reasons. This usually includes your name, a valid email address, and possibly your address and telephone number, as well as other information depending on the individual case. This may also include content that allows us to verify the data you have provided, such as your ownership of the email address provided. For legal reasons, we must ensure that you actually wish to receive the services offered and that we can properly invoice you for the service. To protect your data, we use the SSL encryption standard in payment transactions; this can be identified by the "https://" line in the browser.

Collection of access data
The delivery and display of content via our website technically requires the collection of certain data. When you access our website, these so-called server log files are recorded by us or the web space provider. These log files do not allow any conclusions to be drawn about you or your person. The corresponding information consists of the name of the website, the file, the current date, the amount of data, the web browser and its version, the operating system used, the domain name of your internet provider, the referrer URL (the page from which you came to our site), and the corresponding IP address. We use this data to display and deliver our content and for statistical purposes. This information supports the provision and continuous improvement of our offering. We also reserve the right to subsequently review the aforementioned data should there be suspicion of illegal use of our offering.

Third-party content and services
The offerings on our website may also include content, services and offerings from other providers that complement our offering. Examples of such offerings are maps from Google Maps, YouTube videos or graphics from third parties. Accessing these third-party services regularly requires the transmission of your IP address. This enables these providers to perceive and store your user IP address. We make every effort to only include third-party providers who use IP addresses solely to deliver content. However, we have no influence on which third-party provider stores the IP address. This storage can be used for statistical purposes, for example. Should we become aware of storage processes by third parties, we will inform our users of this fact immediately. In this context, please also note the specific data protection declarations of individual third-party providers and service providers whose services we use on our website. You can also find them in this data protection declaration.

Personal data
In line with data avoidance and data economy, we only collect personal data to the extent and for as long as it is necessary for the use of our website or as required by law. We take the protection of your personal data seriously and strictly adhere to the relevant statutory regulations and this privacy policy when collecting and processing personal data. If the purpose of data collection no longer applies or if the end of the statutory retention period is reached, the collected data will be blocked or deleted. Our website can usually be used without the disclosure of personal data. If we collect personal data - such as your name, address or email address - this data collection is voluntary. This data will not be disclosed to third parties without your express consent. Please note that data is generally not always transmitted securely on the Internet. Protection during data exchange cannot be guaranteed, especially in email traffic.

use and sharing of data
The data collected from you will only be passed on to third parties if this is necessary to fulfill a legal or official order, or if you request it yourself. Otherwise, your data will not be passed on to third parties – especially for marketing purposes. Unless otherwise specified elsewhere in this privacy policy for specific data sets – your data will be retained for as long as necessary to fulfill the contract or due to legal requirements.

The personal data you submit on the website will be used, on the one hand, to improve your experience while on this website and for troubleshooting. In any case, your data will not be processed for contact or marketing purposes. This requires separate consent, which you must provide at the appropriate point (e.g., when subscribing to the newsletter).

contact and inquiries
When you contact us (e.g., via contact form, email, telephone, or social media), the user's information will be processed to process the contact request and its handling in accordance with Art. 6 (1) (b) GDPR. User information may be stored in a customer relationship management system ("CRM system") or a similar request organization. We delete requests if they are no longer required. We review their necessity every two years; statutory archiving obligations also apply.

comments and contributions
When users leave comments or other contributions, their IP addresses may be stored for 7 days based on our legitimate interests within the meaning of Art. 6 (1) (f) GDPR. This is done for our security in case someone leaves illegal content in comments and contributions (insults, prohibited political propaganda, etc.). In this case, we ourselves may be held liable for the comment or contribution and are therefore interested in the identity of the author. Furthermore, we reserve the right to process user information for the purpose of spam detection based on our legitimate interests pursuant to Art. 6 (1) (f) GDPR.

Server Logfiles
Server log files are anonymized data collected when you access our website. This information does not allow any conclusions to be drawn about you personally, but is essential for technical reasons for the delivery and presentation of our content. Furthermore, it is used for our statistics and the continuous optimization of our content. Typical log files include the date and time of access, the amount of data, the browser used for access and its version, the operating system used, the domain name of the provider you have commissioned, the page from which you came to our website (referrer URL), and your IP address. Log files also enable a detailed investigation if there is suspicion of illegal use of our website.

SSL encryption
Our website uses SSL encryption when transmitting confidential or personal content from our users. This encryption is activated, for example, when processing payments and for inquiries you submit to us via our website. Please ensure that SSL encryption is activated on your end during such activities. The use of encryption is easy to recognize: the display in your browser line changes from "http://" to "https://." Data encrypted via SSL cannot be read by third parties. Only transmit your confidential information with SSL encryption activated, and contact us if in doubt.

Objection to advertising emails
As part of the legal imprint requirement, we are required to publish our contact details. These details are sometimes used by third parties to send unsolicited advertising and information. We hereby object to any transmission of advertising material of any kind not expressly authorized by us. We also expressly reserve the right to take legal action against the unwanted and unsolicited transmission of advertising material. This applies in particular to so-called spam emails, spam letters, and spam faxes. We point out that the unauthorized transmission of advertising material may constitute violations of competition law, civil law, and criminal law. Spam emails and spam faxes in particular can lead to high claims for damages if they disrupt business operations by overloading mailboxes or fax machines.

links to other websites and social media
This website contains links to other websites; these are provided for information purposes only. These websites are not under my control and are therefore not subject to the provisions of this privacy policy. If you activate a link, it is possible that the operator of that website will collect data about you and use it in accordance with its privacy policy, which may differ from ours.

This website also offers the opportunity to interact with various social networks via plugins.
THESE ARE:
• Facebook, OPERATED BY Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
• Instagram, OPERATED BY Instagram LLC, 1601 Willow Road, Menlo Park CA 94025, USA
• Google+, OPERATED BY Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
• Pinterest, OPERATED BY Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103, USA
• Youtube, OPERATED BY Youtube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA
• Vimeo, OPERATED BY Vimeo Inc., Attention: Legal Department, 555 West 18th Street New York, New York 10011, USA

If you click on a plugin from one of these social networks, it will be activated and a connection to the respective server of that network will be established. I have no influence on the scope and content of the data transmitted to the respective operator of the respective social network by clicking on the plugin. If you would like to learn more about the type, scope, and purpose of the data collected by the operators of these social networks, please read the privacy policy of the respective social network.

Andrea Mittermeier operates customer galleries and a web shop under the domain pic-time.com. pic-time.com is operated by the American company Pic-Time Ltd. Andrea Mittermeier uses Pic-Time's infrastructure and software to present and order digital images. During the ordering process, digital images are uploaded to an encrypted online gallery. Your IP addresses are temporarily stored by the Pic-Time web server by default. Your email addresses are stored by Pic-Time to send you the download link to your images. Pic-Time's privacy policy applies and can be found at: https://www.pic-time.com/#PrivacyPolicy

Google Fonts
We integrate the fonts ("Google Fonts") of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy Policy: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.