Our Privacy policy can be found in our Privacy policy statement
Last revised on 2023/12/18
This privacy policy has been created to inform you, as a visitor to our website or user of our services, about how we use your personal data and the legal basis on which we do so. Personal data is information relating to an identified or identifiable individual (hereinafter referred to as "personal data" or "personal information").
Please read this Privacy Policy carefully as it sets out your rights and obligations with respect to smartphoto. Please note that this Privacy Policy may be revised from time to time. The date of the last revision is indicated at the top of the document.
Responsible for the processing of your personal data is smartphoto group NV (hereinafter referred to as "smartphoto" or “we”), the parent company of smartphoto AG, having its registered office at Kwatrechtsteenweg 160, 9230 Wetteren, Belgium, and registered with the K.B.O. (Central Database for Enterprises) under number 0405.706.755.
We collect your Personal Data primarily to provide the services of smartphoto (hereinafter "smartphoto services"), as well as to provide you with the best possible experience on the smartphoto website and application.
We also collect and process your Personal Data to keep you informed of news, offers and promotions from smartphoto.
We process your Personal Data based on the following legal bases:
Your Personal Data will never be made available to other parties. Only a limited number of employees within smartphoto that need access to your data for delivering our services, will actually have access to your data.
We do not retain your Personal Data any longer than is necessary to fulfil the purpose for which it was collected. If you do not want your data to be kept during these retention periods, you can apply your right to erasure.
For any processing of your Personal Data, you can exercise the following rights by sending an email to dpo.ch@smartphoto.com.
You can also exercise the following rights with limited commitment, depending on the legal basis of processing and legal retention periods:
The collection and processing of Personal Data is subject to strict conditions. Smartphoto acts in accordance with:
This privacy policy applies to the use of your personal information in connection with our smartphoto services, i.e. services related to visiting the smartphoto website, managing your personal images and ordering smartphoto products. You are not required to provide us with any personal information. However, we may not be able to provide you with the requested services if you choose not to provide us with such personal information.
Data
Details
Context
Category 1:
Data related to your use of the website without registration
Category 2:
Data related to your smartphoto account
Category 3:
Data related to the ordering and delivery of products
Category 4:
Data related to the newsletter, your contact and/or communication with us via the smartphoto website
Category 5:
Data related to the use of images and texts
Category 6:
Data collected from cookies on the smartphoto website
Smartphoto primarily collects and processes your data to be able to offer you the smartphoto website and the associated services.
Furthermore, we only use your Personal Data for the following purposes:
Data
Legal basis
Purpose
Category 1:
Legitimate interest
To improve our website for the purpose of remembering the preferences you have set.
Category 2:
Execution of the agreement
or
Explicit consent
To be able to offer the services of smartphoto with regard to your account.
Category 3:
Execution of the agreement
To be able to offer the services of smartphoto with regard to the order you have made.
Category 4:
Explicit consent
To be able to provide an answer to your questions to smartphoto. To keep you informed of news, actions and promotions of smartphoto. This is based on the data that you actively leave behind on the smartphoto website.
Category 5:
Execution of the agreement
To be able to offer and optimise the services of smartphoto with regard to your account and your orders.
Category 6:
Legitimate interest
or
Explicit consent
To remember your preferences when you visit our website.
If smartphoto obtains your personal data in connection with the sale of smartphoto products or the provision of smartphoto services, we may use your contact details to send you promotional material about similar products and/or services. This is done on the basis of our legitimate interest.
If we have not obtained your personal data in connection with the sale of smartphoto products or the provision of smartphoto services, we may use your contact details for promotional purposes only if you have given your prior consent.
Smartphoto may share your personal information with its processors for the purpose of direct marketing of smartphoto and its products and/or services. However, we will only send you other promotional material if you have given your prior consent.
You may at any time object to receiving promotional material without giving reasons. You may do so by clicking on the "unsubscribe" button at the bottom of any promotional email or by sending an email to contact.en@smartphoto.ch.
Smartphoto will never pass on your personal data to third parties without your consent, with the exception of:
The data passed on to third parties are adequately secured by appropriate measures such as encryption and pseudonymisation, so that your privacy is safeguarded at all times, and by concluding processing agreements where necessary.
Smartphoto will make reasonable efforts to inform you in advance of the fact that smartphoto discloses your personal data to the above-mentioned parties, but you also acknowledge that this is not technically or commercially feasible in all circumstances.
Smartphoto may have to disclose your Personal Data as a result of a court order or to comply with other mandatory laws or regulations. Smartphoto will make reasonable efforts to inform you accordingly in advance, unless this is subject to legal restrictions.
The Personal Data is stored and processed by us for the period for which we are legally obliged to do so or for as long as this is necessary to fulfil the purposes of the processing, or for the contractual relationship between you and smartphoto.
You have the option at any time to stop using the smartphoto services and/or delete your account on the smartphoto website. If you delete your account, you will be given the choice to save or delete some data. If you wish to delete your data, this means that you exercise your right to erasure. If you do not exercise your right to erasure, your Personal Data will be retained for the following periods:
Category
Retention period
1
The Personal Data from category 1 will be stored by smartphoto during the duration of your visit to the website, and possibly another 24 hours.
2
The Personal Data from category 2 will be stored by smartphoto for the duration of the customer relationship, and will be deleted 2 years after the termination of the customer relationship, upon deletion of the account.
3
The Personal Data from category 3 will be stored by smartphoto for the duration of the customer relationship, and will be deleted 2 years after the last order you placed with smartphoto.
4
The Personal Data from category 4 will be stored by smartphoto for the duration of the customer relationship, and will be deleted 2 years after the last communication with you.
5
When the Category 5 Personal Data is part of a product that you ordered, then this Personal Data uploaded by you, will be stored by smartphoto for a period of 60 days after your order of the relevant product, regardless of whether or not you have an account on our website.
When the Category 5 Personal Data were uploaded by you on the smartphoto website but you have not yet proceeded to ordering a product, the retention period depends on whether you have an account on our website or not:
6
The cookies are stored in accordance with the provisions of our Cookie Policy.
You have the right to access your Personal Data at any time, as well as to be informed about the use we make of your Personal Data.
It is up to you to decide whether or not to provide us with certain personal information. You may also change the information in your user account on the smartphoto website at any time. You are also free to ask us to amend your personal data at any time.
You may also request that the processing of your data be restricted if you believe that your personal data is incorrect. You also have the right to ask smartphoto to delete your data if it cannot be made anonymous.
Please note, however, that if you do not provide certain personal information or request that it be deleted, we may not be able to provide you with our services or provide them in the best possible manner.
You also have a right to object to the processing of your Personal Data for serious and legitimate reasons. Although smartphoto will not use your Personal Data for direct marketing purposes without your prior consent, you also have the right to object to the use of your Personal Data for direct marketing purposes. In this case, no specific justification will be requested.
You have the right to obtain your Personal Data processed by us in a structured, standard and machine-readable format and/or to transfer it to other data controllers.
You have the right to withdraw your prior consent to the processing of your Personal Data, even if the processing of your Personal Data was based on your consent.
You have the right to ask us not to be the subject of a decision based solely on automated processing, including profiling, which produces legal effects concerning you, or significantly affects you. This does not include data processing to debt collection agencies, which receive personal data during an order placement for the purpose of a credit check.
You can exercise your rights by contacting us, with appropriate identification provided, by email to dpo.ch@smartphoto.com or by post to smartphoto AG, Salinenstrasse 59, 4133 Pratteln, Switzerland.
You have the right to submit a complaint with a competent supervisory authority if you have concerns about whether the processing of your personal data complies with the law.
This does not exclude the possibility of a claim in a civil court. If you would suffer damage as a result of the processing of your Personal Data, you can make a claim for compensation.
We have developed technical, administrative and organisational security measures to prevent the destruction, loss, falsification, modification, unauthorised access or accidental disclosure to third parties of your Personal Data, as well as any unauthorised processing of this data. However, in the event that this should occur and it concerns your Personal Data, smartphoto will inform you about the breach, including a description of the potential impact and a recommendation to limit the possible negative consequences of the breach.
Smartphoto also provides a secure, user-controlled environment for using the smartphoto website and our smartphoto services. We securely store your Personal Data on our servers located within the European Economic Area. Under no circumstances can smartphoto be held liable for any direct or indirect damage resulting from incorrect or unlawful use by a third party of the Personal Data.
In addition, you bear the responsibility for maintaining privacy and security when you use the smartphoto website or our smartphoto services. For example: by preventing all unauthorised access to the smartphoto services on your behalf. You are solely responsible for the use of the smartphoto website or our smartphoto services on your devices, your IP address and identification data, as well as for their confidentiality.
For information about the collection and processing of personal data when using our websites, particularly in connection with cookies and similar technologies, please also see our Cookie Policy.
This General Data Protection Policy shall be governed, interpreted and implemented in accordance with Swiss law, which shall apply exclusively. Any disputes that may arise from the interpretation or application of this Privacy Policy shall be subject to the exclusive jurisdiction of the courts competent for the company responsible for data processing. In the event of a conflict between the German and English versions of the Privacy Policy, the German version shall prevail.