Data Protection Information Instyle Productions GmbH
Data Protection Information Instyle Productions GmbH
Stand: 19. July 2018
1. Subject Matter and Scope of Application
We take the protection of your personal data very seriously. With this data protection information we inform you which personal data we collect via our websites and how and for what purposes they are processed. We always treat your personal data in accordance with the statutory data protection regulations and this data protection declaration.
This data protection information is applicable to our websites instyleproductions.com and instyle-models.com (hereinafter referred to as the “Website”).
2. Responsible Body
Instyle Productions GmbH
Tel: +49 (0) 89/ 18 93 48 799
Fax: +49 (0) 89/ 18 93 48 790
3. Data Protection Officer
Contact details data protection officer: firstname.lastname@example.org
Anyone concerned can contact our data protection officer directly at any time with any questions or suggestions regarding data protection.
4. Visit the Website
Each time you access our website, our system automatically collects data and information from the computer system of the accessing computer. In order for the pages to be displayed in your browser, the IP address of the terminal device you are using must be processed. In addition, there is further information about the browser of your terminal device.
We are obliged under data protection law to also guarantee the confidentiality and integrity of the personal data processed with our IT systems. The data is also used to correct errors on the website.
For these purposes the following data will be logged:
• IP address of the calling computer
• Operating system of the calling computer
• Browser version of the calling computer
• Name of the retrieved file
• Date and time of retrieval
• Transferred amount of data
• Referring URL
This data is deleted on a regular basis. Our website is hosted by a service provider in the European Economic Area on the basis of order processing in accordance with Art. 28 DSGVO.
The legal basis for this data processing is Art. 6 para. 1 lit. f DSGVO. Our overriding legitimate interest is the operation of this website and the implementation of the protection goals of confidentiality, integrity and availability of data.
5. Establishing Contact and Customer Database
If you contact us to request information or an offer, the information you provide will be stored for the purpose of processing your request. We need the information requested in the contact form on the website in order to process your enquiry, address you correctly and send you an answer.
Enquiries and bookings are stored in our CRM system. This data can be used by us for direct marketing measures. You can object to such use for direct advertising at any time. Details about your right of objection can be found below under “Right of objection”.
The CRM system is regularly checked to see whether data can be deleted. If data in the context of a customer or prospective customer relationship is no longer necessary or an opposing interest of the customer outweighs, we will delete the relevant data, unless there are any legal storage obligations.
The legal basis for this storage and processing is Art. 6 para. 1 lit. f DSGVO. Our overriding legitimate interest is the maintenance of communication with our customers, interested parties, suppliers and models, the maintenance of our customer relationships and the implementation of direct marketing measures. If the purpose of establishing contact is to conclude a contract, the additional legal basis for processing is Art. 6 Para. 1 lit. b DSGVO.
6. Agency Services
We process the data of our customers, suppliers and models within the scope of the provision of our contractual services. This may include inventory data (e.g. name, address), contact data (e.g. e-mail address, telephone number), content data (e.g. photos, videos), contract data (e.g. subject matter of contract, duration), payment data and data collected and/or processed for the provision of services (e.g. data on the performance of marketing campaigns).
The legal basis for this storage and processing is the fulfilment of the contract or the implementation of pre-contractual measures pursuant to Art. 6 para. 1 lit. b DSGVO.
7. Model Application and Model Mediation
If you apply to us as a model via our application form, the information you provide, including uploaded images, will be used by us to process your application and to contact you for further steps in the application process. The data requested as mandatory fields are mandatory in order to process your application.
When we accept you as a model, we collect additional information to fulfill the contract, such as payment information.
The legal basis for this processing of your data is Art. 6 para. 1 lit. b DSGVO.
If we include you as a model in our model file, your data will be presented to our customers and interested parties with your consent on our website and by means of your Sedcard (both electronically as PDF and occasionally even “analogue” in printed form).
The legal basis for this processing and publication of your data is your express consent pursuant to Art. 6 para. 1 lit. a DSGVO.
On the one hand, we use so-called session cookies, which are only stored for the duration of the respective visit to our website (e.g. to enable the storage of your shopping basket contents). In a session cookie, a randomly generated unique identification number is stored, a so-called session ID. Session cookies are automatically deleted after leaving our website.
In addition, we use temporary cookies which we store on your terminal for a certain period of time (so-called first party cookies). If you visit our site again, it will automatically be recognized that you have already been with us and which inputs and settings you have made so that you do not have to enter them again.
You have the option of preventing the setting of cookies by making the appropriate settings in your browser. However, we would like to point out that the use of our Internet pages may then only be possible to a limited extent. Cookies do not install or start any programs or other applications on your computer.
The legal basis for the processing of personal data using cookies is Art. 6 para. 1 f) DSGVO. Our overriding legitimate interest is the operation, analysis and optimisation of our website and our customer interactions.
We use remarketing/retargeting services from external service providers (hereinafter referred to as “Marketing Services”).
These marketing services allow us to target advertisements on our site and on our site to only show you ads that potentially match your interests. They also measure the effectiveness of advertisements in reaching users.
A cookie, web beacon or tracking pixel is used in your browser to record which websites on which such marketing services are active have visited you and what content you have been interested in there. In addition, additional information such as IP address, browser, operating system time stamp, referring website are collected. If you subsequently visit other websites on which such marketing services are active, advertisements tailored to your interests may be displayed.
The legal basis for this data processing within the scope of marketing services is Art. 6 Para. 1 lit. f DSGVO. Our overriding legitimate interest is the analysis, optimisation and economic operation of our website and our customer interactions.
You can prevent cookies from being saved by changing the settings in your browser. If you wish to object to interest-related advertising through marketing services, you can use the setting and opt-out options provided by Google: http://www.google.com/ads/preferences
Further information on the use of data by Google, setting and opposition possibilities can be found here:
• Google’s use of data when you use the websites or apps of our partners: https://www.google.com/intl/de/policies/privacy/partners;
• Use of data for advertising purposes: http://www.google.com/policies/technologies/ads;
• Manage information Google uses to display advertisements to you: http://www.google.de/settings/ads.
When DoubleClick is used, personal data is transferred to a third country outside the EU. The service provider has a Privacy Shield certification, available here: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active. Accordingly, there are suitable guarantees for data transfer in accordance with Art. 46 DSGVO.
10. Web Analytics
We use web analytics services on our website or parts of our website to understand how our website is used by its visitors and to improve the overall look and feel of the website.
The legal basis for this data processing when using web analytics is Art. 6 para. 1 lit. f DSGVO. Our legitimate interest is the analysis, optimisation and economic operation of our website and our customer interactions.
We use the web analytics service Google Analytics with IP anonymization. Google Analytics is a web analysis service of Google Inc., USA (“Google”). Google Analytics sets cookies. Within the framework of IP anonymisation, the IP address collected by Google from users within the European Economic Area is shortened before it is transmitted to the USA. Only in exceptional cases will the unabridged IP address be transmitted to Google in the USA and abbreviated there. The transmitted IP addresses are not combined with other data from Google.
When Google Analytics is used, personal data is transferred to a third country outside the EU. There is an agreement on order processing in accordance with Art. 28 DSGVO. The service provider has a Privacy Shield certification, available here: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active. Accordingly, there are suitable guarantees for data transmission in accordance with Art. 46 DSGVO.
The videos embedded on our website are made available via a plugin from YouTube, LLC, in the USA (“YouTube”).
We use the “Advanced Privacy Settings” for embedded YouTube videos, i.e. YouTube does not set cookies. However, when you visit a website with the YouTube plugin, a connection to YouTube is inevitably established and your IP address is transmitted to YouTube. Even if you start a video by clicking on it, this information is transmitted to YouTube. If you are logged into YouTube, the information you provide may be linked to your account.
For more information on YouTube’s privacy practices, visit the YouTube Privacy and Security Center at https://support.google.com/youtube/topic/2803240?hl=de&ref_topic=6151248
YouTube, as a subsidiary of Google, is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with European data protection law: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
The legal basis for this data processing within the framework of YouTube use is Art. 6 Para. 1 lit. f DSGVO. Our overriding legitimate interest is the optimisation and economic operation of our website.
12. Google Maps
We use the Google Maps (API) service of Google LLC in the USA on our website. Google Maps enables the display of interactive maps. When you access subpages of the website on which Google Maps is used, information about your use of our website (such as your IP address) is transmitted to and stored by Google on servers in the United States.
When Google Maps is used, personal data is transferred to a third country outside the EU. Google has a Privacy Shield certification, available here: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active. Accordingly, there are suitable guarantees for data transfer in accordance with Art. 46 DSGVO.
The legal basis for this data processing when using web analytics is Art. 6 para. 1 lit. f DSGVO. Our overriding legitimate interest is the analysis, optimisation and economic operation of our website and our customer interactions.
In order to display the contents of our website correctly and graphically appealing across all browsers, we use the Google Webfonts font library of Google LLC in the USA (https://www.google.com/webfonts/) on this website.
Google Web Fonts are transferred to your browser’s cache to avoid multiple loading. If the browser does not support Google Web Fonts or does not allow access, content will be displayed in a default font.
Calling script libraries or font libraries automatically triggers a connection to the library operator. It is possible that Google may collect your personal data, in particular your IP address.
You can prevent the use of such libraries and the associated data transmission by installing a Java script blocker (e.g. www.noscript.net).
Google is Privacy Shield certified and can be found at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active Accordingly, there are appropriate guarantees for data transmission in accordance with Art. 46 DSGVO.
Legal basis for this data processing Art. 6 para. 1 lit. f DSGVO. Our overriding legitimate interest is the optimisation and economic operation of our website and our customer interactions taking place via it.
We use the reCAPTCHA service of Google LLC in the USA. This service is used to differentiate whether the input into a form is made by a natural person or is abused by mechanical and automated processing. As part of reCAPTCHA, your IP address and other data required by Google for the reCAPTCHA service will be transmitted to Google.
Further information on data processing by Google can be found in Google’s data protection information: https://www.google.com/policies/privacy.
When reCAPTCHA is used, personal data is transferred to a third country outside the EU. The service provider has a Privacy Shield certification, available here: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active. Accordingly, there are suitable guarantees for data transfer in accordance with Art. 46 DSGVO.
The legal basis for this data processing when using reCAPTCHA is Art. 6 para. 1 lit. f DSGVO. Our overriding legitimate interest is the security of our website and protection against spam.
15. Social Media-Buttons
On our website, various social media buttons of the social media networks Facebook, and Instagram are integrated, recognizable by their logos.
If you click on one of these social media buttons, you will be redirected to our pages at the respective social media network. In this case, the provider of the respective social media network receives the information that your browser has called up the corresponding page of our website, even if you do not have a profile on the respective social media network or are not logged in there. This information (including your IP address) is transmitted directly from your browser to a server of the respective provider. If you click on a social media button and are either logged in to the respective social media network or then log in to the page of the respective social media network, the transmitted information can be assigned to your account at the social media network.
For information on the purpose and scope of data collection and processing by the providers of the respective social media networks, the provider identification, a contact option and your rights and settings regarding data protection, please refer to the respective data protection information of the providers of the social media networks.
The legal basis for the integration and use of the social media buttons is Art. 6 Para. 1 lit. f DSGVO. Our predominant legitimate interest is the marketing of our offers and our website.
16. Social Media-Pages (“Fanpages”)
We maintain publicly accessible profiles on the social media networks Facebook, Instagram, YouTube and Google+ (“Social Media Pages” or “Fan Pages”).
If you visit one of our social media pages and are logged into the respective social media network, the provider of the respective social media network can analyze your usage behavior and assign the information collected to your account at the social media network and enrich it there. Even if you are not logged in or if you do not have an account with the respective social media network, personal data may be collected by the provider of the respective social media network, for example your IP address or data collected via a cookie.
The operators of the social media networks can use this data to create user profiles. Your user profile can then be used to display interest-based ads both on social media network websites and on other websites.
If you visit one of our social media pages, we are jointly responsible with the provider of the social media network for the collection and processing of your personal data there. With regard to information about the collection and processing of your personal data that takes place there, we refer you to the data protection information of the social media networks. Further information is not available to us. The data protection information of the social media networks can be found here:
We will be happy to provide you with information on suitable guarantees for data transfer to third countries in accordance with Art. 46 DSGVO at any time on request.
You can assert your rights of data subjects in accordance with Chapter III of the DSGVO (right to information, correction, deletion, restriction of processing, data transferability, etc.) both against us and against the provider of the respective social media network. In this context, we would like to point out that we can only influence the processing of personal data and the implementation of the rights affected within the framework of our social media pages within the scope of the possibilities made available to us by the respective provider.
The legal basis for our use of social media pages is Art. 6 Para. 1 lit. f DSGVO. Our predominant legitimate interest is the presence and marketing of our products and services on the Internet.
We collect and process personal data of applicants for the purpose of processing the application process. If an applicant submits his or her application documents to us electronically, they are processed electronically.
If we conclude an employment contract with an applicant, the data transmitted will be processed for the purpose of carrying out the employment relationship in compliance with the statutory provisions. If no employment contract is concluded with the applicant, the application documents will be deleted immediately after completion of the application procedure, provided that deletion does not conflict with any overriding legitimate interest, such as the defence of claims or a function to preserve evidence in accordance with the General Equal Treatment Act (Allgemeines Gleichbehandlungsgesetz – AGG).
The legal basis for this storage and processing is the fulfilment of the contract or the implementation of pre-contractual measures pursuant to Art. 6 para. 1 lit. b DSGVO.
18. Age Restriction
This website is not intended or designed for use by children under the age of 16. We do not knowingly collect personally identifiable information from or about anyone under the age of 16.
19. Receiver of Data
Within our company, those internal departments or organisational units receive your data which they need to fulfil their tasks, to fulfil contracts with you if necessary, for data processing with your consent or to safeguard our overriding legitimate interests.
Data will only be passed on to third parties within the framework of legal requirements. We will only pass on your data to third parties if, for example, this is necessary for contractual purposes on the basis of Art. 6 Para. 1 b) DSGVO or to safeguard our overriding legitimate interest pursuant to Art. 6 Para. 1 f) DSGVO in the effective performance of our business operations.
If we use service providers or third-party providers in the provision of the website and/or our services, we will take appropriate legal precautions and take appropriate technical and organisational measures to ensure the protection of your personal data.
If we use content or tools from service providers or third parties in the provision of the Website and/or our services and their registered office is in a third country, data will be transferred to a third country on a regular basis. Third countries are countries in which the DSGVO is not a directly applicable law, i.e. countries outside the EU or the European Economic Area. Data will only be transferred to third countries if there is either an adequate level of data protection, consent or other legal permission, in particular a suitable guarantee pursuant to Art. 46 DSGVO.
20. Information to Ensure Fair and Transparent Processing
20.1 Your Rights
You have the right to free information about your stored personal data, their origin and recipient and the purpose of data processing and a right to correction, blocking or deletion of this data. You also have the right to limit the processing and to object to the processing.
You also have the right to have your data, which we process automatically, handed over to yourself or to a third party in a common, machine-readable format.
To assert your rights, please contact us using the contact details provided above for the responsible office.
You also have the right to lodge a complaint with the relevant data protection supervisory authority. The Bavarian State Office for Data Protection Supervision (https://www.lda.bayern.de/) is the competent supervisory authority for data protection issues.
Many data processing operations are only possible with your express consent. You can revoke your consent at any time. For this purpose, an informal e-mail notification to us is sufficient. The legality of the data processing carried out until the revocation remains unaffected by the revocation.
As far as we process your data, as explained in this data protection information, to protect our overriding legitimate interests, you can object to this processing with effect for the future. To do so, please contact us at the contact details given for the responsible office.
In principle, you are only entitled to this right of objection if there are reasons arising from your particular situation (Art. 21 para. 1 DSGVO). After exercising your right of objection, we will not process your personal data further for these purposes unless we can prove compelling reasons for processing worthy of protection which outweigh your interests, rights and freedoms, or if the processing serves the assertion, exercise or defence of legal claims.
If your personal data is processed for the purpose of direct marketing, you may exercise your right of objection at any time (Art. 21 para. 2 DSGVO) and we will not process your personal data for the purpose of direct marketing, regardless of the reasons for the objection.
20.2 Mandatory Information
The provision of personal data is neither required by law nor by contract, and you are not obliged to provide personal data. However, the provision of personal information is required for the conclusion of a contract to the extent that certain details are mandatory in order to be able to conclude a contract.
20.3 Automated Decision Making
We do not perform automated decision making, including profiling.
21. Storage and Deletion
We adhere to the principles of data avoidance and data economy. We therefore only store your personal data for as long as is necessary to achieve the purposes stated here or as required by the storage periods provided for by law.
If the storage purpose no longer applies or if a storage period provided for by law expires, the personal data will be blocked or deleted routinely and in accordance with the statutory provisions.
22. Technical and Organisational Data Security Measures
We take organizational, contractual and technical security measures in accordance with the state of the art to ensure that the provisions of the data protection laws are complied with and to protect the data processed by us against accidental or intentional manipulation, loss, destruction or against access by unauthorized persons.
Our website uses SSL encryption for security reasons and to protect the transmission of confidential content, such as orders, inquiries or payment data, which you send to us.
We reserve the right to amend this data protection declaration from time to time so that it always complies with current legal requirements or in order to implement changes to our services in the data protection declaration, e.g. when introducing new services. Your renewed visit will then be subject to the new data protection declaration.