Data Protection Declaration

General introduction:

We take the protection of your personal data very seriously and want to ensure you are safe when visiting our website. Our data protection practice follows in particular the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG-new) and the Digital Services Act (DDG). At this point we would like to inform you about the type, scope and purpose of the processing of your personal data. Please be advised that this data protection declaration only refers to our website and does not apply to third-party websites to which we refer in the form of links.

Object of protection:

The object of protection is personal data. This involves all information relating to an identified or identifiable natural person (hereinafter referred to as a “person concerned”). This mainly includes information which enables us to deduce your identity (information such as name, postal address, email address and telephone number).

Technical requirements:

To connect to our website, your browser transmits certain data to the web server of our website. This is a technical necessity so that the information you access can be provided by the website. To do so, we collect your IP address, date and time of your query and the type of your operating system, which we store and use for a maximum of 30 days. We reserve the right to store these data for a limited time in order to protect our legitimate interests and, in the event of unauthorised access or attempt to cause us deliberate damage, to induce a derivation of personal data (Art. 6 para. 1 f of the GDPR). We will only store or forward the data for this and for no other purpose without informing you and requesting your permission beforehand.

Cookies:

Cookies are small text files which are stored on your computer or mobile device via your browser to detect, for example, whether you visit websites repeatedly from the same device or browser. We generally use cookies to analyse the interest in our website as well as to improve the user-friendliness of our website. However, you can also access our website without cookies.
Cookies can be generally deactivated or removed using tools which are available in most commercial browsers. The settings must be defined separately and set individually for each browser you use. The various browsers offer different functions and options for this purpose.
We recommend that you accept the cookies that enable the use of certain functions or make the use of our website more convenient and comprehensive. The following overview shows how we use cookies and the length of time they are stored:

Cookie list:

Name	Page	Function	Validity
PHPSESSID	www.fujifilm-archive-services.de	This cookie stores your current session related to PHP applications and ensures that all page functions which are based on PHP programming language, can be fully displayed.	To the end of the session
cookieconsent_status	fujifilm-archive-services.de	This cookie saves whether you have confirmed the cookie notice so that it is not displayed again on every page.	1 year
mapConsent	fujifilm-archive-services.de	This cookie stores whether you have consented to the use of Google Maps on the "How to reach us" page, which allows Google to set cookies.	1 year
khcookie	google.com	Google Maps.	6 months
NID	google.com	Google Maps.	6 months
SNID	google.com	Google Maps.	6 months
PREF	google.com	Google Maps.	6 months

When you access our website, the text on our cookie banner informs you of the use of these cookies and your acceptance of them by continuing to use them or by clicking on the "I agree" button.

Types of cookies:

To explain the most common types of cookies to you in more detail, we have clarified them below for your understanding:

1. Session cookies:
   Session cookies are used to recognize users and the changes they have made within a website. They allow the website to track your movements across individual pages so that information which was already entered or stored, need not be entered or stored again. An example of this is a shopping basket in the web shop. The session cookie saves the selected products in the shopping basket so that it contains the correct items when you pay at the checkout. Session cookies are deleted when you log off, or automatically lose their validity as soon as the session expires.
2. Permanent or protocol cookies:
   A permanent or protocol cookie stores the user's information and settings on the user's computer for the period of time specified in the expiry date. This results in faster and more convenient access, as you do not need not re-enter the language settings or login data, for example. The cookie is automatically deleted at the end of the storage period.
3. Third-party cookies:
   Third-party cookies usually have no influence on the use of the site, as they do not originate from the website operator. For example, their purpose is to collect information for advertising, user-defined contents and web statistics and to send that information to the respective third party provider.
4. Tracking cookies:
   Tracking cookies are special text files which provide the opportunity to collect data about the web user’s behaviour. This is intended to provide information about the user's main interests, for example, to launch customised advertising offers. Tracking cookies are not only set when you log in but also automatically when you visit the website.

The above examples of the most common forms of cookies are intended to give you a global view of this method of collection. This explanation makes no claim to be complete. As a result of technical IT developments, one can assume that further types of cookies will be developed over time. Please check our privacy policy for current changes at regular intervals before using our website.

Login portal:

We use a login portal to establish a protected area which is only accessible to logged in users. You will receive the login data for your login after previous successful registration on our website. As long as you are logged in, you can access the contents and services we only offer to registered users. Logged in users may also change or delete the data provided during registration at any time if necessary. During your login procedure, your login and the transfer of your personal data are secured by encryption. The same applies to the period of your visit to the protected area.

Users of our contact form:

Our website contains contact forms which can be used for electronic contact. To ensure the secure transmission of your data, we use a state-of-the-art encrypted connection with SSL certificate during transmission. By clicking the “Send” button, you consent to the transmission of the data entered in the input mask to us. We will store your name and email address and any other information you provide in order to contact you, and to respond to your queries to the best of our ability. Firstly, this allows us to offer you the service you expect from us, and secondly it allows us to improve continuously (Art. 6, para. 1F of the GDPR).

Using Google reCaptcha

To protect your orders via the internet form, our company uses the reCAPTCHA service of Google, Inc. (Google). The query serves to differentiate whether a person is entering the data, or whether it is being misused through automated, machine processing. The query includes sending IP addresses and, if applicable, further data required by Google for the reCAPTCHA service to Google. To this end, your input will be sent to Google and used there. With the declaration of consent to which you must agree before using Google reCaptcha, you agree that your data will be sent to Google. If IP anonymization is activated on this website, however, your IP address will be shortened beforehand by Google within the Member States of the European Union or other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be forwarded to a Google server in the USA and shortened there.

Google will use this information on behalf of the operator of this website to assess your use of this service. The IP addresses transmitted by your browser within the scope of by reCaptcha will not be merged with other Google data. The deviating data protection provisions of Google apply to these data.
You can find further information on Google’s data protection guidelines at https://policies.google.com/privacy?hl=de

Google Maps:

Our website uses Google Maps map services over an API (programming interface). The provider offering this map service is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. To use the Google Maps function, it is necessary to save your IP address. According to Google, this information is generally sent to a server in the USA and stored there. As the website operator, we have no influence on this data transfer. The information is only transferred when you press the “activate” button on the map. With your activation of the map, you agree to transfer the information. If you do not agree to the transfer of information, do not click on the “activate” button of the map. You can continue to use the site without such a transfer taking place. The use of Google Maps is in the interest of appropriately presenting our online offers and in the interest of making it easier to find the locations we have indicated on the website. This represents a legitimate interest within the meaning of Art. 6 para. 1 let. F of the GDPR.
You can find more information on working with user data at Google’s privacy policy: https://policies.google.com/privacy?hl=de&gl=de

Further general information:

Changes to this data protection declaration

We check the data protection declaration at regular intervals for compliance with statutory provisions, court rulings, the statements of the supervisory authorities as well as for alignment with emerging trends and for the development of technical standards. In this respect, we reserve the right to change the data protection declaration in order to comply with new legal provisions on data protection and other legal or factual changes. In this respect, we reserve the right to change the data protection declaration in order to comply with new statutory provisions on data protection and other legal or factual changes. For this reason, please obtain information about the data protection declaration applicable at the time you start using our website.

Who is responsible for the data processing? (Art. 13 para. 1 a and b of the GDPR)

FUJIFILM Recording Media GmbH is responsible for data processing on our website. You will find the contact details in the legal notice: https://www.fujifilm-archive-services.de/?l=en&p=impressum

You can contact our data protection officer at the following address:

FUJIFILM Recording Media GmbH
Data Protection Officer
Fujistrasse 1
47533 Kleve
Germany
Email: datenschutz_ffrm@fujifilm.com
Tel.: +49 2821 509 219

Who receives your personal data? (Art. 13 para. 1 e & f of the GDPR)

We treat your personal data confidentially and will never disclose this information to third parties unless you have given your consent or the provision is based on a statutory or contractual obligation. We occasionally commission contractors to process your personal data. This is done as per Art. 28 of the GDPR and on the basis of an order data processing contract.

How long is the data stored? (Art. 13 para. 2 a of the GDPR)

Legislation has issued numerous obligations and periods for the retention of data.
We principally store your data only as long as it is legally required. After these periods have expired, the relevant data is routinely deleted if they are no longer needed to fulfil the contract. Data which we process on the basis of your consent will be stored until revoked or as long as the data are required. We store data which we process on the basis of a legitimate interest for as long as the legitimate interest exists.
Data pertaining to commercial or financial law for a completed fiscal year are deleted after a further ten years in accordance with legal regulations unless longer retention periods are prescribed or required for legitimate reasons. If not subject to specific retention periods, the data is deleted when the purposes for which they were processed cease to apply.

For what purposes and on what legal basis do we process your personal data? (Art. 13 para. 1 c & d of the GDPR)

We have already explained the purposes and legal bases of data processing. The following also generally applies: If required, we will process your data to protect the legitimate interests of ourselves or those of third parties pursuant to Art. 6 para. 1 f of the GDPR, for example, for the assertion of legal claims and defence in legal disputes or to ensure IT operation and security.
If we have a legitimate interest or have received your written consent to process your personal data, we will process your data for the purposes of external communication and marketing on the basis of Art. 6 para. 1 a or f of the GDPR. You have the right to withdraw your consent at any time. We may or must process your data and forward it to third parties in order to fulfil statutory requirements (as per Art. 6 para. 1 c).
We do not use your data in any way for automated decision-making or for profiling.
We also use cookies to provide you with improved service when using our website and to make the use of this website easier for you (Art. 6 para. 1 f of the GDPR).

What are your rights and obligations? (Art. 13 para. 2 b, c, d and e of the GDPR)

Every person concerned has the following rights:

• According to Art. 15 of the GDPR, you have the right to information. This means you can request confirmation from us as to whether we have processed your personal data.
• According to Art. 16 of the GDPR, you have the right to correction. This means you can request us to correct your personal data.
• According to Art. 17 of the GDPR, you have the right to deletion (“Right to be forgotten”). This means you can request us to immediately delete your personal data - unless we cannot delete your data because, for example, we must observe statutory retention obligations.
• According to Art. 18 of the GDPR, you have the right to restrict processing. This means we are practically prohibited from processing your personal data - except for storing it.
• According to Art. 20 of the GDPR, you have the right to data portability. This means you have the right to receive the personal data you provided to us in a structured, common and machine-readable format, and to transfer these data to another responsible party.
• According to Art. 7 para. 3 of the GDPR, you have the right to withdraw an already-granted consent for the future at any time.
• According to Art. 13 of the GDPR, you have the right of appeal to the responsible regulatory authority.

In addition, you have the right of objection which we will explain in greater detail at the end of this data protection information.

If you would like to exercise your rights, please contact the data protection officer (see above for contact data).

Responsible regulatory authorities

Landesbeauftragte für Datenschutz
Nord-Rhein-Westfalen
Address: Kavalleriestr. 2-4, 40213 Düsseldorf, Germany
Postal address: Postfach 200444, 40102 Düsseldorf, Germany
Phone: +49 (0) 211/38424-0
Email address: poststelle@ldi.nrw.de