Privacy Policy

Iris-photo Privacy Agreement

Responsible for Data Protection

At iris-photography.com, we take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration.

Responsible body for data processing:
Iris-photo International LLC
Prime Tower, Office 804
6c Marasi Dr.
Dubai, UAE

Type and purpose of data processing

Type of data collected

- Inventory data (e.g., personal master data, names or addresses).
- Contact details (e.g., e-mail, telephone numbers).
- Content data (e.g., text entries, photographs, image numbers).
- Usage data (e.g. websites visited, interest in content, access times).
- Meta / communication data (e.g., device information, IP addresses).

Purpose of the data collected

- Order processing / order fulfillment
- Provision of the online offer, its functions and content
- Answering contact requests and communicating with users
- Safety measures
- Reach measurement / marketing

In general, our website can be used without providing personal data. Insofar as personal data (e.g. name, address or email address) is collected, this is always done on a voluntary basis as far as possible.

Your data will not be passed on to third parties without your express consent. Note that data transmission over the Internet can have security gaps. Complete protection against third-party access is not guaranteed.

No address trading

We do not deal with your addresses or other personal data. We do not send advertising or newsletter emails.

Terms used

Personal data: All information that relates to an identified or identifiable natural person. This includes names, identification numbers, location data, online identifiers (e.g. cookies) or characteristics that express physical, physiological, genetic, psychological, economic, cultural or social identity.

User: Visitors and users of the online offer.

Processing: Any process carried out with or without automated processes in connection with personal data. This includes practically every handling of data.

Pseudonymisation: Processing of personal data so it can no longer be assigned to a specific person without additional information that is stored separately.

Profiling: Automated processing of personal data to evaluate characteristics relating to a person, such as work performance, economic situation, health, preferences, interests, reliability, or behavior.

Responsible: The natural or legal person, authority, or body that decides on the purposes and means of processing personal data.

Processor: A natural or legal person, authority, or body that processes personal data on behalf of the responsible party.

Legal basis

In accordance with Article 13 GDPR, we inform you of the legal basis for our data processing for users within the EU and EEC:

• Legal basis for obtaining consent: Art. 6 Para. 1 lit. a and Art. 7 GDPR
• Fulfilling services and contractual measures: Art. 6 Para. 1 lit. b GDPR
• Fulfilling legal obligations: Art. 6 Para. 1 lit. c GDPR

• Vital interests: Art. 6 Paragraph 1 lit. d GDPR
• Public interest tasks: Art. 6 Paragraph 1 lit. e GDPR
• Legitimate interests: Art. 6 Paragraph 1 lit. f GDPR

Processing data for different purposes follows Art. 6 Para. 4 GDPR. Special categories of data are processed according to Art. 9 Para. 2 GDPR.

Safety measures

We implement suitable technical and organizational measures to ensure appropriate protection based on legal requirements, state of the art technology, implementation costs, type, scope, and risk factors affecting your rights and freedoms.

Our protective measures include:

• Securing confidentiality, integrity, and availability of data
• Controlling physical access to data
• Managing data access, input, forwarding, and separation
• Procedures for exercising data subject rights and managing threats

We consider data protection during development and selection of hardware, software, and procedures, following privacy-by-design and privacy-friendly default settings principles.

Cooperation with processors, joint controllers and third parties

We only disclose, transmit, or grant data access to other companies (contract processors, joint controllers, or third parties) based on legal permission, user consent, legal obligations, or our legitimate interests (e.g., payment processors, service providers).

Data sharing with other companies in our group is done primarily for administrative purposes as a legitimate interest and on appropriate legal bases.

User rights

General user rights

Right to information: You have the right to request confirmation that your data is being processed and to receive information and a copy of that data.

Right to correction: You may request completion or correction of incomplete or inaccurate data concerning you.

Right to data portability: You have the right to receive data you provided to us and request its transmission to other responsible parties.

Right to complain: You may lodge a complaint with the competent supervisory authority.

Revocation of your consent to data processing

You can revoke your already given consent at any time. An informal e-mail notification is sufficient for the revocation. The legality of the data processing carried out before the revocation remains unaffected by the revocation.

Right to deletion, information and correction

Within the framework of the applicable legal provisions, you have the right to information about your personal data collected by us, their origin and recipient of the data at any time. You also have the right to correct or delete this data at any time. To do this, use the email address given under Contact / above.

Cookies

Definition

Cookies are small files stored on your computer that contain information about your visit to our website. They are primarily used to store information about user behavior during or after visits to an online offer.

Session cookies: Temporary cookies deleted after you leave our site and close your browser. These can store shopping cart contents or login status.

Persistent cookies: Remain stored after the browser is closed, allowing information like login status to be saved across multiple visits.

Third-party cookies: Offered by providers other than the website operator (unlike first-party cookies). These can store user interests for measurement or marketing purposes.

Use

We use temporary and permanent cookies as described in this privacy policy. When we request your consent for cookies, the legal basis is Article 6 Paragraph 1 lit. a GDPR. Otherwise, cookies are stored based on our legitimate interests per Article 6 Paragraph 1 lit. f GDPR.

Cookies may also be necessary to provide contract-related services (Art. 6 para. 1 lit. b GDPR) or for tasks in the public interest (Art. 6 para. 1 lit. e GDPR).

Managing cookies: You can disable cookies in your browser settings. Saved cookies can be deleted through your browser's system settings. Note that disabling cookies may restrict website functionality.

To opt out of marketing cookies, visit http://www.aboutads.info/choices/ (US) or http://www.youronlinechoices.com/ (EU).

Deletion of data

The data processed by us will be deleted or restricted in their processing in accordance with legal requirements.

Unless expressly stated in this privacy declaration, data stored by us will be deleted as soon as it's no longer required for its intended purpose and deletion doesn't conflict with statutory retention requirements. If data cannot be deleted because it's required for other legally permissible purposes, its processing will be restricted—the data will be blocked and not processed for other purposes.

Provision of business-related services

We process data for members, supporters, interested parties, and customers according to Article 6 Paragraph 1 lit. b GDPR when providing contractual services or maintaining existing business relationships. We also process data based on our legitimate interests (Art. 6 Para. 1 lit. f GDPR) for administrative tasks and public relations.

Data types processed include: Inventory and master data (name, address), contact details (email, phone), contract data (services used, contact persons), and payment data (bank details, payment history) when applicable.

Data retention: We delete data no longer required for statutory and business purposes. For business processing, we retain data as long as it's relevant for transactions and warranty/liability obligations. Retention necessity is reviewed every three years; statutory requirements otherwise apply.

We also reserve the right to process user information for spam detection purposes based on our legitimate interests (Art. 6 Para. 1 lit. f GDPR).

Hosting and e-mailing

Hosting

Our hosting services provide infrastructure and platform services, computing capacity, storage space, database services, email dispatch, security, and technical maintenance.

We and our hosting provider process inventory data, contact data, content data, contract data, usage data, and communication data based on our legitimate interests in efficient and secure provision of this site (Art. 6 Para. 1 lit. f GDPR, Art. 28 GDPR - order processing contract).

Server-Log-Files

The website provider automatically collects and saves information in so-called server log files, which your browser automatically transmits to us.
These are:
• Browser type / browser version
• the operating system used
• Referrer URL
• Host name of the accessing computer
• Time of the server request
These data cannot be assigned to specific persons. This data will not be merged with other data sources. We reserve the right to check this data retrospectively if we become aware of specific indications of illegal use.

Third party providers

Google Analytics

This website uses Google Analytics, a web analysis service by Google Inc. (1600 Amphitheater Parkway, Mountain View, CA 94043, USA). Google Analytics uses cookies (text files stored on your computer) to analyze your website use.

Data processing: Cookie-generated information about your site usage is typically transferred to a Google server in the USA and stored there. If IP anonymization is activated, your IP address is shortened by Google within EU member states or EEA contracting states before transmission.

Google uses this information on behalf of our site operator to evaluate your use, compile reports on site activity, and provide other analytics services. Your browser's IP address from Google Analytics will not be merged with other Google data.

Opt out: You can disable cookies in your browser settings. To prevent Google Analytics data collection, download and install the browser plugin at http://tools.google.com/dlpage/gaoptout. Note: disabling cookies may limit website functionality.

Online presence in social media

We maintain an online presence on social networks and platforms to communicate with customers, interested parties, and users, and to inform them about our services.

Important notice: User data may be processed outside the European Union. This can result in risks for users, as enforcement of user rights may be more difficult. US providers certified under Privacy Shield commit to comply with EU data protection standards.

Legal basis: We process user data based on our legitimate interests in effective user information and communication (Art. 6 Para. 1 lit. f GDPR). When platforms request consent for data processing, the basis is Art. 6 Para. 1 lit. a and Art. 7 GDPR.

For detailed processing information and opt-out options, see each platform's privacy policy. To request information or assert user rights most effectively, contact the platform provider directly, as they have exclusive access to user data. We can provide additional assistance if needed.

Social media partners:

• Facebook, pages, groups (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland)

• Google / YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland)

• Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA)

Objection to unsolicited advertising

We object to the use of contact data published in our imprint for sending unsolicited advertising and promotional material. We expressly reserve the right to take legal action against unsolicited advertising information, such as spam emails.

Let's Build Your Studio

Contact Us

Interested in purchasing the EyeCatcher Pro photobox or subscribing to our editing software? Share a few details below and our team will contact you quickly with the best setup options for your business.