Privacy Policy of Ifolor GmbH

The ifolor team is delighted that you have chosen us to create your photo products. Your satisfaction is our top priority. Detailed below is our privacy policy, which we have drawn up so that you can be assured that we handle your photos and personal data correctly. This document explains what personal data (i.e., information related to identified or identifiable persons) we collect from your visit on our web sites and from your orders, and how these are processed and used. We also explain how we use cookies.

1. Collection of personal data, data and communication security

Personal data is all data which make personal reference to you, such as your name, address, email addresses, user behaviour. We process your personal data with respect to the applicable data protection regulations, particularly the European General Data Protection Regulation as well as all other pertinent international and national regulations concerning the processing of personal data.

In principle, we only collect data that are legally or contractually required or necessary for conclusion of contracts or to provide services and honour our contractual obligations. Optional information is marked as such. There are no negative consequences associated with not supplying this information. However in some cases, failure to supply this may hinder/delay communication with you, for example.

Your personal data are always protected against loss and misuse with appropriate technical and organisational measures. It is stored in a secure operating environment that is not accessible to the public. In certain cases, such as when you log in or make a payment, your personal data will be transmitted in encrypted form through the so-called "Secure Socket Layer" technology (SSL). This means that the communication between your computer and our servers will take place via a certified encryption process.

2. Controller, contact details of our data protection officer

(1) ‘Controller’ pursuant to Art. 4 No. 7 of the
General Data Protection Regulation (GDPR), is:
Ifolor GmbH
Reichenaustraße 19a
78467 Konstanz

Telephone: +49 7531 807010

(2) You can contact our data protection officer at:
Data protection officer 
c/o Ifolor GmbH 
Reichenaustraße 19a
78467 Konstanz


3. Legal bases for our data processing:

The legal bases of data processing are made up of the regulations within Art. 6 of GDPR, whereby our data processing is predominantly conducted
- on the basis of consent, Art. 6 No. 1 S. 1 lit. a GDPR 
- for the fulfilment of a contract, Art. 6 No. 1 S. 1 lit. b GDPR 
- for the fulfilment of legal obligations Art. 6 No. 1 lit. c. GDPR and 
- for the protection of legitimate interests, Art. 6 No. 1 lit. f. GDPR.

4. Your rights as a data subject

(1) You have the following rights with respect to us regarding your personal data pursuant to GDPR:
- The right to information, Art. 15 GDPR 
- The right to rectification, Art. 16 GDPR 
- The right to deletion (‘the right to be forgotten’), Art. 17 GDPR 
- The right to restriction of processing, Art. 18 GDPR 
- The right to data portability, Art. 20 GDPR 
- The right to object to processing, Art. 21 GDPR (also see point 5 hereafter).

(2) In line with Art. 22 GDPR, you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or has an otherwise detrimental effect on you, insofar as the decision
- is not necessary for entering into, or the performance of, a contract between you as an affected person and us as a data controller,
- is authorised by a Union or Member State law to which we as the controller are subject, and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests as an affected person, or 
- is based on your explicit consent.

(3) If you believe that the processing of your data violates data protection regulations, you have the right to register a complaint with a supervisory authority in line with Art. 77 GDPR. The right of appeal may be exercised in particular before a supervisory authority in the Member State where you are staying, or where the suspected violation took place.

5. Your right to revocation and objection

(1) Your right to revocation of consent
You have to right to revoke consent that has been granted at any time without this affecting the legality of the previous processing. If the consent is revoked, we will stop the corresponding data processing.

(2) Your right to revocation in the case of legitimate interests 
Pursuant to Art. 21 GDPR, you have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you, which are collected on the basis of Art. 6 S. 1 lit. f GDPR. We will then no longer process the personal data unless there are demonstrably compelling reasons for processing which are in need of protection and which outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.

(3) Your right to revocation in the case of direct advertising 
Pursuant to Art. 21 GDPR, you have the right to object to the processing of your personal data for the purpose of direct advertising, the execution of which leads to the termination of processing for the purpose of direct advertising or safeguarding legitimate interests.

6. Collection of personal data

Whenever you visit our web site, data relating to your access and data required for the operation of our user interfaces and the processing of your request will be temporarily stored on our web servers. This pertains to the connection data of your computer (IP address), the subpages you are visiting on our site, date and duration of your visit, recognition of the types of device, operating system and browser and the website or starting point from which you came to visit us.

Otherwise we only process data that you share with us while registering, placing an order or a request, and your image data and further information you send in to us for the processing of your orders. This data collection is not subject to a legal duty of notification with the authorities.

We collect and process such data only insofar as this serves the professional processing of your order and the maintenance of our customer relationship.

Apart from that we process anonymised information about how our visitors use our user interfaces; it helps us to enhance our services and the functions of our web sites, and to adapt them to your needs.

7. Use and transfers of personal data

We treat your data confidentially as a matter of principle and do not pass them on to third party processors. However, we reserve the possibility to have the data processed by third parties in Switzerland or in EU countries, if so required for the operational processing of your orders. In such case, an adequate level of data protection will be ensured by compliance with the privacy protection laws applicable in Switzerland, the EU and in each such country, and by corresponding contracts with our suppliers.

So that reorders or potential complaints can be processed, your order information is held for up to 30 days before it is irrevocably deleted.

The electronic payment process (excluding invoice payments) takes place using our certified payment service provider, Datatrans AG in Zurich. Your payment data is sent directly from you to our payment service provider during payment and stored with them for a time-restricted period for the purposes of processing the payment and for potential complaints or refunds.

If you have subscribed to our newsletter, it is sent by our technical service provider, Selligent SA in Belgium, to whom we passed your data on when you registered for the newsletter. This transfer serves our legitimate interests in using an eye-catching, secure and user-friendly newsletter system. Acting on our instructions, Selligent SA uses this information for sending the newsletter and for carrying out a statistical, pseudonymised evaluation. You can unsubscribe from the newsletter at any time, either in writing or in the newsletter itself.

8. Social Media Link

You may send us your image data for processing not only from your own devices but also through internet services such as Facebook, OneDrive and Picasa. Doing so, you do not grant us access to your login data for those services or to your other data placed in those services. The order software of ifolor is given access solely to your shared data and images and/or your public profile. These services will provide you with more detailed information about what data are thereby made accessible. Please also refer to these services’ privacy indications

9. Google-Tag-Manager:

This website uses Google Tag Manager.The Tool Tag Manager itself (which implements the tags) is a domain without cookies which does not collect any personal details.The tool ensures the activation of other tags which themselves potentially collect data. Google Tag Manager does not access these data.If a deactivation is carried out at domain or cookie level, this shall remain in effect for all tracking tags that are implemented with Google Tag Manager.

Click here to disable Google Tag Manager for this domain. This does not run any other tracking scripts (see also Usage-based online advertising).

10. Usage-based online advertising:

In this section, we would like to provide with extensive information on the topic of “usage-based online advertising”. Our website, or the website you were forwarded from, collects and processes your usage behaviour anonymously. This benefits you as a user, since you receive advertising which is more suited to your fields of interest, and because less randomly dispersed advertising is sent to you overall.

A cookie is saved on your computer to record your usage behaviour. This records information about your activity on this website (e.g. surfing behaviour, subpages visited on the internet service). All the usage data is stored with the use of a pseudonym, so that a personal identification is generally excluded. For data collection for the purpose of sending usage-based online advertising, we make use of the following tools:
Adform, Affilinet, Bing, Facebook, Google, M-Pathy, Montemedia, Plista, Refined Ads, Romandie Network Conversion, Search Love, Selligent, Tradetracker, Trusted Shops

11. Facebook Connect

Facebook Connect is a function by Facebook which allows Facebook users to sign in also to other websites, apps and services with their Facebook identity. This other service gains access to certain preferences and social connections stored in Facebook on which it can base its own offers. This follows the user’s settings on Facebook. You can find more information in the Facebook explanatory notes Facebook. Facebook can use data via users’ steps on these other services in order to recognise visitors of our website on its services, to be able to provide for the user’s interests and preferences. You can object to this form of advertising via the settings of your browser, which you can enter on the selection page of Digital Advertising Alliance Digital Advertising Alliance.

12. Cookies

We seek to design our web presence as user friendly and efficient as possible. To this end, we apply cookies. You may decide yourself whether or not our software may load cookies onto your computer. You can configure your browser so that cookies will not be accepted, or only from certain web sites, or only after notice. Please observe, however, that the use of certain functions of our website may be restricted or disabled if you decline cookies from our web site. For a convenient experience we recommend a browser setting which accepts our cookies.

Cookie policy

Cookies are small data files which are stored in the browser of your computer while it visits our web sites. Cookies support the functions of our service, by retaining your entries during a session or during an order process and by saving certain user settings. They also assist us with analysing the way our services are used, in order to design them as convenient and efficient as possible for our users.

We apply session cookies and permanent cookies. In addition, partner and affiliate cookies are employed. Session cookies remain stored only for the duration of a visit of our web sites, and are automatically deleted while closing the browser.

Permanent cookies remain on your computer until you delete them or their duration expires. They memorise anonymous information relating to users who repeatedly take access to one of our web sites. This helps us to offer optimised user guidance, and to recognise and distinguish one user from others, in order to maintain that user’s personal settings, simplify the user experience on the web site, and provide each user with customised contents and pages. These cookies are not designed to actually identify users. Such cookies are also implemented for purposes of anonymised web analytics, see

Partner and affiliate cookies are employed where a user takes access to our services via a platform of one of our partners (e.g. an advertising display). They serve for accounting with such partners, do not contain personal data of the user, and are deleted once the user registers on our user interface, or upon expiry of the pre-set duration.

The application of cookies can normally be avoided, restricted, or connected with a notice to the user by corresponding settings in your browser. The help manual of your browser will instruct you what to do. Please note, however: Some cookies are essential for the use of our web site, or of certain functions. If they are disabled, you may not be able to pass through the order process, and you may have to accept restrictions in display and user guidance. Please also note that there may be no possibility of disabling cookies when accessing our user interfaces by other means than through a browser, for instance, through mobile devices.

13. Web Analytics

Two technical solutions are currently used as part of our web analysis.

Webtrekk Analytics Tools
Visits to our website are evaluated pseudonymised for marketing and optimisation purposes to collect statistical data on the use of our websites and improve it accordingly. Within the framework of order processing, we use technology from Webtrekk GmbH Robert-Koch-Platz 4, 10115 Berlin, Germany. This automatically collects and saves data. Pseudonymous usage profiles are also created here. Webtrekk uses them to provide us with reports on user activity and other services related to the use of our websites.

The legal basis is our legitimate interest, Art. 6(1) point f GDPR, to provide you with a smooth order process and to make our website more user-friendly and effective overall.

Every time you access our website, information that is transmitted by your browser is collected and evaluated. It is collected using a pixel, which is integrated on each page, and / or a Java script as well as cookies. The following information is collected and processed:

  • Name of the retrieved file, time stamp
  • Operating system used - Device ID - Information (type / version) about the browser used
  • Screen / browser resolution and colour depth
  • Browser language - Referrer URL (previously visited page)
  • IP address
  • Clicks
  • Java on / off
  • Cookies on / off
  • Plug-ins
  • If applicable, information about your shopping basket (e.g. number of products or currency used)
  • Possibly pseudonymised user ID and new customer status

Webtrekk abbreviates the IP address as soon as it is received and only uses it on our behalf to recognise sessions and for geolocalization only. The abbreviated IP address does not allow for any conclusions to be drawn about you as a visitor to our websites.

When using Webtrekk, the following cookies are set, which have a lifetime as follows:

  • Session cookie (for session recognition, lifetime: one session, i.e. until the browser is closed)
  • Long-term cookies (for pseudonymised recognition of returning visitors: 12 months)
  • Opt-out cookie (in case of opposition to tracking: 12 months)

If you do not agree with the storage and analysis of the analysis data from your visit, you can object to this by clicking the following link:
Click here to deactivate Webtrekk for this domain.
This places a so-called opt-out cookie on your browser. The result is that the service does not place any web analytics cookies or collect any session data. Note: If you delete your cookies, the opt-out cookie will also be deleted and you may need to reactivate it.

The applicable Webtrekk Privacy Policy can be found at

We would be pleased, however, if you agree to the employment of analytics tools, since they help us to regularly enhance our web presence and our services and to optimise them to your needs.