Customer Privacy Policy

If you have any questions regarding data privacy, please contact us at

FotoFinder Systems, Inc.

Att: Data Protection Officer

7100 Columbia Gateway Dr., Ste 120

Columbia, MD 21046


1. Data Protection Officer

We have appointed a data protection officer in our company. You can reach the dpo at the address below:

Email: dpo[at]

Or at the mailing address below:

FotoFinder Systems, Inc.

Att: Data Protection Officer

7100 Columbia Gateway Dr., Ste 120

Columbia, MD 21046



2. Which data we collect and process

a) Cookies

We use cookies at various places on our website.

Cookies are small identifiers that a server stores on the terminal device with which you access our website or our services. They contain information that can be called up when accessing our services and thus enable a more efficient and better use of our offers.

Session cookies are deleted when you close your web browser. Permanent cookies remain on your terminal until they are no longer necessary to achieve their purpose and are deleted.

Cookies serve to improve our services and the use of certain features. You can prevent the setting of cookies at any time by means of an appropriate setting of your Internet browser and thus permanently object to the setting of cookies. Furthermore, cookies that have already been set can be deleted at any time via an Internet browser or other software programs. This is possible in all common internet browsers. If you deactivate the setting of cookies in the Internet browser used, not all functions of our website may be fully usable.


b) We use the following tracking and analysis tools

Google Analytics:

The Google Analytics component is operated by Google Inc 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. whose purpose is to analyze the flow of visitors to our website. Google uses the data and information obtained to evaluate the use of our website in order to compile online reports for us. Google Analytics sets a cookie in your browser. By setting the cookie, Google is enabled to analyze the use of our website. Every time you visit a website on which a Google Analytics component has been integrated, the Internet browser is automatically prompted to transmit data to Google. No personal data is transmitted to Google. The IP address we collect is only forwarded to Google after it has been made anonymous. It is possible to object to the collection and processing of this data by Google. To do this, you must download and install a browser add-on from the link Further information and Google's current privacy policy can be found at and


Google AdWords:

The operator of Google AdWords services is Google Inc 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. If you access our website via a Google ad, a so-called conversion cookie is stored on your browser by Google. A conversion cookie loses its validity after thirty days and is not used for identification. If the cookie has not yet expired, the conversion cookie is used to determine whether certain sub-pages have been accessed on our website. The conversion cookie enables us and Google to track whether our visitors have reached our website via an AdWords ad.

The data and information collected through the use of the conversion cookie is therefore used to determine the success or failure of the respective AdWords ad and to optimize our AdWords ads for the future. Neither we nor other Google AdWords advertisers receive information from Google that could identify our website visitors. No personal data is transmitted to Google. The IP address we collect is only forwarded to Google after it has been made anonymous.

You have the opportunity to object to interest-based advertising by Google. To do this, you must call the link and make the required settings there. Further information and Google's current privacy policy can be found at


c) Social media buttons, e.g. from Facebook, Instagram, Twitter, google plus, LinkedIn

The social media buttons are initially disabled and do not collect any data. If you wish to use them, you must first activate the buttons. Before activation, your consent is required for data processing according to the conditions of the respective provider (e.g. Facebook). After activation, data is collected, processed and used according to the conditions of the respective provider. We have no influence on the type and scope of data collection. If you refuse to use your data for social media purposes, you may not activate the buttons.



Third-party content is included on this website. This content is provided by Google Inc ("Provider").YouTube is operated by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").

For videos from YouTube included on our site, the advanced privacy setting is enabled. This means that no information from website visitors is collected and stored on YouTube unless they play the video.

The purpose and scope of data collection and the further processing and use of the data by the providers as well as your rights and setting options for the protection of your privacy can be found in the Google data protection information:

e) Contact page

If the opportunity for the input of personal or business data (email addresses, name, and addresses) is given, the input of this data is voluntarily. Your data will be treated confidentially and not passed on to third parties except to our respective sales partners in your country for further processing, if you request further information. The data from the contact form is transmitted using SSL encryption.


4 Duration of storage

We process and store personal data only for the time required to achieve the storage purpose or to the extent required by law. As a rule, the processing purpose is achieved upon termination of your contract.

Data that you enter during the application process will be stored for a maximum of six months.

Data collected via Google Analytics will be deleted after 14 months at the latest.


5 Your rights

a) Right to information and confirmation

 You have the right to receive free information from us at any time and confirmation of the personal data stored about you and a copy of this information.


b) Right of correction

You have the right to request the immediate correction of incorrect personal data concerning you. You also have the right, taking into account the purposes of the processing, to request the completion of incomplete personal data, including by means of a supplementary declaration.


c) Deletion rights

You have the right to have your personal data deleted immediately, provided that one of the following reasons applies and insofar as the processing is not necessary:

The personal data has been collected or otherwise processed for such purposes for which they are no longer necessary.

The withdraw of your consent on which the processing was based and there is no other legal basis for the processing.

You file an objection to the processing and there are no overriding legitimate grounds for the processing.

The personal data has been processed unlawfully.

The deletion of personal data is necessary to fulfil a legal obligation which we are subject.


d) Right to data transferability

You have the right to receive the personal data relating to you that has been provided to us in a structured, common and machine-readable format.


e) Right to revoke consent under data protection law

You have the right to revoke your consent to the processing of personal data at any time.


7. Legal or contractual regulations for the provision of personal data, necessity for the conclusion of the contract, obligation to provide the personal data, possible consequences of non-provision

The provision of personal data may be required in part by law (e.g. tax regulations) or may also result from contractual regulations (e.g. information on the contractual partner). In order to conclude a contract, it may sometimes be necessary for you to provide us with personal data, which we will subsequently have to process. For example, you are obliged to provide us with personal data when we conclude a contract with you. Failure to provide personal data would mean that the contract could not be concluded.


8. Existence of automatic decision making / profiling

We do not do automatic decision making or profiling.


This Policy is effective as of 12. December 2018.