Legal

Privacy Policy

Last updated: 24 September 2026

Preamble

With the following privacy policy, we would like to inform you about the types of your personal data (hereinafter also referred to as "data") that we process, for what purposes and to what extent. This privacy policy applies to all processing of personal data carried out by us, both in the context of providing our services and, in particular, on our websites, in mobile applications and within external online presences, such as our social media profiles (hereinafter collectively referred to as the "online offering").

The terms used are not gender-specific.

Controller

Photo Collectors Circle
Fraumünsterstrasse 11
8001 Zurich
Switzerland

Persons authorised to represent: Susanne von Meiss, Ettore Molinario

Email address: info@photocollectorscircle.com

Overview of Processing Operations

The following overview summarises the types of data processed and the purposes of their processing, and refers to the categories of data subjects concerned.

Types of data processed

  • Inventory data.
  • Payment data.
  • Contact data.
  • Content data.
  • Contract data.
  • Usage data.
  • Meta, communication and procedural data.
  • Membership data.

Categories of data subjects

  • Users.
  • Members.

Purposes of processing

  • Communication.
  • Organisational and administrative procedures.
  • Feedback.
  • Public relations.

Security Measures

We take appropriate technical and organisational measures in accordance with statutory requirements, taking into account the state of the art, the costs of implementation, the nature, scope, circumstances and purposes of the processing, and the varying likelihood and severity of the risk to the rights and freedoms of natural persons, in order to ensure a level of protection appropriate to the risk.

The measures include, in particular, safeguarding the confidentiality, integrity and availability of data by controlling both physical and electronic access to the data as well as the access, entry, transfer and availability of the data and its separation. Furthermore, we have established procedures that ensure the exercise of data subject rights, the deletion of data and the response to any threat to the data. In addition, we take the protection of personal data into account when developing or selecting hardware, software and processes, in accordance with the principles of data protection through technology design and privacy-friendly default settings.

Performance of Tasks under Statutes or Articles of Association

We process the data of our members, supporters, interested parties, business partners or other persons (collectively, "data subjects") when we are in a membership or other business relationship with them, when performing our tasks, and when they are recipients of services and benefits. Otherwise, we process the data of data subjects on the basis of our legitimate interests, e.g. in the case of administrative tasks or public relations work.

The data processed in this context, as well as the type, scope, purpose and necessity of their processing, are determined by the underlying membership or contractual relationship, from which the necessity of any data disclosures also follows (otherwise, we point out required data).

We delete data that is no longer required for the fulfilment of our statutory and business purposes. This is determined in accordance with the respective tasks and contractual relationships. We retain data for as long as it may be relevant for business administration and with regard to any warranty or liability obligations, on the basis of our legitimate interest in their regulation. The necessity of retaining the data is reviewed at regular intervals; otherwise, statutory retention obligations apply.

  • Types of data processed: Inventory data (e.g. full name, residential address, contact information, customer number, etc.); contact data (e.g. postal and email addresses or telephone numbers); contract data (e.g. subject matter of the contract, term, customer category); membership data (e.g. personal data such as name, age, gender, contact details (email address, telephone number), membership number, information on membership fees, participation in events, etc.); payment data (e.g. bank details, invoices, payment history).
  • Data subjects: Members.
  • Purposes of processing and legitimate interests: Communication. Organisational and administrative procedures.
  • Retention and deletion: Deletion in accordance with the information in the section "General information on data storage and deletion".

Further information on processing operations, procedures and services

  • Events and organisational operations: Planning, execution and follow-up of events as well as the general operation of the association's activities. Planning involves the collection and processing of participant data, coordination of logistical requirements and the setting of the event agenda. Execution includes managing participant registration, updating participant information during the event and recording attendance and participant activities. Follow-up involves analysing participant data to evaluate the success of the event, creating reports and archiving relevant information about the event. General organisational operations include the management of member data, communication with members and interested parties, and the organisation of internal meetings and sessions.

Use of Cookies

The term "cookies" refers to functions that store information on users' devices and read it from them. Cookies can also be used for different purposes, such as for the functionality, security and convenience of online offerings as well as for creating analyses of visitor flows. We use cookies in accordance with statutory requirements. Where necessary, we obtain users' consent in advance. If consent is not required, we rely on our legitimate interests. This applies where the storage and reading of information is absolutely necessary in order to provide expressly requested content and functions. This includes, for example, the storage of settings and the assurance of the functionality and security of our online offering. Consent can be revoked at any time. We provide clear information about its scope and which cookies are used.

Notes on legal bases under data protection law: Whether we process personal data using cookies depends on consent. If consent has been given, it serves as the legal basis. Without consent, we rely on our legitimate interests, as explained above in this section and in the context of the respective services and procedures.

Storage period: With regard to the storage period, the following types of cookies are distinguished:

  • Temporary cookies (also: session cookies): Temporary cookies are deleted at the latest after a user has left an online offering and closed their device (e.g. browser or mobile application).
  • Permanent cookies: Permanent cookies remain stored even after the device is closed. For example, the login status can be saved and preferred content displayed directly when the user visits a website again. Likewise, user data collected with the help of cookies can be used for reach measurement. Unless we provide users with explicit information on the type and storage period of cookies (e.g. as part of obtaining consent), they should assume that these are permanent and that the storage period can be up to two years.

General information on revocation and objection (opt-out): Users may revoke any consents they have given at any time and may also object to processing in accordance with statutory requirements, including via the privacy settings of their browser.

  • Types of data processed: Meta, communication and procedural data (e.g. IP addresses, time details, identification numbers, persons involved).
  • Data subjects: Users (e.g. website visitors, users of online services).

Presence in Social Networks (Social Media)

We maintain online presences within social networks and process user data in this context in order to communicate with active users there or to offer information about us.

We point out that user data may be processed outside the European Union. This may result in risks for users, because, for example, the enforcement of users' rights could be made more difficult.

Furthermore, users' data within social networks is generally processed for market research and advertising purposes. For example, usage profiles can be created from users' usage behaviour and the resulting interests. The latter may in turn be used, for example, to place advertisements within and outside the networks that presumably correspond to the interests of the users. As a rule, cookies are therefore stored on users' computers in which their usage behaviour and interests are stored. Moreover, data may also be stored in the usage profiles independently of the devices used by the users (in particular, if they are members of the respective platforms and are logged in there).

For a detailed description of the respective forms of processing and the opt-out options, we refer to the privacy policies and information provided by the operators of the respective networks.

Also in the case of information requests and the assertion of data subject rights, we point out that these can be asserted most effectively with the providers. Only the latter have access to the users' data and can take appropriate measures directly and provide information. Should you nevertheless require assistance, you are welcome to contact us.

  • Types of data processed: Contact data (e.g. postal and email addresses or telephone numbers); content data (e.g. text or image messages and posts and information relating to them, such as details of authorship or the time of creation); usage data (e.g. page views and time spent on the site, click paths, intensity and frequency of use, device types and operating systems used, interactions with content and functions).
  • Data subjects: Users (e.g. website visitors, users of online services).
  • Purposes of processing and legitimate interests: Communication; feedback (e.g. collecting feedback via online forms); public relations.
  • Retention and deletion: Deletion in accordance with the information in the section "General information on data storage and deletion".

Further information on processing operations, procedures and services

  • Instagram: Social network that enables the sharing of photos and videos, commenting on and favouriting posts, sending messages, subscribing to profiles and pages; service provider: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland; website: https://www.instagram.com; privacy policy: https://privacycenter.instagram.com/policy/. Basis for third-country transfers: Data Privacy Framework (DPF).

Created with the free privacy policy generator Datenschutz-Generator.de by Dr. Thomas Schwenke

← Back to homepage