Privacy Statement

1. Introduction

This is the privacy statement of Storio Group B.V. including all of its affiliates, trading under the names albelli, Albumprinter, Photobox, PosterXXL, resnap, Hofmann, fotoknudsen, and önskefoto (hereinafter referred to as “the Company”, “we”, “us”, and “our”).
In this Privacy Statement we inform our business relations, applicants and visitors of our corporate website (hereinafter referred to as “you”, “your”, and “yours”) about the way we handle and protect your personal data.
We will explain, amongst other things, who we are, how and for what purposes we process your personal data and how you can exercise your privacy rights and give any other information that might be relevant to you.
We have made every effort to provide the information to you in clear and plain language. If, nevertheless, you still have any questions about our use of your personal data after reading this privacy statement, you can contact us using the contact details provided in the last section of this statement.
This privacy statement may be amended from time to time. The latest version of the privacy statement will be published on our website. The last changes to this privacy statement were made in January 2024.

2. To whom does this privacy statement apply?

This privacy statement applies to the processing of personal data of our business relations, applicants and website visitors. This privacy statement does not apply to the processing of personal data of customers, employees and contractors who work for Storio Group B.V. or any of its affiliates.


We have set up specific statements which address these categories of individuals. When you interact with us and we identify you as an individual that falls under any of these categories, we will share the relevant privacy statement with you.

3. Who is the data controller?

Our company consists of a group of brands that supply photo products to customers located in the European Economic Area (“EEA”) and/or the United Kingdom while trading under the names albelli, Albumprinter, Photobox, Poster XXL, Resnap, Hoffman, monalbumphoto, fotoknudsen, önskefoto, and bonusprint. Our corporate headquarters are located at the Stationsplein 53-57 in Amsterdam, the Netherlands.
Unless otherwise stated in this Privacy Statement or in any other specific privacy statement or notice provided to you, the primary data controller of your personal data is Storio Group B.V.

4. How and why do we process your personal data?

Application process


You may apply for a specific job opening or send us an open application in which case we will process and store your data in order to administer the job application process. In order to process your registration as a job applicant and to contact you about your role, we process data such as your name, address, e-mail address, telephone number, educational background, abilities, availability, skills, and other cv information, as well as correspondence relating to your registration.

Cookies


We collect information through the use of cookies. Cookies are small files of information that store and can retrieve information about your visit to this website, such as how you entered our site, how you navigated through the site and what information you found interesting. You can find more information about our use of cookies in our Cookie Statement.

5. To whom will your personal data be disclosed

Our employees have the authority to access personal data only to the extent necessary for the relevant purpose and to do their jobs. They are all required to keep the data confidential.

We will not disclose any of your personal data to third parties, other than to our affiliated companies and data processors under contract with us, such as:

  • Cloud storage and software providers.
  • Applicant tracking system.


Without your consent, we will not share your personal data with any other third parties, unless:

  • We are legally obliged or entitled to do so (for example, pursuant to a court order or for the purposes of prevention or detection of crime or fraud);
  • We are in negotiations with a third party for the sale or purchase of any of our business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets;
  • The Company and its affiliates, or substantially all of its assets, is acquired by a third party, in which case personal data held by the Company and its affiliates about its customers will be one of the transferred assets; or
  • We wish to enforce or protect our rights, property and safety, or the rights, property and safety of our customers, or others.

Some of the aforementioned parties are located in countries outside the European Economic Area. Where appropriate, we will ensure that appropriate safeguards are in place, such as the conclusion of EU Standard Contractual Clauses.

6. How your personal data are secured

Since the protection of your personal data is important to us, we have taken appropriate technical, physical and organisational measures to protect personal data against accidental or unlawful destruction or accidental loss, damage, alteration, unauthorized disclosure or access and all other forms of unlawful processing (including, but not limited to, unnecessary collection) or further.

7. How long will your personal data be retained?

We will retain your personal data for as long as necessary to fulfill the purposes mentioned in this privacy statement, including for purposes of satisfying any legal, accounting, or reporting requirements. Please note that in some cases we are required by law to retain your personal data in accordance with specific retention periods.

To determine the appropriate retention period of your personal data, we consider whether there is a statutory retention period to which we are subject, whether retention is prudent in light of our legal position, the purposes for which your personal data were collected and are processed, and the amount, nature and sensitivity of the personal data.

8. How can you exercise your privacy rights?

Under the EU General Data Protection Regulation (GDPR) you have a number of rights you can exercise over your personal data. Your rights are:

  • The right to receive a copy of your personal data;
  • The right to receive certain personal data in an electronic format;
  • The right to have personal data corrected if it is inaccurate- you can correct most of your data by logging into your account;
  • The right to ask us to stop processing or object to processing under certain circumstances;
  • The right to ask us to erase data in certain circumstances; and
  • The right to withdraw consent at any time when that is the legal basis for our processing. Please be aware that the withdrawal of consent does not affect the lawfulness of our processing based on consent before it was withdrawn.

If you wish to exercise any of these rights, please contact us by using the contact details below. Please remember that we may ask you to provide us with additional information to verify your identity before we can fulfill your request.

9. How can you contact us?

If you have any questions about this privacy statement or the way we handle your personal data, please send an email to dpo@photobox.com. If your question is not listed there or you have any additional questions or complaints, please contact our customer service first.

You also have the right to lodge a complaint with your local supervisory authority about the way we handle your personal data. You can contact your local data protection authority by using the contact details on their website. Should you have a complaint, we kindly urge you to contact our data protection officer first by sending an email to dpo@photobox.com.