Privacy policy
This privacy policy explains what personal data is processed when you visit this website, for what purpose, and on what legal basis. The governing law is the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG). The German version of this policy is the legally binding one.
Controller
The controller for the processing of personal data on this website, within the meaning of Art. 4(7) GDPR, is:
PLACEHOLDER — these details must be replaced with the photographer's real information before the site goes live.
Mariia Solovei[Straße und Hausnummer]
[PLZ] [Ort]
[Land]
Phone: [Telefonnummer]
Email: [E-Mail-Adresse]
Hosting and server access logs
This website is operated by an external hosting provider. The personal data collected on this website is stored on that provider’s servers. A data processing agreement under Art. 28 GDPR is in place with the provider.
Every time a page is requested, the server automatically writes an entry to an access log. That entry records your IP address, the date and time of the request, the address requested, the referring page, the browser and operating system used, and the volume of data transferred.
This data is necessary to deliver the website, to keep it stable and secure and to detect attacks. The legal basis is Art. 6(1)(f) GDPR. This data is not combined with any other data source.
PLACEHOLDER — the hosting provider and the access-log retention period must be replaced with the actual details before the site goes live.
Hosting provider: [Hosting-Anbieter]
[Anschrift des Hosting-Anbieters]
Access-log retention period: [Speicherdauer]
Contact form
The contact form on this website collects the following details: name, email address, phone number with country code, Instagram handle (optional) and your message.
We process these details solely in order to answer your enquiry and to prepare a possible booking. The Instagram handle is optional; we need the remaining fields in order to reply to you. The legal basis is Art. 6(1)(b) GDPR for steps taken prior to entering into a contract, and Art. 6(1)(f) GDPR for our legitimate interest in answering enquiries.
We keep your enquiry for as long as is necessary to handle it and to carry out any booking that follows from it. Statutory retention periods remain unaffected.
Transfer to Telegram
Your form enquiry is delivered to us through the Telegram Bot API. In the course of this, the data you entered is transferred to Telegram FZ-LLC, whose servers are located outside the European Union. The legal basis is Art. 6(1)(b) and (f) GDPR.
Embedded videos (YouTube)
The wedding films on this website are hosted on YouTube, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We embed them in privacy-enhanced mode (youtube-nocookie.com) and only after a click: until you press play, no connection to YouTube is made.
Only when you start a film does your browser connect to Google’s servers. This transmits, among other things, your IP address, the page you are on and technical details about your device; YouTube may also store entries in your browser. Data may be transferred to the USA; Google is certified under the EU-US Data Privacy Framework. The legal basis is your consent given by starting the film (Art. 6(1)(a) GDPR, § 25(1) TDDDG). More information: https://policies.google.com/privacy
Strictly necessary browser storage
Regardless of your consent, this website stores two technically necessary items in your browser. Both exist only to deliver the site and are not used to analyse your behaviour.
NEXT_LOCALE (cookie) — remembers which language version you are using, so that you arrive in the same language each time. Lifetime: one year.
mw-analytics-consent (local storage) — records your decision about the analytics tools described below, so that you are not asked again on every visit. It stays stored until you delete it or change your decision using the button at the bottom of this page.
The legal basis is § 25(2)(2) TDDDG — both items are strictly necessary in order to provide the service you explicitly requested — together with Art. 6(1)(f) GDPR. No consent is required for them, and nothing further is stored without your consent.
Analytics and session recording
This website uses two tools that evaluate how it is used. Both load only after your explicit consent: until you have consented, no script and no cookie from these providers is requested or set.
PostHog — audience measurement. It records the pages you open, the referring source, your device type and browser, an approximate region derived from your IP address, and your interactions with the contact form and the collection buttons. Only the events we have defined are captured; the automatic recording of every click and form interaction ("autocapture") is switched off. Processing takes place on PostHog’s EU servers (eu.i.posthog.com). The provider is PostHog, Inc.
Microsoft Clarity — session recording. The provider is Microsoft Corporation, and data may be transferred to servers outside the European Union, in particular to the USA. Heatmaps are also generated from the recordings, showing which areas of a page are viewed and clicked.
Session recording — what that means. Both Clarity and PostHog (where it is called "session replay") record your visit and replay it as a video. What they capture includes your mouse movement, your clicks, your scrolling and the content of the pages shown to you. The contents of network requests are not recorded, and text entered into form fields is masked by default by both providers.
The sole legal basis for both tools is your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG. You can withdraw that consent at any time and without giving a reason, in the “Manage consent” section at the bottom of this page. Withdrawal takes effect for the future; the lawfulness of processing carried out before it remains unaffected.
Your rights
You have the right to obtain information about the data held about you (Art. 15 GDPR), to have inaccurate data corrected (Art. 16 GDPR), to erasure (Art. 17 GDPR), to restriction of processing (Art. 18 GDPR), to data portability (Art. 20 GDPR), and to object to processing based on a legitimate interest (Art. 21 GDPR). Consent once given can be withdrawn at any time with effect for the future (Art. 7(3) GDPR).
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). For a business established in Bavaria that authority is the Bavarian Data Protection Authority (BayLDA), Promenade 27, 91522 Ansbach, Germany.
Data protection enquiries
For data protection enquiries and to exercise your rights, please use the contact details given in the legal notice.
Manage consent
You can withdraw your consent to the analytics and session recording described above at any time here — and, if you declined or have not decided yet, give it here too. After a withdrawal this page reloads, so that any script already loaded stops immediately.
Checking your current status …