Privacy Policy
DRAFT — have this reviewed by a lawyer before publishing and fill in every [ … ] placeholder.
1. Controller
The controller for data processing on this website is:
Claudia Milutinov
Babies First Photo
Pilotystrasse 2
80538 Munich, Germany
Email: info@babiesfirstphoto.de
Further details can be found in the imprint.
2. Your rights
You have the right at any time to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You may also lodge a complaint with a supervisory authority.
3. Hosting
This website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. When you visit, technically necessary server log data (IP address, date and time, page requested) is processed. Legal basis: Art. 6(1)(f) GDPR. A data processing agreement under Art. 28 GDPR is in place with the host.
4. Contact form
If you contact us via the contact form, we process the data you provide (name, email address, message) solely to handle your request. Legal basis: Art. 6 (1) (b) and (f) GDPR.
5. Client area / photo gallery
To provide your personal photo gallery we process your name, your email address and the photographs taken during the session. Access is granted via an individual link and an access code. Legal basis: Art. 6(1)(b) GDPR.
The gallery remains accessible for 30 days after release. After that the photos are deleted from our server; order data (order, amount) is retained for the statutory retention periods.
We keep a simple record of when photos were downloaded: time, number of files and type of download. This serves as proof of delivery. We deliberately do not store an IP address or browser identifier.
6. Email delivery
To send notifications (e.g. gallery release, order confirmation, notice that access is about to expire) we process your email address. Mail is sent via the mail server of Hetzner Online GmbH.
7. Cookies
This website uses only technically necessary cookies (e.g. for language selection and for the client area login). We do not use analytics, tracking or marketing tools; your usage behaviour is not evaluated.
8. Storage period
We store personal data only for as long as necessary for the stated purposes:
· Photos in the client area: 30 days after the gallery is released, then deleted from the server.
· Contact form enquiries: until the enquiry has been dealt with.
· Order and invoice data: in accordance with statutory retention periods (§ 147 AO, § 257 HGB).
