Privacy Policy

DRAFT — have this reviewed by a lawyer before publishing and fill in every [ … ] placeholder.

1. Controller

The controller for data processing on this website is:

Claudia Milutinov

Babies First Photo

Pilotystrasse 2

80538 Munich, Germany

Email: info@babiesfirstphoto.de

Further details can be found in the imprint.

2. Your rights

You have the right at any time to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You may also lodge a complaint with a supervisory authority.

3. Hosting

This website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. When you visit, technically necessary server log data (IP address, date and time, page requested) is processed. Legal basis: Art. 6(1)(f) GDPR. A data processing agreement under Art. 28 GDPR is in place with the host.

4. Contact form

If you contact us via the contact form, we process the data you provide (name, email address, message) solely to handle your request. Legal basis: Art. 6 (1) (b) and (f) GDPR.

5. Client area / photo gallery

To provide your personal photo gallery we process your name, your email address and the photographs taken during the session. Access is granted via an individual link and an access code. Legal basis: Art. 6(1)(b) GDPR.

The gallery remains accessible for 30 days after release. After that the photos are deleted from our server; order data (order, amount) is retained for the statutory retention periods.

We keep a simple record of when photos were downloaded: time, number of files and type of download. This serves as proof of delivery. We deliberately do not store an IP address or browser identifier.

6. Email delivery

To send notifications (e.g. gallery release, order confirmation, notice that access is about to expire) we process your email address. Mail is sent via the mail server of Hetzner Online GmbH.

7. Cookies

This website uses only technically necessary cookies (e.g. for language selection and for the client area login). We do not use analytics, tracking or marketing tools; your usage behaviour is not evaluated.

8. Storage period

We store personal data only for as long as necessary for the stated purposes:

· Photos in the client area: 30 days after the gallery is released, then deleted from the server.

· Contact form enquiries: until the enquiry has been dealt with.

· Order and invoice data: in accordance with statutory retention periods (§ 147 AO, § 257 HGB).