Privacy Policy

1. Controller

The controller for data processing on this website is:

Claudia Milutinov

Babies First Photo

Pilotystrasse 2

80538 Munich, Germany

Email: info@babiesfirstphoto.de

Further details can be found in the imprint.

2. Your rights

You have the right at any time to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You may withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR). An informal email to info@babiesfirstphoto.de is sufficient.

You may also lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian Data Protection Authority (BayLDA), Promenade 18, 91522 Ansbach, Germany.

3. Hosting and server log data

This website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, on servers in Germany. When you visit, technically necessary server log data (IP address, date and time, page requested, browser type) is processed in order to deliver the website and keep it secure. Log data is deleted automatically after 14 days. Legal basis: Art. 6(1)(f) GDPR. A data processing agreement under Art. 28 GDPR is in place with the host.

4. Contacting us

If you contact us via the contact form, by email or by phone, we process the data you provide (e.g. name, email address, phone number, message) solely to handle your request. Legal basis: Art. 6(1)(b) and (f) GDPR.

WhatsApp: the website and our emails contain a link to WhatsApp. WhatsApp only opens when you click it; no data is sent to WhatsApp beforehand. If you use WhatsApp, your data is processed by WhatsApp Ireland Limited (Merrion Road, Dublin 4, Ireland), and a transfer to Meta Platforms Inc. in the USA cannot be ruled out. Meta is certified under the EU-US Data Privacy Framework. WhatsApp's privacy policy applies. If you prefer not to use it, you can reach us just as well by email or phone.

5. Client area, orders and payment

To provide your personal photo gallery we process your name, your email address and the photographs taken during the session. Access is granted via an individual link and an access code. Legal basis: Art. 6(1)(b) GDPR.

The gallery remains accessible for 30 days after release. After that the photos are deleted from our server; order data (order, amount) is retained for the statutory retention periods.

Orders placed through this website are paid by bank transfer. Payment is handled by your bank and ours; we do not use an external payment provider.

We keep a simple record of when photos were downloaded: time, number of files and type of download. This serves as proof of delivery. We deliberately do not store an IP address or browser identifier.

6. Baby gallery of Klinik Dr. Geisenhofer

Our baby gallery shows photos of newborns we photographed at Klinik Dr. Geisenhofer, together with the child's first name, date of birth, weight and length. The gallery is reached via a link from the clinic and is blocked from search engines.

We only publish a photo if the parents have given their written consent at the photo session in the clinic. We keep the signed consent forms. Legal basis: Art. 6(1)(a) GDPR in conjunction with § 22 KUG (German Art Copyright Act).

You can withdraw your consent at any time. To do so, send an email to info@babiesfirstphoto.de with the subject “Widerruf Babygalerie” and state your child's name and date of birth. We will then remove the photo from the gallery promptly. Withdrawal does not affect the lawfulness of publication up to that point.

Unless consent is withdrawn, the photos remain in the gallery indefinitely.

7. Testimonials

The testimonials shown on this website are taken from publicly posted reviews (e.g. on Google) and are shown with the name given there. If you would rather your review did not appear here, a short email is enough. Legal basis: Art. 6(1)(f) GDPR.

8. Email delivery

To send notifications (e.g. gallery release, order confirmation, notice that access is about to expire) we process your email address. Mail is sent via the mail server of Hetzner Online GmbH in Germany.

9. Cookies and fonts

This website uses only technically necessary cookies (e.g. for language selection and for the client area login). We do not use analytics, tracking or marketing tools; your usage behaviour is not evaluated.

The fonts used are hosted locally on our server. Visiting the website does not create a connection to servers of Google or any other provider.

10. Storage period

We store personal data only for as long as necessary for the stated purposes:

· Server log data: 14 days.

· Photos in the client area: 30 days after the gallery is released, then deleted from the server.

· Photos in the baby gallery: until consent is withdrawn.

· Enquiries: until the enquiry has been dealt with.

· Order and invoice data: in accordance with statutory retention periods (§ 147 AO, § 257 HGB).