Data privacy
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) and other applicable data protection laws is:
Mario Schmitt
Momentaufnahmen Schmitt
Römerring 40 C
55597 Wöllstein
Germany
Email: info@momentaufnahmen-schmitt.de
---
2. Scope and Purpose of Processing Personal Data
In the course of entering into and fulfilling a contract, we collect and process personal data in order to provide our services and prepare them in the best possible way.
This includes not only names, addresses, and contact information, but also information regarding the planned wedding, guests, and venue. This information helps us prepare for your wedding day and create meaningful and lasting memories for you.
Before and after the wedding, communication may take place via the medium of your choice. This communication serves the preparation of your wedding photography experience and may include additional offers related to our services.
For example, you may receive a short questionnaire prior to the wedding regarding the timeline of the day and participating vendors. Participation is voluntary but may be necessary to the extent required for proper fulfillment of the photography contract.
With your consent, some photographs created during your wedding may also be used for our own promotional purposes. This may include publication on our website or in reference materials. We do not publish surnames or contact details in this context, although first names may be used.
For the purpose of image processing and fulfillment of the contract, image data may temporarily be processed on servers operated by third-party providers. Such data will be deleted promptly after processing is completed.
In addition, your wedding gallery may be uploaded to the Pic-Time platform, operated by Pic-Time Ltd., to provide access to your images. Access to uploaded galleries is password protected and restricted to authorized users only.
Registered users may occasionally receive offers related to additional products or services. These may appear within the online gallery or be sent via email notifications. Such emails can be unsubscribed from at any time.
---
3. Legal Basis for Processing
The legal basis for processing personal data necessary for the performance of a contract or for pre-contractual measures is Article 6(1)(b) GDPR.
Where consent has been given for additional processing or storage of personal data, the legal basis is Article 6(1)(a) GDPR.
---
4. Data Retention and Deletion
Personal data will be deleted or blocked as soon as the purpose for storage no longer applies.
This generally occurs once the contract has been fully fulfilled, all warranty and contractual obligations have expired, and statutory retention periods under tax or commercial law have ended.
Further storage only takes place where required by European or national legislation to which we are subject.
Please note that online galleries remain accessible for 13 months after the wedding date and are deleted thereafter. Extensions may be possible, and reminders will be sent in due time.
---
5. Disclosure of Data to Third Parties
Personal data will not be shared with third parties except in the cases described above regarding promotional use of photographs and the provision of online galleries.
---
6. Rights of Data Subjects
Under the GDPR, you have the following rights regarding your personal data:
Right of Access
You may request confirmation as to whether personal data concerning you is being processed and obtain information about such processing.
Right to Rectification
You have the right to request correction or completion of inaccurate or incomplete personal data.
Right to Erasure
You may request deletion of your personal data where the legal requirements for deletion are met.
Right to Restriction of Processing
Under certain conditions, you may request restriction of processing of your personal data.
Right to Notification
If you exercise your rights to rectification, deletion, or restriction, we are obliged to inform recipients of the relevant changes where required by law.
Right to Data Portability
You have the right to receive the personal data you provided in a structured, commonly used, machine-readable format and to transmit it to another controller where technically feasible.
Right to Object
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data based on Article 6(1)(e) or (f) GDPR.
### Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates the GDPR.
---
7. Contact
If you have questions regarding this Privacy Policy or the processing of your personal data, you may contact:
Mario Schmitt