Privacy Policy
Protecting your personal data matters to us. This policy explains what data is processed on this website, for what purpose, and on what legal basis.
Draft — this content is based on currently available information and must be reviewed by a lawyer before publication.
Last updated: TODO(kunde) — add the date of the last update
Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is the service provider named in this website's imprint.
Your rights at a glance
You have the right at any time to information about your stored personal data, its origin and recipients, and the purpose of its processing. You also have the right to rectification, erasure, restriction of processing, data portability, objection to processing, and to withdraw any consent given, with effect for the future.
To exercise these rights, you can contact us at any time using the contact details given in the imprint. You also have the right to lodge a complaint with the competent data protection supervisory authority.
Hosting
This website is hosted by an external service provider (TODO(kunde): add the hosting provider's name, address and registered office). The personal data collected on this website is processed on the host's servers.
The host is used to provide our online offering securely, quickly and efficiently through a professional provider (Art. 6(1)(f) GDPR). A data processing agreement under Art. 28 GDPR is in place with the host (TODO(kunde): confirm).
Server log files
The provider of these pages automatically collects and stores information in so-called server log files, which your browser automatically transmits. These are: browser type and version, operating system used, referrer URL, host name of the accessing computer, time of the server request, and IP address.
This data is not combined with other data sources. It is collected on the basis of Art. 6(1)(f) GDPR for the technically error-free presentation and optimisation of the website and to ensure system security. The data is deleted once it is no longer required for the purpose for which it was collected (TODO(kunde): add the exact retention period).
Enquiry form
If you contact us via the enquiry form, we collect the data you provide there (including the date and type of celebration, location, number of guests, name, email address, phone number and your message) in order to process your enquiry and for any follow-up questions.
This data is processed on the basis of Art. 6(1)(b) GDPR, insofar as the enquiry serves to initiate a contract, and on the basis of Art. 6(1)(f) GDPR due to our legitimate interest in handling enquiries effectively.
Data from the enquiry form is deleted once the enquiry has been fully processed and no contract results, at the latest after TODO(kunde): add retention period. If a contract is concluded, the statutory retention periods under German commercial and tax law apply (in particular §§ 147 AO, 257 HGB).
Contact via WhatsApp
We offer WhatsApp as an optional channel of communication. When you use WhatsApp, your messages and the associated metadata are processed via the infrastructure of WhatsApp Ireland Limited and/or the Meta group of companies, and a transfer of data to third countries, in particular the United States, cannot be ruled out.
This use is based on your voluntary contact with us (Art. 6(1)(a) or (b) GDPR). TODO(kunde) / to be reviewed by a lawyer: add details on the WhatsApp variant used (personal or Business API) and any additional processors involved.
Analytics & statistics
We currently do not use any analytics or tracking tool. An optional statistics feature can be enabled via this website's cookie settings; it remains inactive until you explicitly consent to it.
Should a statistics service be introduced in the future, this policy will be updated before activation with the name, purpose, legal basis and retention period of that service (TODO(kunde)).
Embedded third-party content
Music sets and videos on this website are embedded via a click-to-load preview: content from services such as Spotify, YouTube, SoundCloud or Mixcloud is only loaded after an active click. Only then does your browser establish a direct connection to the respective provider, which may process your IP address and other data according to its own privacy policy.
Further information: Spotify (https://www.spotify.com/de/legal/privacy-policy/), YouTube / Google (https://policies.google.com/privacy), SoundCloud (https://soundcloud.com/pages/privacy), Mixcloud (https://www.mixcloud.com/privacy/).
Fonts are self-hosted locally via next/font and are not loaded from Google's servers when the page is viewed; no data is transmitted to Google for this purpose.
Data security
For security reasons and to protect the transmission of confidential content, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the padlock icon in your browser and by the address bar changing from “http://” to “https://”.
Changes to this policy
We will update this privacy policy whenever data processing or the legal situation changes. The version currently published on this page always applies.