Privacy Policy
1) Introduction and Contact Details of the Controller
1.1 We are pleased that you are visiting our website and thank you for your interest. Below we inform you about the handling of your personal data when using our website. Personal data refers to all data that can personally identify you.
1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Juliane Kaeppel, Flurstraße 2, 91126 Rednitzhembach, Germany, Tel.: +49 160 97703535, E-Mail: herzklopfen.photography@gmail.com. The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
1.3 The controller has appointed a data protection officer who can be reached as follows: “Juliane Kaeppel, Flurstraße 2, 91126 Rednitzhembach, +49 160 97703535, post@julianekaeppel.de”
2) Data Collection When Visiting Our Website
2.1 When using our website for purely informational purposes, i.e. if you do not register or otherwise transmit information to us, we only collect the data that your browser transmits to the server of the site (so-called “server log files”). When you access our website, we collect the following data necessary for us to display the website to you:
- The website visited
- Date and time of access
- Amount of data sent in bytes
- Referring source/URL from which you came to the page
- Browser used
- Operating system used
- IP address used (possibly in anonymized form)
The processing is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. Data will not be passed on or used in any other way. However, we reserve the right to check the server log files subsequently if there are concrete indications of unlawful use.
2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string “https://” and the lock icon in your browser bar.
3) Hosting & Content Delivery Network
For hosting our website and displaying the site content, we use a provider who provides these services itself or through selected subcontractors exclusively on servers within the European Union.
All data collected on our website are processed on these servers.
We have concluded a data processing agreement with the provider, ensuring the protection of our website visitors’ data and prohibiting unauthorized disclosure to third parties.
4) Cookies
To make your visit to our website attractive and to enable the use of certain functions, we use cookies, small text files that are stored on your device. Some of these cookies are deleted after you close your browser (so-called “session cookies”), while others remain on your device and allow us to store site settings (so-called “persistent cookies”). The duration of storage can be found in your browser’s cookie settings.
If personal data is also processed by individual cookies used by us, the processing is carried out either pursuant to Art. 6(1)(b) GDPR for the performance of a contract, pursuant to Art. 6(1)(a) GDPR if consent has been given, or pursuant to Art. 6(1)(f) GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit.
You can set your browser to inform you about the setting of cookies and decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general.
Please note that the functionality of our website may be limited if you do not accept cookies.
5) Contact
5.1 Calendly
For providing an online appointment booking function, we use the services of the following provider: Calendly, LLC, BB&T Tower, 271 17th St NW, Atlanta, GA 30363, USA.
For scheduling appointments, first and last name as well as email address (and phone number if a phone appointment is requested) are collected pursuant to Art. 6(1)(b) GDPR and transmitted to the provider pursuant to Art. 6(1)(f) GDPR based on our legitimate interest in effective customer management and efficient appointment administration, where they are stored for scheduling purposes.
After the appointment has taken place or the scheduled period has expired, your data will be deleted by the provider.
We have concluded a data processing agreement with the provider, ensuring the protection of our website visitors’ data and prohibiting unauthorized disclosure to third parties.
For data transfers to the USA, the provider is certified under the EU-US Data Privacy Framework, ensuring an adequate level of data protection according to the European Commission’s adequacy decision.
11) Rights of the Data Subject
11.1 The applicable data protection law grants you the following data subject rights vis-à-vis the controller with regard to the processing of your personal data (information and intervention rights), where the legal basis for the requirements for exercising them is referenced:
- Right of access pursuant to Art. 15 GDPR;
- Right to rectification pursuant to Art. 16 GDPR;
- Right to erasure pursuant to Art. 17 GDPR;
- Right to restriction of processing pursuant to Art. 18 GDPR;
- Right to notification pursuant to Art. 19 GDPR;
- Right to data portability pursuant to Art. 20 GDPR;
- Right to withdraw consent granted pursuant to Art. 7(3) GDPR;
- Right to lodge a complaint pursuant to Art. 77 GDPR.
11.2 RIGHT TO OBJECT
IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR OVERRIDING LEGITIMATE INTEREST AS PART OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME WITH EFFECT FOR THE FUTURE ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING REMAINS RESERVED IF WE CAN PROVE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ASSERTION, EXERCISE OR DEFENSE OF LEGAL CLAIMS.
IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING PURPOSES. YOU MAY EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.
12) Duration of Storage of Personal Data
The duration of the storage of personal data is based on the respective legal basis, the processing purpose and – if applicable – also on the respective statutory retention period (e.g. commercial and tax retention periods).
If personal data are processed based on explicit consent pursuant to Art. 6(1)(a) GDPR, these data will be stored until you withdraw your consent.
If statutory retention periods apply to data processed within the scope of contractual obligations pursuant to Art. 6(1)(b) GDPR, these data will be routinely deleted after the retention periods have expired, provided they are no longer necessary for contract fulfillment or initiation and/or we have no legitimate interest in further storage.
If personal data are processed based on Art. 6(1)(f) GDPR, these data will be stored until you exercise your right to object pursuant to Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the assertion, exercise or defense of legal claims.
If personal data are processed for direct marketing purposes pursuant to Art. 6(1)(f) GDPR, these data will be stored until you exercise your right to object pursuant to Art. 21(2) GDPR.
Unless otherwise stated in the other information of this declaration about specific processing situations, stored personal data will otherwise be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.
