Privacy policy

1. Controller and contact

Responsible for the processing described here: Gregor Machuletz, Fackelstraße 58, 47475 Kamp-Lintfort, Germany, e-mail: kontakt@letizgalerie.de, phone: +49 2842 1239618, trading as Letizgalerie. Data protection requests and reports of recordings published without permission can also be made without admin access.

2. Purposes, data and legal bases

Only if you separately allow the Pinterest Tag, we load it on public offer pages and measure page visits. After a confirmed direct purchase through Stripe or PayPal, we also send a Checkout event with the amount, currency and a pseudonymised order reference. Pinterest receives, in particular, the public page visited or purchase event and IP address and browser/connection data; the tag may use first-party cookies and browser storage to measure campaign effectiveness and build Pinterest advertising audiences. We do not send e-mail addresses, names, activation codes, gallery content or private gallery/admin pages. Consent is voluntary, separate from Google Analytics and can be withdrawn at any time via “Cookie settings”. The legal bases are consent under Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Pinterest may process data outside the EEA; details and safeguards: https://policy.pinterest.com/en/privacy-policy and https://policy.pinterest.com/en/ad-data-terms.

Our public profiles on Instagram, Facebook, TikTok and Pinterest present our offer and allow us to communicate with visitors. If you interact with us there, we process information visible to us, in particular your profile name, profile picture where applicable, public comments and reactions, messages and their time. We use this information to respond to posts and inquiries, manage our profiles and, where necessary, protect legal rights. The legal basis is Art. 6(1)(f) GDPR (interest in public relations and communication), or Art. 6(1)(b) GDPR for contract-related inquiries. Please do not post order numbers, secret gallery links or sensitive information in public comments. You can contact us by e-mail instead.

The platforms provide profile managers with reach and interaction statistics, which we use to assess our publications (Art. 6(1)(f) GDPR). For certain statistics, we may be joint controllers with the relevant platform provider; its agreements and privacy notices explain the respective responsibilities. Platform providers also process data when you use their services under their own responsibility, including device and usage data, and may transfer data to third countries. Consent to Google Analytics or Pinterest Tag on our website does not cover processing within those platforms. Our website only contains external links to the profiles; it does not include social-media plugins or embedded posts.

For purchase inquiries and contract processing we process name, e-mail address, event title and date, optional message, inquiry reference, agreed price, payment assignment, one-time code, design, secret access links as well as the time, wording and text version of the request for immediate setup (Art. 6(1)(b) GDPR, also for pre-contractual measures at your request). For a bank transfer, we also receive the payment data transmitted by the payment service providers involved, in particular the payer's name, IBAN or account details, amount, booking date and payment reference. Without the necessary contract and payment details we cannot process an offer, assign payments or set up the gallery. We receive data directly from you, from your order or from the payment service providers involved in the transfer. If you redeem an Etsy order on our activation page, we use the order number you enter to query the order status from Etsy (paid, cancelled or refunded, order date, purchased listings and quantity). We only store the order number, the e-mail address entered and the time of redemption in order to prevent double redemption; we delete this data after 400 days. If you buy directly on our website, we receive from our payment service provider Stripe the e-mail address entered, amount, currency, payment status, the items purchased and the ID of the payment session, if entered on the payment page also name and billing address, as well as the fee retained by Stripe, but no complete card or account details. We store the session ID, the e-mail address, amount and currency as well as the link to the activation code in order to assign payments and prevent double activation; we delete this data in the application after 400 days; the paragraph “Invoices and accounting” applies to invoices and accounting. If you pay with PayPal, we store the PayPal order number, the selected add-ons, the amount and, where applicable, the campaign or referral parameters of the purchase link as soon as you are forwarded to PayPal; after payment, the e-mail address and name of your PayPal account transmitted by PayPal, the transaction number, the fee retained by PayPal and the link to the activation code are added. We delete orders that are not completed after two days and completed orders after 400 days. The legal basis in each case is Art. 6(1)(b) GDPR.

If you reach our website via a link with campaign or referral parameters, we process the information contained therein on source, medium, campaign, content or search term, any partner ID and the landing page. For a direct purchase, this information is transmitted to Stripe as metadata, assigned to the payment session and the purchase and included in our internal purchase notification. The purpose is to evaluate the effectiveness of our own publications and partner referrals. The legal basis is Art. 6(1)(f) GDPR; our legitimate interests lie in economical, data-minimising measurement of the success of our advertising and the assignment of referrals. The parameters are not used for cross-site tracking or to create user profiles. Please do not enter names, e-mail addresses or other personal content in such link parameters.

For data-minimising reach and success measurement, we keep our own server-side daily statistics for selected public offer pages. Only the day, the page path called, a roughly assigned origin (direct call, domain of the referring website or existing campaign information) and aggregated counters for page views, started Stripe checkouts and successful direct purchases are recorded; for a purchase, the total amount is also added to the sum. For these statistics we do not store any IP address, complete referrer address, user agent, cookie or device ID or individual visit history. The user agent is only evaluated during the request to recognise known automated requests and is not stored. Browsers with “Do Not Track” or Global Privacy Control enabled are not counted. The information is immediately aggregated by day, page, origin and campaign and is used neither to recognise individual persons nor across websites. The legal basis is Art. 6(1)(f) GDPR; our legitimate interests lie in the data-minimising assessment of the effectiveness of our own content and advertising and the economic improvement of our offer.

Only with your voluntary consent do we use Google Analytics 4 on public product pages (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). We measure page views and clicks on selected links to understand which content leads to interest and purchases. When the Google script loads, Google receives your IP address and technical browser information; analytics cookies may recognise your browser on later visits. We do not send names, e-mail addresses, activation codes, secret gallery links or full URL parameters to Google. Private gallery, admin and payment-return pages are excluded. This integration does not use Google Ads remarketing or personalised advertising. The legal bases are your consent under Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You may withdraw consent at any time for the future via “Cookie settings” in the footer. Google may also process data in the USA; Google refers to the EU-US adequacy decision and supplementary standard contractual clauses. More information: https://policies.google.com/privacy and https://support.google.com/analytics/answer/6004245.

If you consent, we send Google Analytics only the domain of a referring website and fixed, allow-listed values for source, medium and campaign name from campaign links. Free-text search terms, full referring URLs and other URL parameters are not transmitted.

We also use the buyer's e-mail address to send automatic service reminders about backing up the gallery data halfway through the retention period and about seven days before the expiry date. We store the type of reminder, sending status, number of sending attempts and time of sending. The legal basis is Art. 6(1)(b) GDPR (performance of the booked gallery and notice of the agreed expiry date).

Invoices and accounting: For every direct purchase via Stripe or PayPal we automatically create an invoice with a consecutive invoice number, date, name, e-mail address, billing address where applicable, services purchased, amount and payment reference and send it to you as a PDF to the e-mail address given at purchase; in the event of a refund you receive a corresponding cancellation invoice. We record all incoming and outgoing payments in a cash book (date, amount, name, transaction, payment method, order or invoice number and fees of the payment service providers). For purchases via Etsy, Etsy issues the invoice; for our accounting we regularly retrieve the orders of our shop via the Etsy interface (order number, buyer's name, order date, status, purchased listings and amounts including the VAT retained by Etsy) as well as the fee entries of our Etsy payment account and store order number, name, date, listing and amount in the cash book; we do not take over addresses, e-mail addresses or payment data from Etsy for this. Invoices, cash book and receipts are stored on our server and in our object storage in Germany (see hosting) and are only accessible internally. For bookkeeping and our tax return we regularly transmit them to our accounting service Accountable SA, Square Victoria Régina 1, 1210 Saint-Josse-ten-Noode, Belgium, which stores and processes them for us as a processor under Art. 28 GDPR; within the scope of legal obligations they may be disclosed to the tax office or a tax advisor engaged by us. The legal bases are Art. 6(1)(b) GDPR for creating and sending the invoice and Art. 6(1)(c) GDPR in conjunction with the tax recording and retention obligations (in particular Sections 146, 147 of the German Fiscal Code, AO).

Guests transmit photos/videos, file names and technical file properties. Recordings may contain information about other people as well as embedded metadata such as the place and time of recording. Remove unwanted metadata before uploading; not all formats are cleaned automatically. We do not use the media for advertising or facial recognition. If the buyer uses the live wall, uploaded images are shown to those present during the event until the buyer hides or deletes them; we point this out on the upload page. Videos are not shown on the live wall. For the guestbook we process the message voluntarily entered or the voice message voluntarily recorded (sound recording of the voice and possibly background noise), an optional name, the time, the pseudonymous upload ID and the link to the media uploaded in the same browser tab. Voice messages can only be listened to and downloaded by the holder of the admin link; they are not played on the live wall and are not analysed for voice recognition. Messages are seen by the holder of the admin link and, unless the buyer switches this off or hides the message, by those present in front of the live wall. They are deleted together with the gallery; the buyer can delete individual messages beforehand. The legal basis is Art. 6(1)(f) GDPR (interest in the transmission of the guest's message requested by the guest and in operating the booked gallery). For technical provision and protection against misuse we rely on Art. 6(1)(f) GDPR (interest in secure, functional operation of the booked gallery). The rights of the people shown must be respected; our own obligations are not passed on to the buyer.

If the buyer has booked the add-on “Invitation with RSVP”, we process the name entered, the acceptance or refusal, the number of guests, an optional message to the hosts, times of the reply and a random editing key for the guests' replies. Only the holder of the admin link sees this information; it is not shown on the live wall. Please do not enter health information such as allergies or intolerances. Replies are deleted in the daily run 30 days after the event date, at the latest together with the gallery; the buyer can delete individual replies beforehand. The legal basis is Art. 6(1)(f) GDPR (interest of the guest in transmitting their reply and of the buyer in planning their event).

For the booked anniversary package, we store separate copies only of gallery photos selected by the buyer and photos guests expressly submit to the capsule, including file name, technical properties, submission time and optional message. We also store the hosts' message, event date and title, and the buyer's e-mail address for the opening notice. Guest photos and messages remain sealed even from the buyer until the first anniversary; beforehand they see only the number submitted. These contributions do not appear in the gallery or on the live wall. The legal basis for providing the service to the buyer is Art. 6(1)(b) GDPR; for guests' voluntary submissions and service protection it is Art. 6(1)(f) GDPR. Guests and people shown may request deletion through the stated privacy contact.

Hosts can turn off the display of their selected memories and guest contributions separately and turn either section back on through the private capsule link until access expires. When guest contributions are turned off, we accept no further guest uploads. Contributions already stored remain until the scheduled deletion; they are hidden from the hosts and excluded from the ZIP download. Hiding is not deletion. Hosts can delete individual photos after opening, while guests and people shown can contact us to request deletion.

For a marked test time capsule, the hosts can open the capsule before the anniversary. Until the test opening they still see only the number of guest contributions. Afterwards they can access each photo and message, and submissions close. The originally scheduled deletion 90 days after the regular anniversary remains unchanged.

If the buyer has booked the add-on “QR seating chart”, we process the guests' names entered by the buyer and their table name. On the guest page, guests only receive up to five matching entries with table after entering at least three letters of a name; if switched on by the buyer, also the names of the people at the same table. We do not store the search terms; to limit misuse we briefly count searches per pseudonymous connection ID in memory. The list is deleted in the daily run 30 days after the event date, at the latest with the gallery; the buyer can change or empty it beforehand. The legal basis is Art. 6(1)(f) GDPR (interest of the buyer in seating their guests and of the guests in quickly finding their seat). The buyer should inform their guests about this and only enter the names needed for the seating plan.

If the buyer switches on the personal welcome, we briefly show guests the welcome text entered by the buyer and an optionally uploaded image when they open the QR link. The image may show people and contain embedded metadata. Image and text are visible to everyone who knows the guest link; they do not appear on the live wall. We store text, image and file type with our host in Germany. The buyer can change or remove image and text at any time; they are deleted together with the gallery at the latest. The legal basis is Art. 6(1)(b) GDPR towards the buyer; insofar as guests or other people shown are affected, Art. 6(1)(f) GDPR (interest of the buyer in personally welcoming their guests). The buyer should only use images they are entitled to use for this purpose.

If the buyer later books an add-on (invitation with RSVP, QR seating chart or anniversary package) via their admin link, we store, for assignment purposes, the payment provider (Stripe or PayPal), its order or session number, the associated gallery, the packages selected, amount and currency and, after payment, the e-mail address transmitted, for PayPal the transaction number, and the time of activation. We receive the same information from the payment providers as described for the direct purchase. We delete add-on orders that are not completed after two days and completed ones after 400 days, at the latest with the gallery; the paragraph “Invoices and accounting” applies to invoices and accounting. The legal basis is Art. 6(1)(b) GDPR.

When accessing the site, the IP address, time, route requested, response status and technical connection data are processed. Private link components are redacted in the access logs set up for this purpose. To limit misuse we use short-lived access counters and, for uploads, an ID derived from the IP address. This ID is pseudonymous, not anonymous, and is stored with the respective medium. The legal basis is Art. 6(1)(f) GDPR (operational security, error diagnosis and protection against misuse).

We process contact requests, content reports, withdrawals and requests under the voluntary flexibility promise to deal with your request, where applicable for legal defence and to fulfil legal obligations (depending on the request Art. 6(1)(b), (c) or (f) GDPR). For this we process in particular your contact details, the order e-mail address or order number needed for identification, the event date, your request and the time of receipt. We check the requirements on the basis of the contract and usage data and send you a personal reply. If you use the “Withdraw from contract” button, we process name, e-mail address, details for identifying the contract, an optional message and the time of receipt, process the withdrawal and send you the confirmation of receipt required by law (Art. 6(1)(b) and (c) GDPR). In the case of photos of other people, we may receive data from guests uploading them. There is no automated decision-making with legal or similarly significant effect, including profiling.

Reviews and feedback: If you submit a public review via the review page, we process the star rating given, the display name you choose, your review text, the time, a voluntarily provided e-mail address and, if you opened it, the review link from your confirmation e-mail, which we use to assign the review to your purchase as “verified”. Publication only takes place with your express consent and only after a check by us; the display name you provide, the stars, the text and the month are then publicly visible, but not your e-mail address. The legal basis for storage and publication is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time with effect for the future; we then remove the review from the website. If you also submit internal feedback or suggestions for improvement, we process the rating for the website, your text and a voluntarily provided e-mail address solely internally to improve our offer; this information is not published. The legal basis in this respect is Art. 6(1)(f) GDPR (interest in improving our website and service). Please do not enter any special categories of personal data or any information about third parties without their consent in the review, display name or feedback.

The example images shown on the public website were generated with artificial intelligence. They do not come from customer galleries and do not show any specific real event. No media or personal data from booked galleries are used for these purely illustrative images.

3. Service providers and recipients

For direct purchases we process the billing country selected by you and the billing-address country transmitted by the payment provider. We need this information to technically enforce our restriction of the sales territory to EU Member States and to comply with tax record-keeping and evidence obligations. If the billing address is outside the EU, a Stripe payment is automatically refunded in full or a PayPal payment is not captured; no activation code is issued. The legal bases are Art. 6(1)(b) and (c) GDPR.

The application and database are operated by netcup GmbH, Emmy-Noether-Straße 10, 76131 Karlsruhe, Germany. Media and technical database backups are stored with Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany; the configured object storage location is the Falkenstein data centre (Germany). These infrastructure companies process data for technical operation.

For bookkeeping and tax returns we use Accountable SA, Square Victoria Régina 1, 1210 Saint-Josse-ten-Noode, Belgium, as a processor (contract under Art. 28 GDPR). We transmit invoices, receipts and the cash book to them as described in section 2 under “Invoices and accounting”. Details: https://www.accountable.de/datenschutzerklaerung/.

Purchase inquiries, offers, access, invoice and reminder e-mails are transmitted via the e-mail service providers used; in addition, the provider of your mailbox processes the message. For a bank transfer, your payment service provider and our account-holding payment service provider also process the necessary payment data under their own responsibility. Secret admin links are only sent to the buyer's address provided and must not be passed on. The holder of the admin link has access to media; images that have not been hidden can also be seen by people with the live wall link and by those present in front of whom the live wall is shown, as well as, to the extent necessary, by authorised persons for support and operation and by the technical service providers used.

The purchase on Etsy is a separate processing operation. To check order numbers entered, we use Etsy's programming interface only for orders of our own shop; we do not take over names, addresses or payment data from Etsy. For our accounting we retrieve the orders and fees of our shop as described in the paragraph “Invoices and accounting”. Etsy processes order and payment data in accordance with its own privacy policy (https://www.etsy.com/legal/privacy/). The website does not include any Etsy trackers. The German storage locations of the gallery do not mean that all processing by Etsy or all e-mail providers takes place exclusively in Germany. Their respective privacy notices apply to their own processing, possible transfers to third countries and safeguards.

For direct purchases we use the payment service provider Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland (“Stripe”). With “Buy now” you are forwarded to a payment page operated by Stripe. There Stripe processes in particular your e-mail address, payment details, where applicable name and billing address, information about the purchase and device and connection data such as the IP address. If the purchase link called contains campaign or referral parameters, we also transmit this information to Stripe as metadata. Stripe processes this data to handle the payment and, where required by law or to prevent fraud, also under its own responsibility. Data may be transferred to Stripe, Inc. in the USA; Stripe relies on the EU Commission's adequacy decision on the EU-US Data Privacy Framework and on standard contractual clauses. After successful payment, Stripe sends a payment receipt to the e-mail address entered on our behalf. If you voluntarily save your payment details with Link, Stripe's payment service, Stripe's terms and privacy notices apply. If you choose a payment method such as Apple Pay, Google Pay or Amazon Pay, the respective provider also processes data in accordance with its own privacy notices. If you choose Klarna, Stripe transmits the information required for payment (in particular e-mail address, name, address, amount and information about the purchase) to Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden. Klarna may carry out an identity and credit check under its own responsibility and decides itself which Klarna payment methods are offered; details: https://www.klarna.com/de/datenschutz/. Details on Stripe: https://stripe.com/privacy. The pages of this website themselves do not include any Stripe scripts; Stripe cookies are only set on Stripe's payment page. The legal basis is Art. 6(1)(b) GDPR, for fraud prevention Art. 6(1)(f) GDPR (interest in secure payments).

For payment with PayPal we use PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg (“PayPal”). With “Pay with PayPal” we transmit the amount, the items purchased and our return addresses to PayPal and forward you to PayPal. There PayPal processes in particular your login and account data, payment data, name, e-mail address, address where applicable and device and connection data such as the IP address. PayPal is itself responsible for this processing, among other things for fraud prevention and to fulfil legal obligations; for individual payment methods such as direct debit, invoice or instalments, PayPal may carry out an identity and credit check. After payment, PayPal transmits the e-mail address of your PayPal account, the payment status and the transaction number to us, but no bank or card details. PayPal may also transfer data to countries outside the EU; details and safeguards: https://www.paypal.com/de/legalhub/privacy-full. The pages of this website do not include any PayPal scripts; PayPal cookies are only set on PayPal's pages. The legal basis is Art. 6(1)(b) GDPR.

If you order printed goods, we transmit the data required for production and delivery to Cloudprinter.com B.V., Gooimeer 6-31, 1411 DD Naarden, Netherlands, which passes the job on to a print partner of its network. Transmitted are your name, the delivery address, a contact e-mail address, a phone number for delivery, the quantity ordered and the print file with the details of your gallery, including any card photo you uploaded. For this purpose the print file is made available for retrieval via an address on our server that cannot be found publicly and is secured with a random key. Cloudprinter and the print partner process the data to perform the order; Cloudprinter selects the print partner according to the delivery destination, for deliveries to Germany and Austria usually within the European Union. We receive automatic status messages about production, shipping and the tracking number. The legal basis is Art. 6 (1) (b) GDPR. Details: https://www.cloudprinter.com/privacy-policy.

Our social-media profiles are hosted by services of Meta Platforms Ireland Limited (Instagram and Facebook), TikTok Technology Limited (TikTok) and Pinterest Europe Ltd. (Pinterest). Public posts and comments may be visible to other people depending on the platform and your settings. The relevant provider also processes messages and interactions; we do not fully control its technical processing or retention periods. For details, including information about any joint controllership and third-country transfers, see Meta https://www.facebook.com/privacy/policy/ and https://www.facebook.com/legal/terms/page_controller_addendum, TikTok https://www.tiktok.com/legal/page/eea/privacy-policy/en, Pinterest https://policy.pinterest.com/en/privacy-policy. You can direct privacy requests about our own profile management to us; for the platform provider’s processing, you may also contact that provider directly.

To get in touch via WhatsApp, we offer a link on our website that opens WhatsApp with our business phone number. If you use this channel, WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland – a company of the Meta group – processes your phone number, your profile information and the content and metadata of your message under its own responsibility in accordance with the WhatsApp Business and privacy terms (https://www.whatsapp.com/legal/privacy-policy-eea). Data may be transferred to Meta Platforms, Inc. in the USA; Meta relies on the EU Commission's adequacy decision on the EU-US Data Privacy Framework and on standard contractual clauses. We process the information you send us via WhatsApp solely to answer your request. Using WhatsApp is voluntary; you can also reach us by phone, e-mail or the contact form. Our website itself does not include any WhatsApp or Meta scripts or tracking pixels; the link only establishes the connection once you click it. The legal basis is Art. 6(1)(b) GDPR insofar as it concerns answering a contract-related request, otherwise Art. 6(1)(f) GDPR (interest in a simple, direct means of contact).

4. Deletion and retention

The locally stored consent for optional measurement contains only the separate choices, time and notice version. It remains valid for no more than 180 days; we then ask again. Pinterest processes tag events under its own privacy and retention rules.

In Google Analytics, retention of user- and event-level data is limited to two months; extension upon renewed activity is disabled. Aggregated standard reports may remain available for longer under Google's rules. Your locally stored cookie choice contains only your decision, its time and the version of the consent notice. It is valid for no more than 180 days; we then ask again. If the analytics purpose or providers change, we obtain fresh consent. You may change your choice sooner at any time or clear it in your browser.

Access to paid galleries ends 180 days after the event date. Free demo galleries expire 10 days after activation. Expired events, media including any local media copies and related data are deleted in the subsequent daily clean-up run. The same e-mail address can activate another demo gallery only after this deletion. Individual media can be deleted beforehand via the admin link. Affected persons without this link can contact us directly.

When the anniversary package is booked, only host photos explicitly selected and guest photos submitted directly to the capsule are kept separately from the gallery. Photos, optional messages, the host message, event details and buyer e-mail address remain until 90 days after the first anniversary and are then deleted in the daily run. Hosts can delete individual photos after opening and their own selected photos beforehand. Before opening they see the number of guest contributions but not their content. Authorised staff may access stored data as necessary for operation and support.

Acceptances and refusals for an invitation and the seating list of the QR seating chart are deleted in the daily clean-up run 30 days after the event date, at the latest with the gallery.

Data on print orders – order number, product, quantity, delivery address, status and tracking number – are kept for queries and warranty and are deleted together with the associated gallery. We delete the generated print file as soon as the order is reported as delivered, at the latest with the gallery; any card photo you uploaded is deleted with the gallery. Invoices and bookings are subject to the statutory tax retention periods and remain unaffected.

Used one-time codes and the e-mail address stored with them are deleted in the daily run 30 days after redemption; unused codes after they expire (normally 365 days after issue). The e-mail address of an active event remains necessary until it is deleted.

We delete messages and non-public inquiries from the social-media inboxes we manage once they have been fully dealt with and no statutory retention obligation or specific legal claim requires us to keep them. Public comments and reactions generally remain visible until you, we or the platform remove them. The providers’ privacy notices govern their own retention. We do not export personal profile statistics into our own database.

We store and display publicly approved reviews until you withdraw your consent or we remove them; reviews that are not approved or have been hidden and internal feedback are deleted as soon as we no longer need them for processing, for improving our offer or for legal defence.

Database backups may still contain information already deleted from the active database. The daily backups are locked against modification and deletion for 30 days and are removed after the retention period in the next successful daily backup run, including older object versions. They are not accessible for normal customer operation. Legal deletions must be taken into account again in the event of a restore. Database backups are not backups of all media.

Access logs are rotated daily; rotated logs of this website are cleaned up after 14 days. In the event of a specific security incident, necessary extracts may be kept separately protected until it has been clarified. Technical maintenance copies are cleaned up after 30 days. Short-lived misuse counters are kept in memory.

The purely aggregated daily values of our own reach and success measurement are deleted in the daily clean-up run after 24 months. We use the campaign and referral information assigned to an individual Stripe purchase for success measurement for no longer than twelve months after the purchase. After that they are no longer used for marketing evaluations. Insofar as individual information remains as part of payment documents or contract and business correspondence that must be retained by law, it is retained exclusively to fulfil these obligations or for legal defence and no longer for advertising evaluation; it is deleted with the respective documents.

We only keep inquiries that do not result in a contract for as long as necessary for their final processing or for asserting or defending against claims. Contract and business correspondence may be subject to statutory retention obligations of six years, accounting records and tax-relevant payment documents to those of eight years; the period generally begins at the end of the respective calendar year (Section 147 AO). The legal basis in this respect is Art. 6(1)(c) GDPR. These obligations do not justify a blanket extension of the storage of gallery photos and videos.

We keep invoices, cancellation invoices and receipts as accounting records for eight years and the cash book as a record for ten years, in each case from the end of the calendar year in which they were created (Section 147 AO); they are then deleted unless they are needed for ongoing proceedings. This also applies to the copies stored with Accountable. The deletion of the technical purchase assignment after 400 days (section 2) does not affect this retention. Between the expiry of the gallery and the end of the retention period we use this data exclusively to fulfil tax obligations and for legal defence.

5. Cookies and browser storage

Only after separate consent do we load the Pinterest Tag on public offer pages and after a confirmed direct purchase. Pinterest may set or read first-party cookies and browser storage. After withdrawal, we stop further transmission and send the tag the refusal so that its first-party context data can be deleted. The tag is not loaded on private gallery or admin pages.

Only after consent, Google Analytics sets analytics cookies on public product pages (in particular _ga and _ga_<measurement ID>, normally for up to two years) and loads the Google script. We store your choice locally in the browser to respect it on later visits. Declining is as easy as accepting; after withdrawal we delete _ga cookies accessible to us and reload the page without the Google script. Google Analytics does not run on guest or admin pages. Our own server-side reach measurement does not set any cookies or access browser or device storage. Admin access works via a secret link. For as long as the browser tab is open, the upload page stores a random ID in session storage. It is used to distinguish normal guests behind a shared internet address from one another and to apply upload limits fairly; it is discarded when the tab is closed. If a guest accepts or declines an invitation, the invitation page stores a random editing key in the browser's local storage so that the guest can view and change their reply on the same device later. The key does not contain any personal information, is strictly necessary for this function requested by the guest (Section 25(2) no. 2 of the German TDDDG) and can be deleted at any time via the browser settings. In the internal area intended only for the operator, the login entered may also be kept in the browser's session storage; it is used exclusively for the requested administrative access. Stripe's own cookie notices apply to Stripe's payment page.

6. Your rights

Subject to the respective legal requirements, you can request access, rectification, erasure, restriction of processing and data portability. You can withdraw any consent given at any time with effect for the future. Please contact the contact address above; please do not send admin links or copies of ID documents unsolicited. If necessary, we will agree an appropriate identity check with you.

Right to object: Insofar as we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you can object on grounds relating to your particular situation. We will stop the processing unless there are overriding legal grounds or grounds for legal proceedings.

You can lodge a complaint with a data protection supervisory authority, in particular in the place of your habitual residence, place of work or place of the alleged infringement. The authority responsible for our registered office is: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf.