Datenschutz | Yvonne Dietzel

1. Controller

The controller responsible for data processing on this website is:

Yvonne Dietzel
Brunnenstraße 46
34537 Bad Wildungen, Germany
E-mail: dietzelphotography(at)gmail.com
Website: yvonne-dietzel-photography.com

2. General Information

The protection of your personal data is important to me. I treat your data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

When using this website, various personal data will be collected. Personal data means any information that can be used to identify you personally.

3. Hosting and Website Provision

Wix.com Ltd.

This website is operated using the website builder provided by Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv, Israel.

Data automatically collected when visiting the website is stored on Wix servers. This includes:

IP address
Device and browser information
Date and time of access
Visited pages
Technical usage data

Wix may process personal data in countries outside the EU (e.g., the USA, Israel). Wix uses GDPR-compliant mechanisms and Standard Contractual Clauses.

Further information: https://de.wix.com/about/privacy

domainfactory (Domain Hosting)

The domain for this website is hosted by domainfactory GmbH, Oskar-Messter-Str. 33, 85737 Ismaning, Germany.
domainfactory typically processes:

Server log files (IP address, URL, date, browser type)

A data processing agreement is in place.

4. Cookies and Consent

This website uses technically necessary cookies that are required for the operation of the site (e.g., language settings, security functions, session cookies).

A cookie consent banner is not required at this time because no tracking or marketing cookies are used.

5. Collection and Processing of Personal Data

I only process personal data when you actively provide it to me or when it is technically required for the functioning of the website.

Legal bases (according to Art. 6 GDPR):

Art. 6(1)(b) GDPR – processing necessary for the performance of a contract or pre-contractual measures (e.g., contact requests).
Art. 6(1)(f) GDPR – legitimate interests (necessary operational processing).
Art. 6(1)(a) GDPR – consent (e.g., photo usage permissions).

6. Contact Form

When you contact me via the contact form, the following data will be stored:

Name
E-mail address
Message content
Phone number (if provided)

These data are used solely to process your request.
Legal basis: Art. 6(1)(b) GDPR.

7. Instagram Plugin

This website integrates features of Instagram (Meta Platforms Inc.).

When you visit a page containing an Instagram widget, a connection to Instagram’s servers is established. Instagram receives at least:

your IP address
information about your visit to this website

If you are logged in to Instagram, Instagram can associate your visit with your profile.

Instagram’s privacy policy:
https://privacycenter.instagram.com/policy

8. Google Maps

This website uses Google Maps to display interactive maps.

Controller: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The following data may automatically be transmitted to Google:

IP address
location data (if enabled)
browser technical data
time of access

The use of Google Maps is in the interest of a clear and user-friendly presentation of my services and location (Art. 6(1)(f) GDPR).

9. Photography & Image Rights

As a professional photographer, I process personal image data (photographs) that depict individuals.

Purposes of Processing

creation, editing, and delivery of the commissioned photographs
presentation of my work (website, social media), if expressly approved
fulfillment of the photography contract

Legal Bases

Art. 6(1)(b) GDPR – performance of a contract
Art. 6(1)(a) GDPR – explicit consent (e.g., for publication on website or Instagram)
Art. 6(1)(f) GDPR – legitimate interests (e.g., backups, workflow organization)

Storage Period

Photographs are stored in accordance with standard professional practice for as long as necessary to fulfill the contract, for archival purposes, or for portfolio use—unless consent is withdrawn.

Disclosure of Images

Photographs are only shared with:

the couple / client
service providers working for me (e.g., retouching, currently not used)
third parties only with explicit written consent

Withdrawal of Consent

Any consent for publication can be withdrawn at any time with future effect (Art. 7(3) GDPR).

10. Server Log Files

The technical operators of this website (Wix/domainfactory) automatically collect log data:

IP address
browser type
operating system
referrer URL
time of access

These data are collected for security and error analysis.
Legal basis: Art. 6(1)(f) GDPR.

11. Rights of Data Subjects

You have the following rights regarding your personal data:

right of access (Art. 15 GDPR)
rectification (Art. 16 GDPR)
erasure (Art. 17 GDPR)
restriction of processing (Art. 18 GDPR)
data portability (Art. 20 GDPR)
objection to processing (Art. 21 GDPR)
withdrawal of consent (Art. 7(3) GDPR)

12. Right to Lodge a Complaint

If you believe that your data is being processed unlawfully, you may contact your relevant supervisory authority.

Germany

The data protection authority of your federal state.

Austria

Austrian Data Protection Authority
Barichgasse 40–42
1030 Vienna
https://www.dsb.gv.at

13. SSL/TLS Encryption

This website uses encrypted HTTPS connections to protect your data from unauthorized access.

14. Changes to This Privacy Policy

I reserve the right to update this privacy policy whenever necessary to ensure compliance with current legal requirements.

15. Data Processing for “Cut&Create” (Business Services)

In addition to my photographic services, I also offer content creation and social media services for businesses and self-employed clients. These services require the processing of additional categories of personal data.

Categories of Data Processed
Depending on the nature of the project, the following data may be processed:

Business and contact data (e.g., company name, contact persons, business addresses)
Access credentials or administrative access to social media accounts (only with explicit consent)
Internal briefings, brand guidelines, media assets
Project, communication, and contract data
Image, video, and audio files
Billing and payment information

Purpose of Processing

Planning, execution, and management of content projects
Creation of photo and video materials
Social media management or content planning
Communication with business contacts
Preparing offers, contract fulfilment, and invoicing
Long-term project documentation and archiving

Legal Basis
Processing is carried out pursuant to Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures).
If access to social media accounts or sensitive content is required, this is done exclusively based on explicit consent under Art. 6(1)(a) GDPR.

Disclosure of Data to Third Parties
Depending on the project, data may be shared with external service providers, such as:

Cloud storage providers
Photo or video editing services
Project management tools
Such processing is carried out only under a data processing agreement in accordance with Art. 28 GDPR.

Storage Period
Business project data are stored for the duration of the collaboration and thereafter within statutory retention periods.
Content data (e.g., images or videos) may be stored for a longer period for archiving or portfolio purposes unless contractual or legal reasons prevent this.

Right of Withdrawal and Objection
Any consent given can be withdrawn at any time with effect for the future.
Contractual or legal obligations to process certain data remain unaffected.