Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

Konstantin Gastmann
goenzcom berlin
Friedrich-Junge-Str. 13
10245 Berlin
Germany

Phone: +49 179 1009623
Email: info@eventfotografen.berlin

2. General information

Protecting your personal data is important to us. We process personal data exclusively within the framework of applicable law, in particular the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG).

Personal data means any information that can be used to identify you personally.

3. Hosting and server log files

This website is hosted by the following provider:

cyberwebhosting.de
Proprietor: Marcel Stiller
Grevenweg 72
20537 Hamburg
Germany

When you access this website, the hosting provider records technically necessary server log files. These may include, in particular, the IP address, date and time of access, the page or file accessed, the amount of data transferred, the referrer URL, browser type, browser version, operating system and HTTP status code.

The processing is carried out to provide the website technically and to ensure its stability, functionality and security. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in the secure and trouble-free operation of this website. Where the hosting provider processes personal data on our behalf, this is based on a data processing agreement pursuant to Article 28 GDPR.

4. Contact by email or contact form

If you contact us by email or through a contact form, we process the data you provide in order to handle your enquiry and any follow-up questions.

This may include, in particular, your name, company, email address, telephone number, date or time frame, event location, type of event, requested service, the content of your message and the originating page or URL of the enquiry. Mandatory fields are marked accordingly; any additional information is voluntary.

Contact enquiries are sent by email to info@eventfotografen.berlin and additionally stored in the WordPress backend under “Enquiries” so that enquiries can be processed reliably and followed up. Enquiry records stored in the backend are automatically deleted after 30 days unless longer retention is required in connection with a specific business relationship, pre-contractual measures or a legal obligation.

The legal basis is Article 6(1)(b) GDPR where your enquiry relates to the initiation, conclusion or performance of a contract. In other cases, processing is based on Article 6(1)(f) GDPR. Our legitimate interest lies in handling incoming enquiries appropriately and ensuring reliable internal follow-up.

To protect our contact forms against automated submissions and misuse, we also use Cloudflare Turnstile. The provider is Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA.

When a form is opened and submitted, Turnstile assesses whether the input is likely to have been made by a person or by an automated system. The data processed may include, in particular, the IP address, browser and device information, the user agent, technical characteristics of the connection and browser, the page accessed, the time and result of the check, and the sitekey and associated domain.

Processing takes place in order to ensure the security and functionality of our forms and to prevent spam and misuse on the basis of Article 6(1)(f) GDPR and Section 25(2) TDDDG. Our legitimate interest lies in protecting our website and communication channels against automated attacks and abusive submissions.

Processing of data in the United States cannot be ruled out. Further information about Turnstile data processing is available in Cloudflare’s Turnstile Privacy Addendum.

5. Cookies and similar technologies

Our website uses cookies and similar technologies. Where these are technically necessary, information is stored on your device or previously stored information is accessed on the basis of Section 25(2) TDDDG. Subsequent processing of personal data is carried out, depending on the purpose, in particular on the basis of Article 6(1)(c) or (f) GDPR.

Where cookies or similar technologies are used for statistical, analytical, convenience or marketing purposes, or external content is loaded, this takes place only after your consent pursuant to Section 25(1) TDDDG and Article 6(1)(a) GDPR. You may withdraw or change your consent at any time with effect for the future through the cookie settings available on this website.

6. Consent management with Borlabs Cookie

We use Borlabs Cookie on this website to obtain, manage and document consent to the use of cookies, analytics services and external content.

The provider of the software used is Borlabs GmbH, Hamburger Str. 11, 22083 Hamburg, Germany.

Borlabs Cookie stores your selection in a technically necessary cookie named borlabs-cookie. This cookie may store, in particular, the version of the cookie dialog, the website domain and path, consent granted or declined, the time of the consent decision and a randomly generated identification number. The identification number is used to assign and document the consent decision.

Consent decisions may also be logged on our server where this is necessary to demonstrate that consent was validly granted or withdrawn. Processing is based on Article 6(1)(c) GDPR in conjunction with Article 7(1) GDPR and Section 25(2) TDDDG. Where processing also serves the secure and user-friendly management of consent, it is additionally based on Article 6(1)(f) GDPR.

7. Google Analytics 4

Where you have given consent, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics is used to evaluate the use of our website statistically and to improve our online offering, content and user navigation. The data processed may include, in particular, pages and content accessed, the time and duration of page views, clicks and other interactions, submitted contact enquiries as events, clicks on email addresses and telephone numbers, the referrer or source of a visit, browser and device information, approximate geographical region and pseudonymous user and session identifiers.

After your consent, Google Analytics uses first-party cookies including _ga and _ga_*, in order to distinguish visitors and sessions pseudonymously. Google Analytics is blocked by Borlabs Cookie and is loaded only after you have consented to the relevant service group or accepted all optional services. If you do not consent, the Google Analytics code is not loaded.

The legal basis is your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG. The retention period for user-related and event data in our Google Analytics property is 14 months. You may withdraw your consent at any time with effect for the future through the cookie settings.

Google may also process data on servers outside the European Union or European Economic Area, in particular in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework. Where necessary, data transfers may additionally be based on the European Commission’s standard contractual clauses or other appropriate safeguards.

8. Google Ads conversion tracking

Where you have given consent, we may use Google Ads conversion tracking to measure the effectiveness of advertisements. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

This may record whether users perform specific actions on our website after clicking an advertisement, such as submitting a contact enquiry or clicking contact links. Processing takes place only after your consent. The legal basis is Article 6(1)(a) GDPR and Section 25(1) TDDDG. You may withdraw your consent at any time with effect for the future through the cookie settings.

9. YouTube videos

This website includes videos from YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Where possible, we embed videos through the domain youtube-nocookie.com.

When an embedded YouTube video is loaded, the data processed may include, in particular, the IP address, browser and device information, the page accessed, the time of access, information about playback and use of the video, and cookies or similar identifiers. YouTube videos are initially blocked by Borlabs Cookie and replaced with a placeholder. A video is loaded only after you consent to the “External Media” service group or explicitly unblock the content.

The legal basis is your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG. Processing of data in the United States or other third countries cannot be ruled out. Google LLC is certified under the EU-U.S. Data Privacy Framework; where necessary, standard contractual clauses or other appropriate safeguards may additionally serve as the basis for transfers.

10. Self-hosted videos

Individual videos may be embedded directly from our own server. When such videos are loaded, no external video platforms are contacted. However, technically necessary server requests occur and are processed as part of the hosting and server log files.

11. Locally hosted fonts

The fonts used on this website are hosted locally on our own server. Loading the fonts therefore does not establish a connection to servers operated by Google Fonts or other external font providers.

12. Social media links

Our website may contain links to social networks. Merely visiting our website does not generally transfer personal data to the relevant social network through ordinary links. Only when you actively click such a link are you redirected to the provider’s website. From that point onward, the privacy policy of the relevant provider applies.

13. Recipients of personal data

Personal data are transferred to third parties only where this is necessary for the technical provision of the website, the handling of enquiries, the performance of our services, on the basis of valid consent or due to a legal obligation. Recipients or categories of recipients may include, in particular, hosting providers, technical service providers, communications service providers and the providers named in this Privacy Policy.

Where service providers process personal data on our behalf, we enter into a data processing agreement with them pursuant to Article 28 GDPR where required by law.

14. Data transfers to third countries

Some services used on this website are provided by companies based outside the European Union or European Economic Area or may process data in such countries. Where the European Commission has adopted an adequacy decision for the relevant third country, transfers may be based on that decision. In the case of certified US companies, transfers may in particular be based on the EU-U.S. Data Privacy Framework.

Where no adequacy decision applies, data are transferred only where appropriate safeguards are in place, in particular on the basis of the European Commission’s standard contractual clauses, or on another legally permissible transfer basis. Despite such safeguards, it cannot always be ruled out that public authorities may access personal data when processing takes place in third countries.

15. General retention period

We retain personal data only for as long as necessary for the respective processing purposes or for as long as statutory retention obligations apply. When the processing purpose ceases to apply or a statutory retention period expires, the data concerned are deleted or anonymised unless another legal basis permits further processing. Contact enquiries stored in the WordPress backend are generally subject to automatic deletion after 30 days.

16. Your rights

Subject to the statutory requirements, you have the right to obtain information about the personal data we process pursuant to Article 15 GDPR, to rectify inaccurate or incomplete data pursuant to Article 16 GDPR, to erase your data pursuant to Article 17 GDPR, to restrict processing pursuant to Article 18 GDPR, to data portability pursuant to Article 20 GDPR, to object to processing pursuant to Article 21 GDPR and to withdraw consent pursuant to Article 7(3) GDPR with effect for the future.

Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal. To exercise your rights, you may contact us using the details provided in Section 1.

17. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority concerning the processing of your personal data. In particular, you may contact the supervisory authority responsible for our registered office:

Berlin Commissioner for Data Protection and Freedom of Information
Alt-Moabit 59–61
10555 Berlin
Germany

18. Objection to advertising contacts

We hereby object to the use of contact details published in the Legal Notice or elsewhere on this website for sending advertising that has not been expressly requested. We reserve the right to take legal action in the event of unsolicited advertising information, in particular spam emails.

19. Current status

We reserve the right to amend this Privacy Policy if the services used, the legal situation or the data processing on this website change.

Version of this Privacy Policy: July 2026