Privacy Policy

1. Controller

Photographer Tim Schneider
Industriestraße 20
04229 Leipzig, Germany
Email: hi@timschneider.eu
Phone: +49 176 34019833

2. Website delivery and hosting

This website is delivered through Vercel Inc. Vercel processes connection and technical data such as IP address, request time, requested URL, browser information and diagnostic data to deliver, secure and operate the website. The legal basis is Art. 6(1)(f) GDPR: our legitimate interest in reliable and secure website operation.

Content, images and submitted inquiry backups are managed with Sanity. Images may be delivered through Sanity's content delivery network. More information: Vercel privacy notice and Sanity privacy policy.

3. Contact inquiries

If you use an inquiry form, we process the information you provide: name, email address, optional telephone or WhatsApp number, wedding date, location, requested coverage, message and, where applicable, selected services. If you consented to analytics, the inquiry may also contain campaign, referrer and click-path attribution data.

The data is used to answer your inquiry and prepare or perform a contract. The legal basis is Art. 6(1)(b) GDPR; for general inquiries, Art. 6(1)(f) GDPR also applies. WhatsApp is used only if you explicitly select that option, on the basis of Art. 6(1)(a) GDPR.

Inquiries are stored as a protected backup in Sanity and delivered to us by email through Resend. Depending on the active operational configuration, a notification may also be sent through Telegram or a protected automation webhook. The providers process only the data required for delivery. See the Resend privacy policy.

Inquiries that do not result in a contract are reviewed regularly and deleted when the inquiry is finally closed and no legal claim or documentation duty requires continued storage. Contractual and accounting records are retained for the applicable statutory periods.

4. Consent settings and local storage

Your privacy choice is stored locally in your browser under cookie-consent-v2. This storage is required to remember your choice and is based on Section 25(2) no. 2 TDDDG. Optional analytics storage and access occur only after consent under Art. 6(1)(a) GDPR and Section 25(1) TDDDG.

You can change or withdraw your choice at any time through “Privacy settings” in the footer. Withdrawal does not affect processing carried out before it. Rejecting analytics sends a denial signal and removes known first-party analytics cookies.

5. Optional analytics

Only after your consent, this website loads Google Analytics 4, Vercel Web Analytics and Microsoft Clarity. These services help us understand page usage, technical performance and campaign attribution. Depending on the service, processed data may include page URL, approximate location, device and browser information, interactions, referrer, campaign parameters and pseudonymous identifiers. We do not use these tools for personalised advertising.

With analytics consent, accepted inquiries are also measured server-side and associated with the current Analytics session. We transmit the service category and acceptance status, but not names, email addresses, telephone numbers or message contents. Calendar confirmations are measured without booking details. Local attribution expires after 90 days; a new visit starts after 30 minutes of inactivity. Withdrawal stops measurement and removes local attribution. The consent choice is renewed after 180 days.

Providers: Google Ireland Limited / Google LLC, Vercel Inc. and Microsoft Ireland Operations Limited / Microsoft Corporation. Legal basis: Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Further information: Google privacy policy, Vercel privacy notice and Microsoft privacy statement.

6. Error and performance monitoring

We use Sentry to detect technical errors and severe performance issues. The implementation is configured not to send default personally identifiable information or session replays. Technical event data may include the affected URL, browser and device information, timestamps and error details. The legal basis is Art. 6(1)(f) GDPR: our legitimate interest in a secure, stable website. More information: Sentry privacy policy.

8. Videos and external links

YouTube videos use the privacy-enhanced youtube-nocookie.com domain and are loaded only after you click the play button. Social networks, WhatsApp and other external websites receive data only when you follow the relevant link. Their own privacy notices then apply.

9. International transfers and recipients

Some providers are based in or use infrastructure in the United States or other countries outside the EEA. Transfers are safeguarded, where required, through an adequacy decision such as the EU–U.S. Data Privacy Framework, EU Standard Contractual Clauses or other safeguards under Arts. 44 et seq. GDPR. We conclude data-processing agreements where required.

10. Your rights

Subject to the statutory requirements, you have rights of access, rectification, erasure, restriction, data portability and objection. You may withdraw consent at any time. Contact us using the details above. You also have the right to lodge a complaint with a data-protection supervisory authority.

The competent local authority is the Saxon Data Protection and Transparency Commissioner, Maternistraße 17, 01067 Dresden. Complaint information.

No automated decision-making or profiling with legal or similarly significant effects takes place.