Privacy Policy

This Privacy Policy explains how personal data is processed on this website in accordance with the EU General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).

Your Rights

Under the GDPR you have the right to:

• access your personal data (Art. 15);
• request rectification of inaccurate data (Art. 16);
• request erasure (Art. 17);
• request restriction of processing (Art. 18);
• receive your data in a portable format (Art. 20);
• object to processing based on legitimate interest (Art. 21);
• withdraw consent at any time (Art. 7(3));
• lodge a complaint with the Austrian Data Protection Authority (www.dsb.gv.at) or the supervisory authority of your place of residence.

Server Logs

The website is hosted on Cloudflare Pages, operated by Cloudflare, Inc. (101 Townsend Street, San Francisco, CA 94107, USA). Each request to the website causes the following data to be processed transiently for delivery and security purposes:

• IP address;
• browser type and version;
• the address of the referring website;
• the date and time of the request.

Purpose: delivery, security, and technical stability of the website.
Legal basis: Art. 6(1)(f) GDPR — legitimate interest in operating and securing the website.
Storage period: in accordance with Cloudflare's standard retention; see Cloudflare's Data Processing Addendum at cloudflare.com/cloudflare-customer-dpa.

Cookies and Consent

Cookies and similar technologies are used only with your prior consent (Art. 6(1)(a) GDPR; § 165 Abs. 3 TKG 2021). When you first visit the website, a banner asks you to accept or reject analytics cookies. You may change your choice at any time using the "Cookie settings" link in the footer.

A full description of the cookies used is provided in our Cookie Policy.

Web Analytics

Subject to your consent, this website uses Google Analytics, a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), with sub-processing by Google LLC in the United States. The service is used to compile aggregate statistics on how visitors use the website.

The data processed for this purpose includes:

• a pseudonymous identifier assigned to your browser;
• the pages visited and the interactions performed on them;
• device type, browser, language, and approximate location derived from your IP address;
• the date and time of each session and interaction.

IP addresses are anonymised. The data is not used for advertising purposes, and no advertising or profiling features of the service are enabled.

Purpose: aggregate statistics on website usage in order to improve the website.
Legal basis: Art. 6(1)(a) GDPR — your consent.
Storage period: analytics data is retained for 14 months.
Withdrawal: select "Cookie settings" in the footer and choose "Reject"; existing analytics cookies are then deleted.

Booking

The booking function is provided by Cal.com, Inc. (United States). The booking script is loaded only when you interact with the booking section (hover, tap, or keyboard focus); it is not loaded on initial page view.

Once active, the service processes your name, email address, and chosen date and time in order to arrange your booking, together with the technical data necessary to operate the embedded scheduling interface.

Purpose: arranging photography session bookings.
Legal basis: Art. 6(1)(b) GDPR — performance of pre-contractual measures, and Art. 6(1)(a) GDPR for any non-essential cookies set by the service.
Recipient: Cal.com, Inc., United States; the transfer is governed by the Standard Contractual Clauses.
Further information: cal.com/privacy.

Email Contact

If you contact us using the email link in the footer, your message is handled by your own email provider and by our email provider ({{email provider}}) in order to respond to your enquiry.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR (responding to enquiries).
Storage period: until your enquiry has been dealt with, subject to any statutory retention obligations.

International Data Transfers

Google and Cal.com may transfer data to the United States. These transfers are governed by the European Commission's Standard Contractual Clauses, together with supplementary technical and organisational measures adopted by each provider.

Automated Decision-Making

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.

Changes to this Policy

This Privacy Policy may be updated to reflect changes to the website or to applicable legal requirements. The version published here is the version in force.

Last updated: 2026-06-12