Privacy policy

Mario Schubert Fotografie, Hauning 30a, 6306 Söll, Austria. Email: servus@marioschub.com. Phone: +43 67763681543. Please use this email address for questions about your personal data.

Visiting this website generates technical connection data, including IP address, access time, requested address and browser information. This is used to deliver and secure the website and investigate errors. The legal basis is Article 6(1)(f) GDPR, my legitimate interest in operating a secure website.

For enquiries, offers and customer services I process the details you provide, such as names, email addresses, phone numbers, dates, locations, requested services and messages. The customer portal may also contain addresses, wedding schedules, contracts, inspiration links and payment records. The bases are Article 6(1)(b) GDPR for pre-contractual measures and contracts and Article 6(1)(c) GDPR for legal obligations. Only submit other people’s details when authorised to do so.

The website and its APIs are hosted by Vercel Inc. Website images and videos may be delivered through Vercel Blob and ImageKit; some existing images may originate from Unsplash. Providers receive the connection data needed to deliver files. Fonts are served by this website. This necessary delivery is based on Article 6(1)(f) GDPR.

Website content, enquiries and customer records are stored in a PostgreSQL database at Neon, accessed only by the server. Visitors do not receive database access. Processing is based on Article 6(1)(b) GDPR for enquiries and contracts and Article 6(1)(f) GDPR for secure operation.

Further information: vercel.com/legal/privacy-policy, imagekit.io/privacy-policy, unsplash.com/privacy and neon.com/privacy-policy.

Google Analytics tags and embedded YouTube videos do not load without your permission. You can consent separately or reject all optional services. The bases are Article 6(1)(a) GDPR and section 165(3) of the Austrian Telecommunications Act 2021.

Your choices are stored as ms-cookie-consent in browser local storage for up to 180 days. Consent is requested again after expiry or a consent-version change. Necessary storage supports your choices and protected areas. The customer portal uses session storage for the portal password you enter; the admin login also uses browser storage. Necessary access is based on section 165(3) TKG 2021 and Article 6(1)(b) or (f) GDPR, depending on its purpose.

You can change or withdraw your consent at any time using “Cookie settings”. Withdrawing analytics consent disables analytics and deletes accessible first-party Analytics cookies. Withdrawal does not affect the lawfulness of earlier processing.

I use Google Analytics 4 for optional audience analysis. Google Ireland Limited is the provider for EEA users. It activates only when you expressly consent to analytics. Until then, even the Google script is blocked. Google Signals and advertising personalization are disabled in this website’s configuration.

After consent, data may include public pages viewed, device and browser information, events and pseudonymous identifiers. Google also processes connection data, including IP addresses. Analytics cookies configured by this website last up to 180 days. Admin, portal and offer pages are excluded from our page-view tracking; URL query parameters and portal tokens are not passed as page addresses.

Processing in the USA is possible. See policies.google.com/privacy and support.google.com/analytics/answer/6004245 for Google’s processing and transfer information. You can withdraw your consent in Cookie settings.

YouTube videos are embedded only after consent to external videos, using youtube-nocookie.com. Loading still transfers data to Google; privacy-enhanced mode does not replace consent. The provider is Google Ireland Limited and processing in the USA is possible. See policies.google.com/privacy.

WhatsApp, Instagram, Google Maps and Google reviews are provided as links. Merely displaying them does not connect to these providers. Opening a link is subject to that provider’s privacy terms. WhatsApp contact involves processing by WhatsApp Ireland Limited and Meta. You can also contact me by email or phone.

Enquiries are stored in my customer management system and handled through the configured email service. Personal offers use individual links for viewing, downloading and responding. Customer portals use an individual link and password. Please keep these credentials confidential.

Uploaded contracts and documents I provide may be stored in Google Drive, provided by Google Ireland Limited. Depending on sharing settings, a document can be accessed through its individual document link; only share it with authorised people. Drive access by the website is server-side. Customers do not need to connect their own Google account. The basis is Article 6(1)(b) GDPR. See policies.google.com/privacy.

Payment information in the portal provides an overview of agreed and recorded amounts. This website does not store credit-card or online-banking credentials.

Data is disclosed only to people and service providers who need it for the stated purposes or where disclosure is legally required. International providers may process data outside the EEA. Transfers require an appropriate basis under Articles 44 et seq. GDPR, such as an applicable adequacy decision or standard contractual clauses with supplementary measures. Contact me for information about the providers and safeguards relevant to your case.

Data is retained for as long as necessary for its purpose, legal retention requirements or legal claims. It is then deleted or anonymised. Retention of consent choices and Analytics cookies is described separately above.

Subject to the GDPR, you have rights of access, rectification, erasure, restriction, portability and objection. You may withdraw consent at any time for the future. No automated decision-making, including profiling, with legal or similarly significant effects takes place.

You can complain to a data protection authority, in particular the Austrian Data Protection Authority at dsb.gv.at. For questions or rights requests, contact servus@marioschub.com.