Privacy policy

1. Controller and contact

Sascha Mannel · Photobooth Germany Wolfsschlucht 25 34117 Kassel Germany

Email: buchung@photoboothgermany.com Telephone: +49 177 7379590

You can contact us using the details above for privacy-related requests.

2. Website access and hosting

When you access the site, necessary connection data is processed, including your IP address, time, requested address, browser and device information and, where applicable, the referring page. This supports website delivery, stability and security. The legal basis is Article 6(1)(f) GDPR, based on our legitimate interest in a secure and functioning website.

This website is provided through OpenAI Sites, using OpenAI’s hosting and infrastructure services and its subprocessors, including Cloudflare. Processing may also take place outside the European Economic Area. The current provider list is available at https://openai.com/policies/sub-processor-list/. Provider privacy information: https://openai.com/policies/eu-privacy-policy/.

Videos load directly from media.visualbrander.com. This media domain is hosted by ALL-INKL.COM – Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. ALL-INKL processes the connection data necessary for media requests. Provider information: https://all-inkl.com/datenschutzinformationen. This delivers our media and is not an embedded social-media plugin. Technical logs are processed for operation and security; retention depends on the period necessary for these purposes and the applicable infrastructure requirements.

3. Cookies and browser storage

We do not deploy our own analytics or marketing tools or optional preference storage. The requested page address determines the language. The former language preference and AI special notice are no longer stored in the browser. On loading the site, we remove any remaining former preference data and the old privacy selection from the browser. Technically necessary hosting infrastructure mechanisms support secure website delivery. See the hosting section for details.

4. Enquiries and communication

For enquiries we process your name, email address, phone number, venue, requested package and optional date, message, AI add-on preference and audio guestbook add-on preference. We use these to respond and prepare an offer, under Article 6(1)(b) GDPR or, for business contact persons where applicable, Article 6(1)(f) GDPR for business communication.

The enquiry form creates an email draft locally in your browser from your entries and opens your configured email app. Form contents are not transmitted to our web server or a WordPress contact form, or persistently stored by this website. Only when you send the prepared email in your email app are the details transmitted through your email provider to our business account buchung@photoboothgermany.com. This account is hosted by ALL-INKL.COM – Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. Recipients are the providers responsible for email delivery and technical support and the people handling your enquiry. Your email app and email provider process data under their own privacy information. This does not trigger AI image processing.

Fields marked as required are needed to prepare a complete enquiry; without them the form does not create an email draft. Alternatively, contact us by email or telephone. Enquiries are deleted once resolved unless retention is required by law or for necessary legal claims. Contract, business and invoice records are retained under Article 6(1)(c) GDPR in accordance with applicable statutory obligations.

5. Event recordings and AI portraits

This website does not allow uploads of personal images or audio recordings. Selecting the AI add-on adds your booking preference to the prepared email draft. It is not consent from your guests to subsequent image processing.

For requested AI portraits we use software and cloud services from Lumasoft LLC (dslrBooth / LumaBooth / fotoShare), 293 State Route 18 #123, East Brunswick, NJ 08816, USA. Source images and generated results are processed for image editing, digital delivery and agreed printing. The published contractual information also identifies US subprocessors. Provider information: https://dslrbooth.com/data-processing-agreement and https://dslrbooth.com/privacy-policy.

Before participating in an event service, guests receive information for the specific setup about responsibility, recording, recipients, legal basis, access, transfers and retention. Required consent must be obtained before processing. For AI portraits this particularly concerns voluntary image transfer and editing. Use in our own advertising is separate and requires separate permission.

The specific availability and deletion period is communicated before the event. This notice does not promise automatic deletion after each event. You can request access or deletion using our contact details above.

6. Transfers outside the EEA

The international services mentioned may process data in third countries. Such transfers must meet Articles 44 et seq. GDPR, for example through an applicable adequacy decision or appropriate safeguards such as EU standard contractual clauses with necessary supplementary measures. You may request details or a copy of applicable safeguards through our privacy contact. No blanket certification of all providers is asserted.

7. Your rights

Subject to statutory conditions, you have rights of access, rectification, erasure, restriction of processing and data portability. You may withdraw consent at any time for the future without affecting the lawfulness of prior processing.

Right to object: Where processing is based on Article 6(1)(e) or (f) GDPR, you may object on grounds relating to your particular situation. You may object to direct marketing at any time without giving a reason.

You may lodge a complaint with a data protection authority, particularly where you live or work or where the alleged infringement occurred. The authority for our location is the Hessian Commissioner for Data Protection and Freedom of Information, Gustav-Stresemann-Ring 1, 65189 Wiesbaden; https://datenschutz.hessen.de.

This website does not make automated decisions with legal or similarly significant effects within the meaning of Article 22 GDPR.