Privacy Policy

We take the protection of your personal data seriously. We treat your data confidentially and in line with the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), the German Telecommunications Digital Services Data Protection Act (TDDDG) and this privacy policy.

Personal data is any data that can identify you personally. You can usually use our website without providing any. Wherever we do collect personal data, such as your name, address or email address, this is voluntary as far as possible.

Please note that data sent over the internet, for example by email, can have security gaps. Complete protection against access by third parties is not possible.

Mona und Reiner Fotografie GbR
St.-Anna-Straße 17a
86977 Burggen
Germany

Phone +49 152 219 480 18
Email

The controller is the person or body that, alone or jointly with others, decides on the purposes and means of processing personal data. Our full details are in the imprint.

How do we collect your data?

Some data you share with us yourself, for example when you fill in our contact form or send us an email. Other data is collected automatically by our IT systems when you visit the website. This is mainly technical data such as your browser, operating system or the time you opened the page.

What do we use it for?

Part of the data makes sure the website works without errors. We use the information you send us to answer your enquiry and, if you book us, to plan your wedding with you. Analytics data is only collected with your consent.

What rights do you have?

You can ask us free of charge at any time where your stored data comes from, who receives it and why it is stored. You can have it corrected, restricted or deleted, withdraw consent for the future and complain to a supervisory authority. Details follow under “Your rights”.

• Consent (Art. 6(1)(a) GDPR), for example for analytics or embedded films. Where information is stored on or read from your device, such as cookies, Section 25(1) TDDDG applies as well.
• Contract and pre-contractual steps (Art. 6(1)(b) GDPR), when you send us an enquiry, ask for a quote or book us.
• Legal obligations (Art. 6(1)(c) GDPR), for example retention duties under German tax and commercial law.
• Legitimate interests (Art. 6(1)(f) GDPR), for example the secure and stable operation of our website.

Raidboxes GmbH
Hafenstraße 32
48153 Münster, Germany

Our website is hosted by Raidboxes. Personal data collected here, such as IP addresses, enquiries and metadata, is stored on their servers in Germany. Hosting is based on our legitimate interest in a secure, fast and reliable website (Art. 6(1)(f) GDPR). We have a data processing agreement with Raidboxes in accordance with Art. 28 GDPR.

This website uses SSL/TLS encryption to protect what you send us, such as your enquiry. You can recognise an encrypted connection by “https://” in the address bar and the lock symbol next to it. When it is active, third parties cannot read the data you send us.

Our hosting provider automatically collects and stores information that your browser sends with every visit: browser type and version, operating system, referrer URL, host name of the accessing computer, time of the request and IP address.

This data is not combined with other sources. It is processed on the basis of Art. 6(1)(f) GDPR, because we need it for a technically error-free and secure website.

Our website uses cookies, small text files your browser stores on your device. They do not harm your device and contain no viruses.

Some cookies are technically necessary, for example to remember your cookie settings. We use these on the basis of Section 25(2) TDDDG and Art. 6(1)(f) GDPR. All other cookies, for analytics or embedded films, are only set with your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR), which you can withdraw at any time in the cookie settings.

You can also set your browser to tell you when cookies are set, to allow them only case by case, to block them, or to delete them when you close it. Without cookies, some parts of this website may not work fully.

When you send us an enquiry through our contact form, we store what you enter, such as your names, email address, wedding date, location, your message and, if you like, a photo of the two of you. We use it to answer your enquiry and any follow-up questions. The form runs on WordPress with the plugin WPForms, and entries are stored on our own server.

Legal basis: Art. 6(1)(b) GDPR, as your enquiry relates to a possible booking. We do not pass this data on without your consent. It stays with us until you ask us to delete it, withdraw your consent, or the purpose no longer applies. Statutory retention periods remain unaffected.

If you contact us by email or phone, we store and process your enquiry, including the personal data it contains, in order to handle it. Legal basis: Art. 6(1)(b) GDPR where your enquiry relates to a booking, otherwise our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). We do not pass this data on without your consent.

When you book us, we process what we need to plan and photograph your wedding and to deliver your photos, film and coffee table book: names, contact details, address, date and location, schedule and invoicing details. Legal basis: Art. 6(1)(b) GDPR, and Art. 6(1)(c) GDPR where the law requires us to keep documents such as invoices.

We only share data where your booking requires it, for example with a second photographer or film editor working on your wedding with us, a print shop for your book, or our tax advisor. Where required, we have data processing agreements with these partners.

Sendinblue GmbH (Brevo)
Köpenicker Straße 126
10179 Berlin, Germany

From time to time we send a newsletter by email. There is no sign-up form on this website: we add your email address to our mailing list ourselves, only if you have agreed to it, for example when you send us an enquiry or book us. Legal basis: your consent (Art. 6(1)(a) GDPR).

If you are our client, we may also email you about similar services of ours without separate consent, as Section 7(3) of the German Act against Unfair Competition (UWG) allows. Legal basis: our legitimate interest in staying in touch with our clients (Art. 6(1)(f) GDPR). You can object to this at any time, free of charge.

We send our newsletter through Brevo. Brevo processes your data on our behalf under a data processing agreement and stores it on servers in the EU. Brevo can show us whether a newsletter was opened and which links were clicked.

You can unsubscribe at any time through the link at the end of every newsletter or with a short email to . Your address is then removed from the mailing list. Processing before you unsubscribed remains lawful. More in the Brevo Privacy Policy.

With your consent, this website uses Google Analytics, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It shows us how visitors use our website, for example which pages are viewed and for how long, so we can improve it. For this, cookies are stored on your device and usage data is sent to Google, possibly also to servers in the USA. IP addresses are shortened before they are stored.

Legal basis: your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG), which you can withdraw at any time in the cookie settings. Google is certified under the EU-US Data Privacy Framework, and we have a data processing agreement with Google. More in the Google Privacy Policy.

This website uses Hotjar, a service of Hotjar Ltd., Dragonara Business Centre, 5th Floor, Dragonara Road, Paceville, St Julian’s STJ 3141, Malta, which is part of the Contentsquare group. Hotjar shows us how visitors use our website, for example where they click, how far they scroll and where they leave a page. For this, Hotjar creates heatmaps and recordings of individual visits.

Cookies are stored on your device for this (for example _hjSessionUser, for up to one year), and usage data is sent to Hotjar: a shortened IP address, device and browser type, screen size, approximate location (country), language, the page you came from, and your mouse movements, clicks and scrolling. Anything you type into forms on our website is not recorded. Hotjar stores the data on servers in the EU (Ireland).

Legal basis: our legitimate interest in understanding how our website is used so we can improve it (Art. 6(1)(f) GDPR). You can object at any time, for example by blocking cookies in your browser settings or by sending a short email to . We have a data processing agreement with Hotjar. If data is accessed from outside the EU, this is covered by the EU Standard Contractual Clauses. More in the Hotjar Privacy Policy.

Vimeo.com, Inc.
330 West 34th Street, 5th Floor
New York, NY 10001, USA

We show our wedding films through Vimeo. External videos only load after you have given your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG), which you can withdraw at any time.

When you play a film, your browser connects to Vimeo’s servers. Vimeo learns which of our pages you visited and receives your IP address and other usage data, which may be transferred to the USA. If you are logged in to Vimeo, it can link this to your account. Vimeo participates in the EU-US Data Privacy Framework. More in the Vimeo Privacy Policy.

The typefaces on this website are hosted on our own server. When you visit a page, no connection is made to Google or any other external font provider, and no data is passed on for this.

Our website links to our profiles on Instagram, Facebook and Pinterest. These are simple links, not plugins: no data goes to these platforms when you visit our website. Only when you click a link are you taken to the platform, where its own privacy policy applies.

• Instagram and Facebook: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. Meta Privacy Policy
• Pinterest: Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland. Pinterest Privacy Policy

Unless a specific period is named above, we keep your data only as long as we need it for its purpose. If you ask us to delete it or withdraw your consent, we delete it unless we have other legal grounds to keep it, such as retention periods under German tax and commercial law (generally six or ten years for invoices and business records). We then delete it once those grounds no longer apply.

Some services named above are provided by companies in the USA or may transfer data there. The European Commission has issued an adequacy decision for companies certified under the EU-US Data Privacy Framework. Where a provider is not certified, the transfer is based on the EU Standard Contractual Clauses.

You have the right to:

• access the personal data we process about you (Art. 15 GDPR), including its purposes, categories, recipients, storage period and origin;
• have incorrect or incomplete data corrected without delay (Art. 16 GDPR);
• have your data deleted, unless we need it to meet a legal obligation, for reasons of public interest, or to establish, exercise or defend legal claims (Art. 17 GDPR);
• restrict the processing of your data, for example while you dispute its accuracy (Art. 18 GDPR);
• receive the data you gave us in a structured, common and machine-readable format, or have it sent to another controller (Art. 20 GDPR);
• withdraw your consent at any time with effect for the future (Art. 7(3) GDPR);
• lodge a complaint with a supervisory authority (Art. 77 GDPR).

A short email to is enough.

If we process your data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you can object to this at any time under Art. 21 GDPR, on grounds relating to your particular situation.

If you object to processing for direct marketing, you have a general right to object, which we follow without you having to give a reason. Simply send an email to .

You can contact the supervisory authority where you usually live or work, or the one responsible for us:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach, Germany
www.lda.bayern.de

We update this privacy policy whenever our website or the legal situation changes. The current version always applies.

Last updated November 2026