Privacy Notice
„Privacy Policy“ and „Information on the processing of personal data in accordance with Art. 13, 14 DSGVO“
Last updated: November 27, 2024
Introduction
The following sections, “Privacy Policy” and “Information about the processing of personal data in accordance with Art. 13, 14 GDPR,” explain what data I collect about you, what I need this data for and to whom I pass on this data. In addition, they also include your rights in relation to your data and the contact persons to whom you can turn for further information or inquiries.
While the “Privacy Policy” is intended primarily to clarify what personal data I process, store and protect if you use “my website”, the “Information about the processing of personal data in accordance with Art. 13, 14 GDPR” essentially describes how your data are processed in the context of my services for you / my customers and in the context of all other activities that are part of the performance of my business activities.
I. Privacy Policy
-
This Privacy Policy applies solely to the specific website of sarawolff.de, for which Sara Wolff is.
I am committed to protecting your privacy and to processing your information in an open and transparent manner.
This Privacy Policy explains how I process, store and protect information about you when you use my website. I also explain how your data are processed when I provide services to you / my customers and in all other activities that are part of my business activities.
If this policy refers to “my website” or “this website,” this refers to the specific websites, whose URL begins with sarawolff.de.
This privacy policy also contains information about when I share your personal information with other third parties (such as my service providers).
If you provide me with information via the Sara Wolff website, you agree, in accordance with Art. 6 (1) (a), 7 of the GDPR (General Data Protection Regulation), that I may use your personal data in the context of the principles laid down here. Please note in this regard that certain links (electronic links) lead to the websites of third parties. Sara Wolff accepts no liability for the content and / or data protection treatment of data put on these other websites.
-
Although the use of my website is not conditional on the transmission of your personal data and I do not store any personal data via my website without your consent, I may potentially process your personal information if you voluntarily provide it to me for specific purposes in the designated areas of my websites.
In the course of providing services to you / my customers or in the context of discussing services that I may potentially provide, I will process personal data about you to the required extent.
I may collect or receive this information because you provide it to me (e.g. through a form on my website), because I have received it from other people (e.g. your wedding planner or any third party I engaged to the extent legally permissible to assist in the conduct of my business) or because they are publicly available.
In order to improve the operation of my websites for you and to ensure their effective functionality, I use cookies (small text files provided / stored in the user’ browser) and web beacons (small image files that allow my website to identify the number of visitors to a particular area of my website and to request certain stored cookies). I use these tools to collect user information such as IP address, domain, browser type, language, access times and pages visited on my website. This information will be shared with my webmasters to ensure that my website remains a useful and effective source of information.
Neither our cookies nor our web beacons collect personal data, such as names or e-mail addresses. To prevent your Internet browser from receiving any cookies or web beacons, you should change the settings on your internet browser to either stop receiving cookies or web beacons or to ensure the browser prompts you for your consent to each individual cookie or web beacon before accepting them. Read my Cookie Notice for more information on disabling these tools. However, my website may in some cases require the receipt of a cookie and / or web beacon and otherwise denies visitors access to certain areas.
You can use opt-out to prevent your anonymized internet activity from being recorded on websites through analytics cookies. I use the following service providers: Google Analytics & Meta Pixel (as described below).
-
The personal data I collect or obtain about you may include (but is not limited to): name; age; date of birth; gender; e-mail address; country of birth; information about work and education/training; financial and tax information; your IP address; your browser type and your browser language; your access times; complaint details; details about how you use my products and services; details of how you would like to interact with me and other comparable information.
The personal data processed by me may also contain what are known as “sensitive” or “special categories” of personal data, if you provide me with these voluntarily. The types of personal data and particular categories of personal data I process may vary depending on the type of services I provide to you / my customers or the way you use my website.
I underline the importance of protecting the privacy of minors (especially children under the age of 13), in particular with regard to possible misuse of today’s internet communications. For this reason, I would like to emphasize that my website and services are not designed for children or intentionally targeted towards minors. I do not knowingly collect or store information about minors.
-
Processing of personal data collected via my website
In addition to the purposes outlined above in connection with the conduct of my business, I may also process your personal information collected through my website:to manage and improve my website,
customize the content of my website to give you an individualized user experience and to draw your attention to information about my products and services that may be of interest to you,
to manage and answer all inquiries you make to me through my website,
for the purposes to which the visitor has voluntarily consented within the meaning of Article 6 (1) (a), 7 GDPR, such as registration for the purpose of obtaining general or exclusive information, as well as for purposes that registered users can expect in the context of their website usage.
If you, as a registered visitor, no longer wish to use the information or other areas offered, you can object to any further processing of your personal data for the future at any time. Please contact Sara Wolff as the responsible body within the meaning of the GDPR, Bauseweinallee 5, 81247 MUNICH, or sara@sarawolff.de on this matter. The objection will incur no costs other than the transmission costs according to the basic tariffs.
Processing of personal data for the provision of services to my customers
I process your personal data for the purpose of carrying out individual contractual relationships, for the provision of services for you / my customers. In this context, I may process your personal information in the course of correspondence regarding the services. Such correspondence may take place with you, my client, my service providers or relevant authorities. Similarly, I may process your personal information in the course of discussing services I may potentially provide.
As I offer my clients a wide range of services, the way I process personal information in relation to my services also varies.
I may also process your personal data in connection with the following purpose, which is related to the original purpose (depending on the necessity and professional admissibility in individual cases):
For the purposes of maintaining customer relationships, including, but not limited to: (i) providing thought information concerning my products and services that I believe are of interest to you; (ii) contacting you to obtain feedback on my services; and (iii) contacting you for any other market or research purpose, to the extent that the specific legal preconditions are in place, and
Protection of my rights and those of my customers.
-
I process your personal information for the purposes listed above: (a) on the basis of my legitimate interest in the effective provision of my services to you and my customers; (b) on the basis of my legitimate interest in the effective and lawful pursuit of my business, unless your interests outweigh this interest; (c) because the data are necessary for the provision my services to you / my customer.
To the extent that I process sensitive personal information relating to you for any of the purposes listed above, I either do so because: (i) you have given me your express consent to process that data; (ii) the processing is necessary to fulfill my labor, social security or social protection obligations; (iii) the processing is necessary to assert, exercise or defend any legal claims, or (iv) you have made the data public.
If I am required by law to obtain your explicit consent to provide you with certain promotional materials, I will only offer you those materials if I have obtained such consent from you. If you no longer wish to receive further advertising material from me, you can click on the unsubscribe function in the message or send an e-mail to sara@sarawolff.de and object to the processing of your personal data for these purposes at any time without stating any reasons. The objection will incur no costs other than the transmission costs in line with the basic tariffs.
-
In connection with one or more of the purposes outlined in the section “How are your data processed by me?,” I may provide details about you to: third parties providing services to me. In any case, disclosure will only take place if this is also admissible after taking into account relevant professional confidentiality obligations.
My website hosts various blogs, forums, wikis, and other social media applications or services that enable you to share content with other users (collectively known as “social media applications”). However, when using these social media applications, please be aware at all times that the information disseminated through this information channel may (also) be read, collected, stored and / or used by other users of the application. I have little or no control over these other users and therefore cannot guarantee that all the information you provide in the social media applications will be treated in accordance with this Privacy Policy. I therefore take no responsibility for these persons and their treatment of your (personal) data.
Please note that some of the recipients of your personal information mentioned above may be located in countries outside the European Union whose privacy laws may be less comprehensive. In such cases, I will ensure that adequate safeguards have been put in place to protect your personal information and that these safeguards comply with my legal obligations. A data transmission agreement with the recipient based on standard contractual clauses for the transfer of personal data to third countries recognized by the European Commission may be an appropriate safeguard.
I can also provide further details regarding the transfers described above and the appropriate security arrangements made by me with respect to these transfers. Please contact sara@sarawolff.de for more information.
I may also be obliged to disclose your personal information if required to do so by law, by a regulatory agency or as part of a legal process.
I am entitled to share non-personal, anonymized and aggregated data with third parties for various purposes, including but not limited to: data analysis, research, quoting, thought leadership and promotional purposes.
Sara Wolff accepts no liability for the content and / or data protection treatment of data that you or I put on other websites at your request.
-
In order to protect visitor data that is entered on my website, Sara Wolff uses technologically generally accepted security standards to safeguard visitor data on the website from misuse, loss and falsification. In addition, only certain employees have access to the visitor data that can be identified as personal data. These employees will ensure that the confidentiality of this sensitive information is respected within the scope of the purpose of transmission.
All visitors to my websites should also be aware that links (electronic “references”) lead to other websites and information provided by third parties. Unless expressly assured above, Sara Wolff assumes no responsibility for content on third-party websites, including those relating to compliance with certain security standards or compliance with the General Data Protection Regulation.
Notwithstanding the foregoing regarding visitor data on my website, I use a variety of physical, electronic and operational measures to ensure that your personal information is generally safe, accurate and up-to-date. These measures include, but are not limited to:
professional development and training of relevant employees to ensure that they are aware of the data protection obligations when handling personal data,
administrative and technical controls to restrict access to personal data to persons who need to know (“need to know” principle),
security measures, including firewalls, encryption and anti-virus software,
physical security measures, such as a requirement to show employee security badges to obtain access to my premises.
Although I apply reasonable security measures once I have received your personal information, the transmission of data over the Internet (including via e-mail) is never completely secure. I strive and do my utmost to protect personal information but cannot guarantee the security of the data transmitted to or from me.
-
I store your personal information on my systems as long as required by the activity or service in question.
-
You have a range of rights in connection with your personal data. In particular, you have the right:
to request an update of your personal data held by me or, if you think these are inaccurate or incomplete, a correction of that data,
to request the deletion of your personal data stored by me or a restriction on the way I process these data, if this is not precluded by legal obligations,
to revoke your consent to the processing of your personal data by me at any time free of charge without giving reasons, which can be done by contacting sara@sarawolff.de (if such processing is based on consent),
to obtain a copy of the personal information you have provided to me in a structured, common and machine-readable format and to transmit it to another party (if processed on the basis of consent or a contract),
to object to the processing of your personal data by me.
If you wish to exercise your rights or if you have other questions about how your personal information is processed by me, please send an e-mail to sara@sarawolff.de or write us at the following address:
Sara Wolff
Bauseweinallee 5
81247 Munich
Germany -
If you do not agree with the way your personal information is processed by me, or with a request or inquiry that you have addressed to me, please contact sara@sarawolff.de.
Changes to this privacy policy
If necessary, I may amend or supplement this privacy policy.
To let you know when I make changes to this privacy policy, I will adjust the revision date at the top of this page. The newly amended or expanded privacy policy will be effective as of this revision date. Therefore, I encourage you to periodically review this policy to learn how I process and protect your information.
Please note that my website, including this Privacy Notice, have been made available to provide general information and guidance on certain topics, but not to delve into individual topics. My website ais not designed to provide binding advice, any other service or work output, or any response to any related matter, for example.
Questions about the protection of privacy
If you have any questions about this Privacy Statement, or feel that you have specific concerns about it that should be addressed, feel free to contact us directly via sara@sarawolff.de.
-
My websites use the Google Analytics web analytics service provided by Google Inc. (“Google”) and Pixel, provided by Meta Platforms Ireland Limited. Small text files called “cookies” are stored by a server on the Internet on your PC to facilitate an analysis of your usage behavior on this website. The information generated and collected by the cookie is usually transferred to a Google or Meta server in the USA, where it is evaluated and stored.
If IP anonymization is activated on this website, the IP address of Google or Meta will be shortened beforehand within the member states of the European Union and in the other contracting states of the Agreement on the European Economic Area. The complete transfer of the IP address to the server of Google or Meta in the US and the shortening of the IP address being carried out there occurs only in exceptional cases.
Google or Meta uses the information above on behalf of the website operator to evaluate the traffic flows and interactions on this website and compile reports on website activity. In addition, the website operator will be provided with additional services related to website and internet use.
There is a possibility that you can prevent the storage of cookies on your computer by selecting the relevant browser settings and thus prevent the use of Google Analytics and Meta Pixel. However, this setting may result in your not being able to fully use all features of this website.
II. Information about the processing of personal data in accordance with Art. 13, 14 GDPR
Please ensure that, in addition to the information below, you are also familiar with Sara Wolff’s Privacy Policy. For questions of understanding or other queries, please contact me at sara@justyouphotography.de.
Sara Wolff provides services in the areas of people and wedding photography. As part of the commission to provide the above services, Sara Wolff processes personal data according to the individual order. This information complements the Privacy Policy above and provides a more concrete description of how Sara Wolff processes your personal information as part of the provision of the commissioned service.
Please note that this information refers exclusively to personal data within the meaning of Art. 4 No. 1 GDPR, i.e. not all data and information that Sara Wolff receives in relation to the underlying client relationship, but essentially only information that relates to an identified or identifiable natural person.
The controller within the meaning of the GDPR
The controller within the meaning of Art. 4 (7) EU General Data Protection Regulation (GDPR), which is responsible for processing your personal data in connection with all services, is:
Sara Wolff
Bauseweinallee 5
81247 München
Data protection officer
Sara Wolff has appointed a data protection officer. You can contact the respective data protection officer at sara@sarawolff.de.
Purposes of processing and legal basis for processing
Sara Wolff processes your personal information for the purpose of fulfilling my (pre)contractual obligation to my customers. In particular, I process your contact details such as name, address, telephone number and e-mail address in this context in order to carry out pre-contractual measures and to carry out my respective contractual obligations, including administrative execution and settlement of the respective contract on the basis of Art. 6 para. 1 lit. b) GDPR. Sara Wolff uses IT systems to administer and store your personal information to manage and execute order requests / assignments, but with no automated decision-making or profiling.
Depending on the category of documents, Sara Wolff will store personal data for record keeping / documentation and archival purposes in accordance with relevant legislation:
As a rule, Sara Wolff receives the necessary personal data from the customers. In this respect, Sara Wolff has, in accordance with Art. 6 para. 1. f) GDPR, a legitimate interest in the processing of this personal data, as Sara Wolff is obliged to carry out the contracted service on the basis of the underlying contract. In this context, it is essential for Sara Wolff to process any personal data related to the contact persons of my customer (including at an early stage within the context of the offer preparation).
If you have commissioned Sara Wolff to perform certain services, such additional personal data relating to you will be processed in the context of order processing in addition to your contact details to the extent that they are necessary for the provision of the service agreed with you and that you have forwarded such information to me. In this respect, the processing of your personal data is justified to ensure the fulfillment of the contract between you and Sara Wolff and according to Art. 6 para. 1 b) GDPR.
Please note that Sara Wolff’s General Terms and Conditions generally require the client to be obliged to provide Sara Wolff with all the documents and information necessary to complete the contract. In this respect, the processing of the respective order and the associated fulfillment of the contractually agreed service by Sara Wolff is not possible or possible only to a limited extent if and insofar as the necessary information is not provided.
As Sara Wolff is required by law to ensure proper record keeping, extensive documentation of its clients and assignments (also beyond the conclusion of an order) as well as compliance with further retention and documentation obligations, Sara Wolff processes your personal data in the context of documents to be recorded, work results or related customer-related correspondence (also for the purpose of file management), documentation and archiving both in the form of paper files and in the context of IT systems used for this purpose on the basis of Art. 6 para. 1. c) GDPR for the fulfillment of my aforementioned legal obligations.
Notwithstanding the foregoing purposes, Sara Wolff will, to the extent permitted by applicable law, also process your contact information (including name, address, e-mail address) for marketing and advertising purposes, in other words, for example, to provide you with information about my further offers or events. This is done on the basis of consents and / or a legitimate economic interest of Sara Wolff as defined in Art. 6 para. 1. f) to inform my customers about further offers and events they provide and thus to establish and maintain a long-term customer relationship.
Finally, Sara Wolff also processes your contact information for the purpose of maintaining my business contacts when I receive them in the course of a business event, as part of a business appointment (e.g. by exchanging business cards) or as part of an order, and transfer these into the CRM system I use (Customer Relationship Management System).
Because Sara Wolff has a legitimate commercial interest in maintaining contacts in the context of business relations beyond the initial contact, to use them for establishing a business relationship and to remain in contact with the data subject for this purpose, the above processing of your personal data takes place on the basis of Art. 6 para. 1. f) GDPR.
Categories of data recipients and transfers to third countries
In connection with the implementation of the above-mentioned processing, personal data may also be received from third parties, as specified below. Your personal data may be stored within and outside the EU/European Economic Area (EEA). Data may be transferred to both European and non-European countries, whereby the transfer of data may be temporary and does not necessarily lead to storage.
Sara Wolff's external IT service providers within the EU/EEA
Sara Wolff uses third parties as external IT service providers, which provide services for the operation, maintenance and care of the IT systems and applications used by Sara Wolff. External IT service providers are bound by instructions.
To Sara Wolff’s external IT service providers outside of the EU/EEA
When using external IT service providers outside the EU/EEA, an adequate level of data protection is ensured through the use of standard contractual clauses (SCC) of the European Commission within the meaning of Art. 46 (2) (c) GDPR.
Depending on the recipient country, external data transfers further undergo a Transfer Impact Assessment to evaluate the legal and practical implications in the recipient country. This assessment includes a review of local laws and practices to determine if additional protective measures are necessary.
Your rights in connection with data processing
The GDPR essentially grants data subjects the following rights, which you can assert at any time by contacting the data protection officer named in this information at “Data protection officer”.
In principle, you can request information from Sara Wolff at any time as to whether personal data about you are processed or stored at Sara Wolff and which personal data are affected. Please note that your right to information may be restricted to the extent that such information conflicts with professional secrecy and to the extent that information requiring secrecy would be disclosed.
In addition to your right to information, you can request the correction of your data at any time. In addition, you have the right to delete your data if and when the data are no longer needed for the purposes for which it was collected or, if the processing is based on your consent, you have revoked your consent. The aforementioned right to delete your data is waived if your data must not be deleted due to a legal obligation or must be processed due to a legal obligation or if data processing is required for the assertion, exercise or defense of legal rights.
In addition, you have the right to request that Sara Wolff restrict the processing of your personal information.
Added to this is a right to data portability, i.e. you may request that Sara Wolff retain the data you provide in a structured, common and machine-readable format and / or that such data be transmitted to another controller. Please note that this does not apply if you have made the data available to us on the basis of consent or on the basis of a contract concluded with you or if the processing is carried out using automated procedures.
If Sara Wolff processes your personal data on the basis of Art. 6 para. 1. f) GDPR, you can object to this processing at any time.
Right of appeal to a data protection supervisory authority
In addition to the data subject rights listed above, you also have the right to complain to a data protection supervisory authority in accordance with Art. 77 GDPR if you believe that the processing of your personal data violates data protection law. In each case, the supervisory authority of the federal state in which the controller has its seat is responsible.
Duration of data storage
Please note that Sara Wolff will store and process your personal information for as long as it is necessary for the fulfillment of the above mentioned processing purposes. Insofar as personal data are subject to statutory retention obligations or are part of documents subject to statutory retention requirements, Sara Wolff will store this data for the duration of the statutory retention period.
If the data are subject to different retention periods, the longest retention period applies, and the legally required retention period may be extended depending on the individual case, e.g. if the information is required to assert, exercise or defend legal rights even after expiration of the retention period.