Privacy Policy

1. Data Controller

The "Controller" as defined by the General Data Protection Regulation (GDPR) and other applicable data protection laws within the member states of the European Union is Filmtau, Sarah Pfister and Felix Lang (hereinafter referred to as "Controller," "we," or "us").

2. Scope and Purpose of Data Processing

As part of the contract conclusion, we collect and process your personal data for the purpose of contract fulfillment and to ensure the best possible preparation for our services. To this end, we store not only your names, addresses, and contact details but also additional information regarding the planned wedding, the guests, and the location. This serves to prepare us for your celebration and to create lasting memories for you.

Furthermore, we use selected photos taken at your wedding for our own promotional purposes. This is done without mentioning your surnames or other contact details, using only your first names. These photos are primarily distributed in digital form on our own website but may also be displayed and published in other locations as references.

Finally, we upload your wedding video to the platforms vimeo.com and vidflow.co to provide you with access to your wedding film.

3. Legal Basis for Processing

Art. 6 (1) (b) GDPR serves as the legal basis for the processing of personal data required for the performance of a contract to which the data subject is a party. This also applies to processing operations necessary for the implementation of pre-contractual measures. In cases where consent has been obtained for the further processing and storage of personal data, Art. 6 (1) (a) GDPR serves as the legal basis.

4. Data Erasure and Storage Duration

Personal data of our clients will be deleted or blocked as soon as the purpose of storage no longer applies. This is fulfilled once the contract has been fully performed, all warranty and other contract-related rights of both parties have expired, and the statutory retention periods under tax or commercial law for contract documents have passed.

Further storage will only occur if expressly provided for by European or national legislators in Union regulations, laws, or other provisions to which we are subject. Data will be blocked or deleted once a storage period prescribed by the aforementioned norms expires, unless further storage is required for the conclusion or fulfillment of a contract.

Please note: The online gallery is accessible for only 6 months after the wedding and will be deleted thereafter.

5. Disclosure to Third Parties

Your personal data will not be shared with third parties, with the exception of the aforementioned use of photographs for promotional purposes and the use of online galleries/video platforms.

6. Rights of the Data Subject

If your personal data is processed, you are a "Data Subject" as defined by the GDPR, and you have the following rights against us (the "Controller"):

(1) Right of Access You may request confirmation as to whether we are processing personal data concerning you. If such processing exists, you may request information regarding the purposes, categories of data, recipients, planned storage duration, and the existence of rights to rectification, erasure, or objection. You also have the right to information regarding data transfers to third countries or international organizations.

(2) Right to Rectification You have the right to have inaccurate or incomplete personal data rectified or completed without delay.

(3) Right to Erasure ("Right to be Forgotten") You may request the immediate erasure of your personal data if the data is no longer necessary for its original purpose, if you withdraw your consent and there is no other legal basis for processing, or if the data was processed unlawfully.

(4) Right to Restriction of Processing You may request the restriction of processing if you contest the accuracy of the data, if the processing is unlawful but you oppose erasure, or if we no longer need the data but you require it for legal claims.

(5) Right to Notification If you have exercised your right to rectification, erasure, or restriction, we are obligated to notify all recipients to whom your data was disclosed, unless this proves impossible or involves disproportionate effort.

(6) Right to Data Portability You have the right to receive your personal data in a structured, commonly used, and machine-readable format and have the right to transmit that data to another controller without hindrance from us, where technically feasible.

(7) Right to Object You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Art. 6 (1) (e) or (f) GDPR. We will then stop processing the data unless we can demonstrate compelling legitimate grounds that override your interests.

(8) Right to Lodge a Complaint with a Supervisory Authority Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, particularly in the member state of your residence, place of work, or place of the alleged infringement, if you believe the processing of your data violates the GDPR.