Privacy Policy

1. General Information

Welcome to my website! Your privacy and the security of your data are extremely important to me, Lea Mobilia, operating under Lea Mobilia Fotografie/Mobilia Photography. Below, I’ll explain how I collect, store, and use your data, ensuring transparency and compliance with relevant legal regulations, including GDPR.

The use of my Internet pages is possible without any indication of personal data; however, if you want to use my services via my website, processing of personal data could become necessary. If the processing of personal data is necessary and there is no statutory basis for such processing, I generally obtain consent from you.

2. Definitions

My data protection declaration is based on the terms used by the European legislator for the adoption of the General Data Protection Regulation (GDPR). My data protection declaration should be legible and understandable for the general public, as well as my customers and business partners. To ensure this, I would like to first explain the terminology used.

In this data protection declaration, I use, inter alia, the following terms:

a)   Personal data

Personal data means any information relating to an identified or identifiable natural person (“data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

b) Data subject

Data subject is any identified or identifiable natural person, whose personal data is processed by the controller responsible for the processing.

c)   Processing

Processing is any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

d)   Restriction of processing

Restriction of processing is the marking of stored personal data with the aim of limiting their processing in the future.

e)   Profiling

Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.

f)    Pseudonymisation

Pseudonymisation is the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.

g)   Controller or controller responsible for the processing

Controller or controller responsible for the processing is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.

h)   Processor

Processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

i)     Recipient

Recipient is a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing.

j)     Third party

Third party is a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.

k)   Consent

Consent of the data subject is any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

3. Name and Address of the controller

Controller for the purposes of the General Data Protection Regulation (GDPR), other data protection laws applicable in Member states of the European Union and other provisions related to data protection is:

Lea Mobilia (Lea Mobilia Fotografie)

Frankenthaler Str. 10

70499 Stuttgart

Germany

Email: info@leamobiliaphotography.com

Website: mobiliaphotography.com

4. Data Collection

4.1 Personal Data

When you use my website or services, I may collect and store the following personal data:

• Name
• Email address
• Phone number
• Address
• Wedding/Event details (e.g., date, location)
• Payment information
• Any messages or inquiries sent through the contact form

Legal basis for this processing of personal data are Art. 6 (1) a, b, f GDPR.

When you book one of my services I may additionally process the following personal data:

• Pictures and videos of you

Legal basis for this processing of personal data is Art. 6 (1) b GDPR.

4.2 Website Data

When visiting my website, additional data may be collected through cookies and analytics tools:

• IP address
• Operating System used
• Browser type and version used
• Website from which you are accessing my website
• Pages viewed (sub-websites)
• Duration of your visit
• Date and time of your access
• Device information
• any other similar data and information that may be used in the event of attacks on our information technology systems

Legal basis for this data processing are Art. 6 (1) a, f GDPR.

When using the website data and information, I do not draw any conclusions about you. Rather, this information is needed to (1) deliver the content of my website correctly, (2) optimize the content of my website as well as its advertisement, (3) ensure the long-term viability of my information technology systems and website technology, and (4) provide law enforcement authorities with the information necessary for criminal prosecution in case of a cyber-attack. Therefore, I analyze anonymously collected data and information statistically, with the aim of increasing the data protection and data security of my enterprise, and to ensure an optimal level of protection for the personal data that is processed. The anonymous data of the server log files are stored separately from all personal data provided by you in Pixieset’s secure servers.

In short, the website data helps improve the functionality of the website and tailor it to your needs as well as ensure the security and stability of my website.

5. Purpose of Data Usage

The personal data collected is used for the following purposes:

1. Communication: To respond to inquiries and provide customized offers.
2. Service Delivery: For wedding/event planning, contracts, and ensuring the smooth provision of photography services.
3. Marketing: Sharing your event’s highlights (with prior consent) on platforms like Instagram and Meta for promotional purposes.
4. Analytics: Using tools like Google Analytics to analyze website performance and improve the user experience.
5. Payment Processing: Securely managing transactions.

6. Third-Party Services / Transfer and recipients of personal data

Your personal data may be transferred for some data processing, because I work with the following third-party services to provide and enhance my photography services. I have concluded data processing agreements in accordance with Art. 28 GDPR with Pixieset Media Inc., Adobe Inc., Hostinger International Ltd. and Scrappbook these third-party service providers where necessary. 

Your data may be shared with them under strict confidentiality and security guidelines:

• Pixieset: For website hosting, galleries, and client proofing.
• Adobe: For photo editing and creative services.
• Scrappbook: To deliver galleries and facilitate communication.
• Hostinger: For communication with you, they provide my email service.
• Instagram/Meta: For sharing highlights and marketing purposes.
• Google: Displaying my location and business details in maps, providing performance analytics and such via Google Analytics for my business account (for further information please check below).
• Pinterest: For sharing highlights and providing inspiration
• WhatsApp Business: For communication with you, if you so choose, it’s up to your consent. Otherwise Email is also possible, just takes longer.

All service providers adhere to GDPR and international privacy standards. If you’d like further information and links to their detailed policies please check below.

https://pixieset.com/privacy/

https://pixieset.com/dpa/

https://www.hostinger.de/legal/datenschutz-bestimmungen

https://www.hostinger.de/legal/dpa

https://www.adobe.com/de/privacy/policy.html

https://www.adobe.com/content/dam/cc/de/legal/terms/enterprise/pdfs/DPA-DE.pdf

https://scrappbook.de/datenschutz-2

7. Data Storage and Protection

I take your data security seriously. Here’s how I ensure it:

• If you contact me or book one of my services, your personal data is stored securely on a password-protected laptop with encrypted Wi-Fi or LAN connections.
• Backup copies of data are stored on encrypted external hard drives and may also be stored on a local NAS.
• Data collected via the website is stored on Pixieset’s secure servers.
• Data collected via the website’s contact form is stored on Hostinger’s secure servers, as they host my email service to which every submission through the website’s contact form is directed

8. Cookies and Tracking Tools

8.1 Cookies

This website uses cookies to enhance the browsing experience. Cookies are text files that are stored in a computer system via an Internet browser.

Many Internet sites and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a character string through which Internet pages and servers can be assigned to the specific Internet browser in which the cookie was stored. This allows visited Internet sites and servers to differentiate the individual browser of the dats subject from other Internet browsers that contain other cookies. A specific Internet browser can be recognized and identified using the unique cookie ID. You’ll be prompted to accept cookies upon visiting the site. These include:

• Essential cookies for website functionality
• Analytics cookies for performance monitoring (e.g., Google Analytics)

8.2 Opt-Out

You can manage or disable cookies via your browser settings. However, disabling cookies may affect website functionality.

9. Your Rights

Under GDPR, you have the right to:

• Confirmation: Request information of your personal data is being processed 
• Access: Request a copy of your data.
• Correction: Update any inaccuracies.
• Deletion: Request the removal of your data (subject to legal retention obligations).
• Restriction: Limit how your data is processed.
• Data Portability: Receive a copy of your data in a portable format.
• Objection: Withdraw consent for data use at any time.
• Automated individual decision-making, including profiling: You have the right not to be subject to a decision based solely on automated processing, including profiling
• Right to withdraw data protection consent: You have the right to withdraw your consent to the processing of your personal data that is based on your consent at any time.

For any of these requests, please contact me at info@leamobiliaphotography.com.

10. Retention Period

I store personal data:

• As required for contractual obligations.
• For a maximum of 10 years for legal retention purposes (e.g., invoices).
• Marketing-related data (especially photos and/or videos) will be kept until consent is withdrawn.

11. Further Information on Google Analytics and Social Media:

11.1 Google Analytics

On this website, I have integrated the component of Google Analytics (with the anonymizer function). Google Analytics is a web analytics service. Web analytics is the collection, gathering, and analysis of data about the behavior of visitors to websites. A web analysis service collects, inter alia, data about the website from which a person has come (the so-called referrer), which sub-pages were visited, or how often and for what duration a sub-page was viewed. Web analytics are mainly used for the optimization of a website and in order to carry out a cost-benefit analysis of Internet advertising.The operator of the Google Analytics component is Google Ireland Limited, Gordon House, Barrow Street, Dublin, D04 E5W5, Ireland.For the web analytics through Google Analytics I use the application "_gat. _anonymizeIp". By means of this application the IP address of your Internet connection is abridged by Google and anonymised when accessing my websites from a Member State of the European Union or another Contracting State to the Agreement on the European Economic Area.The purpose of the Google Analytics component is to analyze the traffic on my website. Google uses the collected data and information, inter alia, to evaluate the use of my website and to provide online reports, which show the activities on my websites, and to provide other services concerning the use of my Internet site for me. Google Analytics places a cookie on your information technology system. The definition of cookies is explained above. With the setting of the cookie, Google is enabled to analyze the use of my website. With each call-up to one of the individual pages of my Internet site, which is operated by me and into which a Google Analytics component was integrated, the Internet browser on your information technology system will automatically submit data through the Google Analytics component for the purpose of online advertising and the settlement of commissions to Google. During the course of this technical procedure, the enterprise Google gains knowledge of personal information, such as your IP address, which serves Google, inter alia, to understand the origin of visitors and clicks, and subsequently create commission settlements. The cookie is used to store personal information, such as the access time, the location from which the access was made, and the frequency of visits of my website by you. With each visit to my Internet site, such personal data, including the IP address of the Internet access used by you, will be transmitted to Google in the United States of America. These personal data are stored by Google in the United States of America. Google may pass these personal data collected through the technical procedure to third parties. The data subject (you) may, as stated above, prevent the setting of cookies through my website at any time by means of a corresponding adjustment of the web browser used and thus permanently deny the setting of cookies. Such an adjustment to the Internet browser used would also prevent Google Analytics from setting a cookie on your information technology system. In addition, cookies already in use by Google Analytics may be deleted at any time via a web browser or other software programs. In addition, you have the possibility of objecting to a collection of data that are generated by Google Analytics, which is related to the use of this website, as well as the processing of this data by Google and the chance to preclude any such. For this purpose, you must download a browser add-on under the link https://tools.google.com/dlpage/gaoptout and install it. This browser add-on tells Google Analytics through a JavaScript, that any data and information about the visits of Internet pages may not be transmitted to Google Analytics. The installation of the browser add-ons is considered an objection by Google. If your information technology system is later deleted, formatted, or newly installed, then you must reinstall the browser add-ons to disable Google Analytics. If the browser add-on was uninstalled by you or any other person who is attributable to your sphere of competence, or is disabled, it is possible to execute the reinstallation or reactivation of the browser add-ons. Further information and the applicable data protection provisions of Google may be retrieved under https://www.google.com/intl/en/policies/privacy/ and under http://www.google.com/analytics/terms/us.html. Google Analytics is further explained under the following Link https://www.google.com/analytics/

Additionally Google is certified under the EU-US Data Privacy Framework, which regulates the secure and compliant transfer of personal data of EU-citizens to the US. More information available under: https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en

Furthermore Google uses standard contractual clauses according to Art. 46 GDPR. More information on standard contractual clauses can be found here https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

11.2 Social Media and external links

Besides my website I also maintain accounts on different social media platforms, which you can access through the corresponding components/social buttons on my website. If you choose to visit one of my social media profiles your personal data may be automatically transmitted to the operating company of that social network.

In this event, user data may be transferred to a server in a third country without adequate data protection policies and be processed outside of the European Union. In addition to the personal data submitted to the social media service by you, the operating company might process further personal data.

Furthermore the operating company of the social media service processes the core data of your information technology system used to visit the social media service where appropriate - these information may include your IP-address, the internet browser version and plug-ins as well as the used processor type.

If you are logged into your social media account while visiting my website or cross-visiting the social media service from my website, the operating company of said social media service may connect this to your personal account.

For further information and the applicable data protection provisions please look into the respective controllers information:

a. Instagram/Meta:

Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland 

https://help.instagram.com/155833707900388

https://www.instagram.com/about/legal/privacy/

Opt-Out: https://help.instagram.com/155833707900388

b. Google:

Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA 

https://policies.google.com/privacy,

Opt-Out Möglichkeit: https://adssettings.google.com/authenticated

c. Pinterest:

Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2,Ireland

https://about.pinterest.com/privacy-policy

12. Changes to the Policy

This Privacy Policy may be updated to reflect changes in legal requirements or business operations. The most recent version will always be available on this page.

By using this website, you agree to the terms of this Privacy Policy.

This data privacy policy was created by partially using legal texts provided by a privacy policy generator, that was developed by the specialists for LegalTech at Willing & Able that also developed the system for dpia pia. The legal texts contained in our privacy policy generator have been provided and published by Prof. Dr. h.c. Heiko Jonny Maniero from the German Association for Data Protection and Christian Solmecke from WBS law.