Privacy Policy

We are pleased about your visit to our website. We continuously work on the content and user-friendliness of our platform. As the controller within the meaning of data protection law, we inform you below about the processing of your personal data by us.

In simple terms, personal data is any information that relates to you personally. The legal definitions of the term "personal data" and other important terms can be found in Article 4 of the GDPR (General Data Protection Regulation).

The controller within the meaning of the GDPR is: art trash GmbH, Boschstr. 12, 82178 Puchheim bei München, Germany, e-mail: info@art-trash.com. Further details can be found in our provider identification / imprint.

We process your personal data for the following purposes and on the following legal bases:

• Performance of pre-contractual measures at your request or performance of a contract (Art. 6 para. 1 lit. b GDPR)
• Protection of our legitimate interests (Art. 6 para. 1 lit. f GDPR)
• Consent given by you (Art. 6 para. 1 lit. a GDPR)

Further information on the individual processing purposes can be found in the following sections of this privacy policy.

We only pass on your personal data to third parties if this is necessary to fulfil the stated purposes and is legally permitted. The scope of the transmitted data is limited to the necessary minimum.

1. Informational use of the website
When you visit our website without actively transmitting data, our server automatically collects technical data (IP address, browser type, operating system, referrer, date and time, etc.). This processing is based on Art. 6 para. 1 lit. f GDPR. The data is deleted after 6 months at the latest.

2. Processing of inquiries
When you contact us (via contact form, email, etc.), we process the data you provide to respond to your request based on Art. 6 para. 1 lit. f GDPR.

3. Contract processing and customer account
For the execution of contracts, we process your data on the basis of Art. 6 para. 1 lit. b GDPR. Data is transferred to necessary service providers. Data is also transferred to a service provider in Kazakhstan (Beissenova Nazgul Rymbaevna) for order processing. To ensure an adequate level of data protection, this transfer is based on the EU Standard Contractual Clauses (SCCs) pursuant to Art. 46 GDPR.

4. Newsletter
When you subscribe to our newsletter, we process your email address based on your explicit consent (Art. 6 para. 1 lit. a GDPR), confirmed via the double opt-in procedure: you receive a confirmation email, and your subscription only becomes active once you confirm it. We log the confirmation to be able to demonstrate your consent (Art. 7 para. 1 GDPR). You can unsubscribe at any time via the link in every newsletter.

5. Cookies
We use technically necessary cookies (e.g. PHPSESSID, WP language cookies) to ensure the functionality of the platform. These are based on Art. 6 para. 1 lit. b GDPR and § 25 para. 2 TTDSG.

6. Social Media
We maintain presences on various social media platforms. If you interact with us there, we process only the data you make publicly available.

7. Enforcement of rights
We process your data to the extent necessary to assert our rights or defend against legal claims (Art. 6 para. 1 lit. f GDPR).

8. Affiliate Tracking and Local Storage
If you visit our website via a partner link (identifiable by the "?ref=" parameter), we save this code in your browser's Local Storage. This serves solely to correctly assign your booking to the referring partner. This code contains no personal data. The legal basis is our legitimate interest (Art. 6 para. 1 lit. f GDPR). You can delete this data at any time by clearing your browser's storage.

9. Transfer of booking data to independent photographers
When you submit a booking request, we transmit the data necessary for the session (name, contact details, date, package, session notes) to the independent photographer you selected. The legal basis is Art. 6 para. 1 lit. b GDPR (performance of the contract). Photographers may be located outside the European Economic Area; in this case, the transfer is necessary for the performance of the contract requested by you (Art. 49 para. 1 lit. b GDPR). Each photographer processes your data as an independent controller exclusively for the preparation and performance of your session; under our platform terms, photographers may not use your data for advertising, may not disclose it to third parties, and must delete it after the order unless statutory retention obligations apply.

10. Referral assignment by email
If you were referred to us by a partner and leave your email address, we store the assignment of your email address to the referring partner in our database. This serves to correctly credit partner commissions and constitutes our legitimate interest (Art. 6 para. 1 lit. f GDPR). You can object to this assignment at any time with effect for the future by contacting us.

11. Access codes for the photo locations map
If you request a free access code for our photo locations map by providing your email address, we process your email address to send you the code (Art. 6 para. 1 lit. b GDPR). We will only use this address for marketing communications (e.g. location tips, seasonal offers) if you have given your separate consent (Art. 6 para. 1 lit. a GDPR), which you can withdraw at any time via the unsubscribe link in every message.

Your personal data will be deleted as soon as it is no longer required for the purpose for which it was collected, unless statutory retention periods (e.g. 6 or 10 years under commercial and tax law) require longer storage.

You have the following rights under the GDPR:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure ("right to be forgotten") (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to withdraw consent at any time (Art. 7 para. 3 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

The provision of your personal data is necessary for the conclusion of a contract or for processing your inquiry. Without this data, we cannot conclude a contract with you or process your request.