Privacy notice

Controller and contact

The controller responsible for personal data processing on this website is Anna Hausner, Anna Hausner Photographie, Heimeranstraße 66, 80339 Munich, Germany. You can contact me at mail@annahausner.de or +49 151 46437007.

Hosting and security

The website and email mailboxes are hosted by ALL-INKL.COM – Neue Medien Münnich, proprietor René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. A data processing agreement is in place with this provider.

When you visit the website, connection data required to deliver it is processed. This may include your IP address, access time, requested address, volume of data transferred, response status, and information about your browser, operating system and referring page. Processing serves website delivery, stability and detection of misuse. The legal basis is Article 6(1)(f) GDPR; my legitimate interest is the secure and reliable operation of the website.

Contact and nonbinding gift voucher enquiries

If you contact me by email, telephone or a form, I process your information to handle your enquiry and communicate with you. Forms collect your name, email address, telephone number and any message you provide. Fields marked as required must be completed to submit the relevant form; you can alternatively contact me by email. Please provide only information needed for your enquiry.

The gift voucher form also collects your preferred voucher type, amount or photography session. It is used solely for a nonbinding enquiry. Submitting it does not create a contract or an obligation to pay.

If an enquiry concerns a contract or steps before entering into one, processing is based on Article 6(1)(b) GDPR. Other enquiries are handled on the basis of my legitimate interest in responding under Article 6(1)(f) GDPR. Forms forward your information by email. ALL-INKL.COM receives data to the extent required for the commissioned hosting and email services.

Retention and deletion

Completed enquiries are deleted once the matter has been resolved and no further communication is needed. Where statutory retention duties apply, or retention is required to establish, exercise or defend legal claims, only the information needed for that purpose is retained. Contract and accounting records are retained for the applicable statutory periods.

Technical logs are retained according to whether they are still needed to analyse errors, investigate a security incident or prevent misuse. Backups serve recovery after data loss; their retention is determined by the required recovery period. They are deleted or overwritten when no longer needed for that purpose. Statutory retention requirements remain unaffected.

Cookies and consent

This website uses Complianz to manage consent. Your choice is stored so it can be respected on subsequent visits. You can reject optional services, change your choice or withdraw consent using the cookie settings.

Storing information on your device or accessing it requires consent under section 25(1) TDDDG unless an exception under section 25(2) TDDDG applies. No such consent is required for operations strictly necessary to provide the service you request. Where personal data is processed, the relevant GDPR legal basis also applies. Your consent choice is stored to respect and document your decision; the legal basis is Article 6(1)(c) GDPR.

Language choice and fonts

Polylang provides the German and English versions. You select your language using the language switcher. Fonts are served locally from the website server. This does not require your browser to connect to a Google Fonts server.

Google Analytics

If you consent to statistics, I use Google Analytics to analyse how this website is used. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Processing includes page views, interactions, technical device and browser information, referrers and pseudonymous identifiers. The analysis helps me understand the use of my content and improve the website. The legal bases are Article 6(1)(a) GDPR and, for relevant device access, section 25(1) TDDDG. Analytics is not loaded without statistics consent.

Google Signals and user-provided data collection are disabled. Data processing terms for Analytics are in place with Google.

Retention is set to two months for event data and 14 months for user data. New activity restarts the retention period for the user identifier. Once the period expires, affected data is removed in the regular monthly deletion cycle. Standard aggregated reports are unaffected by these retention settings.

Use of aggregated and de-identified measurement data for modelling and business insights is enabled. Google support may access Analytics data to resolve technical issues. General sharing for Google products and services is disabled. Business recommendations based on account usage and configuration data are enabled.

The Analytics account is linked to Google Ads. Personalised advertising is disabled for both existing links.

Google LLC may process data in the United States. Google LLC is listed as an active participant in the EU-US Data Privacy Framework. Transfers covered by that certification rely on the European Commission’s adequacy decision. Google’s data processing terms also contain provisions on international transfers. Further information: https://business.safety.google/adsprocessorterms/ and https://www.dataprivacyframework.gov/participant/5780.

External links

The website contains ordinary links to external services, such as social networks. Opening a link takes you to the relevant service. Processing there is governed by that provider’s privacy notice.

Your rights

Subject to the applicable legal conditions, you have rights of access, rectification, erasure, restriction of processing and data portability. Please use the contact details above to exercise your rights. You may also complain to a supervisory authority, particularly at your place of residence or work, or where the alleged infringement occurred. The authority for private businesses in Bavaria is the Bayerisches Landesamt für Datenschutzaufsicht, Promenade 18, 91522 Ansbach, Germany; https://www.lda.bayern.de.

Objection and withdrawal of consent

Where processing relies on Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation. For direct marketing, this condition does not apply. You may withdraw consent at any time with effect for the future; for optional web services, use the cookie settings. Withdrawal does not affect the lawfulness of processing before withdrawal.