Daniel Josef Winter
Badendorfberg 23a
8413 Ragnitz, Austria
Protecting your personal data is particularly important to us. We therefore process your data exclusively on the basis of the statutory provisions (GDPR, Austrian Telecommunications Act TKG 2021). In this privacy policy we inform you about the most important aspects of data processing on our website. This English translation is provided for convenience; the German version is legally binding.
The controller responsible for data processing is Daniel Josef Winter, Badendorfberg 23a, 8413 Ragnitz, Austria. You can reach us by phone at +43 680 5009229, by email at [email protected] or by post at the address above.
In accordance with Art. 32 GDPR, we take appropriate precautions to protect your personal data. These concern in particular protection against unauthorised, unlawful or accidental access, loss, alteration and misuse.
This website is designed, developed and operated by us. We are both the website operator and the technical administrator and therefore have direct access to the server, without an external agency or additional hosting provider being involved as a further processor.
Each time our website is accessed, our server automatically records technical information transmitted by your browser (server log data): IP address, date and time of the request, browser type and version, operating system used, referrer URL and the page accessed. This data is used exclusively for the secure and trouble-free operation of our website, for example to detect attacks, and is not combined with other data sources. The legal basis is our legitimate interest pursuant to Art. 6 (1) (f) GDPR.
If you contact us via our contact form or the package finder, we process the data you voluntarily provide in order to handle your enquiry. Depending on the form, this includes: name, email address and/or phone number, wedding date and wedding location, your message and, for the package finder, additional information on the desired wedding size, service, your budget, the desired hours and how you became aware of us.
Processing takes place to answer your enquiry or to initiate a contract (Art. 6 (1) (b) GDPR) and on the basis of our legitimate interest in handling enquiries efficiently (Art. 6 (1) (f) GDPR). Emails are sent via our email service provider Mailgun (Sinch Mailgun Inc., 900 S. Capital of Texas Hwy, Austin, TX 78746, USA), with whom a data processing agreement is in place. Your data will be deleted as soon as it is no longer required for processing, but no later than six months, unless a statutory retention obligation applies.
To protect against spam and automated form abuse, we use invisible anti-spam fields (honeypot) and Cloudflare Turnstile (see the section “Spam protection with Cloudflare Turnstile”).
If you request access to a sample gallery via our website, we process your name and email address in order to send you the access link automatically by email (also via Mailgun). The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR, which you give by submitting the form and which you can withdraw at any time with effect for the future, for example informally by email to [email protected].
Our website uses cookies, small text files that are stored on your device by your browser. Using our cookie consent tool, you can determine which categories of cookies may be set. You can change your selection at any time via the cookie button at the bottom of the screen.
These cookies are required for the operation of the website and cannot be deactivated. They include the session cookie “laravel”, which enables basic technical functions and does not track any user-related data. Storage period: 1 year.
These cookies are only set after your active consent and are used to measure the reach and success of advertisements: Facebook tracking pixel and Google Analytics. Details can be found in the following sections.
We use the privacy-friendly open-source analytics service Plausible for the anonymous, statistical evaluation of website usage. Plausible does not use cookies and does not collect any personal data; IP addresses are not stored and there is no cross-device or cross-website tracking. All data is processed and stored exclusively on our own server at plausible.danielwinter.at; it is not transferred to third parties or third countries. As no personal data is processed, no consent is required; the legal basis is our legitimate interest in optimising our website (Art. 6 (1) (f) GDPR).
Only after your explicit consent via our cookie banner do we load Google Analytics (GA4), a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies that enable an analysis of website usage. The information generated is transmitted to Google servers and stored there, possibly also in the USA. Without your consent, Google Analytics is not loaded; you can withdraw your consent at any time with effect for the future via the cookie button. The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR in conjunction with § 165 TKG 2021. Further information can be found in Google’s privacy policy: https://policies.google.com/privacy
Only after your explicit consent via our cookie banner do we use the Meta pixel of Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. This allows us to track the effectiveness of our advertisements on Facebook and Instagram (conversion tracking). A connection to Meta’s servers is established and your IP address and interaction data are transmitted, possibly also to the USA. Without your consent, the Meta pixel is not loaded. The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR. Further information: https://www.facebook.com/privacy/policy/
On our website we display reviews from our Google Business Profile. We retrieve these on the server side via the Google Places API and update them automatically; when our site is accessed, no direct connection is established between your browser and Google to retrieve the review texts. However, as required by Google, the profile pictures of the reviewers are loaded directly from Google servers (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland); in the process your IP address is transmitted to Google. The legal basis is our legitimate interest in displaying authentic customer reviews (Art. 6 (1) (f) GDPR).
To display fonts we use “Outfit” and “Cormorant Garamond”. These font files are stored entirely locally on our own server and are delivered from there. There is no connection to Google Fonts, Bunny Fonts or any other external font provider, and no data whatsoever, in particular no IP address, is transmitted to third parties.
To protect our forms against automated abuse, we use Cloudflare Turnstile, a service of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. In the background, Turnstile uses technical characteristics, including your IP address and browser characteristics, to check whether a form request comes from a human or a machine, usually without you having to solve a visible puzzle. The legal basis is our legitimate interest in the functional, abuse-free operation of our forms (Art. 6 (1) (f) GDPR). Further information: https://www.cloudflare.com/privacypolicy/
On our website we merely link to our Instagram profile. This is a simple hyperlink and not an embedded social media plug-in. When you visit our site, no automatic connection to Instagram/Meta servers is therefore established; only when you actively click the link do you leave our website, and Instagram’s privacy policy applies.
Beyond the processors and third-party providers mentioned in the sections above (Mailgun, Google, Meta, Cloudflare), we only pass on your data if we are legally obliged to do so, if the disclosure is in the public interest or if you have given your prior consent. We transmit data to our tax advisor insofar as this is necessary to fulfil our tax obligations.
In principle, you have the rights of access, rectification, erasure, restriction of processing, data portability and objection to processing. Insofar as processing is based on your consent, you can withdraw it at any time with effect for the future.
If you believe that the processing of your data violates data protection law or that your data protection rights have otherwise been infringed, you can complain to us at [email protected] or to the Austrian Data Protection Authority (Datenschutzbehörde).