Privacy Policy

1. Data Controller

The party responsible for data processing on this website is:

2. Data We Collect

a) Contact Form / Booking Inquiries

When you submit an inquiry through our contact form, we collect the following data:

• Name
• Email address
• Wedding date (optional)
• Venue (optional)
• Number of guests (optional)
• Your message

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries).

b) User Account / Dashboard

To use the vendor dashboard, we collect:

• Email address
• Password (stored encrypted)
• Profile information (name, description, location)

Legal basis: Art. 6(1)(b) GDPR (performance of contract).

c) Server Log Data

Each time you access our website, the following data is automatically collected:

• IP address (anonymized)
• Date and time of access
• Requested URL
• Referrer URL
• Browser type and version

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in website security and stability).

3. Purpose of Data Processing

We process your data for the following purposes:

• Responding to your contact and booking inquiries
• Providing and improving our website
• Managing user accounts
• Sending email notifications for new inquiries
• Ensuring IT security

4. Data Recipients / Third Parties

To provide our services, we use the following third-party providers:

• Resend (Resend Inc., USA) -- Sending email notifications for booking inquiries. Privacy policy: resend.com/legal/privacy-policy
• Cloudflare (Cloudflare Inc., USA) -- CDN, DNS, and data storage (Cloudflare R2 for media files). Privacy policy: cloudflare.com/privacypolicy
• Database hosting -- PostgreSQL database atVercel Inc., San Francisco, USA. Data processing within the EU.
• YouTube -- Videos on the homepage load only after you click "Play video". We use embedded players via youtube-nocookie.com. After the click, your browser connects to Google, transmitting information including your IP address. More information is available in the Google privacy policy.
• SoundCloud -- You can listen to acoustic covers on the homepage. An embedded player loads only when you click "Load sample". Your browser then connects to SoundCloud, transmitting information including your IP address. Further information is available in the SoundCloud privacy policy.

For data transfers to the USA, we rely on the EU-US Data Privacy Framework adequacy decision and Standard Contractual Clauses (SCC).

5. Cookies

Our website uses cookies. A cookie is a small text file stored on your device.

Strictly Necessary Cookies

• Session cookie (better-auth.session_token) -- Authentication for logged-in users. Duration: Session.
• Language preference (NEXT_LOCALE) -- Stores your chosen language. Duration: 1 year.
• Cookie consent -- Stores your cookie preferences. Duration: 1 year.

Optional Cookies

We currently do not use any analytics or marketing cookies. Should this change in the future, these will only be set with your explicit consent.

6. Your Rights

Under the GDPR, you have the following rights:

• Right of access (Art. 15): You can request information about your stored data.
• Right to rectification (Art. 16): You can request correction of inaccurate data.
• Right to erasure (Art. 17): You can request deletion of your data, unless legal retention obligations apply.
• Right to restriction (Art. 18): You can request restriction of processing.
• Right to data portability (Art. 20): You can receive your data in a machine-readable format.
• Right to object (Art. 21): You can object to the processing of your data at any time.
• Right to withdraw consent (Art. 7(3)): You can withdraw given consents at any time.

To exercise your rights, please contact: [email protected]

7. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:

8. Data Retention Periods

• Contact inquiries: 6 months after conclusion of correspondence, unless a contract is formed.
• Contract data: 10 years (statutory retention obligation per HGB/AO).
• User accounts: Until account deletion by the user.
• Server log data: 30 days.

9. SSL/TLS Encryption

This website uses SSL/TLS encryption for security purposes and to protect the transmission of confidential content. You can recognize an encrypted connection by the browser address bar changing from "http://" to "https://" and by the lock symbol in your browser bar.

10. Updates to This Privacy Policy

This privacy policy is currently valid as of February 2026. Due to the further development of our website or changes in legal requirements, it may become necessary to update this privacy policy.