The protection of your personal data is very important to me. I therefore process your data exclusively on the basis of the legal provisions (General Data Protection Regulation – GDPR, Telecommunications Act 2021). In this privacy notice, I inform you about the most important aspects of data processing in connection with my website and photographic services.

1. Controller

The controller responsible for data processing on this website is:

Veronika Puchkova, MA

Dorfstrasse 69

2465 Höflein, Austria

contact@viennaportrait.at

2. Data Processing: Purposes and Legal Basis

a) Website Access (Server Log Files)

When you visit this website, the following data may be processed:

• IP address
• Date and time of access
• Browser type and version
• Operating system

Purpose: Ensuring website functionality, security, and stability

Legal basis: Art. 6(1)(f) GDPR (legitimate interest)

b) Contact (Email, Contact Form, Instagram, etc.)

If you contact me, I process the data you provide (e.g. name, email, message content).

Purpose: Responding to inquiries and communication

Legal basis:

Art. 6(1)(b) GDPR (pre-contractual measures)

Art. 6(1)(a) GDPR (consent)

c) Booking and Photography Services

For bookings and service delivery, I process personal data such as name, contact details, and booking information.

Purpose: Contract fulfillment and service provision

Legal basis: Art. 6(1)(b) GDPR (contract)

d) Use of Photos (Portfolio & Marketing)

Photos taken during sessions may be used for portfolio and marketing purposes only with your explicit consent.

Purpose: Self-promotion (website, social media)

Legal basis: Art. 6(1)(a) GDPR (consent)

3. Cookies and Tracking Technologies

We use cookies and similar technologies to ensure the proper functioning of the website, analyze traffic, and improve your experience.

Essential cookies: strictly necessary for security and operation (no consent required).

Analytics cookies: track visits and usage; data may be transferred to the United States (Consent required).

Personalization cookies: remember preferences and optimize galleries (Consent required).

Marketing cookies: deliver relevant content and ads (Consent required).

You can accept, decline, or manage these cookies via the Cookie Settings link in the footer. Consent can be withdrawn at any time without affecting the lawfulness of processing prior to withdrawal.

The tools used are

• Google Analytics

This website uses Google Analytics, a web analytics service provided by Google LLC.

Data (including IP address) may be transferred to the United States.

The transfer is based on the EU-U.S. Data Privacy Framework (DPF).

Legal basis: Art. 6(1)(a) GDPR (consent).

Storage duration: up to 14 months.

• Cloudflare

We use Cloudflare to ensure website security and performance.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest).

• Pixieset

We use Pixieset to provide online galleries for clients.  When accessing these galleries, personal data such as IP address, access times, and, where applicable, login credentials or email addresses may be processed.

Pixieset also uses cookies and similar technologies to ensure functionality, security, and analytics.

Purpose: Provision of client galleries and delivery of photographic services

Legal basis: Art. 6(1)(b) GDPR (contract performance) and Art. 6(1)(a) GDPR (consent, where applicable)

Data may be transferred to third countries (e.g. Canada or the United States).

Transfers are based on appropriate safeguards such as adequacy decisions or standard contractual clauses.

Storage duration: Data is stored for as long as necessary to provide the service.

Further information can be found here: https://pixieset.com/cookies/

• Sentry

We use Sentry to monitor technical errors.

Legal basis: Art. 6(1)(f) GDPR.

• Google Tag Manager

We use Google Tag Manager to manage website tags.

No direct personal data storage, but tags may trigger other services.

• Adobe Fonts (Typekit)

This website uses Adobe Fonts, a service provided by Adobe, to display fonts consistently.

When accessing the website, your browser loads the required fonts directly from Adobe servers. In this process, personal data such as your IP address and browser information may be transmitted to Adobe.

Data may be transferred to third countries, in particular the United States.

Such transfers are based on the EU-U.S. Data Privacy Framework (DPF), under which Adobe is certified.

Legal basis: Art. 6(1)(a) GDPR (consent).

Storage duration: Data is processed for as long as necessary to provide the fonts.

• Google Ads

We use Google Ads, an online advertising service provided by Google LLC.

As part of Google Ads, we use conversion tracking and remarketing features. These technologies use cookies and similar technologies to analyze user behavior after interaction with our advertisements and to display personalized ads across the Google advertising network.

Data (including IP address and user interactions) may be transferred to the United States.

The transfer is based on the EU-U.S. Data Privacy Framework (DPF).

Purpose: Measurement of advertising effectiveness and display of relevant advertisements

Legal basis: Art. 6(1)(a) GDPR (consent)

Storage duration: Data is stored for as long as necessary for the respective purposes, typically up to 12 months (depending on the specific Google Ads settings).

Users can withdraw their consent at any time via the cookie settings on this website.

4. Data Transfers to Third Countries

Some tools used on this website (e.g. Instagram or embedded services) may process personal data (such as IP address) and transfer it to countries outside the European Union, particularly the United States.

Such transfers are based on the EU-U.S. Data Privacy Framework (DPF), an adequacy decision of the European Commission confirming that participating organizations ensure an adequate level of data protection.

Service providers used are certified under the Data Privacy Framework where applicable.

5. Storage Duration

Personal data is stored according to the following criteria:

• Inquiry data: stored for up to 6 months after completion of the request
• Contract and booking data: stored for 7 years (legal retention obligations under Austrian law)
• Images: stored until consent is withdrawn or no longer required for the agreed purpose
• Technical data (server logs): typically stored for up to 14 days

6. Withdrawal of Consent

If processing is based on your consent, you have the right to withdraw this consent at any time with effect for the future.

To withdraw your consent, please contact me at contact@viennaportrait.at



7. Your Rights

You have the right to:

• access your personal data
• rectification or erasure
• restriction of processing
• data portability
• object to processing

You also have the right to lodge a complaint with a supervisory authority.