I'm spending the next few weeks on a big overhaul of my website. It might look a bit untidy here and there in the meantime.
Which details I get from you, what I do with them, who I bring in along the way and how long I keep them. In plain language, because a privacy policy nobody can get through is not much use to anyone.
Who I am and where to reach me is in the imprint. If something here is wrong, or you want to know what I hold about you, email info@sophiaeerden.com.
Your details do not go to advertisers, data brokers or anyone else looking to make money from them. Not ever.
A photo of you goes on my site or Instagram only once you have said yes. You can withdraw that yes whenever you like.
I ask for what I need to photograph your day and send an invoice. Nothing beyond that.
Want to know what I hold about you, or want it deleted? One email is enough, see your rights.
Per type of detail: what I use it for, which ground under article 6 of the GDPR allows it, and how long it stays.
Everything you fill in reaches me as an email. The form asks for nothing I do not need in order to come back to you with an honest proposal.
Most contact runs over email. Some couples would rather message, and photos of locations often arrive that way.
Once you book I need more: where we are going, at what time, who is there and what happens on the day.
To send an invoice I need a few details from you, and the tax authority sets how long those have to stay on file afterwards.
What do I do with the photos and video I take at your wedding?
This is the one thing I genuinely ask permission for, and I always ask before I publish any photos.
The copyright in the photos is mine, which is in the imprint. But whoever appears in them decides whether an image gets published anywhere, and that is you.
Those two things do not clash, they sit side by side. In practice it means I simply ask.
Nothing goes online without you knowing. No hidden tick box in the small print, but a question you can say no to. A no changes nothing about what you receive.
A year from now you would rather they came down? Send me a message and I take the photos off my site and off Instagram. You do not owe me a reason.
If someone says during the day that they would rather not be photographed, then it does not happen. If someone only notices later in the gallery, I take that photo out. An email to me is enough.
I do everything myself, but not everything on my own computer. These are the services that see your details along the way, and what for.
Software that runs on my own computer is deliberately not on this list: Lightroom, Photoshop, Aftershoot, DaVinci Resolve and AlbumStomp handle your images locally and send them nowhere. The original files sit on an external drive at my home, with the Backblaze backup as a second copy. For the services above that sit outside the European Union, either an adequacy decision of the European Commission or its standard contractual clauses apply, and I make no decisions about you on the basis of automated analysis.
Webflow, which this site runs on, sets a few small files needed to show the page and to make the form work. Those need no consent and there is no profile behind them.
The server briefly records which IP address requested which page, with which browser and when. That is needed to keep the site running and secure, article 6(1)(f), and those logs are cleared automatically.
I use Google Analytics to see which pages get read. It only loads after you have clicked accept in the cookie notice. Click refuse and nothing happens, and the site works exactly the same. Changed your mind? Clear this site's data in your browser and the notice comes back.
Ask which details I hold about you and what I do with them.
Have something corrected that is not right.
Have your details deleted, apart from what I am legally required to keep.
Have the use put on hold while something is being sorted out.
Receive your details in a common file format.
Object to processing based on legitimate interest.
Take back your yes for the photos, whenever you like.
If we cannot resolve it between us, you can complain to the Austrian Data Protection Authority, the Datenschutzbehörde, dsb.gv.at.
Is something unclear, or missing? Email me directly at info@sophiaeerden.com and I will put it right.
