1. Data Controller
Falco Moments
Michele Falco
77652 Offenburg, Germany
Email: contact@falcomoments.com
Phone: +49 1517 5001663
Michele Falco
77652 Offenburg, Germany
Email: contact@falcomoments.com
Phone: +49 1517 5001663
We are the data controller for processing personal data on this website.
2. Data Collection and Purposes (Legal Basis Art. 6 GDPR)
- Contact form: Name, email, message for inquiries (Art. 6(1)(b) – contract initiation).
- Essential cookies: Site functionality (Art. 6(1)(f) – legitimate interest).
- Optional analytics: Google Analytics (IP-anonymized, _ga, _gid cookies; Art. 6(1)(a) – consent).
- Photography bookings/portfolios: Client name, contact, images (Art. 6(1)(b)/(a) – contract/consent for portfolio use).
No automated decisions or profiling.
- Contact form: Name, email, message for inquiries (Art. 6(1)(b) – contract initiation).
- Essential cookies: Site functionality (Art. 6(1)(f) – legitimate interest).
- Optional analytics: Google Analytics (IP-anonymized, _ga, _gid cookies; Art. 6(1)(a) – consent).
- Photography bookings/portfolios: Client name, contact, images (Art. 6(1)(b)/(a) – contract/consent for portfolio use).
No automated decisions or profiling.
3. Cookies & Third Parties
Essential cookies cannot be rejected. Optional cookies (analytics) via cookie banner. Third parties: Google Analytics (EU-US Data Privacy Framework, DPA). Opt-out: [tools.google.com/dlpage/gaoptout]. Adobe Portfolio hosting (EU servers or SCCs). No social media plugins or tracking.
Essential cookies cannot be rejected. Optional cookies (analytics) via cookie banner. Third parties: Google Analytics (EU-US Data Privacy Framework, DPA). Opt-out: [tools.google.com/dlpage/gaoptout]. Adobe Portfolio hosting (EU servers or SCCs). No social media plugins or tracking.
4. Data Recipients & Transfers
Processors only: Adobe Portfolio (hosting, Art. 28 GDPR), Google Ireland Ltd. (analytics). No data sales. Transfers to US under Data Privacy Framework or Standard Contractual Clauses (SCCs).
Processors only: Adobe Portfolio (hosting, Art. 28 GDPR), Google Ireland Ltd. (analytics). No data sales. Transfers to US under Data Privacy Framework or Standard Contractual Clauses (SCCs).
5. Your GDPR Rights (Art. 15-22)
Access, rectification, erasure ("right to be forgotten"), restriction, portability, objection (incl. profiling). Withdraw consent anytime (Art. 7(3)). Contact us or complain to: Landesbeauftragte für Datenschutz und Informationsfreiheit Baden-Württemberg (https://www.baden-wuerttemberg.datenschutz.de).
Access, rectification, erasure ("right to be forgotten"), restriction, portability, objection (incl. profiling). Withdraw consent anytime (Art. 7(3)). Contact us or complain to: Landesbeauftragte für Datenschutz und Informationsfreiheit Baden-Württemberg (https://www.baden-wuerttemberg.datenschutz.de).
6. Security & Retention
SSL/TLS encryption. Data deleted post-purpose (inquiries: 30 days; bookings: end of contract + retention). Legal retention: 6-10 years (invoices, HGB/§257 AO). No data protection officer appointed (Art. 37 GDPR exemption for small business).
SSL/TLS encryption. Data deleted post-purpose (inquiries: 30 days; bookings: end of contract + retention). Legal retention: 6-10 years (invoices, HGB/§257 AO). No data protection officer appointed (Art. 37 GDPR exemption for small business).
Last updated: January 2026