Privacy Policy

Privacy Policy

This privacy policy informs you about the nature, scope and purpose of the processing of personal data on mallorca-fotoshooting.com in accordance with the GDPR and BDSG.

1. Controller

The party responsible for data processing on this website is:

Chocosite LLC
3833 Powerline Rd, Suite 201
Fort Lauderdale, FL 33309, USA

EU Representative (Art. 27 GDPR):
Dirk Murrnautzky
Tel.: +49 173 585 91 00
E-Mail: dirk (@) chocosite.info

2. General Information

The protection of your personal data is important to us. We treat your personal data confidentially and in accordance with applicable data protection regulations and this privacy policy. Personal data is any data by which you can be personally identified.

We do not use any external tracking or analysis tools. Neither Google Analytics, Facebook Pixel nor any other reach-measurement or advertising cookies are used. For technical provision and simple internal evaluation we use only the processing operations described below.

3. Hosting & Server Log Files

Hosting provider

This website is hosted by:

ALL-INKL.COM – Neue Medien Münnich
Owner: René Münnich
Hauptstraße 68
02742 Friedersdorf
Germany
Web: all-inkl.com
Privacy: all-inkl.com/datenschutzinformationen

ALL-INKL.COM is used on the basis of Art. 6(1)(f) GDPR (legitimate interest in secure and efficient operation of the website). We have concluded a data-processing agreement (DPA) with ALL-INKL.COM pursuant to Art. 28 GDPR.

Server log files

When you access our website, the hosting provider automatically collects information transmitted by your browser (server log files). These include:

This data is not merged with other data sources. Processing serves the technical provision and security of the website (legal basis: Art. 6(1)(f) GDPR — legitimate interest). Log files are deleted after no more than 14 days.

4. Own Page-View and Form Statistics

For simple internal evaluation of the website, we record page views and events related to the contact form (e.g. form opened or submitted). This is collected via a proprietary script on our website, not via external analytics providers.

A randomly generated session ID is stored in your browser's local storage. It prevents repeated views of the same page within a session from being counted multiple times. The session ID is renewed after 30 minutes of inactivity.

Data processed includes the page visited, the session ID, the event type and the time of processing. The data is used exclusively for internal technical monitoring and improvement of the website and is not used for advertising purposes.

Legal basis: Art. 6(1)(f) GDPR — legitimate interest in a simple, data-minimal evaluation of website usage and the functionality of the enquiry form.

5. Contact Form & Enquiries

When you contact us via the enquiry form or by email, the data you provide (name, email address, travel period if applicable, preferred package and your message) is stored for the purpose of processing your enquiry and for possible follow-up questions.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(a) GDPR (consent), which you grant by submitting the form.

Retention period: Your enquiry data is deleted once it is no longer required for the purpose for which it was collected — as a rule after completion of correspondence, at the latest after expiry of statutory retention periods (e.g. 6 or 10 years under HGB/AO for booking records).

No further disclosure to third parties takes place. The data is used solely to process your shoot enquiry.

6. Email Dispatch via Brevo

For the dispatch of our emails — in particular confirmation and response emails in connection with enquiries submitted via the contact form — we use the service Brevo. The provider is Brevo GmbH, Köpenicker Straße 126, 10179 Berlin, Germany.

In the course of email dispatch, in particular name, email address, content of the enquiry, time of dispatch and technical delivery information may be processed. Brevo processes this data on our behalf so that we can reliably respond to your enquiry by email.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures / contractual communication) and Art. 6(1)(f) GDPR (legitimate interest in secure and reliable email dispatch). Where consent is required, processing is based on Art. 6(1)(a) GDPR.

We have concluded a data-processing agreement with Brevo pursuant to Art. 28 GDPR. Further information on data protection at Brevo can be found at brevo.com/legal/privacypolicy/.

7. Locally Hosted Fonts

This website uses web fonts stored locally on our own server for consistent font rendering. When you visit the website, the font files are loaded exclusively from our own server.

No connection to Google servers is established for loading fonts, and no personal data is transmitted to Google in this context.

Legal basis: Art. 6(1)(f) GDPR — legitimate interest in a consistent, fast and privacy-friendly presentation of our website.

8. Link to Instagram

Our website contains a link to our Instagram profile. This is a simple hyperlink. No Instagram content is embedded and no data is transmitted to Instagram unless you actively click the link.

Only after clicking the link will you leave our website and be taken to Instagram (Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland). From that point on, Instagram's privacy terms apply: privacycenter.instagram.com/policy.

9. SSL / TLS Encryption

This website uses SSL/TLS encryption for security reasons. You can recognise an encrypted connection by the fact that the browser address bar changes from "http://" to "https://" and by the padlock icon in your browser bar.

10. Your Rights as a Data Subject

You have the right at any time to:

To exercise your rights, an informal message to our EU representative (contact details see section 1) is sufficient.

11. Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data (Art. 77 GDPR). A list of supervisory authorities can be found at bfdi.bund.de.

As of: 11 May 2026