(GDPR-compliant, as of 2025)
1. Data Controller
Cathrin Andel
11 Trennstraße
1140 Vienna
2. What data is processed?
I process personal data only in accordance with the GDPR:
- Name
- Email, Phone
- Address information (e.g., for invoices)
- Data from contact forms
- Image Data for Photo Assignments
- Technical data collected when visiting the website (IP address, browser, cookies)
3. Making Contact
If you contact me (via the contact form, email, or WhatsApp), the information you provide will be stored so that I can process your request.
Legal basis: Article 6(1)(b) of the GDPR.
4. Photography & Image Processing
Images are processed only with consent or as part of an assignment.
Photos will be published only with express consent.
5. Use of Service Providers (Data Processing on Behalf of the Controller)
For example, I use:
- Web Hosting Provider
- ShootProof / PicTime / Pictrs (online galleries)
- MailerLite (Newsletter)
We have GDPR-compliant contracts with all service providers.
6. Cookies & More
Google Analytics
Will only be downloaded with express consent.
Data is transmitted anonymously.
7. Server Log Files
The web server automatically stores technical data (IP address, browser type, time, pages visited).
This is for security and troubleshooting purposes.
8. Rights Under the GDPR
You can, at any time:
- Right to Information
- Right to Rectification
- Right to Erasure
- Right to Restriction
- Right to Data Portability
- Right to Object
- Right to File a Complaint with the Austrian Data Protection Authority
9. Retention Period
Personal data is stored only for as long as required by law or for the intended purpose (e.g., tax retention requirements).
10. Data Security
The website uses technical and organizational measures, such as SSL encryption and secure passwords, to protect data.
11. Changes
This Privacy Policy may be updated as needed.
