last modified December 10th, 2024
Responsible in terms of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:
You can exercise the following rights at any time using the contact details of our data protection officer:
If you have given us consent, you can revoke this at any time with effect for the future.
You may at any time lodge a complaint with a supervisory authority, e.g. the competent supervisory authority in the federal state of your residence or the authority responsible for us as the responsible body.
A list of supervisory authorities (for the non-public sector) with address can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
When you access our website, i.e. even if you do not register or otherwise submit information, information of a general nature is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your Internet service provider, your IP address and similar.
In particular, they are processed for the following purposes:
We do not use your data to draw conclusions about you personally. Information of this kind is statistically evaluated by us anonymously, if necessary, in order to optimize our website and the technology behind it.
The processing is carried out in accordance with Article 6 (1) lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.
The recipient of the data is our hosting provider, which acts as a processor for the operation and maintenance of our website:
We have concluded a data processing agreement with this provider.
The data is deleted as soon as it is no longer required for the purpose for which it was collected. This is generally the case for data used to provide the website when the respective session has ended.
In the case of storage of data in log files, this is the case after 14 days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are anonymized, so that an assignment of the calling client is no longer possible.
The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of our website cannot be guaranteed. In addition, individual services and services may not be available or may be limited. For this reason, an objection is excluded.
Like many other websites, we also use so-called "cookies". Cookies are small text files that are stored on your device (laptop, tablet, smartphone or similar) when you visit our website.
You can delete individual cookies or the entire cookie set. In addition, you will receive information and instructions on how to delete these cookies or block their storage in advance. Depending on the provider of your browser, you can find the necessary information under the following links:
To the extent that you allow us to use cookies through your browser settings or consent, the following cookies may be used on our website:
We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change.
The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change.
We require cookies for the following scenarios:
The processing is carried out in accordance with Article 6 (1) lit. f GDPR on the basis of our legitimate interest in a user-friendly design of our website.
The recipient of the data is our hosting provider, who acts as a processor for the operation and maintenance of our website:
We have concluded a data processing agreement with this provider.
The provision of the aforementioned personal data is not required by law or contract. However, without this data, the service and functionality of our website cannot be guaranteed. In addition, individual services and services may not be available or may be limited.
Please read the information about your right to object according to Article 21 GDPR below.
Furthermore, we use cookies to better tailor the offer on our website to the interests of our visitors or to generally improve it on the basis of statistical evaluations.
Please refer to the information below on the display, tracking, remarketing and web analysis technologies used to find out which providers set cookies.
The legal basis for these processing operations is in each case your consent, Article 6 (1) lit. a GDPR.
Please refer to the listings of the individual display, tracking, remarketing and web analysis providers for the recipients of the data.
Of course, you can also view our website without cookies in principle. Web browsers are set to accept cookies by default. In general, you can deactivate the use of cookies at any time via your browser settings (see Revocation of consent).
Please note that individual functions of our website may not work if you have deactivated the use of cookies.
You can revoke your consent at any time via our Cookie Consent Tool. You can access this here:
To what extent we analyze the behavior of website visitors with pseudonymized user profiles, please see the information below on the display, tracking, remarketing and web analytics technologies used.
Insofar as you have declared your consent, we use the service Crisp to process your inquiries via our live chat. By contacting us via live chat, you consent to the processing of your personal data by Crisp. Crisp may link your data with other publicly available data, e.g. from social networks.
Service provider/recipient of the data:
If you have given your consent, this website uses Google Analytics, a web analytics service provided by Google LLC. The responsible service provider in the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").
Scope of processing: Google Analytics uses cookies that enable an analysis of your use of our websites. The information collected by means of the cookies about your use of this website is generally transferred to a Google server in the USA and stored there.
We use the function 'anonymizeIP' (so-called IP masking): Due to the activation of IP anonymization on this website, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.
During your website visit, the following data is collected, among other things:
Purposes of processing: on behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, and compiling reports on website activity. The reports provided by Google Analytics are used to analyze the performance of our website and the success of our marketing campaigns.
Recipient of the data:
For this purpose, we have concluded a data processing agreement with Google. Google LLC, based in California, USA, and, if applicable, US authorities can access the data stored by Google.
Transfer to third countries:
A transfer of data to the USA cannot be ruled out.
Storage period:
The data sent by us and linked to cookies are automatically deleted after 14 months at the latest. The deletion of data whose retention period has been reached takes place automatically once a month.
You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by
For conversion measurement, we use the visitor action pixel of the following provider:
This allows us to track the behavior of page visitors after they have been redirected to our website by clicking on an ad on Facebook. This allows us to statistically evaluate and optimize the effectiveness of advertisements on Facebook.
The data collected is anonymous for us as the operator of this website, nor can we draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook, so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes, in accordance with the Facebook data usage policy. This allows Facebook to enable the placement of advertisements on Facebook pages as well as outside of Facebook. This use of the data cannot be influenced by us as the site operator.
The use of Facebook Pixel is based on Article 6 (1) lit. f GDPR. The website operator has a legitimate interest in effective advertising measures.
You can deactivate the "Custom Audiences" remarketing function in the settings for advertisements section at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To do this, you must be logged into Facebook.
If you do not have a Facebook account, you can deactivate usage-based advertising from Facebook on the website of the European Interactive Digital Advertising Alliance: https://www.youronlinechoices.com/de/praferenzmanagement
We also use conversion measurement by the following provider:
If you have reached our website via a Microsoft Bing ad, Microsoft Bing Ads will store a cookie on your computer. In this way, Microsoft Bing and we can recognize that someone has clicked on an ad, been redirected to our website and reached a previously determined target page (conversion page).
This use is based on Article 6 (1) lit. f GDPR. The website operator has a legitimate interest in effective advertising measures.
If you do not want information about your behavior to be used by Microsoft as explained above, you can refuse the setting of a cookie required for this – for example, via browser settings that generally disable the automatic setting of cookies. You can also prevent the collection of data generated by the cookie and related to your use of the website, as well as the processing of this data by Microsoft, by declaring your objection under the opt-out link mentioned above.
In addition, we use the rating service by the following provider:
Through this, we would like to receive feedback from you about our services and products. This enables us to improve our offer. This use is based on Article 6 (1) lit. f GDPR.
After ordering and/or using our services, we use your order and address data to send you an e-mail with a request for a rating. For this purpose, your email address and, if applicable, data on the purchased product/service used will be transmitted to Trustpilot.
To submit a rating, you need a user profile on Trustpilot. By clicking on the invitation link, a profile is automatically created for you with your name and e-mail address; Trustpilot will then send you a welcome e-mail with your profile data. For more information on Trustpilot's privacy policy, please see Trustpilot's privacy policy at the link above.
You can object to rating requests from Trustpilot at any time. To do so, simply click on the unsubscribe link included with each e-mail.
For creating a digital guestbook or a photo task set and registering on our website, we require some personal data, which is transmitted to us via an input form.
At the time of registration, the following data is also collected:
Your registration is necessary for the provision of certain content and services on our website.
The processing of the data entered during registration is based on the user's consent (Article 6 (1) a GDPR).
The recipients of the data are our hosting/cloud providers:
We have concluded data processing agreements with these providers.
Data will only be processed in this context as long as the corresponding consent has been obtained.
The provision of your personal data is voluntary, based solely on your consent. Without the provision of your personal data, we cannot grant you access to our offered content.
You may voluntarily register and sign in using social logins of one or more of the following services if you have an account with at least one of these services. These social logins are login and authentication services that are associated with the network of each service.
When you click on the button to log in via the corresponding service, you will be redirected to the service's pages for registration, where you can log in with your user data of the service. Subsequently, you will be explicitly asked to release your e-mail address deposited with this service. We need this e-mail address to communicate with you, including to send you the QR code cards you have created.
We do not transfer any detailed user data (e.g., duration of use, pages visited, or job ads remembered) to the respective service as part of the OAuth process. However, the service is contacted once during each login process because your identity must be verified again. This process can be logged by the service.
Google:You can recognize the login with Google on photasky by the button with the Google logo and the inscription "Sign in with Google".
Details of the service provider:
You can recognize the login with Apple on photasky by the button with the Apple logo and the inscription "Sign in with Apple".
Details of the service provider:
Facebook:You can recognize the login with Facebook on photasky by the button with the Facebook logo and the inscription "Sign in with Facebook".
Details of the service provider:
You can recognize the login with LinkedIn on photasky by the button with the LinkedIn logo and the inscription "Sign in with LinkedIn".
Details of the service provider:
In order to provide paid services, we request additional data. These are, for example, payment details and the shipping address in order to be able to execute your order. In the case of orders for printed QR code cards, we also need to share the contents of the ordered cards with our partners.
The processing of data required for the conclusion of the contract is based on Article 6 (1) lit. b GDPR.
The recipient of the data is our hosting/cloud provider, our accounting solution provider and/or our printing partner:
We store this data in our systems until the statutory retention periods have expired. These are generally 6 or 10 years for reasons of proper accounting and tax law requirements.
The provision of your personal data is voluntary. Without the provision of your personal data, we cannot grant you access to our offered content and services.
We offer the option to process the payment transaction via the payment service provider PayPal (PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg). This is in line with our legitimate interest in offering an efficient and secure payment method (Article 6 (1) (f) GDPR). In this context, we share the following data with PayPal to the extent necessary for the fulfillment of contract (Article 6 (1) (b) GDPR).
The processing of the data provided under this section is not required by law or contract. Without the transmission of your personal data, we cannot carry out a payment via PayPal.
PayPal carries out a credit check for various services such as payment by direct debit to ensure your willingness and ability to pay. This corresponds to the legitimate interest of PayPal (according to Article 6 (1) (f) GDPR) and serves the execution of the contract (according to Article 6 (1) (b) GDPR). For this purpose, your data (name, address and date of birth, bank account details) will be passed on to credit agencies. We have no influence on this process and only receive the result of whether the payment has been made or rejected or a check is pending.
You can find more information about objection options when using PayPal at: https://www.paypal.com/en/webapps/mpp/ua/privacy-full
Your data will be stored until the payment processing is completed. This also includes the period required for processing refunds, claims management and fraud prevention. We are subject to a statutory retention period of 10 years for invoices in accordance with § 257 of the German Commercial Code (HGB).
When guests submit media or comments to the event's host via photasky, the time of their creation as well as their IP address are stored in addition to this information. This serves our security, as we can be prosecuted for illegal content on our website, even if it was created by users.
The processing of media or comment data is based on a legitimate interest (Article 6 (1) (f) GDPR).
By providing the function we want to enable our users to interact in an uncomplicated manner. The information you provide will be stored for the purpose of processing the request and for possible follow-up questions.
Recipients of the data are our hosting/cloud providers:
We have concluded data processing agreements with these providers.
The data is deleted as soon as it is no longer required for the purpose of collection. This is generally the case when the communication with the user has been completed and the company can infer from the circumstances that the matter in question has been conclusively clarified. We reserve the right to delete data without giving reasons and without prior or subsequent information.
You can also have your data deleted by us at any time. To do so, please write an e-mail to the data protection officer listed below or the person responsible for data protection and provide details of the data to be deleted.
The provision of further personal data is voluntary.
For the delivery of our newsletter, we collect personal data that is transmitted to us via an input form.
For an effective registration, we require a valid e-mail address. In order to verify that a registration is actually made by the owner of an e-mail address, we use the "double opt-in" procedure. For this purpose, we log the registration for the newsletter, the sending of a confirmation e-mail and the receipt of the response requested herewith. No further data is collected.
Based on your explicit consent (Article 6 (1) a GDPR), we will regularly send you our newsletter or comparable information by e-mail to your specified e-mail address.
You can revoke your consent to the storage of your personal data and its use for sending the newsletter at any time with effect for the future. You will find a corresponding link in each newsletter. In addition, you can communicate your revocation via the contact option provided at the end of this privacy notice.
In this context, the data will only be processed as long as the corresponding consent has been given. After that, they will be deleted.
The provision of your personal data is voluntary, based solely on your consent. Without existing consent, we can unfortunately not send you our newsletter.
You can revoke your consent to the storage of your personal data and its use for newsletter dispatch at any time with effect for the future. Unsubscribing can be requested via the link contained in every e-mail or from the data protection officer listed below or the person responsible for data protection.
The data you enter will be stored for the purpose of individual communication with you. For this purpose, it is necessary to provide a valid e-mail address and your name. This is used for the assignment of the request and the subsequent response to the same. The provision of further data is optional.
The processing of the data entered in the contact form is based on a legitimate interest (Article 6 (1) f GDPR).
By providing the contact form, we would like to enable you to contact us in an uncomplicated manner. The information you provide will be stored for the purpose of processing the request and for possible follow-up questions.
If you contact us to request a quote, the data entered in the contact form will be processed to carry out pre-contractual measures (Article 6 (1) lit. b GDPR).
The recipient of the data is our hosting provider, who acts as a processor for the operation and maintenance of our website:
Data will be deleted no later than 6 months after the request has been processed.
If a contractual relationship arises, we are subject to the statutory retention periods according to the German Commercial Code (HGB) and will delete your data after these periods have expired.
The provision of your personal data is voluntary. However, we can only process your request if you provide us with your name, e-mail address and the reason for the request.
We use the Sentry service to monitor the stability of our service and to identify software errors. In the process, user data, such as details about the device or the time of the error, are collected anonymously and transmitted to the provider. The data is not personal, is not used for advertising purposes and is subsequently deleted.
To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) via HTTPS.
We maintain online profiles on social networks and career platforms in order to exchange information with users registered there and to be able to contact them in an uncomplicated manner.
In some cases, the data of users on social networks is used to conduct market research and thus pursue advertising purposes. User profiles can be created via the usage behavior of users, for example the specification of interests, and used to adapt advertisements to the interests of target groups. For this purpose, cookies are regularly stored on the devices of the users, partly regardless of whether you are a registered user of the social network.
Depending on where the social network is operated, user data may be processed outside the European Union or outside the European Economic Area. This may result in risks for users because, for example, it may be more difficult to enforce their rights.
Registered users and non-registered users of the social network.
Master data (e.g., name, address), contact data (e.g., email address, phone number), content data (e.g., text details, photographs, videos), usage data (e.g., web pages visited, interests, access times), meta and communication data (e.g., device information, IP address).
Extension of reach, networking.
Legitimate interests (Article 6(1)(f) GDPR), consent (Article 6(1)(a) GDPR).
Interaction and communication on social media profile, profit increase, insights about target groups.
Facebook (page https://www.facebook.com/photasky):
Instagram (page https://www.instagram.com/photasky.event):
YouTube (page https://www.youtube.com/@photasky):
X (forlerly Twitter, page https://www.twitter.com/photasky):
Pinterest (page https://www.pinterest.de/photasky):
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data relating to you which is carried out on the basis of Article 6(1)(f) of the GDPR (data processing on the basis of a balance of interests); this also applies to profiling based on this provision within the meaning of Article 4(4) of the GDPR.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims.
We reserve the right to adapt this privacy policy so that it always complies with the current legal requirements or in order to implement changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your next visit.
If you have any questions about data protection, please send us an e-mail or contact the person responsible for data protection in our organization directly:
The privacy policy was created with the help of activeMind AG, the experts for external data protection officers (Version #2020-09-30).