[{"data":1,"prerenderedAt":767},["ShallowReactive",2],{"privacy-policy-en":3},{"id":4,"title":5,"body":6,"description":5,"extension":760,"meta":761,"navigation":762,"path":763,"seo":764,"stem":765,"__hash__":766},"privacy_en/en/privacy-policy.md","Privacy Policy (Website incl. Blog)",{"type":7,"value":8,"toc":729},"minimark",[9,13,21,24,27,32,42,56,58,62,65,111,113,117,120,146,148,152,159,164,178,184,190,196,198,202,209,220,234,238,246,252,260,262,266,273,280,284,292,305,307,311,320,324,335,340,348,350,354,365,370,372,376,379,384,402,406,412,415,435,448,466,471,482,486,492,495,500,502,506,515,521,526,528,532,546,552,558,563,568,570,574,581,586,591,602,607,611,613,617,620,622,626,630,633,637,640,642,646,649,663,670,672,676,699,701,705,708,710,714,720,722,726],[10,11,5],"h1",{"id":12},"privacy-policy-website-incl-blog",[14,15,16,20],"p",{},[17,18,19],"strong",{},"Status:"," January 07, 2026",[14,22,23],{},"This privacy policy informs you about which personal data we process when you visit our website (including the blog) and use its functions (e.g., contact form), and which rights you are entitled to under the GDPR.",[25,26],"hr",{},[28,29,31],"h2",{"id":30},"_1-controller","1. Controller",[14,33,34,37,38,41],{},[17,35,36],{},"Dopamin Weddings"," Owner: ",[17,39,40],{},"Isabell Spieth"," St.-Veit-Str. 11a, 81673 Munich, Germany",[14,43,44,45,48,49],{},"Phone: ",[17,46,47],{},"+49 173 9532253"," Email: ",[17,50,51],{},[52,53,55],"a",{"href":54},"mailto:info@dopamin-weddings.de","info@dopamin-weddings.de",[25,57],{},[28,59,61],{"id":60},"_2-overview-of-processing-activities","2. Overview of Processing Activities",[14,63,64],{},"We process personal data in particular for the following purposes:",[66,67,68,75,81,87,93,99,105],"ul",{},[69,70,71,74],"li",{},[17,72,73],{},"Provision of the website"," (content retrieval, stability, security)",[69,76,77,80],{},[17,78,79],{},"Contact / handling inquiries"," (contact form)",[69,82,83,86],{},[17,84,85],{},"Reach measurement"," (Google Analytics - only with consent)",[69,88,89,92],{},[17,90,91],{},"Security and abuse protection"," (Firebase App Check, rate-limiting)",[69,94,95,98],{},[17,96,97],{},"Display of fonts"," (Google Fonts - hosted locally)",[69,100,101,104],{},[17,102,103],{},"Social media linking"," (Instagram/LinkedIn; links only)",[69,106,107,110],{},[17,108,109],{},"Communication"," (Microsoft 365: Exchange/Teams; WhatsApp upon user initiative)",[25,112],{},[28,114,116],{"id":115},"_3-legal-bases","3. Legal Bases",[14,118,119],{},"Unless stated otherwise, we process data based on the following legal grounds:",[66,121,122,128,134,140],{},[69,123,124,127],{},[17,125,126],{},"Consent"," (Art. 6(1)(a) GDPR), e.g., for analytics cookies.",[69,129,130,133],{},[17,131,132],{},"Contract / pre-contractual measures"," (Art. 6(1)(b) GDPR), e.g., for inquiries via the contact form.",[69,135,136,139],{},[17,137,138],{},"Legitimate interests"," (Art. 6(1)(f) GDPR), e.g., IT security, prevention of abuse, and ensuring technical operation.",[69,141,142,145],{},[17,143,144],{},"Legal obligation"," (Art. 6(1)(c) GDPR), e.g., within the scope of statutory retention periods.",[25,147],{},[28,149,151],{"id":150},"_4-hosting-website-delivery-and-server-log-files-firebase-hosting","4. Hosting, Website Delivery, and Server Log Files (Firebase Hosting)",[14,153,154,155,158],{},"Our website is operated via ",[17,156,157],{},"Firebase Hosting",". During every visit, technically necessary data is processed to deliver the website and ensure security/stability.",[14,160,161],{},[17,162,163],{},"Types of data processed (typical):",[66,165,166,169,172,175],{},[69,167,168],{},"IP address, date/time of access",[69,170,171],{},"Requested page/file, referrer URL",[69,173,174],{},"Browser type/version, operating system",[69,176,177],{},"Other technical log data where applicable",[14,179,180,183],{},[17,181,182],{},"Purposes:"," Provision of the website, error analysis, security.",[14,185,186,189],{},[17,187,188],{},"Legal basis:"," Art. 6(1)(f) GDPR (legitimate interest in safe, stable operation).",[14,191,192,195],{},[17,193,194],{},"Note on data processing / third-country transfer:"," Firebase is a Google service. Depending on the specific service, transfers to third countries (e.g., USA) cannot be ruled out; please see the notes under sections 6/7 (Google).",[25,197],{},[28,199,201],{"id":200},"_5-cookies-consent-management-cookie-banner","5. Cookies & Consent Management (Cookie Banner)",[14,203,204,205,208],{},"We use a consent banner to store your ",[17,206,207],{},"Analytics"," choices and to ensure Google tags only run fully after the corresponding selection is made.",[14,210,211,212,215,216,219],{},"A cookie named ",[17,213,214],{},"\"consent\""," is stored, containing the consent status (e.g., Analytics: yes/no) and a version number. The storage period is ",[17,217,218],{},"180 days",".",[66,221,222,228],{},[69,223,224,227],{},[17,225,226],{},"Essential:"," technically required (cannot be deselected)",[69,229,230,233],{},[17,231,232],{},"Analytics:"," only upon consent",[14,235,236],{},[17,237,188],{},[66,239,240,243],{},[69,241,242],{},"Essential: Art. 6(1)(f) GDPR",[69,244,245],{},"Analytics: Art. 6(1)(a) GDPR",[14,247,248,251],{},[17,249,250],{},"Withdrawal:"," You can withdraw your consent at any time with effect for the future, e.g., via the cookie settings in the footer or the banner.",[14,253,254,255,219],{},"Further details can be found in our ",[256,257],"i18n-link",{"text":258,"to":259},"Cookie Policy","cookie-policy",[25,261],{},[28,263,265],{"id":264},"_6-google-tag-manager-analytics-deployment-via-gtm","6. Google Tag Manager (Analytics deployment via GTM)",[14,267,268,269,272],{},"We use the ",[17,270,271],{},"Google Tag Manager (GTM)"," to manage tags centrally (including Google Analytics). GTM itself does not create its own user profiles; it serves the technical integration and control of tags.",[14,274,275,276,279],{},"We use ",[17,277,278],{},"Consent Mode"," so that, by default, no analytics storage occurs until consent is granted (\"default denied\" and subsequent \"update\" change).",[14,281,282],{},[17,283,188],{},[66,285,286,289],{},[69,287,288],{},"Operation/control of essential tag infrastructure: Art. 6(1)(f) GDPR",[69,290,291],{},"Triggering of analytics tags: Art. 6(1)(a) GDPR",[14,293,294,297,298,301,302,219],{},[17,295,296],{},"Provider / Third-country transfer:"," Google services in the EU are usually provided via ",[17,299,300],{},"Google Ireland Limited",". A transfer of personal data to Google companies in third countries (especially the USA) cannot be ruled out. The transfer takes place ",[17,303,304],{},"on the basis of the EU-US Data Privacy Framework and the Standard Contractual Clauses of the EU Commission",[25,306],{},[28,308,310],{"id":309},"_7-google-analytics-ga4-only-upon-consent-deployed-via-gtm","7. Google Analytics (GA4) - only upon consent, deployed via GTM",[14,312,275,313,316,317,219],{},[17,314,315],{},"Google Analytics 4"," to measure and analyze the use of our online services (e.g., page views, duration of visit, interactions). The integration is carried out ",[17,318,319],{},"via Google Tag Manager",[14,321,322],{},[17,323,163],{},[66,325,326,329,332],{},[69,327,328],{},"Usage data (events/interactions)",[69,330,331],{},"Device and browser information",[69,333,334],{},"IP-based location derivation (usually truncated or processed according to the mechanisms described by Google)",[14,336,337,339],{},[17,338,188],{}," Consent (Art. 6(1)(a) GDPR).",[14,341,342,345,346,219],{},[17,343,344],{},"Third-country transfer:"," When using Google services, a transfer to third countries (e.g., USA) cannot be ruled out. The transfer takes place ",[17,347,304],{},[25,349],{},[28,351,353],{"id":352},"_8-google-fonts-locally-hosted","8. Google Fonts (locally hosted)",[14,355,356,357,360,361,364],{},"We use fonts (\"Google Fonts\") that are delivered ",[17,358,359],{},"from our own server"," or via our hosting, so that ",[17,362,363],{},"no connection to Google servers"," is required to retrieve the fonts.",[14,366,367,369],{},[17,368,188],{}," Art. 6(1)(f) GDPR (legitimate interest in a uniform, high-performance presentation).",[25,371],{},[28,373,375],{"id":374},"_9-contact-form-getting-in-touch-incl-firebase-cloud-functions-firestore","9. Contact Form / Getting in Touch (incl. Firebase Cloud Functions & Firestore)",[14,377,378],{},"When you contact us via the contact form, we process the information provided by you to handle your inquiry.",[380,381,383],"h3",{"id":382},"_91-what-data-is-processed","9.1 What data is processed?",[66,385,386,389,396,399],{},[69,387,388],{},"Name, email address, subject, topic (category)",[69,390,391,392,395],{},"Content of your message ",[17,393,394],{},"or"," details for a consultation call (preference, availability)",[69,397,398],{},"Wedding details if applicable (date / period / status \"still open\")",[69,400,401],{},"Technical metadata for abuse prevention and traceability (IP address, user agent, path; \"raw\" status as JSON if applicable)",[380,403,405],{"id":404},"_92-technical-processing-firebase-retentiondeletion","9.2 Technical Processing (Firebase) & Retention/Deletion",[14,407,408,409,219],{},"The inquiry is processed via ",[17,410,411],{},"Firebase Hosting → Cloud Functions",[14,413,414],{},"We use:",[66,416,417,423,429],{},[69,418,419,422],{},[17,420,421],{},"Firebase Cloud Functions"," (server logic, validation, dispatch)",[69,424,425,428],{},[17,426,427],{},"Firebase Firestore"," (storage of the inquiry, abuse protection)",[69,430,431,434],{},[17,432,433],{},"Firebase App Check"," (protection against automated access)",[14,436,437,440,441,444,445,219],{},[17,438,439],{},"Firestore Storage (TTL):"," Contact inquiries are stored with a ",[17,442,443],{},"TTL (Time To Live) of 1 year",". This TTL applies ",[17,446,447],{},"only to purely informational inquiries without a contract being concluded",[14,449,450,453,454,457,458,461,462,465],{},[17,451,452],{},"Statutory Retention Periods:"," If an inquiry results in a contract or documents are relevant for accounting, we store the data ",[17,455,456],{},"notwithstanding the TTL"," in accordance with legal requirements, in particular ",[17,459,460],{},"6 years"," (German Commercial Code - HGB) or ",[17,463,464],{},"10 years"," (German Tax Code - AO).",[14,467,468],{},[17,469,470],{},"Legal bases:",[66,472,473,476,479],{},[69,474,475],{},"Art. 6(1)(b) GDPR (pre-contractual / contract)",[69,477,478],{},"Art. 6(1)(f) GDPR (IT security)",[69,480,481],{},"Art. 6(1)(c) GDPR (legal obligation)",[380,483,485],{"id":484},"_93-sending-notification-emails-mailjet","9.3 Sending Notification Emails (Mailjet)",[14,487,488,491],{},[17,489,490],{},"Mailjet SAS",", 4 rue Jules Lefebvre, 75009 Paris, France.",[14,493,494],{},"Name, email address, subject, and message content are processed.",[14,496,497,499],{},[17,498,188],{}," Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR.",[25,501],{},[28,503,505],{"id":504},"_10-firebase-app-check-recaptcha-v3","10. Firebase App Check (reCAPTCHA v3)",[14,507,508,509,511,512,219],{},"To protect our endpoints and prevent abuse, we use ",[17,510,433],{}," in conjunction with ",[17,513,514],{},"reCAPTCHA v3",[14,516,517,520],{},[17,518,519],{},"Purpose & Scope:"," To determine whether an interaction on our website is performed by a human or an automated program (bot), hardware and software information (e.g., device data, browser properties) as well as IP addresses are transmitted to Google and evaluated there.",[14,522,523,525],{},[17,524,188],{}," Art. 6(1)(f) GDPR (legitimate interest in the security of our IT systems and protection against spam).",[25,527],{},[28,529,531],{"id":530},"_11-communication-via-microsoft-365-exchange-teams","11. Communication via Microsoft 365 (Exchange & Teams)",[14,533,275,534,537,538,541,542,545],{},[17,535,536],{},"Microsoft 365",", particularly ",[17,539,540],{},"Exchange"," and ",[17,543,544],{},"Teams",", for email, telephone, and video communication.",[14,547,548,551],{},[17,549,550],{},"Provider:"," Microsoft Ireland Operations Limited, Dublin, Ireland\n(Parent company: Microsoft Corp., USA)",[14,553,554,557],{},[17,555,556],{},"Processed data:"," Communication content, name, email address, metadata, and, if applicable, image and sound tracks.",[14,559,560,562],{},[17,561,188],{}," Art. 6(1)(b) GDPR as well as Art. 6(1)(f) GDPR.",[14,564,565,567],{},[17,566,344],{}," EU-US Data Privacy Framework and Standard Contractual Clauses.",[25,569],{},[28,571,573],{"id":572},"_12-communication-via-whatsapp","12. Communication via WhatsApp",[14,575,576,577,580],{},"If you contact us on your own initiative via ",[17,578,579],{},"WhatsApp",", we process your mobile number and message content.",[14,582,583,585],{},[17,584,550],{}," WhatsApp Ireland Limited, Dublin, Ireland\n(Parent company: Meta Platforms Inc., USA)",[14,587,588],{},[17,589,590],{},"Notes:",[66,592,593,596],{},[69,594,595],{},"WhatsApp has access to metadata; end-to-end encryption only protects the content.",[69,597,598,601],{},[17,599,600],{},"Confidentiality:"," We point out that communication via WhatsApp is less suitable for highly sensitive, confidential information. For such matters, please use communication by email or mail.",[14,603,604,606],{},[17,605,188],{}," Art. 6(1)(b) GDPR or Art. 6(1)(a) GDPR.",[14,608,609,567],{},[17,610,344],{},[25,612],{},[28,614,616],{"id":615},"_13-blog","13. Blog",[14,618,619],{},"When reading the blog, the general processing rules (hosting, log files) apply.",[25,621],{},[28,623,625],{"id":624},"_14-social-media-links-profiles","14. Social Media (Links & Profiles)",[380,627,629],{"id":628},"_141-links-instagram-linkedin","14.1 Links (Instagram & LinkedIn)",[14,631,632],{},"Our website contains simple links to our social media profiles. The privacy policies of the respective providers only apply once you click on the link.",[380,634,636],{"id":635},"_142-joint-controllership","14.2 Joint Controllership",[14,638,639],{},"If you visit our profiles on Instagram or LinkedIn, there is a joint responsibility (Joint Controllership according to Art. 26 GDPR) between us and the respective platform operator for the data processing that occurs there. Information on your data subject rights can be found directly in the privacy policies of the respective providers.",[25,641],{},[28,643,645],{"id":644},"_15-recipients-data-processing-on-behalf","15. Recipients / Data Processing on Behalf",[14,647,648],{},"Recipients may include:",[66,650,651,654,657,660],{},[69,652,653],{},"Google / Firebase",[69,655,656],{},"Mailjet",[69,658,659],{},"Microsoft",[69,661,662],{},"WhatsApp / Meta",[14,664,665,666,669],{},"Where necessary, ",[17,667,668],{},"Data Processing Agreements (DPAs) according to Art. 28 GDPR"," have been concluded with the relevant service providers.",[25,671],{},[28,673,675],{"id":674},"_16-your-rights","16. Your Rights",[66,677,678,681,684,687,690,693,696],{},[69,679,680],{},"Right of access (Art. 15 GDPR)",[69,682,683],{},"Right to rectification (Art. 16 GDPR)",[69,685,686],{},"Right to erasure (Art. 17 GDPR)",[69,688,689],{},"Right to restriction of processing (Art. 18 GDPR)",[69,691,692],{},"Right to data portability (Art. 20 GDPR)",[69,694,695],{},"Right to object (Art. 21 GDPR)",[69,697,698],{},"Right to withdraw consent (Art. 7(3) GDPR)",[25,700],{},[28,702,704],{"id":703},"_17-automated-decision-making","17. Automated Decision-Making",[14,706,707],{},"Automated decision-making, including profiling according to Art. 22 GDPR, does not take place.",[25,709],{},[28,711,713],{"id":712},"_18-right-to-lodge-a-complaint","18. Right to Lodge a Complaint",[14,715,716,719],{},[17,717,718],{},"Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)"," Promenade 18, 91522 Ansbach, Germany",[25,721],{},[28,723,725],{"id":724},"_19-changes","19. Changes",[14,727,728],{},"We reserve the right to adapt this privacy policy if necessary.",{"title":730,"searchDepth":731,"depth":731,"links":732},"",2,[733,734,735,736,737,738,739,740,741,747,748,749,750,751,755,756,757,758,759],{"id":30,"depth":731,"text":31},{"id":60,"depth":731,"text":61},{"id":115,"depth":731,"text":116},{"id":150,"depth":731,"text":151},{"id":200,"depth":731,"text":201},{"id":264,"depth":731,"text":265},{"id":309,"depth":731,"text":310},{"id":352,"depth":731,"text":353},{"id":374,"depth":731,"text":375,"children":742},[743,745,746],{"id":382,"depth":744,"text":383},3,{"id":404,"depth":744,"text":405},{"id":484,"depth":744,"text":485},{"id":504,"depth":731,"text":505},{"id":530,"depth":731,"text":531},{"id":572,"depth":731,"text":573},{"id":615,"depth":731,"text":616},{"id":624,"depth":731,"text":625,"children":752},[753,754],{"id":628,"depth":744,"text":629},{"id":635,"depth":744,"text":636},{"id":644,"depth":731,"text":645},{"id":674,"depth":731,"text":675},{"id":703,"depth":731,"text":704},{"id":712,"depth":731,"text":713},{"id":724,"depth":731,"text":725},"md",{},true,"/en/privacy-policy",{"title":5,"description":5},"en/privacy-policy","p3_37ZWl-5nMPmuuT5gut7g8m1k3xJabHIGzqV4YUrk",1774878883713]