Sarah Russ
Nerlichsweg 11
20535 Hamburg
Telefon: 0173 2100 498
E-Mail: info@sarahruss.de
This data protection declaration is based on the terminology used by the European Directive and Regulation Maker when adopting the DSGVO. The data protection declaration is intended to be easy to read and understand. To ensure this, the following is a concise explanation of the terms used and the legal basis (Article 4 of the GDPR).
Data subject is any identified or identifiable natural person whose personal data are processed by the controller (i.e. in this case Sarah Russ Photography).
Personal data means any information relating to a data subject; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. Processing is any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organization, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
The processing of personal data is lawful only if at least one of the following conditions is met:
Art. 6 (1) a) DSGVO serves as the legal basis for processing operations where consent is obtained for a specific processing purpose.
If the processing of personal data is necessary for the performance of a contract to which the data subject is a party, as is the case, for example, with processing operations that are necessary for a service or the provision of another service or consideration, the processing is based on Art. 6 (1) b) DSGVO. The same applies to such processing operations which are necessary for the performance of pre-contractual measures, for example in cases of inquiries about products or services of Sarah Russ Photography.
If the company is subject to a legal obligation which requires the processing of personal data, such as for compliance with tax obligations, the processing is based on Art. 6 (1) c) DSGVO.
In rare cases, the processing of personal data might become necessary to protect vital interests of the data subject or another natural person. This would be the case, for example, if a customer needs medical assistance and as a result his or her name, age or other vital information would have to be disclosed to a doctor, hospital or other third party. Then the processing would be based on Art. 6 (1) d) DSGVO.
Ultimately, processing operations may be based on Art. 6 (1) f) DSGVO. Processing operations which are not covered by any of the aforementioned legal bases are based on this legal basis, if the processing is necessary for the protection of a legitimate interest of Sarah Russ Photography or a third party, unless such interest is overridden by the interests, fundamental rights and freedoms of the data subject. If the legal basis ceases to exist in the course of time – for example, due to revocation of consent or cessation of the legitimate interest – the personal data must be deleted or withdrawn from processing, taking into account any statutory retention periods.
The use of the website is possible without providing personal data. For the use of individual services on the website, different regulations may apply, which in this case are explained separately below. Personal data (e.g. name, address, e-mail, telephone number, etc.) are processed exclusively within the framework of the legal regulations of the Federal Data Protection Act (BDSG) as well as the European Data Protection Regulation (DSGVO) and the country-specific data protection regulations applicable to Sarah Russ Photography and in particular only for our own purposes.
Data are personal if they can be clearly assigned to a specific natural person. In this respect, the following regulations inform you about the type, scope and purpose of the collection, use and processing of personal data by the provider Sarah Russ Fotografie.
In principle, no data of customers are stored centrally.
If Sarah Russ Photography passes on personal data to third parties (usually service providers for the processing of orders), the transfer is made in accordance with the provisions of the Federal Data Protection Act (BDSG) and the European Data Protection Regulation (DSGVO). The scope of the transmitted data is limited to the minimum necessary.
Personal data is generally deleted by Sarah Russ Photography or withdrawn from processing as soon as the purpose of processing ceases to apply. Any storage beyond this will only take place if this is provided for by the European or national legislator in Union regulations, laws or other provisions to which the controller is subject.
For all processing operations, Sarah Russ Photography has implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed by it. Nevertheless, Internet-based data transmissions in particular may be subject to security vulnerabilities, so that absolute protection cannot be guaranteed.
By means of this data protection declaration, Sarah Russ Fotografie would like to inform the public about the type, scope and purpose of the personal data processed in the context of the use of the Internet offers (point 2). Special processing operations accessible to the public, such as contact forms, are also addressed here.
Furthermore, all data subjects are informed of the rights to which they are entitled by means of this data protection declaration under point 5.
The data protection declaration is thus an instrument of Sarah Russ Photography to comply with its obligations resulting from Articles 13, 14 and 21 of the GDPR.
In principle, personal data of the users of the web offers are only processed insofar as this is necessary for the provision of a functional website as well as the contents and services. If a data subject wishes to use special services via the website, processing of personal data could thus become necessary.
If processing of personal data is necessary from the point of view of Sarah Russ Photography, and if there is no legal basis for such processing except consent, such consent will generally be obtained from the data subject. An exception applies to those cases in which prior obtaining of consent is not possible for factual reasons and the processing of the data is permitted by legal regulations.
The declaration thus also extends to the contact form offered on the website, to order transactions and to processing operations in the course of contacting or e-mail inquiries, etc.
A merely informational use of the Internet pages of Sarah Russ Photography, i.e. if you do not register or otherwise submit information, is generally possible without any indication of personal data. Nevertheless, the system automatically records data about each server access concerning our offer (so-called server log files) every time the Internet pages are called up. The access data includes the name of the website accessed, file, date and time of access, amount of data transferred in bytes, notification of successful access, browser used and version, operating system used, referrer URL (the previously visited page), IP address and the requesting provider. The log data is used without attribution to the person of the user or other profiling only for statistical analysis for the purpose of operation, security and optimization of the offer. However, we reserve the right to check the log data retrospectively if there is a justified suspicion of unlawful use on the basis of concrete indications.
The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session. The legal basis for the temporary storage of data and log files is Art. 6 (1) f) DSGVO.
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the websites, this is the case when the respective session has ended. In the case of storage of data in log files, this is the case after 14 days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the person concerned are deleted or alienated, so that an assignment of the calling user is no longer possible.
The collection of data for the provision of the web pages and the storage of the data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility for the user to object.
From your email address, an anonymized string may be created (also called a hash) and given to the Gravatar service to check if you are using it. You can find the Gravatar service’s privacy policy here: https://automattic.com/privacy/. After your comment is approved, your profile picture is publicly visible in the context of your comment.
Sarah Russ website uses so-called cookies. These are small text files that are stored on your end device and saved by your browser.
Sarah Russ uses cookies to make its website user-friendly. Some cookies remain stored on your device until you delete them. They enable her to recognize your browser the next time you visit.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of my website may be restricted.
The legal basis for the use of cookies is Art. 6 para. 1 lit. f GDPR, based on Sarah Russ’ legitimate interest in a technically error-free and optimized provision of services.
Sarah Russ uses the cookie consent management tool Borlabs Cookies (Borlabs Cookie GmbH, Rudolf-Diesel-Str. 11, 49324 Melle, Germany) to enable you to use this website conveniently and in compliance with data protection regulations. This tool helps to manage your consent to the use of cookies in accordance with the General Data Protection Regulation (GDPR).
When you enter this website, a cookie is set to store your consent to the different categories of cookies (e.g. necessary, statistical or marketing cookies). This ensures that only the cookies you have allowed are set.
The data collected by Borlabs cookies (such as your cookie settings) are stored on the server and are not passed on to third parties. This data is necessary to store your choices and to comply with legal requirements.
The legal basis for the processing of this data is Art. 6 para. 1 lit. c GDPR, as the use of Borlabs cookies is necessary to comply with the legal requirements of the GDPR.
The stored data will be deleted if you revoke your consent or after the maximum storage period of 12 months has expired.
Further information on the handling of data and the privacy policy of Borlabs Cookies can be found here: https://de.borlabs.io/datenschutz/.
Posts on this website may contain embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves exactly as if the visitor had visited the other website.
These websites may collect information about you, use cookies, embed additional third-party tracking services, and record your interaction with that embedded content, including your interaction with the embedded content if you have an account and are logged into that website.
WPML (OnTheGoSystems Limited Mercedes Barreda 22/F 3 Lockhart Road Hong Kong, Wanchai China) uses cookies to determine the current language of the visitor, the last visited language and the language of the users who have logged in.
While you are using the plugin, WPML will share the data relating to the page via the installer. No data is shared by the user themselves.
The Websites use Google Analytics, a web analytics service provided by Google, Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about – if available – sociodemographic data, your use of this website (including your IP address, which is, however, shortened with the method _anonymizeIp(), i.e. anonymized, so that it can no longer be assigned to a connection) is transmitted to a Google server in the USA and stored there. In the event that IP anonymization is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage to the website operator. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. Google will not associate your IP address with any other data held by Google. You can prevent the installation of cookies by selecting the appropriate settings on your browser software.
You can object to the collection of data by Google Analytics as well as the processing of the data by Google with effect for the future by installing a deactivation add-on for your browser (http://tools.google.com/dlpage/gaoptout?hl=de).
Sarah Russ Photography uses Google Analytics to analyze and regularly improve the use of the websites. The statistics obtained can thus be used to improve the offer and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Art. 6 (1) f) DSGVO.
The data sent by us will be automatically deleted after 14 months. The deletion after the expiry of the retention period takes place automatically once a month.
Third-party provider information: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. user conditions:
http://www.google.com/analytics/terms/de.html, Privacy Policy Overview: http://www.google.com/intl/de/analytics/learn/privacy.html, and Privacy Policy: http://www.google.de/intl/de/policies/privacy.
Sarah Russ Photography maintains online presences within social networks and platforms in order to communicate with the customers, interested parties and users active there and to be able to inform them about the services there. When calling up the respective networks and platforms, the terms and conditions and data processing policies of their respective operators apply.
Unless otherwise stated within the scope of the data protection declaration, users’ data is processed if they communicate with us within the social networks and platforms, e.g. write posts on the online presences or send messages directly.
Sarah Russ Photography uses components of the provider facebook.com on its site. Facebook is a service of facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA.
Each time you access the website that is equipped with such a component, this component causes the browser you are using to download a corresponding representation of the component from facebook. This process informs facebook which specific page of the website you are currently visiting.
If you visit Sarah Russ Photography’s page and are logged in to facebook during this time, facebook recognizes which specific page you are visiting through the information collected by the component and assigns this information to your personal account on facebook. If, for example, you click on the “Like” button or make corresponding comments, this information is transmitted to your personal user account on facebook and stored there. In addition, the information that you have visited Sarah Russ Photography’s page is passed on to facebook. This happens regardless of whether you click on the component or not.
If you want to prevent this transmission and storage of data about you and your behavior on the website by facebook, you must log out of facebook before you visit the site. The data protection information of facebook provides more detailed information on this, in particular on the collection and use of data by facebook, on your rights in this respect and on the setting options for protecting your privacy: https://de-de.facebook.com/about/privacy/.
In addition, external tools are available on the market with which Facebook social plugins can be blocked with add-ons for all common browsers http://webgraph.com/resources/facebookblocker/.
An overview of Facebook plugins can be found at https://developers.facebook.com/docs/plugins/
Sarah Russ Photography uses the service Instagram on its website. Instagram is a service of Instagram Inc. Through the embedded “Insta” button on our site, Instagram receives the information that you have accessed the corresponding page of the website. If you are logged in to Instagram, Instagram can assign this visit to the page to your Instagram account and thus link the data. The data transmitted by clicking the “Insta” button will be stored by Instagram. For more information on the purpose and scope of data collection, its processing and use, as well as your rights in this regard and setting options for protecting your privacy, please refer to the Instagram privacy policy, which you can access via https://help.instagram.com/519522125107875.
To prevent Instagram from associating your visit to our site with your Instagram account, you must log out of your Instagram account before visiting the site.
The functions of the social network Pinterest, which is operated by Pinterest Europe Ltd, Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland, are also used on Sarah Russ’s website.
When you visit a page that contains a Pinterest function (e.g. the “Pin It” button or embedded content), a connection to the Pinterest servers is established. Data about your visit to Sarah Russ’ website may be transmitted to Pinterest. If you are logged into your Pinterest account, Pinterest can associate your visit to this website with your user account.
Sarah Russ has no influence on the scope of the data that Pinterest collects. Information on the collection, processing and use of your data by Pinterest can be found in Pinterest’s privacy policy at: https://policy.pinterest.com/de/privacy-policy.
To prevent Pinterest from collecting data about your visit to this website and linking it to your Pinterest account, please log out of your Pinterest account before visiting this website.
Videos from the video portal Vimeo are also integrated on Sarah Russ’ website. The provider is Vimeo Inc, 555 West 18th Street, New York, New York 10011, USA.
When you visit one of the pages equipped with a Vimeo plugin, a connection to the Vimeo servers is established. The Vimeo server is informed which of the pages you have visited. If you are logged into your Vimeo account, you enable Vimeo to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your Vimeo account.
Vimeo may also store various cookies on your device or use similar technologies such as web beacons to collect information about website usage. This information is used to record video statistics, improve user-friendliness and prevent fraud attempts.
The use of Vimeo is in the interest of an appealing presentation of online offers and easier accessibility of video content. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.
Further information on data processing by Vimeo can be found in the provider’s privacy policy: https://vimeo.com/privacy.
Contact with Sarah Russ is possible via the e-mail address provided on the website. The user’s personal data transmitted with the email will be stored in Sarah Russ’s email archive. The data will not be passed on to third parties in this context. The data is used exclusively for processing the conversation.
The legal basis for the processing of data transmitted in the course of an email is Art. 6 (1) f) GDPR. When contacting us by email, the necessary legitimate interest in the processing of personal data lies in the processing of the contact. The data processing operations can also be based on Art. 6 (1) b) GDPR. They are carried out to process the request as a contract-like relationship. The storage of this data can also be justified for the period of time required to complete the task on the basis of Art. 6 (1) a GDPR.
Sarah Russ generally treats emails as business letters and has set a standard retention period of 10 years for its email archive. After this period, they are automatically deleted.
If you contact Sarah Russ via the contact form, the data you provide (e.g. name, e-mail address, telephone number and message) will only be used to process your request. The provision of this data is voluntary, but is necessary in order to process your request.
To provide and manage the contact form, Sarah Russ uses the Kreativ Management service, a service provided by Hochzeit.management GmbH, Robert-Koch-Straße 70, 4600 Wels. The form data you submit will be transmitted to the Kreativ Management servers and stored there. Kreativ Management processes this data in accordance with the applicable data protection regulations and exclusively on my behalf.
The data you enter in the contact form is processed on the basis of Art. 6 para. 1 lit. b GDPR (to carry out pre-contractual measures or to fulfill a contract) and on the basis of Art. 6 para. 1 lit. f GDPR (legitimate interest in processing your request efficiently).
Your data will be deleted after final processing of your request, provided there are no statutory retention obligations.
Further information on data processing by Kreativ Management can be found in their privacy policy: https://kreativ.management/datenschutz/
Sarah Russ only stores your personal data for as long as is necessary to fulfill the respective purposes or as required by the statutory retention periods. Once the respective purpose no longer applies or these periods have expired, the corresponding data will be deleted in accordance with the statutory provisions.
If you request the deletion of your data or revoke your consent to data processing, your data will be deleted immediately, provided that there are no legal storage obligations to the contrary.
In the case of statutory retention obligations, the data concerned will be blocked for other purposes and deleted after the retention period has expired.
For users who register on the Sarah Russ website, we also store the personal information they provide in their user profiles. All users can view, change or delete their personal information at any time. Website administrators can also view and change this information.
As a data subject, you have the following rights under the General Data Protection Regulation (GDPR)
Right to information (Art. 15 GDPR)
You have the right to request confirmation from Sarah Russ as to whether personal data is being processed. If this is the case, you have the right to information about this data and to further information such as the processing purposes, the categories of personal data, the recipients of the data and the planned storage period.
Right to rectification (Art. 16 GDPR)
You have the right to request the rectification of inaccurate personal data or the completion of your personal data stored by Sarah Russ without undue delay.
Right to erasure (Art. 17 GDPR)
You have the right to request the deletion of your personal data if one of the following reasons applies:
Right to restriction of processing (Art. 18 GDPR)
You have the right to request the restriction of the processing of your personal data, e.g. if you dispute the accuracy of the data or the processing is unlawful, but you refuse to delete it.
Right to data portability (Art. 20 GDPR)
You have the right to receive the personal data concerning you, which you have provided to Sarah Russ, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller.
Right to object (Art. 21 GDPR)
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data which is based on point (e) or (f) of Article 6(1) GDPR. Sarah Russ will then cease processing unless it can demonstrate compelling legitimate grounds.
Right to withdraw consent (Art. 7 para. 3 GDPR)
You have the right to withdraw your consent at any time with effect for the future. This does not affect the lawfulness of the data processing carried out up to the point of withdrawal.
Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement.
To exercise any of the above rights, you can contact us at any time at the following address
Sarah Russ
Nerlichsweg 11
20535 Hamburg
Telephone: 0173 2100 498
E-mail: info@sarahruss.de
Sarah Russ reserves the right to amend the privacy policy in order to adapt it to changed legal situations or in the event of changes to the service or data processing. Changes to the privacy policy have no effect on the validity of other contracts or agreements.
Status of the privacy policy: 25.01.2025
Your heart is pounding & you want to capture that tingling? Write me & let me photograph your special moments.