Responsible for this website
[Add the name of the person responsible]
[Add an address for service]
For privacy enquiries, the contact form is available for now. This does not replace the legally required details of the person responsible.
Privacy notice
Draft — required details to be completed
This notice is a template. Details of the person responsible and the actual retention periods still need to be completed and reviewed.
Server logs
When you visit this website, the server processes technically necessary connection data, such as your IP address, time of access, requested address and browser information. Whether and for how long this data is logged depends on the server configuration and still needs to be documented. The purpose is to operate the website securely and reliably.
Sign-in and essential cookies
WordPress uses essential cookies for signing in and accessing protected areas. They support sessions, authentication and security. No analytics or marketing cookies are intended without signing in. Language selection is handled through the page address.
Contact form and guest registration
The contact form stores your name, email address, selected recipient and message internally. Only the administrator can read these enquiries in the administration area. No automatic email delivery is currently active. The data is needed to handle your enquiry. A specific retention period still needs to be defined; enquiries that are no longer needed should be deleted.
Guest registration stores the account details provided and access permissions. WordPress stores passwords as hashes, not in plain text. Guests only receive explicitly approved content.
Spam protection
Forms use an arithmetic question, a hidden extra field, timing checks and a temporary request limit. A value derived from the IP address using a secret server key is stored briefly for rate limiting. No external CAPTCHA services are used.
Confirmed spam is discarded without creating a contact enquiry or account. Three hits within 24 hours result in a seven-day block using hashed IP or email identifiers. Borderline cases are stored securely for manual review; registration passwords are not stored in these review records. Only the administrator can edit blocking rules and lift blocks.
Protected photo gallery
Photos are stored locally in protected albums. New albums are visible only to family members and administrators. Family members can also choose to share an album with already approved guests. Only family members and administrators can upload images or change album access. Images are re-encoded and location and camera metadata are removed. Original files are not retained permanently. No external image services are used. A retention period still needs to be defined. Removing metadata does not anonymize visible image content. Please only upload photos for which you have the necessary rights and consent.
Email delivery via Brevo — in preparation
Email delivery via Brevo is being prepared and is not yet enabled for this form. Before activation, provider details, recipients, data processing arrangements and potential transfers to third countries must be reviewed and this notice updated. Contact enquiries are not currently forwarded to Brevo.
No analytics or advertising
This website uses no embedded analytics or advertising trackers, external fonts or external image resources. No consent banner is intended for the strictly necessary technical functions described here.
Legal grounds and your rights
Depending on the processing involved, handling an enquiry or taking pre-contractual steps and the legitimate interest in secure operation may provide legal grounds. Within the applicable legal framework, individuals have rights of access, rectification, erasure, restriction, data portability and objection, as well as the right to complain to the competent supervisory authority. The precise legal assessment still needs to be reviewed.