Privacy Policy

Controller

Responsible for the processing of personal data within the meaning of Art. 4 (7) GDPR is:

Elisa Becker Marketing Management FZE-LLC
Publishing City, Business Centre
Sharjah, United Arab Emirates

Email: kontakt@elisabecker.de

Data we collect

When you visit our website or use our forms, the following data may be collected:

• Contact / inquiry forms: name, email address, message content
• Booking & onboarding: name, email, brand details, product information, references, shipping address
• Uploaded assets: product photos, brand materials, and any reference images you provide
• Technical data: IP address, browser type, operating system, access time (automatically collected by the server)

Purpose of processing

• Processing your inquiry or booking
• Delivering the AI product photography service
• Communication regarding revisions, delivery, and invoicing
• Ensuring the technical functionality and security of the website

Legal basis

Processing takes place on the basis of Art. 6 (1) lit. a GDPR (consent), Art. 6 (1) lit. b GDPR (performance of a contract or pre-contractual measures), and Art. 6 (1) lit. f GDPR (legitimate interest in the technical provision of the website).

Data storage

Your data is stored securely in a cloud database. Appropriate technical and organizational measures are taken to protect your data against unauthorized access, loss, or misuse. Data transmission is encrypted.

Sharing with third parties

Your personal data is not sold, rented, or shared with third parties for advertising purposes. Sharing only takes place where technically necessary to provide our services (e.g. hosting providers, AI image processing infrastructure) or where there is a legal obligation. All service providers are contractually bound to comply with the GDPR.

Payment processing (Stripe)

Payments on this website are processed by Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland ("Stripe"). When you place an order, the following data is transmitted to Stripe for the purpose of payment processing, fraud prevention, tax calculation and invoicing: name, email address, billing / country information, order amount, currency, order metadata (e.g. brand name, number of products, order ID) and the payment data you enter (card details or alternative payment method data, which are entered directly into Stripe's PCI-DSS certified payment forms and are not stored on our servers).

Legal basis: Art. 6 (1) lit. b GDPR (performance of the contract) and Art. 6 (1) lit. f GDPR (legitimate interest in secure, fraud-resistant payment processing and proper invoicing). Stripe acts in part as our processor and in part as an independent controller (in particular for fraud prevention and statutory obligations).

Stripe may transfer data to third countries (including the United States). Such transfers are safeguarded by the EU Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework. Stripe's privacy policy is available at https://stripe.com/privacy.

Order and invoice data is retained for the statutory retention periods (in particular under tax and commercial law, typically up to 10 years).

Order data and uploaded assets

Brand brief submissions (contact details, brand name, product information, references, configuration of the order and pricing) are stored in our backend database hosted on Lovable Cloud / Supabase within the EU in order to fulfill the contract (Art. 6 (1) lit. b GDPR). Uploaded product references and brand assets are processed only to produce the AI Product Shoot you ordered and are not used to train third-party AI models. After delivery and expiry of statutory retention periods, this data is deleted on request or as part of our routine retention housekeeping.

Retention period

Personal data is stored only for as long as necessary for the respective purpose or as long as statutory retention obligations exist. Invoicing and payment data is retained for up to 10 years in line with German tax and commercial law (§ 147 AO, § 257 HGB). You can request deletion of data that is no longer subject to a retention obligation at any time.

Your rights under GDPR

• Right of access to your stored data (Art. 15 GDPR)
• Right to rectification of inaccurate data (Art. 16 GDPR)
• Right to erasure of your data (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to withdraw consent (Art. 7 (3) GDPR)
• Right to lodge a complaint with a supervisory authority

Requests regarding your data protection rights can be sent at any time to kontakt@elisabecker.de.

Cookies and Tracking

Types of cookies we use

• Necessary cookies: Essential for the website to function properly. These cannot be disabled.
• Analytics cookies: Help us understand how visitors interact with our website by collecting and reporting information anonymously.
• Preference cookies: Allow the website to remember choices you make (such as language or region) and provide enhanced features.

Analytics and third-party tools

We use the following analytics and tracking tools:

• Web analytics: We may use tools to collect anonymized data about website usage, such as pages visited, time spent on the site, and referral sources. IP addresses are anonymized where possible.
• Conversion tracking: We may use tracking pixels or similar technologies to measure the effectiveness of our marketing campaigns. These collect data only in aggregated form.
• Embedded content: Pages may include embedded content (e.g. videos, social media feeds) that may set cookies from third-party domains.

Consent management

When you first visit our website, you will see a cookie banner that allows you to choose which categories of cookies you accept. You can change your preferences at any time by clicking the cookie settings link in the footer of the site.

Withdrawing consent: You may withdraw your consent to non-essential cookies at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.

Cookie retention

Necessary cookies are typically session-based and expire when you close your browser. Analytics and preference cookies may be stored for up to 12 months unless you delete them earlier.

Managing cookies in your browser

You can delete or block cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the website.

International data transfer

Personal data may be processed in countries outside the European Union. In any case, data protection standards at GDPR level will be applied.

Supervisory authority

If you are located in the European Union, you have the right to lodge a complaint with a competent supervisory authority if you believe that the processing of your data violates applicable data protection law. We recommend contacting us first so we can resolve your concern quickly.

Changes to this Privacy Policy

This Privacy Policy may be updated from time to time. The current version is always available on this website.

Contact

Email: kontakt@elisabecker.de