Legal information
Privacy
1. Controller
Alexander Maier
dronephoto
Schillerstraße 35
79618 Rheinfelden (Baden)
Germany
Email: contact@dronephoto-online.de
Phone: +49 176 85941185
2. Website delivery
Publication is planned through Cloudflare Pages. Necessary technical data such as IP address, time, requested files and browser details are used for secure delivery and troubleshooting (Article 6(1)(f) GDPR). IONOS manages the domain; GitHub manages the website source code.
3. Enquiries and appointments
We process your name, email, phone number, shoot location, project details, message and preferred appointment to respond and prepare a contract (Article 6(1)(b) GDPR). Standard slots are reserved after a fresh availability check; custom times and weekends require personal confirmation. Once activated, Google provides calendar and email functions.
4. Security and booking journal
Once activated, Cloudflare Turnstile loads when a form is used to protect against automated abuse. It may process IP addresses, browser details and technical interaction data. Our legitimate interest in secure, available services is the basis (Article 6(1)(f) GDPR). Cloudflare D1 stores reference numbers, a request checksum, reservation times and processing/delivery states. A protected delivery queue retains contact details and message content until sending is confirmed, then removes that content. Uncertain deliveries retain the data for reconciliation. Rate limiting uses a salted, time-varying IP checksum.
5. Retention and recipients
Enquiries are retained only as needed for processing, a contract or legal obligations. Technical booking records are intended to be deleted no later than 90 days after the appointment or enquiry completion; unresolved cases may first require clarification. Providers are Cloudflare for hosting, protection and the booking journal, and Google for calendar and email. Applicable contractual safeguards must be considered for international processing.
6. Optional analytics
Google Analytics is enabled only after a measurement ID is configured and you explicitly consent. Without consent, it does not load. Consent under Article 6(1)(a) GDPR and section 25(1) TDDDG can be withdrawn through “Cookie settings”; measurement is disabled and the website’s own Analytics cookies are removed.
7. External links, assistant and local storage
Instagram, Facebook, YouTube, Google Maps and Adobe Stock are links only, not embedded tracking widgets. Their privacy policies apply when opened. Dronie is currently a navigation interface with a disabled chat input; no chat messages are sent to AI providers. A reference number and checksum are stored until successful submission or the end of the browser session to prevent duplicate submissions. Only when you explicitly change language are your existing form inputs and appointment selection temporarily transferred through session storage. The destination page removes this snapshot immediately and accepts it for no more than two minutes. Unconsumed data remains until the browser session ends at the latest. Privacy confirmation and security tokens are not transferred. Your language and analytics choices are stored locally for future visits.
8. Your rights
Subject to statutory conditions, you have rights of access, rectification, erasure, restriction, portability and objection. Consent can be withdrawn for the future. You may complain to a data protection authority, in particular the Baden-Württemberg Commissioner for Data Protection and Freedom of Information. Contact us by email to exercise your rights.
9. Provider information
Cloudflare privacy · Google privacy. Updated September 2026. Specific provider, contractual and privacy settings will be reviewed before activation.