Legal information
Privacy
1. Controller
Alexander Maier
dronephoto
Schillerstraße 35
79618 Rheinfelden (Baden)
Germany
Email: contact@dronephoto-online.de
Phone: +49 176 85941185
2. Website delivery
The website is provided through Cloudflare Pages. Necessary technical data such as IP address, time, requested files and browser details are used for secure delivery and troubleshooting (Article 6(1)(f) GDPR). IONOS manages the domain; GitHub manages the website source code.
3. Enquiries and appointments
We process your name, email, phone number, shoot location, project details, message and preferred appointment to respond and prepare a contract (Article 6(1)(b) GDPR). Every appointment request is reviewed personally. Only approved appointments are entered in Google Calendar; email is delivered by Resend.
4. Security, customer area and booking journal
Cloudflare Turnstile loads when a form is used to protect against automated abuse. It may process IP addresses, browser details and technical interaction data. Our legitimate interest in secure, available services is the basis (Article 6(1)(f) GDPR). In the customer area, a time-limited one-time code is sent exclusively to the email address used for an appointment and the session is stored as a necessary secure cookie. Cloudflare D1 stores appointment, contact and status data and, where cancelled, the time, initiating party and any reason.
5. Retention and recipients
Pending appointment reservations expire automatically after two hours. Expired and cancelled enquiries are deleted after 90 days and contact-only enquiries after 180 days. Successful email delivery data is removed after seven days; failed delivery data after no more than 30 days. Approved orders may be retained for up to ten years where required for contractual records or statutory duties. Providers are Cloudflare for hosting, protection and the booking journal, Google for calendar, and Resend for email delivery.
6. Optional analytics
Google Analytics is enabled only after a measurement ID is configured and you explicitly consent. Without consent, it does not load. Consent under Article 6(1)(a) GDPR and section 25(1) TDDDG can be withdrawn through “Cookie settings”; measurement is disabled and the website’s own Analytics cookies are removed.
7. External links, AI assistant, weather and local storage
Instagram, Facebook, YouTube, Google Maps and Adobe Stock are links only, not embedded tracking widgets. Their privacy policies apply when opened. When you send Dronie a question, Cloudflare Workers AI processes the question text to generate an automatic answer. The assistant receives only approved website information and has no access to customer accounts, the database, calendar or administration. We do not retain chat questions. Please do not enter personal or confidential information; use the protected forms for such details. For the optional weather quick check, our server retrieves Deutscher Wetterdienst weather data through Bright Sky. Only the selected date, time and fixed coordinates for Rheinfelden are transmitted, not form or customer data. The result is a non-binding forecast. Our legitimate interest in accessible customer information and a secure, strictly limited service is the basis (Article 6(1)(f) GDPR). A reference number and checksum are stored until successful form submission or the end of the browser session to prevent duplicates. Only when you explicitly change language are existing form inputs and the appointment selection transferred briefly through session storage. The destination page removes this snapshot immediately and accepts it for no more than two minutes. Your language and analytics choices are stored locally for future visits.
8. Your rights
Subject to statutory conditions, you have rights of access, rectification, erasure, restriction, portability and objection. Consent can be withdrawn for the future. You may complain to a data protection authority, in particular the Baden-Württemberg Commissioner for Data Protection and Freedom of Information. Contact us by email to exercise your rights.
9. Provider information
Cloudflare privacy · Google privacy · Resend privacy · Bright Sky / DWD weather data. Updated October 2026.