Privacy Policy

1. Privacy at a Glance

The following information provides a simple overview of what happens to your personal data when you visit this website.

2. Data Controller

The data controller responsible for data processing on this website is:

Data Protection Officer

A Data Protection Officer is not legally required for our company (fewer than 20 persons are regularly involved in automated processing of personal data). For data protection inquiries, please contact us directly.

3. Data Collection on This Website

What data is collected?

• Usage data (pages visited, access time)
• Device information (browser type, operating system)
• Account data (email, name) upon registration
• Wedding data (date, venue, guest list)

Why do we process your data?

• Providing our services
• Improving user experience
• Communicating with you
• Legal obligations

Legal Basis for Processing

We process your personal data on the following legal bases:

• Consent (Art. 6(1)(a) GDPR): For analytics cookies and analysis tools. You may withdraw your consent at any time via cookie settings without affecting the lawfulness of processing prior to withdrawal.
• Contract performance (Art. 6(1)(b) GDPR): For providing our services, managing your account, processing payments, and executing wedding management functions.
• Legal obligation (Art. 6(1)(c) GDPR): To comply with commercial and tax law retention obligations.
• Legitimate interest (Art. 6(1)(f) GDPR): For ensuring IT security, protection against misuse, and improving our services.

Hosting

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit our website, information is automatically stored in server log files (IP address, date and time, browser and operating system, referrer URL). The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure provision of the website).

4. Cookies

Our website uses cookies. Details about the cookies used and your choices can be found in our cookie settings.

5. Analytics Tools

Firebase Analytics

This website uses Firebase Analytics, a web analytics service provided by Google. Firebase Analytics uses cookies to enable analysis of website usage. This is only used with your consent.

6. Payment Providers

Stripe

For payments, we use the Stripe service. Stripe processes payment data according to their own privacy policy.

For more information, see Stripe's Privacy Policy.

Data Retention

Account data is retained for the duration of your membership and deleted within 30 days after account deletion. Wedding data (guest lists, RSVP responses, photos) is deleted with the account. Payment data is retained for up to 10 years in accordance with commercial and tax law retention obligations (§ 147 AO, § 257 HGB). Analytics data is automatically aggregated and anonymized after 14 months. Server log files are deleted after 7 days.

International Data Transfers

We use service providers that process data outside the EU/EEA:

• Google Firebase (Firebase Auth, Firestore, Cloud Functions, Storage): Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may be transferred to the USA. Google is certified under the EU-US Data Privacy Framework (DPF).
• Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland. Payment data may be transferred to the USA. Stripe is certified under the EU-US Data Privacy Framework (DPF).
• Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. Data is transferred on the basis of EU Standard Contractual Clauses (SCCs).
• Apple Inc. (iTunes Search API for song search): Search queries are transmitted to Apple servers. Apple is certified under the EU-US Data Privacy Framework (DPF).

7. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Access (Art. 15 GDPR): You can request information about your stored data.
• Rectification (Art. 16 GDPR): You can request the correction of inaccurate data.
• Deletion (Art. 17 GDPR): You can request the deletion of your data, provided no legal retention obligations apply.
• Restriction of processing (Art. 18 GDPR): You can request the restriction of processing of your data, e.g. when the accuracy of data is contested.
• Data portability (Art. 20 GDPR): You can receive your data in a structured, commonly used, and machine-readable format.
• Objection (Art. 21 GDPR): You can object to the processing of your data when it is based on Art. 6(1)(f) GDPR.
• Withdrawal of consent (Art. 7(3) GDPR): You can withdraw your consent at any time. The lawfulness of processing prior to withdrawal is not affected. You can change your cookie consent via the cookie settings in the footer.

For questions, please contact: sven-eric@molzahn-software.de

Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority regarding our processing of personal data. The competent authority for us is:

Automated Decision-Making

No automated decision-making including profiling pursuant to Art. 22 GDPR takes place.

8. Data Security

We implement technical and organizational security measures to protect your data against manipulation, loss, destruction, or access by unauthorized persons. Our security measures are continuously improved in line with technological developments.

9. Changes to this Privacy Policy

We reserve the right to update this privacy policy to adapt it to changed legal requirements or to implement changes to our services. The date of the last update can be found at the beginning of this document.