Privacy Policy
Last updated: September 2026
Important note regarding this English version
This English version of our Privacy Policy has been created with the assistance of artificial intelligence and is provided for informational and convenience purposes only. It is intended to make our privacy practices easier to understand for international visitors and clients.
The legally binding version of this Privacy Policy is the German version. In the event of any discrepancy, inconsistency or ambiguity between the German and English versions, the German version shall prevail.
1. Data Controller
The controller responsible for the processing of personal data on this website and as part of our business activities is:
Matthias Pick
August-Baudert-Str. 17
99510 Apolda
Germany
Email: [info@thepicks.de](mailto:info@thepicks.de)
As a general principle, we only process personal data to the extent necessary to provide our website, communicate with prospective and existing clients, perform our contractual services or comply with legal obligations.
2. What Personal Data Do We Process?
Depending on how you use our website and services, we may process the following types of personal data in particular:
* name and contact details
* email address
* telephone number
* postal address
* information about your wedding and the services you are interested in
* contract and booking data
* invoice and payment data
* contents of our communication with you
* technical data generated when using our website
* photographs and videos of you and other persons depicted
* data voluntarily provided to us as part of enquiries, contracts or our collaboration.
The specific data processed depends on which of our services and communication channels you use.
3. Visiting Our Website and Hosting
Our website is operated using Squarespace. Squarespace provides the technical infrastructure for our website and may process technical information generated when our website is accessed.
This may include, in particular:
* IP address
* date and time of access
* pages and content accessed
* information about the browser, operating system and device
* referrer URL
* technical usage and connection data.
Processing is carried out for the technical provision, security and stability of our website and, where you have given your consent, for statistical analysis of website usage.
The legal basis for technically necessary processing is Art. 6(1)(f) GDPR. Our legitimate interest lies in providing a secure and properly functioning website.
Where Squarespace processes data as a processor on our behalf, this is based on an appropriate data processing agreement.
4. Cookies and Consent Management
Our website uses cookies and similar technologies. Cookies are small files that may be stored on your device.
We use, in particular:
Necessary Cookies
Necessary cookies are required for our website to function technically and to provide basic features.
These cookies may also be used without consent where they are technically necessary to provide the website.
Performance and Analytics Cookies
We use the analytics and performance functions provided by Squarespace to obtain information such as visitor numbers, page views, sources of access and the use of our website.
These cookies are only activated through our cookie banner if you consent to the corresponding category.
The processing is based on your consent pursuant to Art. 6(1)(a) GDPR.
Advertising Cookies and Similar Technologies
For our online advertising, we use the Meta Pixel. It is assigned to the “Advertising” category of our cookie banner and is generally only activated after the corresponding consent has been given.
Further information can be found in Section 7 of this Privacy Policy.
Managing Your Consent
When you first visit our website, you can use our cookie banner to select which categories of cookies and similar technologies you consent to.
You can change or withdraw your consent at any time with effect for the future via the cookie settings on our website.
The cookies used by Squarespace may vary depending on the functions being used. Squarespace distinguishes in particular between necessary cookies and analytics and performance cookies.
5. Squarespace Analytics
We use the analytics functions integrated into Squarespace to statistically analyse the use of our website and further develop our website.
This may include processing information about, in particular:
* browser and device
* IP address
* previously visited websites
* pages visited
* clicks
* internal links
* scrolling behaviour
* searches
* timestamps.
Processing only takes place where you have consented to the use of analytics and performance cookies through our cookie banner.
The legal basis is Art. 6(1)(a) GDPR.
We do not use a separate Google Analytics integration on our website.
Squarespace describes its analytics functions and the data and cookies used in connection with them in its current privacy information.
6. Language Versions with Weglot
Our website is available in multiple languages. We use Weglot to provide and manage the different language versions.
Weglot may process technically necessary information required to provide the requested language version.
According to the provider, Weglot uses, in particular, necessary cookies required for the translation function to operate. Such necessary cookies are not blocked by our website's cookie settings.
Processing takes place for the purpose of providing the language version of our website requested by you.
7. Meta Pixel and Instagram Advertising
We use the Meta Pixel provided by Meta Platforms Ireland Limited to measure the effectiveness of our advertisements on Instagram and other Meta platforms and to target our advertising more effectively.
The Meta Pixel may collect information about how visitors use our website. This may include, in particular, information about pages visited, interactions with the website and technical information about the device being used.
Meta may use this information to measure the effectiveness of our advertising, create audiences for advertising campaigns and make advertising more relevant.
The Meta Pixel is assigned to the “Advertising” category in our cookie settings and, where technically configured accordingly, is only activated after you have given your consent.
The legal basis is Art. 6(1)(a) GDPR.
You can withdraw your consent at any time with effect for the future via the cookie settings on our website.
Meta may also process data outside the European Union or the European Economic Area. Where required, the appropriate safeguards provided for under the GDPR are used for such transfers.
8. Contact Form and Enquiries
If you contact us via the contact form on our website, the information you enter will be processed.
This may include, in particular:
* name
* email address
* telephone number
* information about your wedding
* requested services
* information about the venue
* other information you voluntarily provide to us.
Processing takes place to handle your enquiry and, where this results in a contractual relationship, to carry out pre-contractual measures and fulfil the contract.
The legal basis is Art. 6(1)(b) GDPR. Where processing is not directly necessary for entering into a contract, it is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR.
We use Kreativ.Management to provide our contact form and manage enquiries and contracts.
Kreativ.Management processes the personal data stored there on our instructions as part of a data processing agreement. According to the provider, this processing includes, among other things, names, contact details, contract data and communication data.
9. Contract Processing and Client Management
If you commission us to provide photographic or videographic coverage of your wedding, we process the data necessary to perform the contract.
This includes, in particular:
* names
* contact details
* address
* wedding date and venue
* details of the booked services
* contract data
* communication data
* invoice and payment data.
Processing takes place for the preparation, performance and administration of the contract.
The legal basis is Art. 6(1)(b) GDPR.
In addition, processing may be necessary due to legal obligations, in particular statutory retention obligations under tax and commercial law, pursuant to Art. 6(1)(c) GDPR.
We use Kreativ.Management to manage our contracts.
10. Online Galleries with Pixieset
We use Pixieset to provide and manage our online galleries.
After a wedding, we use these galleries to provide our clients with photographs and, where applicable, videos.
Personal data may be processed in this context, in particular:
* names
* contact details
* access credentials and/or gallery information
* photographs and videos
* other information you may provide.
Pixieset provides functions for creating and managing client galleries and processes personal data in this context. The provider also offers a data processing agreement for this purpose.
Processing takes place for the performance of our contract pursuant to Art. 6(1)(b) GDPR.
The photographs and video files we provide may remain available in the online gallery for an extended period of time. However, we cannot guarantee any specific or permanent storage period.
11. Photographs and Videos
As part of our work as wedding photographers and videographers, photographs and videos are created in which the wedding couple, family members, friends and other wedding guests may be recognisable.
The creation and processing of these recordings generally takes place for the performance of the contract concluded with our clients.
The publication of recordings for advertising and portfolio purposes, in particular on our website, social media, in blog posts or comparable media, only takes place on the basis of an applicable legal basis, in particular appropriate consent where such consent is required.
Copyright and rights of use relating to recordings created by us are separate from data protection and personality rights consents for their publication.
12. Vimeo
We use Vimeo to store, provide and embed videos on our website and, in some cases, to provide videos within our client galleries.
When a page containing an embedded Vimeo video is accessed, information may be transmitted to Vimeo. This may include, in particular, technical information about the device being used, the browser and use of the video.
For videos that we provide exclusively within client galleries, we may use corresponding visibility and embedding restrictions provided by Vimeo. Such videos are not necessarily publicly visible on our Vimeo profile.
Vimeo states that, when its embedded player is used, it may act as an independent data controller under data protection law and therefore may not always be regarded as our data processor.
Where consent is required for the embedding of a video, processing only takes place after the corresponding consent has been given.
13. YouTube
We use YouTube to provide and embed individual videos on our website.
When an embedded YouTube video is accessed or used, personal data may be transmitted to Google or YouTube.
Where the embedding used by us requires consent, the video will only be loaded or used after the corresponding consent has been given.
YouTube offers an “enhanced privacy mode” for embedded videos, which uses the domain youtube-nocookie.com. Whether and to what extent this mode is used for individual videos may depend on the respective technical implementation.
14. Transfer of Photo and Video Files
For the temporary transfer of larger photo and video files, we may use external file transfer services such as WeTransfer or SwissTransfer.
The following data may be processed in particular:
* name and email address of the recipient
* technical access data
* transferred files
* information about downloads or access.
These services are used exclusively to transfer the agreed photographic and video files.
The files are not used as a permanent archival solution with these services. The specific storage period depends on the technical conditions of the service used.
15. Communication via WhatsApp
WhatsApp may be used for communication with clients and prospective clients if you choose or request this communication channel.
In this context, the following data may be processed in particular:
* name
* telephone number
* message content
* files
* other information you transmit to us.
Communication via WhatsApp is voluntary. You can contact us at any time through other communication channels, in particular by email or telephone.
WhatsApp and/or Meta may also process personal data outside the European Union or the European Economic Area. The respective data transfers are subject to the provider’s privacy policies and technical safeguards.
16. Invoicing and Accounting with lexoffice
We use lexoffice to create and manage invoices and for our accounting.
The following data may be processed in particular:
* name and address
* email address
* invoice and service data
* payment information
* contract and business data.
Processing takes place to fulfil legal obligations and to manage our business relationships.
The legal bases are Art. 6(1)(b) and Art. 6(1)(c) GDPR.
lexoffice provides a data processing agreement for its relevant software modules.
17. Links to Social Networks
Our website contains links to our profiles or accounts on social networks, in particular Instagram, Pinterest and YouTube.
These are merely standard external links. No corresponding social media feeds are embedded on our website.
Simply accessing our website therefore generally does not transmit data to the respective social networks through these links. Data processing by the respective provider only takes place when you click the relevant link and visit the external platform.
18. Storage Period
We only store personal data for as long as necessary for the respective purpose or as required by statutory retention obligations.
Enquiries that do not result in a contractual relationship are generally deleted once the enquiry has been dealt with and there are no legal or legitimate reasons for further storage.
Contract, invoice and accounting data are stored in accordance with statutory retention obligations.
Photographic and video files and associated client data may be stored for an extended period for the fulfilment of our contractual obligations, the provision of online galleries and documentation of our authorship. We cannot guarantee any specific or permanent storage period.
19. Recipients and Data Processors
As part of our business activities, personal data may be transmitted to external service providers where this is necessary to provide our services, technically operate our systems or comply with legal obligations.
These include, in particular:
*Squarespace** – website and hosting
*Weglot** – provision of language versions
*Kreativ.Management** – enquiries, client management and contracts
*Pixieset** – online galleries
*Vimeo** – video storage and video embedding
*YouTube** – video provision
*WeTransfer / SwissTransfer** – temporary file transfers
*Meta** – advertising and Meta Pixel
*lexoffice** – invoicing and accounting.
Depending on the service provider, processing is either carried out as data processing on our behalf or under the independent data protection responsibility of the respective provider.
20. Transfers to Third Countries
For some of the service providers we use, processing of personal data outside the European Union or the European Economic Area cannot be ruled out.
Where personal data is transferred to a third country, this only takes place where the legal requirements of the GDPR are met. Depending on the recipient, this may be based in particular on an adequacy decision by the European Commission or appropriate safeguards such as Standard Contractual Clauses.
Further information on international data transfers and the safeguards used may be available from the respective providers.
21. Data Security
We take appropriate technical and organisational measures to protect personal data against loss, destruction, manipulation, unauthorised access or other unauthorised processing.
Our website is provided via an encrypted connection (HTTPS/SSL).
22. Rights of Data Subjects
Subject to the applicable legal requirements, you have the following rights in particular:
Right of Access
You may request information as to whether and which personal data we process about you.
Right to Rectification
You may request the correction of inaccurate personal data or the completion of incomplete personal data.
Right to Erasure
You may request the deletion of your personal data under the statutory conditions.
Right to Restriction of Processing
Under the statutory conditions, you may request the restriction of the processing of your personal data.
Right to Data Portability
Where the statutory requirements are met, you have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format.
Right to Withdraw Consent
Where processing is based on your consent, you may withdraw your consent at any time with effect for the future.
The lawfulness of processing carried out on the basis of consent prior to its withdrawal shall remain unaffected.
Right to Object
Where we process personal data on the basis of Art. 6(1)(f) GDPR, you may object to such processing at any time on grounds relating to your particular situation.
You may object at any time to the processing of personal data for the purposes of direct marketing.
23. Right to Lodge a Complaint with a Supervisory Authority
If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with a data protection supervisory authority.
In particular, a complaint may be submitted to the supervisory authority responsible for your habitual place of residence, place of work or the place of the alleged data protection infringement.
24. Updates and Changes to This Privacy Policy
We may update this Privacy Policy if changes are made to our website, the technical systems we use, our services or the applicable legal requirements.
The current version published on this website shall apply.