Skip to content

Privacy Policy

Translation notice: This privacy policy has been machine-translated from German. Only the German version is authoritative.

Last updated: 17 September 2026

Privacy policy pursuant to Article 13 of Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and Recommendation No. 2/2001 on the minimum requirements for online data collection in the European Union

Within the scope of the legal requirements, the operator of this website guarantees that personal data is processed with respect for the fundamental rights and freedoms and the dignity of the data subject, with particular regard to confidentiality, personal identity and the right to the protection of personal data.

This privacy policy provides information about the processing, purposes, methods and general handling of data collected through our website. It does not cover other websites that may be accessed via links.

Data controllers

Alexander Garbin (Visual Production by Alexander Garbin) and Fabian Putzer (Putzer Fabian), operating jointly as Memoria Weddings, are joint controllers for the processing of personal data on this website. They determine the purposes and essential means of processing. Technical hosting is provided on their behalf and in accordance with their instructions.

The addresses and further contact details of both controllers can be found in the legal notice. You can send privacy enquiries to .

We process personal data to the extent necessary for the purposes described below. The applicable legal basis is specified for each processing activity. Where we process data on the basis of your consent, you may withdraw that consent at any time with effect for the future.

General purposes of processing

We use the data collected to operate this website and for the individual purposes set out below.

Access data / server log files

When you use this website, information about your usage behaviour and interaction with the site, as well as data about your computer or mobile device, is collected automatically (known as server log files).

This data includes:

  • Name and URL of the page accessed
  • Date and time of access
  • Browser type and version
  • Operating system
  • Referrer URL (i.e. the previously visited page)
  • IP address of the client/user

All log files listed above are automatically deleted from our server after no more than 90 days.

We use this log data only in the event of a cyberattack or a technical problem on the website.

This data is not used for statistical evaluations, profiling or other analytical methods. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in the secure and reliable operation of the website and in detecting and resolving attacks and technical faults.

Analytics

We use self-hosted analytics software to statistically evaluate the use of our website. Analytics is activated only after you have expressly consented to it through the cookie settings. Without this consent, it remains disabled.

General information

  • We collect only the minimum data necessary for analytics
  • We do not use cookies or local storage
  • We do not track users across different websites
  • We do not collect or store personal data that could directly identify individuals
  • We do not share or sell analytics data
  • This data is used exclusively to improve our website and is deleted after a maximum of 12 months

To the extent that personal data is processed as part of analytics, the legal basis is your consent pursuant to Article 6(1)(a) GDPR.

Data collected

After you consent to analytics, we process the following visit data for statistical evaluations:

  • Page data: URLs visited, page titles, referrers
  • Visit information: session duration, entry and exit pages
  • Device information: browser type and version, operating system, screen resolution, device type
  • Location data: country and region (derived from the IP address, which is not itself stored in the analytics database)
  • Events: clicks on elements and interactions within pages
  • Marketing data: UTM parameters (source, medium, campaign)

Consent can be withdrawn at any time in the cookie settings (the “Cookies” item in the footer).

Processing of IP addresses

The analytics software temporarily processes the IP address to determine location and to generate a hashed session identifier together with browser information and the website identifier. The IP address itself is not stored in the analytics database. The session identifier is used to statistically evaluate related visits and interactions. We do not use these evaluations to identify individuals or track them across websites. The separate information above applies to server log files.

Use and processing of analytics data

The data collected is used exclusively to:

  • Provide anonymous, aggregated statistics
  • Show trends in website traffic and user behaviour
  • Identify popular content and effective referral sources
  • Measure the success of marketing campaigns
  • Understand user flows on the website

All analytics data is stored on servers within the European Union, is not shared with third parties and is deleted after no more than 12 months.

Cookies

Our website uses cookies. These are small text files stored on your device with the help of your browser.

We use cookies to make our website user-friendly. We do not use cookies for tracking.

Because cookies are stored directly on your computer, you, as the user, also have full control over their use. You can disable or restrict the transmission of cookies by changing the settings in your internet browser. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, some of its functions may no longer be fully available.

Cookies used

All cookies listed below are technically necessary and each has a lifetime of one year:

  • locale: Stores your language preference.
  • ncc_c: Stores your decision regarding consent settings.
  • ncc_e: Stores which optional categories you have consented to.

Contact form

Our website provides a contact form that can be used to contact us electronically. If a user makes use of this option, the data entered into the form is transmitted to us and stored. Providing this data is voluntary. The information is not required by law. Without your name, email address and message, we cannot process your enquiry through the form.

During submission, we obtain your consent to the processing of the data and refer you to this privacy policy. The legal basis for processing the data is therefore your express consent pursuant to Article 6(1)(a) GDPR.

We process your name, email address, message, confirmation of the privacy notice and CAPTCHA verification token exclusively to handle your enquiry and secure its transmission.

We process personal data entered into the form solely to handle the contact request. For email enquiries about a potential engagement, the legal basis is Article 6(1)(b) GDPR (pre-contractual measures). We handle other email enquiries on the basis of Article 6(1)(f) GDPR; our legitimate interest lies in responding to your enquiry.

We do not intentionally collect sensitive personal data or personal data relating to criminal matters through our website. Sensitive data within the meaning of Article 9 of Regulation (EU) 2016/679 is personal data revealing racial or ethnic origin, religious, philosophical or other beliefs, political opinions, membership of parties, trade unions, associations or organisations of a religious, philosophical, political or trade union nature, as well as personal data concerning health or sex life. Data relating to criminal matters within the meaning of Article 10 of Regulation (EU) 2016/679 is data concerning criminal convictions and offences.

Spam protection using a self-hosted CAPTCHA

We use a self-hosted CAPTCHA to protect our contact form against spam and automated requests. This involves processing technically necessary connection data, such as your IP address, as well as verification data. Verification data is retained only for verification and to prevent reuse, and is deleted once the necessary validity and protection periods have expired. The retention periods stated above apply to server log files. The legal basis is Article 6(1)(f) GDPR (legitimate interest in protection against misuse).

Disclosure to third parties

As a rule, we use your personal data only within our business. Data is disclosed to third parties only where this is necessary to fulfil contractual or legal obligations, where you have expressly consented, or where there is a legitimate interest in disclosure.

Data processors

To provide our services, we use external service providers acting as data processors pursuant to Article 28 GDPR. These service providers are contractually obliged to process personal data exclusively in accordance with our instructions and to take appropriate technical and organisational measures to protect the data.

In particular, we use service providers in the following areas:

  • IT infrastructure and hosting (e.g. content delivery networks, security and DDoS protection, CAPTCHA services)
  • Project and order management (e.g. software for organising and handling customer enquiries)
  • Communication (e.g. tools for email communication)

Personal data is disclosed to other third parties only where required by law, where you have expressly consented, or where there is a legitimate interest in disclosure.

Location of processing

Personal data is processed exclusively within the European Economic Area (EEA). No transfers to countries outside the EEA take place.

Data retention

The retention periods or deletion criteria specified in the respective sections apply to server log files, analytics data, cookies and CAPTCHA verification data.

Data from contact enquiries is deleted once the enquiry has been fully handled and no further communication relating to it is required. If you withdraw your consent, we delete data whose processing is based exclusively on that consent, unless a statutory retention obligation prevents this.

If an enquiry results in an engagement, the data required to carry it out is further processed on the basis of Article 6(1)(b) GDPR. Statutory retention obligations remain unaffected; storage required for this purpose takes place on the basis of Article 6(1)(c) GDPR. Where data is necessary for the establishment, exercise or defence of legal claims, we store it on the basis of Article 6(1)(f) GDPR until the applicable limitation period has expired or ongoing proceedings have concluded.

Data security

We implement technical and organisational security measures to protect your personal data against manipulation, loss, destruction and access by unauthorised persons. These include the use of TLS/SSL encryption during transmission, firewalls and access restrictions. Our security measures are continually improved and adapted in line with technological developments.

Exercising data subject rights

If your personal data is processed, you are a “data subject” within the meaning of the GDPR and have the following rights in relation to the controller:

  • The right to confirmation and access
  • The right to rectification
  • The right to erasure (“right to be forgotten”)
  • The right to restriction of processing
  • The right to be informed
  • The right to data portability
  • The right to object
  • The right to withdraw consent to the processing of personal data
  • The right not to be subject to automated decision-making, including profiling
  • The right to lodge a complaint with the supervisory authority

You can send requests to exercise your rights to us, as the data controllers, using the contact details provided above.

You can also contact the supervisory authority if you believe that your data has been processed unlawfully or incorrectly.

You can withdraw consent at any time with effect for the future. For contact enquiries, simply send a message to . You can withdraw your consent to analytics in the cookie settings via “Cookies” in the footer. Withdrawal does not affect the lawfulness of processing carried out on the basis of your consent before its withdrawal.

Objection to processing

Where we process personal data on the basis of Article 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation. To do so, contact . We will then stop processing the data concerned unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or need the data for the establishment, exercise or defence of legal claims.

Changes to this policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. The updated policy will be published on this page with a new date.

Further information

If you have any further questions or concerns about data protection, please contact:

Further information:

GDPR – Regulation 2016/679

Data protection in the EU

Competent supervisory authority (Italy): Garante per la Protezione dei Dati Personali

Back to home