Legal Notice – Privacy Policy

Marlene Brandl
Warschenbichlsiedlung 21, 4563 Micheldorf
+43 677 617 418 80
marlenebrandl.fotografie@gmail.com

Member of the Upper Austrian Economic Chamber
in the professional photographers group

WKO Member Number 3307697

Member of Junge Wirtschaft

Image Credits: Some portraits of Julia and me were provided by Katharina Jessner, Anna Höller, and Wolfram Marius.

All prices are tax-exempt due to the small business regulation (Kleinunternehmerregelung).

Privacy Policy

The use of this website is generally possible without the active provision of personal data. Personal data are details about the factual or personal circumstances of a specific or identifiable natural person.

Insofar as personal data (e.g., name or email addresses) are collected on these pages, this is done on the basis of your consent and always on a voluntary basis. These data will not be passed on to third parties without your express consent and will be deleted after the end of the respective purpose.

1. Data Collection When Visiting This Website

When using my website for informational purposes only, I only collect data that your browser transmits to my server (so-called "server log files"). When visiting my website, the following data are collected:

Visited page
Date and time of access
Quantity of data sent in bytes
Source/reference from which you reached the page
Browser and operating system used
IP address (if applicable, in anonymized form)

Processing is carried out in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of my legitimate interest in improving the stability and functionality of my website. This data is not passed on.

2. Hosting: Vercel

I host my website with Vercel. The provider is Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA.

When you visit my website, Vercel collects various log files including your IP address. Vercel is a global CDN that routes traffic between your browser and my website through its servers. Data may also be processed on servers in the USA.

Data transfer to the USA is based on the Standard Contractual Clauses of the EU Commission and the EU-US Data Privacy Framework (DPF). Vercel is certified under the DPF. Further information: https://vercel.com/legal/privacy-policy.

3. Analysis Tools: Vercel Web Analytics

I use "Vercel Web Analytics," a service provided by Vercel Inc., for anonymized analysis of website traffic.

This service operates without the use of cookies. No data is permanently stored on your end device. Aggregated metrics such as page views, referrer, browser type, and approximate location (at the country level) are collected for evaluation. Vercel generates a temporary hash value from the IP address and user agent that is reset daily – personal identification is not possible.

Legal basis: Art. 6 Para. 1 lit. f GDPR (legitimate interest in optimizing my website).

4. Cookies

This website does not use tracking cookies, analysis cookies, or third-party cookies. No advertising partners are integrated, and no data about your usage behavior is permanently stored on your end device.

Technically necessary session cookies may be set by the hosting service (Vercel) for connection security. These do not contain personal data and are automatically deleted after closing your browser.

A cookie banner is therefore not required on this website.

5. Contact & Contact Form

When contacting me via email or the contact form, personal data (name, email address, phone number, message content) are collected. These data are stored and used exclusively for responding to your request. Legal basis: Art. 6 Para. 1 lit. f GDPR as well as Art. 6 Para. 1 lit. b GDPR for contract initiation.

6. Contact Form: Formspree

The contact form on this website is operated by the third-party provider Formspree (Formspree, Inc., 2261 Market Street #4990, San Francisco, CA 94114, USA).

When you submit the contact form, the data you enter (name, email address, phone number, message content, and other information in the form) is transmitted to Formspree servers in the USA. Formspree processes this data to forward the message to me via email.

Data transfer to the USA is based on the Standard Contractual Clauses of the EU Commission. Further information on data protection at Formspree can be found at: https://formspree.io/legal/privacy-policy/.

Legal basis for processing: Art. 6 Para. 1 lit. f GDPR (legitimate interest in a functioning contact option) as well as Art. 6 Para. 1 lit. b GDPR for contract initiation.

7. Your Rights as a User

Applicable data protection law grants you comprehensive data subject rights (rights of information and intervention) against the controller regarding the processing of your personal data, about which we inform you below:

Right of information according to Art. 15 GDPR: You have the right to obtain from us confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data and the following information: the purposes of the processing; the categories of personal data concerned; the recipients or categories of recipient to whom the personal data have been or will be disclosed; where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period; the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing; the right to lodge a complaint with a supervisory authority; where the personal data are not collected from the data subject, any available information as to their source; the existence of automated decision-making, including profiling, and meaningful information about the logic involved and the significance and the envisaged consequences of such processing for the data subject; the right to be informed of the appropriate safeguards according to Art. 46 GDPR relating to the transfer to a third country;
Right of rectification according to Art. 16 GDPR: You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement;
Right of erasure according to Art. 17 GDPR: You have the right to obtain from us the erasure of personal data concerning you without undue delay where one of the grounds according to Art. 17 Para. 1 GDPR applies. This right does not apply, however, in particular to the extent that processing is necessary for exercising the right of freedom of expression and information; for compliance with a legal obligation; for reasons of public interest; or for the establishment, exercise or defense of legal claims;
Right to restriction of processing according to Art. 18 GDPR: You have the right to obtain from us restriction of processing where one of the following applies: you contest the accuracy of your personal data for a period enabling us to verify the accuracy; the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead; we no longer need the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defense of legal claims; or you have objected to processing pursuant to your particular situation pending the verification whether our legitimate grounds override yours;
Right of notification according to Art. 19 GDPR: If you have asserted the right of rectification, erasure or restriction of processing against the controller, the controller is obliged to communicate any rectification or erasure of personal data or restriction of processing carried out to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. You have the right to be informed about those recipients.
Right to data portability according to Art. 20 GDPR: You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller, as far as this is technically feasible;
Right to withdraw consent according to Art. 7 Para. 3 GDPR: You have the right to withdraw your consent to the processing of data at any time with effect for the future. In the event of withdrawal, we will delete the data concerned immediately, unless further processing can be based on a legal basis for processing without consent. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal;
Right to lodge a complaint according to Art. 77 GDPR: If you consider that the processing of personal data relating to you infringes the GDPR, you have the right to lodge a complaint with a supervisory authority. In Austria: Datenschutzbehörde, Wickenburggasse 8, 1080 Wien, dsb@dsb.gv.at.

Right to Object

If we process your personal data based on our predominant legitimate interest in the context of a balancing of interests, you have the right to object to this processing at any time for reasons arising from your particular situation, with effect for the future.

If you exercise your right to object, we will stop processing the data concerned. However, we reserve the right to continue processing if we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves for the establishment, exercise or defense of legal claims.