Privacy Policy

1. Controller

Oleg Rostovtsev
Albertstr. 26
30451 Hannover, Germany
Email: info@rostovtsev.de

2. General Information

We process personal data confidentially and in accordance with the EU General Data Protection Regulation (GDPR) and this privacy policy.

3. Collection and Storage of Personal Data When Visiting the Website

When you visit our website, server log files are automatically processed (e.g. shortened IP address, date and time of access, pages visited, referrer URL, browser type and version, operating system). The legal basis is our legitimate interest in the technical provision, stability, and security of the website (Art. 6 (1) lit. f GDPR). Log data is automatically deleted when it is no longer necessary for the purpose.

4. Cookies and Consent Management (Complianz)

We use Complianz to manage your cookie choices. The plugin is provided by Complianz B.V., Kalmarweg 14-5, 9723 JG Groningen, Netherlands. Your choice is saved in consent cookies so that the website can respect it on subsequent visits.

Storing information on your device and accessing it is governed by Section 25 TDDDG. Strictly necessary functions fall under the exception in Section 25 (2) no. 2 TDDDG. Other cookies and similar technologies for statistics or marketing require your consent under Section 25 (1) TDDDG. Subsequent processing of personal data is governed by the GDPR: necessary security and website provision functions rely on Art. 6 (1) lit. f; statistics and advertising requiring consent rely on Art. 6 (1) lit. a.

You can change or withdraw your consent at any time with effect for the future: Cookie settings. Withdrawal does not affect the lawfulness of processing before withdrawal.

Details about cookies, purposes and expiry periods are available in our cookie policy. Plugin information: Complianz privacy information.

5. Contact Forms and Pricing Enquiries

When you contact us or request a pricing guide, we process the information provided in the relevant form. Depending on the form, this includes names, email address, telephone number, wedding date, venue, message and files uploaded voluntarily. We use these details to respond to your enquiry, send the requested pricing guide and check availability. Uploaded files are transmitted by email as attachments to the form message.

For enquiries about our photography services, the legal basis is Art. 6 (1) lit. b GDPR (pre-contractual steps at your request). Other enquiries are handled on the basis of our legitimate interest in communication under Art. 6 (1) lit. f GDPR. Separate consent is not required for this processing. Fields marked as required are necessary for handling the relevant enquiry; without these details, the form cannot be submitted. Optional details and attachments are not a prerequisite for an enquiry.

Form data is stored to handle the enquiry. The storage criteria in Section 13 apply. Please provide only information and files necessary for your enquiry.

Form Protection with Cloudflare Turnstile

We use Cloudflare Turnstile, provided by Cloudflare, Inc., to protect against automated and abusive enquiries. The service processes technical signals, including IP address, browser information and information about the website visited, to distinguish human visitors from bots. The legal basis is our legitimate interest in the security and operation of our forms (Art. 6 (1) lit. f GDPR). Cloudflare also processes signals as an independent controller to improve bot detection. Processing in the United States may occur.

Further information: Cloudflare Turnstile privacy information.

6. Google Analytics

We use Google Analytics provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to analyze the reach of our website. We use IP anonymization. Data may be transferred to the USA. The legal basis is your consent (Art. 6 (1) lit. a GDPR), which you can grant or withdraw via the cookie settings.

More information: Google Privacy Policy and How Google uses data from sites.

7. Google Ads and Remarketing

We use Google Ads, including remarketing functions, to re-engage with users. Provider: Google Ireland Limited. Cookies may be used and pseudonymous user profiles created. The legal basis is your consent (Art. 6 (1) lit. a GDPR).

More information: Google Privacy Policy and Ad settings.

8. Google Fonts

This website loads fonts (Google Fonts) from Google LLC servers. When a page is accessed, Google receives your IP address and possibly other technical data. The legal basis is your consent (Art. 6 (1) lit. a GDPR). Without consent, no external Google Fonts are loaded.

Information: Google Fonts FAQ and Google Privacy Policy.

9. Google Maps

We integrate Google Maps (Google Ireland Limited). When the maps are loaded, data is transmitted to Google. The legal basis is your consent (Art. 6 (1) lit. a GDPR).

More information: Google Privacy Policy.

10. Social Media and Facebook/Instagram Pixel

Our website includes content, links, or plugins from Instagram and Facebook as well as the Meta Pixel for reach measurement and personalized advertising. Provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland. Cookies may be used and data transmitted to Meta. The legal basis is your consent (Art. 6 (1) lit. a GDPR).

Details: Meta (Facebook/Instagram) Privacy and Ad preferences.

11. Embedded Videos (YouTube and Vimeo)

We embed videos from YouTube (Google Ireland Limited) and Vimeo (Vimeo.com, Inc., 555 West 18th Street, New York, USA). When the videos are loaded, a connection to the provider’s servers is established and cookies may be set. The legal basis is your consent (Art. 6 (1) lit. a GDPR).

YouTube: Privacy Policy — Vimeo: Privacy Policy

Google Tag Manager

We use Google Tag Manager (Google Ireland Limited) to manage the analytics and marketing tags used on this website. Loading Tag Manager establishes a connection to Google; in particular, IP address and technical browser data may be transmitted. The purposes and legal bases of the services deployed through it are described in their respective sections of this policy. Your cookie choice is passed to the tags.

OpenAI Ads

We use the OpenAI Measurement Pixel to measure the effectiveness of our advertisements and attribute website visits and successfully submitted enquiries to ad clicks. Technical connection data, pages visited, event data, browser identifiers and click references may be processed and transmitted to OpenAI. Marketing use relies on your consent under Art. 6 (1) lit. a GDPR and Section 25 (1) TDDDG. You can withdraw consent through the cookie settings. Cookie expiry periods are described in our cookie policy.

Further information: OpenAI privacy information and Measurement Pixel information.

Customer Galleries via Zenfolio

Our customer galleries at photos.rostovtsev.de are provided through Zenfolio, Inc., 303 Twin Dolphin Dr, 6th Flr, Redwood City, CA 94065, United States. Zenfolio processes the photographs stored there and related gallery information to provide the galleries. Visits to the galleries also involve processing technical access data, such as IP address and browser information. Providing galleries to our clients serves fulfilment of the relevant photography commission (Art. 6 (1) lit. b GDPR); technical operation and protection of the galleries rely on our legitimate interest under Art. 6 (1) lit. f GDPR. This does not replace a legal basis for publishing images of other people depicted.

The galleries are a separate service; the main website’s cookie settings do not control the Zenfolio pages. Zenfolio information: privacy information and data processing and international transfer information.

12. Data Transfer to Third Countries

Use of external services, particularly Google, Meta, Cloudflare Turnstile, OpenAI Ads, Zenfolio and Vimeo, may involve processing personal data in third countries, particularly the United States. Consent to statistics or marketing services is separate from the requirements governing international data transfers. Cookie consent does not automatically constitute explicit consent under Art. 49 (1) lit. a GDPR.

Transfers may be based on an applicable adequacy decision under Art. 45 GDPR, such as for an appropriately certified US recipient within the EU-US Data Privacy Framework, or appropriate safeguards under Art. 46 GDPR, particularly Standard Contractual Clauses. Information about the transfer mechanisms described by providers is available here: Google, Meta, Cloudflare, OpenAI, Zenfolio and Vimeo. You can request information about recipients and safeguards relevant to your data using the contact details above.

13. Storage Period

We process and store personal data only for as long as necessary for the respective purposes or as required by law. After this period, the data will be deleted or anonymized.

14. Your Rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction (Art. 18 GDPR), data portability (Art. 20 GDPR), and to object to processing based on Art. 6 (1) lit. f GDPR (Art. 21 GDPR). You may also withdraw your consent at any time with effect for the future (Art. 7 (3) GDPR), e.g. via the cookie settings.

15. Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority is usually that of your habitual residence or the place of the alleged infringement. For Lower Saxony:

The State Commissioner for Data Protection Lower Saxony, Prinzenstraße 5, 30159 Hannover, Germany
Web: https://lfd.niedersachsen.de

16. Changes to this Privacy Policy

We reserve the right to amend this privacy policy to comply with legal requirements or to reflect changes in our services. The version published here applies.

Last updated: 3 October 2026