Deutsch

Privacy Policy

Last updated: 21/09/2026

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Tobias Riemenschneider – Triemo Games (sole proprietorship) Kirchmairstr. 33 80686 Munich Germany Email: info@fotari.de Phone: +49 179 6715866

2. Data Protection Officer

No data protection officer has been appointed, as there is no legal obligation to do so.

3. General Information on Data Processing

We take the protection of your personal data very seriously. Personal data is processed on this website only to the extent necessary, for specified purposes, and in accordance with the GDPR.

Personal data is any information that can be used to identify you personally (e.g. name, email address, or photographs of individuals).

4. Accessing the Website & Server Log Files

Hosting by Vercel

This website is hosted by Vercel Inc. When you access the website, the following data is collected automatically:

  • IP address (truncated/anonymised)
  • Date and time of access
  • Page accessed
  • Browser type and version
  • Operating system

This data is processed to ensure the technical operation of the website, analyse errors, and prevent misuse.

Retention period: no more than 1 day

Legal basis: Art. 6(1)(f) GDPR (legitimate interests)

5. Cookies & Consent Management

Fotari uses cookies.

Types of cookies

  • Strictly necessary cookies (e.g. for login, security, and page navigation)
  • Tracking cookies (only with your consent)

Cookie consent

We use react-cookie-consent to manage your consent. On your first visit, you can decide whether to consent to tracking.

Legal basis: Art. 6(1)(a) GDPR (consent)

6. Web Analytics with Google Analytics 4 (GA4)

If you have given your consent, this website uses Google Analytics 4, a web analytics service provided by Google.

The data processed includes:

  • Anonymised IP address
  • Page views
  • Device information
  • Approximate location data
  • Interactions with the website

The IP address is anonymised before it is stored.

Purpose: to analyse use of the website and improve our services.

Legal basis: Art. 6(1)(a) GDPR (consent)

You may withdraw your consent at any time via the cookie settings.

7. User Accounts (Hosts)

Registration & use

Hosts can create a user account. The following data is processed:

  • Name
  • Email address
  • Password (encrypted)
  • Billing address
  • Event name
  • Date & type of event

Authentication is provided by Auth0.

Purpose: to provide Fotari services, manage events, and handle billing.

Legal basis: Art. 6(1)(b) GDPR (performance of a contract)

8. Guests & Use without Login

Guests can use Fotari without a user account.

Data processed (optional)

  • Email address (optional)
  • Nickname/name (optional)
  • Uploaded photographs

Purpose: participation in events and the upload and display of photographs as keepsakes.

Legal basis: Art. 6(1)(a) GDPR (freely given consent)

9. Photo Uploads (Core Feature)

Types of data

Fotari processes photographs that may depict individuals.

Responsibility

  • Photographs are uploaded voluntarily by guests
  • Guests decide which content they upload

Storage

  • Standard retention period: 6 months
  • Early deletion by:
    • the host; or
    • the person who uploaded the photograph
  • After deletion: a technical backup (recovery copy) is retained for no more than 30 days and then permanently removed

Access via shared links

Photographs can be viewed via an individual access link. Access is available only to people with whom this link has been actively shared.

The links are not intended for search engines and are not indexed.

Legal basis: Art. 6(1)(a) GDPR (consent)

10. Contact Form

When you use the contact form, the following data is processed:

  • Name
  • Address
  • Email address
  • Number of guests
  • Date of the event

Purpose: to process your enquiry and prepare a quotation.

Legal basis: Art. 6(1)(b) GDPR (steps prior to entering into a contract)

11. Email Communication

If you contact us by email, your details, including your message, will be stored.

Purpose: to process your enquiry.

Storage: in our email inbox for as long as necessary.

Legal basis: Art. 6(1)(b) or (f) GDPR

12. Service Providers (Data Processing on Our Behalf)

Fotari uses the following service providers:

  • Amazon Web Services (AWS) (S3, Lambda, DynamoDB, SQS – hosting & processing)
  • MongoDB Atlas (database)
  • Brevo (email delivery)
  • Lexware (invoicing)
  • Auth0 (user management)

All service providers are contractually bound as processors. Data is processed exclusively within the EU.

13. Retention Period

Personal data is stored only for as long as required for the relevant purpose or as required by statutory retention obligations.

14. Rights of Data Subjects

You have the right at any time to:

  • Access (Art. 15 GDPR)
  • Rectification (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Withdraw consent (Art. 7(3) GDPR)
  • Lodge a complaint with a supervisory authority

Please send requests to: info@fotari.de

15. Automated Decision-Making

We do not use automated decision-making or profiling.

16. Changes to This Privacy Policy

We reserve the right to amend this Privacy Policy to reflect legal or technical changes.