Privacy Policy
This privacy policy informs you about the nature, scope and purpose of the processing of personal data on urlaubsfotoshooting.com in accordance with the GDPR.
1. Data Controller
The controller responsible for data processing on this website is:
chocosite LLC
3833 Powerline Rd, Suite 201
Fort Lauderdale, FL 33309, USA
EU Representative (Art. 27 GDPR):
Dirk Murrnautzky
Phone: +49 173 585 91 00
Email: dirk [at] chocosite [dot] info
2. General Information
The protection of your personal data is important to us. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.
We do not use any external tracking or analytics tools. Neither Google Analytics, Facebook Pixel nor any other reach measurement or advertising cookies are used. We rely exclusively on the processing described below for the technical provision of the website and simple internal evaluation.
3. Hosting & Server Log Files
Hosting Provider
This website is hosted by:
ALL-INKL.COM – Neue Medien Münnich
Owner: René Münnich
Hauptstraße 68, 02742 Friedersdorf, Germany
Web: all-inkl.com
Privacy: all-inkl.com/datenschutzinformationen
The use of ALL-INKL.COM is based on Art. 6(1)(f) GDPR (legitimate interest in the secure and efficient operation of the website). We have concluded a data processing agreement (DPA) with ALL-INKL.COM pursuant to Art. 28 GDPR.
Server Log Files
When you visit our website, the hosting provider automatically collects information transmitted by your browser (so-called server log files):
- Browser type and version
- Operating system used
- Referrer URL
- Hostname of the accessing device
- Time of the server request
- IP address (truncated / anonymised)
This data is not merged with other data sources. Processing serves the technical provision and security of the website (legal basis: Art. 6(1)(f) GDPR — legitimate interest). Log files are deleted after a maximum of 14 days.
4. Internal Page View & Form Statistics
For simple internal analysis, we record page views and events related to the contact form (e.g. form opened or submitted). This is done via a proprietary script on our website, not through external analytics providers.
A randomly generated session ID is stored in your browser's local storage to prevent repeated views of the same page within a session from being counted multiple times. The session ID is renewed after 30 minutes of inactivity.
Data processed includes the page visited, the session ID, the event type and the timestamp. Data is used exclusively for internal technical monitoring and improvement of the website, and not for advertising purposes.
Legal basis: Art. 6(1)(f) GDPR — legitimate interest in a simple, data-minimising analysis of website usage.
5. Contact Form & Enquiries
When you contact us via the enquiry form or by email, the data you provide (name, email address, travel period, package preference and your message) is stored for the purpose of processing your enquiry and any follow-up questions.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(a) GDPR (consent given by submitting the form).
Retention period: Your enquiry data will be deleted once it is no longer required for the purpose for which it was collected — generally after the correspondence is concluded, and at the latest after statutory retention periods expire (e.g. 6 or 10 years under HGB/AO for booking records).
Enquiry data submitted via the contact form is also transmitted to our internal enquiry management system at dashboard.chocosite.info. This system is operated exclusively by chocosite LLC — the same legal entity as the data controller of this website — and is used solely for internal processing and coordination of your booking enquiry. This is not a disclosure to a third party within the meaning of GDPR. No data is passed on to external third parties.
6. Email Dispatch via Brevo
We use the service Brevo to send our emails, particularly confirmation and reply emails in connection with enquiries submitted via the contact form. The provider is Brevo GmbH, Köpenicker Straße 126, 10179 Berlin, Germany.
In the course of email dispatch, data such as name, email address, enquiry content, sending timestamp and technical delivery information may be processed. Brevo processes this data on our behalf so that we can reliably respond to your enquiry by email.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures / contract communication) and Art. 6(1)(f) GDPR (legitimate interest in secure and reliable email dispatch).
We have concluded a data processing agreement with Brevo pursuant to Art. 28 GDPR. Further information on Brevo's privacy practices can be found at brevo.com/legal/privacypolicy/.
7. Locally Hosted Fonts
This website uses web fonts stored locally on our own server to ensure consistent display. When the website loads, font files are served exclusively from our own server.
No connection to Google servers takes place, and no personal data is transmitted to Google when fonts are loaded.
Legal basis: Art. 6(1)(f) GDPR — legitimate interest in a consistent, fast and privacy-friendly presentation of our website.
8. Instagram Link
Our website contains a link to our Instagram profile. This is a simple hyperlink. No Instagram content is embedded and no data is transmitted to Instagram unless you actively click the link.
Only after clicking the link do you leave our website and reach Instagram (Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland). From that point, Instagram's privacy policy applies: privacycenter.instagram.com/policy.
9. SSL/TLS Encryption
This website uses SSL/TLS encryption for security reasons. You can recognise an encrypted connection by the fact that the browser address bar changes from "http://" to "https://" and by the padlock symbol in your browser bar.
10. Your Rights as a Data Subject
You have the right at any time to:
- Access the data stored about you (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16 GDPR)
- Erasure of your data (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Object to processing (Art. 21 GDPR)
- Withdraw consent previously given (Art. 7(3) GDPR)
To exercise your rights, please contact our EU representative (see Section 1 for contact details).
11. Right to Lodge a Complaint
You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data (Art. 77 GDPR). A list of supervisory authorities can be found at bfdi.bund.de.
Last updated: 30 May 2026