Privacy Policy

This privacy policy informs you about the nature, scope and purpose of the processing of personal data on urlaubsfotoshooting.com in accordance with the GDPR.

1. Data Controller

The controller responsible for data processing on this website is:

chocosite LLC
3833 Powerline Rd, Suite 201
Fort Lauderdale, FL 33309, USA

EU Representative (Art. 27 GDPR):
Dirk Murrnautzky
Email: mail [at] chocosite [dot] info

2. General Information

The protection of your personal data is important to us. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.

We do not use any external tracking or analytics tools. Neither Google Analytics, Facebook Pixel nor any other reach measurement or advertising cookies are used. We rely exclusively on the processing described below for the technical provision of the website and simple internal evaluation.

3. Hosting & Server Log Files

Hosting Provider

This website is hosted by:

ALL-INKL.COM – Neue Medien Münnich
Owner: René Münnich
Hauptstraße 68, 02742 Friedersdorf, Germany
Web: all-inkl.com
Privacy: all-inkl.com/datenschutzinformationen

The use of ALL-INKL.COM is based on Art. 6(1)(f) GDPR (legitimate interest in the secure and efficient operation of the website). We have concluded a data processing agreement (DPA) with ALL-INKL.COM pursuant to Art. 28 GDPR.

Server Log Files

When you visit our website, the hosting provider automatically collects information transmitted by your browser (so-called server log files):

This data is not merged with other data sources. Processing serves the technical provision and security of the website (legal basis: Art. 6(1)(f) GDPR — legitimate interest). Log files are deleted after a maximum of 14 days.

4. Our Own Visitor Analytics

To understand how our website is used, we operate our own privacy-friendly visitor analytics. It runs on our own infrastructure. No external analytics providers are involved, and no data is passed on to advertising or analytics services.

What we record: the pages viewed and their order, the content sections that became visible within a page and therefore the last section reached, the broad origin of the visit (direct, Google, Bing, Instagram, Facebook, Pinterest, AI services, other), the device class (desktop, tablet, mobile), and the opening and successful submission of the enquiry form.

What we do not record: anything you type into forms, your name, your email address and your IP address. The analytics never receives an IP address and never stores one. No link to you as a person or to an enquiry is created.

Two randomly generated identifiers for visit and session are stored in your browser's local storage to tell visits apart. A session ends after 30 minutes without activity. These identifiers contain no personal information.

Retention: individual visitor paths as well as visit and session identifiers are deleted after no more than 72 hours. Only anonymous daily counters are kept permanently — for example the number of visits, page views and enquiries per day, plus aggregated figures on how often a section was reached and how often a visit ended there. These figures cannot be traced back to individuals. Raw data is not backed up.

Consent: if your visit originates from Germany, the EU/EEA, the United Kingdom or Switzerland — or if the country of origin cannot be determined — we only record data after your explicit consent. The notice offers “Reject” and “Accept” as equally weighted options. From other countries, recording takes place without a prior dialogue; you may object at any time.

Withdrawal: the “Privacy settings” link in the footer lets you change your decision at any time. If you reject, no further data is collected, the local identifiers are deleted and any remaining raw data from your visit is removed. Anonymous daily figures already aggregated remain, as they cannot be attributed to any person.

Country determination: this happens exclusively on the server based on the origin of the request. The IP address is neither passed to the visitor analytics nor stored there.

Legal basis: where consent is required, Art. 6(1)(a) GDPR. Otherwise Art. 6(1)(f) GDPR — legitimate interest in a data-minimising evaluation of how our website and the enquiry form are used.

5. Contact Form & Enquiries

When you contact us via the enquiry form or by email, the data you provide (name, email address, travel period, package preference and your message) is stored for the purpose of processing your enquiry and any follow-up questions.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(a) GDPR (consent given by submitting the form).

Retention period: Your enquiry data will be deleted once it is no longer required for the purpose for which it was collected — generally after the correspondence is concluded, and at the latest after statutory retention periods expire (e.g. 6 or 10 years under HGB/AO for booking records).

Enquiry data submitted via the contact form is also transmitted to our internal enquiry management system at dashboard.chocosite.info. This system is operated exclusively by chocosite LLC — the same legal entity as the data controller of this website — and is used solely for internal processing and coordination of your booking enquiry. This is not a disclosure to a third party within the meaning of GDPR. No data is passed on to external third parties.

6. Email Dispatch via Brevo

We use the service Brevo to send our emails, particularly confirmation and reply emails in connection with enquiries submitted via the contact form. The provider is Brevo GmbH, Köpenicker Straße 126, 10179 Berlin, Germany.

In the course of email dispatch, data such as name, email address, enquiry content, sending timestamp and technical delivery information may be processed. Brevo processes this data on our behalf so that we can reliably respond to your enquiry by email.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures / contract communication) and Art. 6(1)(f) GDPR (legitimate interest in secure and reliable email dispatch).

We have concluded a data processing agreement with Brevo pursuant to Art. 28 GDPR. Further information on Brevo's privacy practices can be found at brevo.com/legal/privacypolicy/.

7. Locally Hosted Fonts

This website uses web fonts stored locally on our own server to ensure consistent display. When the website loads, font files are served exclusively from our own server.

No connection to Google servers takes place, and no personal data is transmitted to Google when fonts are loaded.

Legal basis: Art. 6(1)(f) GDPR — legitimate interest in a consistent, fast and privacy-friendly presentation of our website.

8. SSL/TLS Encryption

This website uses SSL/TLS encryption for security reasons. You can recognise an encrypted connection by the fact that the browser address bar changes from "http://" to "https://" and by the padlock symbol in your browser bar.

9. Your Rights as a Data Subject

You have the right at any time to:

To exercise your rights, please contact our EU representative (see Section 1 for contact details).

10. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data (Art. 77 GDPR). A list of supervisory authorities can be found at bfdi.bund.de.

Last updated: 23 July 2026