Datenschutz

Privacy Policy

1. Controller

Responsible for data processing on this website is:
WE LUV TO CELEBRATE GmbH, Hertelstr. 31, Stadtpalais Johannstadt, 01307 Dresden, Germany
Email: hello@bondingoo.com

2. Hosting

This website is hosted with ALL-INKL.COM (ALL-INKL.COM - Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany). When you visit the website, technical information (so-called server log files) is automatically collected, such as IP address, date and time of access, page accessed, and browser used. This data serves exclusively the technical provision and security of the website and is not merged with other data. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in secure and stable website operation). A data processing agreement under Art. 28 GDPR exists with ALL-INKL.COM. The fonts used on this website (Fraunces, Space Grotesk, IBM Plex Mono) are delivered locally from our own server. No connection to Google servers is made in the process.

3. Getting in touch

If you write to us by email or contact form, the data you provide (name, email address, message) is stored and processed exclusively to handle your inquiry. The legal basis is Art. 6 (1) (b) GDPR, as the processing serves the initiation of a contract. The data is deleted as soon as it is no longer required for handling your inquiry, at the latest once communication has concluded, unless legal retention obligations apply.

4. Cookies and consent

On your first visit we ask whether we may use Google Analytics. We store your decision in your browser's local storage so that we do not ask again on every page. This is technically necessary. The legal basis is Section 25 (2) No. 2 TDDDG in conjunction with Art. 6 (1) (f) GDPR. We only set further cookies with your consent.

5. Google Analytics

With your consent we use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics sets cookies and collects information about your use of this website, such as pages visited, time spent, approximate region, device and browser. This helps us understand how our website is used and improve it. According to Google, IP addresses are not stored by Google Analytics 4.

Google Analytics is only loaded once you click “Accept” in the consent notice. The legal basis is your consent under Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG. You can withdraw it at any time via the “Cookie settings” link in the footer of every page. This does not affect the lawfulness of processing carried out before the withdrawal.

Data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework, for which an adequacy decision of the European Commission exists. The data is deleted after the retention period set in Google Analytics. More in Google's privacy policy: policies.google.com/privacy.

6. Login area for couples and partners

For couples: when the first pearl is purchased, we create an account for each of you. We process your first names, email addresses, passwords (stored only as an irreversible check value), the word of your year, conversation dates and your answers in the task blocks. Your partner sees your answers once you have both submitted a block, and your celebrant sees them to prepare the conversations. Your wedding planner only sees your first names and year dates. The legal basis is the performance of the contract (Art. 6(1)(b) GDPR).

For celebrants and wedding planners: when you register, we process your name, email address, password (stored only as an irreversible check value), the details of your request as well as your profile information, photos and location. This serves to initiate and carry out the partnership (Art. 6(1)(b) GDPR). Once you are approved, we display your profile, photos, place and service area publicly, with the location rounded to about one kilometre.

For signing in we set a technically necessary session cookie. The data is stored on our server with our hosting provider (see section 2). We delete it when the collaboration or the Bondingoo account ends and no retention obligations remain.

Technical and organisational measures (Art. 32 GDPR): Transmission is always encrypted (HTTPS). We store answers from the task blocks, internal notes, the details of partner requests and the keys for two-factor sign-in in encrypted form. We store passwords only as an irreversible check value (Argon2id). Two-factor sign-in is mandatory for celebrants, wedding planners and our team and optional for couples. For this we store an encrypted key, not a phone number. After repeated failed attempts we temporarily block access, sessions end automatically after a period of inactivity and personal pages are not cached in the browser. We do not use analytics or advertising services in the login area. The PDF of your Bondingoo History is created when you download it and is not stored as a file.

7. Map display

For the map of celebrants and wedding planners we use the map library Leaflet, loaded via cdnjs (Cloudflare, Inc., USA), and map tiles from OpenStreetMap (OpenStreetMap Foundation, United Kingdom). The map only loads when you click “Load map”. Your IP address and technical information about your browser are then transmitted to these providers. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG).

If you choose “Remember for this browser”, we store your decision in your browser’s local storage. You withdraw it by deleting the site data in your browser. Cloudflare is certified under the EU-US Data Privacy Framework. An adequacy decision of the EU Commission exists for the United Kingdom. More: osmfoundation.org/wiki/Privacy_Policy and cloudflare.com/privacypolicy.

8. Your rights

You have the right at any time to:

Simply contact hello@bondingoo.com for this.

9. Right to complain

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the Saxon Data Protection Commissioner.

10. SSL encryption

For security reasons, this website uses SSL encryption. You can recognise an encrypted connection by "https://" in your browser's address bar.