Legal
Privacy Policy
1. Data protection at a glance
The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified. Detailed information can be found in this privacy policy.
2. Controller
The controller responsible for data processing on this website is:
Marisa Silva Im Birkhau 53 71563 Affalterbach
Telephone: +49 (0) 160 – 364 36 07 E-mail: mail@marisa-silva.de
The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
3. Hosting
This website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The servers are located in Germany. A data processing agreement (DPA) pursuant to Art. 28 GDPR is in place with the provider.
When you visit the website, the server automatically records information in so-called server log files that your browser transmits:
- browser type and browser version
- operating system used
- referrer URL
- host name of the accessing computer
- time of the server request
- IP address
This data is not merged with other data sources and serves to ensure technically error-free presentation as well as the security and stability of the website. The legal basis is Art. 6(1)(f) GDPR (legitimate interest). For security reasons, the log data is stored for a maximum of 30 days and then deleted.
4. General information and mandatory information
We treat your personal data confidentially and in accordance with the statutory data protection regulations as well as this privacy policy. Data transmission over the internet may have security gaps; complete protection of data against access by third parties is not possible.
For security reasons and to protect the transmission of confidential content, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the “https://” in the address bar of your browser.
The use of contact data published within the framework of the imprint obligation to send advertising and information materials not expressly requested is hereby objected to.
5. Cookies and fonts
Cookies: By default, this website does not use any marketing cookies. For audience measurement with Google Analytics (see section 9), cookies or comparable technologies are set exclusively after your express consent via the cookie notice. Without consent, no analysis of your usage behaviour takes place. You can change your decision at any time with effect for the future.
Fonts: To ensure a uniform presentation of fonts, this website uses exclusively locally stored font files. No connection to third-party servers (e.g. Google Fonts) is established; in this respect, no data is transmitted to third parties.
6. Contact form, questionnaire and getting in touch
When you contact us via the contact form, the wedding questionnaire or by e-mail, the data you provide (including first and last name, e-mail address, your message, and, in the questionnaire, the information you voluntarily provide about your wedding) is stored by us for the purpose of processing your enquiry and in case of follow-up questions.
The processing of this data is based on Art. 6(1)(b) GDPR, insofar as your enquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on your consent (Art. 6(1)(a) GDPR) as well as our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).
The data you transmit remains with us until you request its deletion, withdraw your consent, or the purpose of the data storage no longer applies (e.g. after your enquiry has been fully processed). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.
7. Sending of form messages (Resend)
For the technical dispatch of the messages sent via the forms, we use the service Resend provided by Resend, Inc. (USA). Dispatch takes place via the EU region (servers in Ireland); however, administrative account data and dispatch logs may also be processed in the USA. The data you enter is transmitted to this service provider for the purpose of delivering the e-mail. A data processing agreement pursuant to Art. 28 GDPR is in place with the provider. The legal basis is our legitimate interest in reliable and secure e-mail dispatch (Art. 6(1)(f) GDPR) or your consent (Art. 6(1)(a) GDPR). For information on international data transfer, see section 10.
8. YouTube video (home page)
On the home page, for design purposes we embed a background video via the YouTube service in extended data protection mode. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland.
The extended data protection mode (youtube-nocookie) means that YouTube only stores information about visitors once the video is played or loaded. When the video is loaded, a connection is established to the servers of YouTube/Google; in the process, among other things, your IP address is transmitted to Google. If you are logged into your YouTube account, Google can associate your browsing behaviour with your profile; you can prevent this by logging out.
The embedding takes place on the basis of your consent (Art. 6(1)(a) GDPR), insofar as consent is requested, otherwise on the basis of our legitimate interest in an appealing presentation of our offering (Art. 6(1)(f) GDPR). Further information on the handling of user data can be found in Google’s privacy policy at https://policies.google.com/privacy.
9. Google Analytics 4
This website uses – only after your consent – the web analytics service Google Analytics 4 of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland. Google Analytics uses cookies or comparable technologies that enable an analysis of the use of the website (e.g. pages accessed, time spent, approximate location, device used). The IP address is processed in a truncated form (IP anonymisation).
The processing takes place exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25 (1) TDDDG, which you grant via the cookie notice. You can withdraw your consent at any time with effect for the future. Prior to consent, no analytics cookies are set and no data is transferred to Google (Google Consent Mode). A data processing agreement pursuant to Art. 28 GDPR is in place with Google. For information on international data transfer, see section 10.
10. International data transfer
When using the services Resend, Google Analytics and YouTube (Google), personal data may be transmitted to servers in the USA. Both Resend, Inc. and Google LLC are certified under the EU-U.S. Data Privacy Framework (DPF); the transfer is therefore based on the European Commission’s adequacy decision of 10 July 2023 (Art. 45 GDPR). In addition, we have agreed the European Commission’s standard contractual clauses (Art. 46 GDPR) with the providers in order to ensure an adequate level of data protection beyond that as well.
11. No automated decision-making
Automated decision-making, including profiling within the meaning of Art. 22 GDPR, does not take place.
12. Your rights
Within the scope of the applicable statutory provisions, you have the right at any time to:
- information about your stored personal data (Art. 15 GDPR)
- rectification of inaccurate data (Art. 16 GDPR)
- erasure of your data stored by us (Art. 17 GDPR)
- restriction of data processing (Art. 18 GDPR)
- data portability (Art. 20 GDPR)
- object to the processing (Art. 21 GDPR)
- withdrawal of a granted consent with effect for the future (Art. 7(3) GDPR)
You can contact us at any time regarding this as well as any further questions on the subject of data protection.
13. Right to lodge a complaint with the supervisory authority
In the event of breaches of the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, your place of work, or the place of the alleged breach. The competent supervisory authority for data protection matters is the State Commissioner for Data Protection of the federal state in which the controller has its registered office (Baden-Württemberg).
Status
Last updated: July 2026.
Note
This is a translation provided for your convenience. The legally binding version is the German one.