PHOTO ANNO 1900 SALZBURG
Privacy
Last updated: 24 October 2026
This notice explains how personal data are processed when you visit photoanno1900.com or use the protected studio administration area.
1. Controller and contact
FOTO-MOBIL GmbH
Festungsgasse 3
5020 Salzburg, Österreich / Austria
+43 662 84 10 99
[email protected]
Please use these details for privacy questions or to exercise your rights.
2. Website delivery and security
The website is hosted on Cloudflare Pages. We use Cloudflare Workers for dynamic functionality and Cloudflare D1 to store opening hours and closure notices. The provider is Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA.
Accessing the website involves processing technical data, including IP address, requested URL, time, browser and device details, connection information and information used to detect errors or attacks. The purposes are to deliver the website, operate it reliably and protect it against abuse. The legal basis is our legitimate interest in a secure and functioning website under Article 6(1)(f) GDPR.
Technical data are processed only as long as necessary for delivery, troubleshooting and security. Log retention depends on the Cloudflare service and configuration; there is no uniform seven-day retention period for this website. Our website application does not maintain an additional visitor database.
3. Protected studio administration
Only authorised people may edit opening hours. Sign-in uses Cloudflare Access and a one-time code sent by email. Data processed include the sign-in email address, IP address, time, authentication result and session information. The server also verifies authorisation when loading or saving settings.
This protects access and prevents unauthorised changes (Article 6(1)(f) GDPR). The application is configured for a 24-hour session; users may sign out earlier. Authentication logs may have different service- and plan-dependent retention periods. Opening hours and notices remain stored until changed or deleted; expired exceptions are no longer displayed. Our settings table stores no sign-in codes or visitor profiles.
4. Cookies, fonts and analytics
The website files contain no advertising or tracking cookies and no analytics or marketing scripts embedded by us. Fonts use system fonts already installed on your device; Google Fonts are not loaded from Google. Gallery images are served by this website.
Cloudflare Access uses necessary session cookies for studio administration, including CF_Authorization. Depending on enabled security features, Cloudflare may use additional necessary security cookies, for example to check suspicious requests. They support the requested sign-in or security, rather than personalised advertising by us. Purposes and durations are described in Cloudflare’s cookie documentation.
5. Contacting us
If you contact us by email or phone, we process the information you provide to respond and handle follow-up questions. The legal basis for service or contract enquiries is Article 6(1)(b) GDPR; for general enquiries it is Article 6(1)(f) GDPR (our interest in responding).
Under our existing contact policy, enquiry data are generally retained for six months. Data may be kept longer if a contract results, retention is legally required or processing is necessary to establish, exercise or defend claims. Email and telecommunications services involve their respective contracted providers. This website has no contact form.
6. External links
Google Maps and Instagram are links only: no map or Instagram feed is embedded. Opening a link connects you to that provider, whose privacy terms then apply: Google and Instagram / Meta.
7. Recipients and international processing
Cloudflare and subprocessors needed to provide the services may process technical data. Processing may take place outside the European Economic Area, particularly in the United States. Selecting an EU location for D1 does not mean that all Cloudflare services operate exclusively in the EU.
Cloudflare describes its contractual data-processing arrangements and safeguards, including EU Standard Contractual Clauses for relevant international transfers, in its Data Processing Addendum. See also Cloudflare’s privacy policy. Data may also be disclosed where legally required.
8. Your rights
Subject to statutory conditions, you have rights of access, rectification, erasure, restriction and portability. Where processing is based on consent, you may withdraw it with effect for the future.
Objection: Where processing is based on legitimate interests, you may object on grounds relating to your particular situation. Contact [email protected].
You may lodge a complaint with a competent supervisory authority. In Austria: Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, [email protected].
9. Providing data
Technical connection data are necessary to deliver the website. Contact enquiries are voluntary but must contain enough information to respond. Sign-in is required only for studio administration. Our website does not make automated decisions with legal or similarly significant effects or perform corresponding profiling.