top of page

Detailed Privacy Policy
 
Last Updated: July 08, 2025
This Privacy Policy informs you, in accordance with Art. 13 and 14 of the General Data Protection Regulation (GDPR), about how we process your personal data in connection with the use of our photo booth.
 
1. Data Controller
 
The controller responsible for the collection and processing of your personal data is:
Veranstaltungsservice Matthias Sasse

Attn: Matthias Sasse

Olvenstedter Str. 8b

39108 Magdeburg Germany Email: info@photobob.de Phone: 015234230243
 
2. Purposes and Legal Bases for Processing
 
We process your data for the following purposes and on the following legal bases:
a) Processing of Photographs in the Photo Booth

  • Purpose: To create the photographs you initiate, to store them temporarily to enable printing, and to subsequently print two photo strips.

  • Data Processed: The digital image files you create in the booth.

  • Legal Basis: Your consent pursuant to Art. 6(1)(a) GDPR. You give this consent through a clear affirmative action by completing the payment process via Stripe after being informed about the processing on the booth's start screen.

b) Payment Processing

  • Purpose: To pay for the use of the photo booth, you are redirected via a QR code to the website of the payment service provider, Stripe. The payment (via Credit Card, Apple Pay, Google Pay) is processed directly through Stripe's systems.

  • Data Processed: Transaction data such as the payment amount, date, payment method, as well as your payment data collected by Stripe (e.g., credit card number, cardholder name). As the operator of the photo booth, we do not receive access to your specific payment details (e.g., your full credit card number).

  • Legal Basis: The processing is necessary for the performance of the user contract concluded with you, Art. 6(1)(b) GDPR.

 
3. Recipients of Data and Data Transfers
 
Your personal data is only shared when legally required or necessary for process execution.

  • Photographs: Your photos created in the booth are not shared with third parties. Processing takes place exclusively on the local, self-contained system of the photo booth.

  • Payment Data: To process the payment, your payment data is transferred to the following service provider: Stripe, Inc. 510 Townsend Street, San Francisco, CA 94103, USA

    The transfer to Stripe is mandatory for the payment process. Stripe processes your data as an independent controller. Please be aware that as a U.S.-based company, Stripe may also process data in the USA. The transfer is secured by recognized safeguards (such as Standard Contractual Clauses) in accordance with Art. 46 GDPR to ensure an adequate level of data protection. For more information on Stripe's privacy practices, please visit: https://stripe.com/privacy

 
4. Data Retention Period and Deletion Policy
 
We adhere to the principles of data minimization and storage limitation.

  • Photographs: Your photos are stored on the booth's hard drive only temporarily for the time technically required for the printing process. Immediately after the successful printing of your two photo strips, the underlying digital image files are automatically and irrevocably deleted. No archiving or backup storage occurs.

  • Payment Data: We do not store any payment data ourselves. The retention of transaction data by Stripe is subject to their own retention periods and legal obligations.

 
5. Your Rights as a Data Subject
 
Regarding your data processed by us, you have the following rights:

  • Right to Access (Art. 15 GDPR): You can request information about your data stored by us at any time.

  • Right to Rectification (Art. 16 GDPR): You can request the correction of inaccurate data.

  • Right to Erasure ('Right to be Forgotten') (Art. 17 GDPR): You can request the deletion of your data. We comply with this right for the photos immediately through our automatic deletion policy.

  • Right to Restriction of Processing (Art. 18 GDPR): You can request that we restrict the processing of your data.

  • Right to Withdraw Consent (Art. 7(3) GDPR): You can withdraw your consent to the processing of your photos at any time with future effect. However, since the processing and deletion are completed within moments, a withdrawal after printing has no practical effect.

  • Right to Data Portability (Art. 20 GDPR): You have the right to receive the data concerning you in a structured, commonly used, and machine-readable format.

To exercise your rights, please contact us using the contact details provided in Section 1. Exercising your rights is free of charge for you.
 
6. Right to Lodge a Complaint with a Supervisory Authority
 
Without prejudice to any other legal remedy, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement, if you believe that the processing of your personal data violates the GDPR.
 
7. Automated Individual Decision-Making and Profiling
 
No automated individual decision-making, including profiling, takes place with the data from your photos.

bottom of page