Privacy Policy

Privacy Policy

Policy overview

This privacy policy explains how Grafenstein Snaps processes personal data when you use hathulcask.click, make an inquiry, or book small event photography services. It is written to help you understand what we collect, why we use it, and how you can exercise your rights.

Data collected only as described in this policy
Your rights and options are detailed below
Questions handled via our contact channel
User Rights

Your Rights

Depending on the situation and applicable law, you may be able to request access, correction, deletion, restriction, or objection, and in some cases a copy of your data. We assess each request in context and may need to keep certain information where the law or a legitimate business need requires it.

Your rights are intended to give you practical control over your personal data.
Requests

How Rights Requests Are Handled

To protect privacy, we may ask for information needed to verify your identity before acting on a request. Once verified, we will review the request and respond within the period required by applicable law, unless an extension is permitted.

Verified requests are reviewed before any action is taken.
Data Retention

Retention of Data

Inquiry records, booking details, and related correspondence are retained for the period needed to manage the request, provide the service, maintain records, and meet legal obligations. When data is no longer needed, it is deleted or anonymized according to our retention practices and any applicable legal limits.

We keep data only for as long as it is needed for the relevant purpose or legal requirement.
Policy Updates

Policy Updates

If we make material changes, we will update the policy text on the website and may use a reasonable notice method for significant updates. The version in effect is the one published at the time you review the site.

We may revise this policy when our processing practices or legal obligations change.
Data Collection & Cookies
This section outlines the categories of information collected, where that information comes from, how cookies are used, and the controls available to users.
Collected Data

Data We Collect

We process the information you submit through our contact channels, including your name, email address, phone number if provided, inquiry message, shoot requirements, and preferred date and session details. We also process limited technical data such as server request metadata and browser and device information when you use the website.

The data collected depends on the inquiry, booking, and delivery steps involved.
Data Sources

How We Receive Data

We receive personal data when you contact us, request a quote, confirm a booking, or communicate about an event session. Technical data is collected automatically through the website and its security and delivery functions.

Most information comes directly from you; some technical data is generated by your device and browser.
Cookie Types

Cookie Types

The website uses essential cookies needed for operation and cookies that store privacy preferences. We do not confirm the use of analytics or marketing cookies.

Only limited cookie categories are used on this website.
Cookie Controls

Cookie Controls

We use cookies only for essential site operation and to remember privacy preferences. You can control cookies through your browser settings, and where available through the site’s preference controls. Disabling essential cookies may affect basic website functions.

Cookie preferences are limited to essential operation and privacy settings.

Data processing overview

How personal data is used and shared

Purpose of use

Purposes of Processing

We use personal data to answer inquiries, review event details, prepare coverage plans and quotes, confirm bookings and access arrangements, deliver photography services, curate and edit images, provide private gallery delivery, maintain website security, and support technical operation of the site.

Note
Processing is limited to the purposes needed for the website and the requested service.
Third-party sharing

Service Providers and Operational Sharing

We may share personal data with service providers that help us operate the website, handle contact form responses, support technical delivery, or maintain security. These recipients are expected to process data only for the tasks they perform on our behalf and under appropriate confidentiality obligations.

Note
Operational recipients are used only where they are needed to support the service.
GDPR

Overview

GDPR Overview

Where the GDPR applies, we process personal data on a lawful basis that fits the relevant interaction, such as handling an inquiry, preparing a booking, meeting legal obligations, protecting our website, or carrying out necessary technical delivery. The applicable basis depends on the context and the type of data involved.

If you are in the European Economic Area, the GDPR may apply to our processing of your personal data.
This overview is intended for users whose data is protected by the GDPR.

Rights

Your GDPR Rights

Where the GDPR applies, you may have rights to access, rectify, erase, restrict, or object to certain processing, and to request data portability where applicable. If processing is based on consent, you may withdraw it for future processing. Some requests may be limited by legal retention duties, contractual needs, or other lawful grounds.

GDPR rights are handled case by case and may depend on the legal basis for processing.
Privacy Office

Contact for Privacy Matters

Email contact
team@hathulcask.click
Telephone contact
+43 664 186254
Postal address
Dolina 40, 9131 Grafenstein
General privacy contact
team@hathulcask.click