AltBild
Sign in
Deutsch English

Privacy Policy

This translation is provided for convenience. The German version of this page is legally binding.

1. Controller

Sole proprietor (FOP) Dmytro Kovalchuk
vul. Bohdana Khmelnytskoho 13, Bronnyky, Rivne Oblast, Ukraine
Phone: +380 75 585 39 66
Email: [email protected]

We are based in Ukraine. Because our services are aimed at people in the EU, the General Data Protection Regulation (GDPR) applies to the processing of your data.

2. Overview

We only process the data we need to work on your photos, keep you informed and get paid. We do not use advertising tools, tracking cookies or social media plugins. To measure traffic we use PostHog without cookies (section 3). Fonts are hosted on our own server.

3. Visiting the website

Server logs. When you open the website, our server processes technically necessary data: IP address, date and time, page requested, browser and operating system. This is needed for secure operation and to fend off attacks (Art. 6(1)(f) GDPR). We delete logs after 14 days at the latest.

Cookies. We only use technically necessary cookies: a session cookie (remembering, for example, your language, your sign-in and an order in progress) and a security cookie against forged requests. The website does not work without them (§ 25(2) no. 2 TDDDG, Art. 6(1)(b) and (f) GDPR). No consent is required for them.

Coming from a video. If you arrive via a link in one of our YouTube videos, we remember which video. This only tells us which video brings visitors; it does not identify you (Art. 6(1)(f) GDPR).

Traffic measurement. We use PostHog to measure how the website is used: which pages are opened, which link or video visitors come from, which step of the order process they reach, and roughly the browser, device type and country. We also count which buttons and options are used, for example clicks on “Send a photo”, use of the before/after slider, the number of photos, the total price, the services and payment method chosen, and the reason a photo is suggested for a retake. We set no cookies and store nothing on your device. We do not record sessions or capture what you type, email addresses or the content of your photos. Your IP address is not stored for this, and the data is not linked to your name or email address. The measurement serves to improve our service (Art. 6(1)(f) GDPR). If your browser sends “Do Not Track”, we do not measure. You can object to the measurement at any time (section 9).

4. Orders and customer account

Email address and account. We need your email address to take an order. We use it to create your account and to send you sign-in links and codes, order updates, the preview and the result (Art. 6(1)(b) GDPR).

Photos. We store the photos you upload and our results in order to carry out your order (Art. 6(1)(b) GDPR). Photos may show other people; we process their images only for this purpose.

Automatic check. So that you see a price immediately, an AI service from Google (Gemini via Google Cloud Vertex AI, processed in the EU) checks each photo for suitability and condition. We send a reduced copy without metadata. Google does not use this data to train its own models. You confirm this with a checkbox before uploading.

Order data. We store the services chosen, prices, payment status, your revision requests and, for a gift, the names and dedication on the voucher.

Records of consent. When you accept the terms, request that work begins early or agree to the transfer of your photos, we store the time and IP address so that we can prove it if necessary (Art. 6(1)(c) and (f) GDPR).

5. Payment

Card payment. If you pay by card, Apple Pay or Google Pay, you are redirected to WayForPay (WayForPay LLC, Ukraine). You enter your payment details there; we neither see nor store card data. We only receive the amount, status and a reference number (Art. 6(1)(b) GDPR). WayForPay's privacy policy also applies.

Bank transfer. For a bank transfer we see the details your bank transmits (name, IBAN, payment reference).

6. Recipients and service providers

We do not pass your data to third parties for advertising. We use the following service providers, who process data on our behalf:

  • OVHcloud (OVH SAS, France) – website server, located in the EU.
  • Google Cloud (Google Cloud EMEA Ltd., Ireland) – storage of photos and results (Frankfurt data centre) and AI check of photos (Vertex AI, EU).
  • Resend (Resend, Inc., USA) – sending our emails. Your email address and the content of the email are processed; a transfer to the USA is possible and is based on EU standard contractual clauses (Art. 46 GDPR).
  • WayForPay (WayForPay LLC, Ukraine) – processing card payments.
  • PostHog (PostHog, Inc., USA) – traffic measurement; we use the EU region (Frankfurt), where the data is stored.

7. Transfers to third countries

As we are based in Ukraine ourselves, your data is also processed there. There is no EU Commission adequacy decision for Ukraine. The transfer is necessary to perform the contract with you (Art. 49(1)(b) GDPR). We store photos and results in the EU; our restorer accesses them to do the work.

PostHog, Inc. is based in the USA; the measurement data is stored in the EU. Where access from the USA cannot be ruled out, it relies on EU standard contractual clauses (Art. 46 GDPR).

8. Storage period

  • Photos and results: 12 months after the order is completed, so that you can download the files again. We delete earlier on request.
  • Unfinished orders: at the latest 90 days after the last activity.
  • Customer account: until you ask us to delete it.
  • Order and payment data: for as long as statutory retention obligations apply.
  • Traffic measurement data: 12 months at most.
  • Records of consent: until the limitation period for possible claims expires (usually 3 years).

9. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You may withdraw consent at any time with effect for the future (Art. 7(3)). Just write to [email protected].

You may also lodge a complaint with a data protection supervisory authority, in particular in the EU country where you live (Art. 77 GDPR).

10. Obligation to provide data

Without an email address and photos we cannot carry out an order. Any other information is voluntary.

11. Automated decisions

The AI check suggests a price category. We always review badly damaged photos by hand. There are no decisions with legal effect based solely on automated processing (Art. 22 GDPR); you decide yourself whether to order at the price shown.

12. YouTube channel

Our website links to the YouTube channel "Dorfleben von einst". You only go to YouTube when you click the link; Google's privacy policy applies there.

Version of 27 October 2026