Privacy policy of the online gallery
Last updated: 29.09.2026 · applies to session.die-vintagebox.de and link.die-vintagebox.de · This is a translation; the German version is legally binding.
1. Controller
Julian Radins
Smaragdweg 5
06120 Halle (Saale), Germany
Email: mail@die-vintagebox.de
Phone: +49 176 5515 93 96
The online gallery is operated for all our brands: Die Vintagebox, Vintagebox Kompakt, Fotobox Berlin, Fotobox Halle, Fotobox Leipzig and the Kugelbox brands. The brands' own websites have their own privacy policies.
2. Hosting and server logs
The gallery is hosted by ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany, under a data processing agreement (Art. 28 GDPR). Each request logs technically necessary data: IP address, date and time, page requested, browser type and operating system. This serves secure and stable operation (legitimate interest, Art. 6(1)(f) GDPR). The logs are deleted after a short period in accordance with the host's rules.
3. Photos in the gallery
We make the photos taken with our photo booth at an event available to the guests in an online gallery so they can view, save and share them. The legal basis is our contract with the event organiser (Art. 6(1)(b) GDPR) and our legitimate interest in providing the photos to the guests (Art. 6(1)(f) GDPR).
Anyone who knows the gallery's link, short link or code can open it; some galleries are additionally password-protected. A gallery is only online for a limited time agreed with the event organiser; the expiry date is shown in the gallery. After that, the gallery and all photos are deleted automatically. Photos edited with artificial intelligence are labelled as such.
4. Storage on your device – no tracking
The gallery only stores what it needs to work on your device:
- your chosen language (cookie, 30 days),
- the list of galleries you have opened ("My sessions") and which photos you have already saved (browser local storage),
- whether the Google review note has already been shown to you (local storage),
- a session ID (cookie, until you close the browser), needed among other things for password-protected galleries,
- for galleries with email unlock, an unlock cookie (90 days) and, in local storage, your email address and a note that you are unlocked.
The legal basis is Section 25(2) No. 2 TDDDG – this storage is strictly necessary for the function you request and does not require consent. We do not use analytics or advertising cookies, do not use Google Analytics and load fonts from our own server. You can delete this data in your browser at any time; the "My sessions" list can also be cleared there directly.
5. Email unlock
For some events the organiser requires you to enter your email address – possibly with further details such as your name or phone number – before saving the photos. We store these details together with the time, language and your browser's identifier. We use them to give you access to the photos and pass them on to the event organiser. Depending on the settings, you receive an email with a confirmation link (double opt-in). You only receive a newsletter if you select it separately and confirm it by email.
The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time with effect for the future; an email to mail@die-vintagebox.de is sufficient. We delete the details automatically 60 days after submission. The event organiser is responsible for their own use of the data; their privacy policy applies there. The emails are sent via our host's mail server.
6. Help via WhatsApp
We offer a link to WhatsApp for questions about your photos. Only when you tap it does WhatsApp open with a prepared message containing your gallery's code. The provider is WhatsApp Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland; data may be transferred to the USA, the provider is certified under the EU-US Data Privacy Framework. The legal basis is handling your request (Art. 6(1)(b) or (f) GDPR). You can also email us instead.
7. Google reviews
The gallery contains a link to our Google business profile. Data is only transferred when you tap it; from then on the privacy policy of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland applies.
8. Sharing and short links
When sharing, you use your device's share menu – we do not learn who you share with. The QR code is generated directly in your browser. Short links at link.die-vintagebox.de redirect you to your gallery; only the server logs mentioned in section 2 are created.
9. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21 GDPR). You can withdraw consent at any time (Art. 7(3) GDPR). If you would like a photo of you removed from a gallery earlier, just write to us. You can also lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection of Saxony-Anhalt, Leiterstraße 9, 39104 Magdeburg, Germany.
10. Changes
As the gallery develops, we adapt this privacy policy. The version published here applies.