Privacy Policy

1. Controller

Nuevo WeddingsOwner: Raphael LaßBaroper Str. 432, 44227 Dortmund, GermanyEmail: hi@nuevoweddings.dePhone: +49 151 19434169

2. General information on data processing

We process personal data only to the extent necessary to provide a functional website and our services. Processing generally takes place only with the consent of the data subject or where a legal basis exists.

The legal bases are Art. 6 (1) (a) (consent), (b) (contract or pre-contractual measures), (c) (legal obligation) and (f) (legitimate interest) GDPR.

3. Hosting and server log files

This website is hosted by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. When you visit our website, your browser automatically sends information to the server, which is stored temporarily in log files: IP address, date and time of access, name and URL of the requested file, referrer URL, browser and operating system.

This data is used exclusively to ensure smooth operation and system security. It is not merged with other data sources.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest). A data processing agreement is in place with the hosting provider.

4. Cookies and consent

On your first visit we ask whether you agree to statistics (Google Analytics) and external media (Spotify, Mixcloud). We store your choice in a cookie named “cc_cookie” in your browser (valid for one year) so we do not ask again on every visit. This cookie is technically necessary and is not shared with third parties. The consent window uses the open-source software CookieConsent, served from our own server.

Without your consent we set no further cookies. Fonts, images, audio and video are served from our own server. You can change or withdraw your consent at any time via “Cookie settings” at the bottom of every page.

Legal basis: Section 25(1) TDDDG and Art. 6(1)(a) GDPR (consent); for storing your choice Section 25(2) no. 2 TDDDG and Art. 6(1)(c) GDPR.

5. Statistics: Google Analytics 4 and Microsoft Clarity (only with consent)

If you agree to statistics, we use Google Analytics 4 by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics sets cookies (e.g. “_ga”) and records which pages you visit, how long you stay, where you came from, and information about device, browser and approximate location. Google Analytics 4 does not store IP addresses. Advertising features and personalised ads are disabled.

Data may be transferred to Google LLC in the USA. Google is certified under the EU-US Data Privacy Framework. A data processing agreement is in place with Google.

We also use Microsoft Clarity by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Clarity records how you use the website (mouse movements, clicks, scrolling, pages visited, device and browser) and turns this into heatmaps and session recordings so we can improve usability. Input in form fields is not recorded. Clarity sets cookies (e.g. “_clck”, “_clsk”). Data may be transferred to Microsoft Corporation in the USA; Microsoft is certified under the EU-US Data Privacy Framework. More information: https://www.microsoft.com/en-gb/privacy/privacystatement

Legal basis: Section 25(1) TDDDG and Art. 6(1)(a) GDPR (consent). You can withdraw at any time via “Cookie settings” at the bottom of the page; the statistics cookies are then deleted. More information: https://policies.google.com/privacy

6. YouTube videos (after click)

On some pages we embed videos from YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) in privacy-enhanced mode (youtube-nocookie.com). The video is only loaded when you click the preview. From that point a connection to YouTube is established; YouTube learns which page you are visiting and, if you are logged in, can associate the visit with your account.

Legal basis: Art. 6 (1) (a) GDPR (consent by click). Further information: https://policies.google.com/privacy

7. Spotify playlists (after click or consent)

On some pages we embed playlists from the music service Spotify AB, Regeringsgatan 19, SE-111 53 Stockholm, Sweden. The player is only loaded when you click the preview or allow “External media” in the cookie settings. From that point Spotify receives the information that your IP address has visited our site and, if you are logged in, can associate the visit with your account.

Legal basis: Section 25(1) TDDDG and Art. 6 (1) (a) GDPR (consent by click or in the cookie settings). Further information: https://www.spotify.com/en/legal/privacy-policy/

8. Mixcloud mixtapes (after click or consent)

On the music page we embed mixtapes from the audio streaming service Mixcloud Ltd., 447–453 Hackney Road, London, E2 9DY, United Kingdom. The player is only loaded when you click the preview or allow “External media” in the cookie settings. From that point Mixcloud receives the information that your IP address has visited our website and, if you are logged in, can associate the visit with your account.

Legal basis: Section 25(1) TDDDG and Art. 6 (1) (a) GDPR (consent by click or in the cookie settings). Further information: https://www.mixcloud.com/privacy/

9. Enquiries via the Vibe-Check

The Vibe-Check runs on vibecheck.nuevoweddings.de. There you answer three questions about your celebration and enter your wedding date, place or venue, your first name, your email address and, optionally, a WhatsApp number. On the result page you can optionally tell us how you heard about us and write a message. We process this data to review your enquiry, reply to you and prepare a proposal. It is not passed on for advertising purposes. Legal basis: Art. 6 (1) (b) GDPR (pre-contractual measures).

Saving before you submit: as soon as a valid email address is in the field on the contact step, we save your progress as an incomplete enquiry, even if you have not yet tapped submit. This way your details are not lost if the page closes. No email is sent at that point. So that your progress survives a reload, it is also kept in your browser session storage (sessionStorage), which is cleared when you close the tab. Legal basis: Art. 6 (1) (b) and (f) GDPR (legitimate interest in not losing started enquiries). If you do not submit and do not want an enquiry, we delete it when you let us know.

Step measurement: to see where the Vibe-Check is abandoned, the page sends a random session ID, the step number, the language and the source of the visit (for example Instagram or Google) for each step reached. The ID is kept in memory only; no cookies are set and nothing is stored in your browser for this. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in a working enquiry process).

Place search while typing: from three characters, your input in the place field is sent together with your IP address to the search service Photon by komoot GmbH, Potsdam, Germany (photon.komoot.io) to suggest matching places. After you submit, the place is converted into coordinates on the server via Photon and, as a fallback, Nominatim by the OpenStreetMap Foundation (United Kingdom, EU adequacy decision); only the place is transmitted. Legal basis: Art. 6 (1) (b) and (f) GDPR.

Processing and storage: the enquiry is processed by server functions of Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA, and stored in a Postgres database of Neon, Inc., USA. Processing in the USA cannot be ruled out. Transfers are based on the EU-US Data Privacy Framework or the EU Commission standard contractual clauses. The database is backed up daily; the backups are kept at GitHub (GitHub, Inc., USA, on the same basis) and deleted automatically after 90 days.

Notification: for each new enquiry Raphael receives an email and a message via the messenger Telegram (Telegram FZ-LLC, Dubai, United Arab Emirates) with name, wedding date, venue, email address, WhatsApp number if given, Vibe profile and your answer about your guests. Telegram also processes data outside the EU; there is no EU adequacy decision for the United Arab Emirates. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in a quick reply).

Emails: confirmation and reply emails are sent through an automation we operate ourselves (n8n on our own server) and delivered via Gmail (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Data may be transferred to Google LLC in the USA; Google is certified under the EU-US Data Privacy Framework. Legal basis: Art. 6 (1) (b) GDPR.

AI support: for a short internal summary of your music wishes and for drafting a proposal text we use the AI model Claude by Anthropic, PBC, San Francisco, USA. For this we transmit names, wedding date, venue, number of guests, your music and schedule details, notes from our call and, where applicable, the price, but not your email address or phone number. Raphael reviews and edits the result himself; there is no automated decision. Transfers to the USA are based on the EU Commission standard contractual clauses or the EU-US Data Privacy Framework. Legal basis: Art. 6 (1) (b) and (f) GDPR.

WhatsApp: if you choose to give a WhatsApp number, we may also contact you via WhatsApp (WhatsApp Ireland Limited, Merrion Road, Dublin 4, Ireland, a Meta company). WhatsApp receives your number and connection data; a transfer to Meta Platforms, Inc. in the USA is possible, Meta is certified under the EU-US Data Privacy Framework. Legal basis: Art. 6 (1) (a) and (b) GDPR. Without a WhatsApp number we reply by email.

Retention: we delete your enquiry data once it is no longer needed for the enquiry or when you request deletion. If a contract is concluded, statutory retention periods apply (up to ten years under Section 147 of the German Fiscal Code and Section 257 of the German Commercial Code).

10. Contact by email or phone

If you contact us by email or phone, we process your personal data solely to handle your request. It is not passed on to third parties.

Legal basis: Art. 6 (1) (b) or (f) GDPR. Data is deleted once no longer necessary or when statutory retention periods expire.

11. Cloudflare CDN

We use a content delivery network (CDN) provided by Cloudflare Inc., 101 Townsend St, San Francisco, CA 94107, USA, to optimise loading times and protect the website against attacks. Traffic between your browser and our server is routed through Cloudflare, which collects technical information (IP address, time of access, user agent) for protection and performance. Cloudflare is certified under the EU-US Data Privacy Framework.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in secure and efficient operation). Further information: https://www.cloudflare.com/privacypolicy/

12. Rights of data subjects

Under Art. 15 to 22 GDPR you have the right of access, rectification, erasure, restriction of processing, data portability and objection. To exercise your rights, contact hi@nuevoweddings.de. You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The competent authority is: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany, www.ldi.nrw.de.

13. Retention period

Personal data is stored only as long as necessary for the stated purposes or as required by statutory retention periods. After that, the data is deleted.

Specifically: the consent cookie “cc_cookie” is valid for one year. Vibe-Check enquiries are kept until the purpose no longer applies or you request deletion (see section 9); database backups are deleted automatically after 90 days. For Google Analytics and Microsoft Clarity, the retention periods set in these services apply.

14. Data security

The website is delivered exclusively over HTTPS. We use technical and organisational security measures to protect your data against manipulation, loss, destruction or unauthorised access.

15. Changes to this policy

This privacy policy applies from October 2026. We update it when our website or legal requirements change.