PRIVACY POLICY

1. Privacy at a glance

General information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. Detailed information on data protection can be found in our privacy policy below.

Data collection on this website

Who is responsible for data collection on this website? Data processing on this website is carried out by the website operator. You can find their contact details in the legal notice (Impressum) of this website. How do we collect your data? On the one hand, your data is collected when you provide it to us, for example data you enter in a contact form. Other data is collected automatically by our IT systems when you visit the website. This is mainly technical data (e.g. web browser, operating system or time of the page visit). This data is collected automatically as soon as you enter this website. What do we use your data for? Part of the data is collected to ensure that the website is provided without errors. Other data may be used to analyse your user behaviour. What rights do you have regarding your data? You have the right at any time to receive information free of charge about the origin, recipient and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. You can contact us about this and any other questions on data protection at any time at the address given in the legal notice. You also have the right to lodge a complaint with the competent supervisory authority. Furthermore, under certain circumstances you have the right to request the restriction of the processing of your personal data. Details can be found in this privacy policy under “Right to restriction of processing”.

Analysis tools and third-party tools

When you visit this website, your browsing behaviour may be statistically analysed. This is done with cookies and so-called analysis programs – but only if you have given your consent via our cookie banner. You can withdraw your consent at any time via the cookie settings. Detailed information on these tools can be found in the privacy policy below.

2. General information and mandatory information

Data protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy. When you use this website, various personal data is collected. Personal data is data that can be used to identify you personally. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this happens. Please note that data transmission over the Internet (e.g. when communicating by e-mail) may have security gaps. Complete protection of data against access by third parties is not possible.

Information about the controller

The controller responsible for data processing on this website is:

WERBAGO GmbH (Hello Baby Atelier)
Neuenhoferstr. 80
42657 Solingen, Germany
Phone: +49 (0)212 56122-10
E-mail: info@hello-baby-atelier.de

The controller is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g. names, e-mail addresses, etc.).

Withdrawal of your consent to data processing

Many data processing operations are only possible with your express consent. You can withdraw consent you have already given at any time. An informal e-mail to us is sufficient. The lawfulness of the data processing carried out until the withdrawal remains unaffected.

Right to object to data collection in special cases and to direct marketing (Art. 21 GDPR)

IF DATA PROCESSING IS BASED ON ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21(1) GDPR). IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING; THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION PURSUANT TO ART. 21(2) GDPR).

Right to lodge a complaint with the competent supervisory authority

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, their place of work or the place of the alleged violation. The right to lodge a complaint is without prejudice to any other administrative or judicial remedies.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible.

SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, such as enquiries that you send to us as the site operator, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser bar. When SSL/TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Hosting and server log files

This website is hosted on a server located in a data centre of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. When the website is accessed, the server automatically collects information in so-called server log files, which your browser transmits. These are: browser type and version, operating system used, referrer URL, host name of the accessing computer, time of the server request and IP address.

This data is not merged with other data sources. The data is collected on the basis of Art. 6(1)(f) GDPR. We have a legitimate interest in the technically error-free presentation and security of our website. A data processing agreement pursuant to Art. 28 GDPR has been concluded with the data centre operator.

Information, deletion and correction

Within the framework of the applicable statutory provisions, you have the right at any time to free information about your stored personal data, its origin and recipients and the purpose of the data processing and, if applicable, a right to correction or deletion of this data. You can contact us about this and other questions on personal data at any time at the address given in the legal notice.

Right to restriction of processing

You have the right to request the restriction of the processing of your personal data. You can contact us about this at any time at the address given in the legal notice. The right to restriction of processing exists in the following cases:

If you dispute the accuracy of your personal data stored by us, we usually need time to check this. For the duration of the check, you have the right to request the restriction of the processing of your personal data.
If the processing of your personal data was/is unlawful, you can request the restriction of data processing instead of deletion.
If we no longer need your personal data, but you need it to exercise, defend or assert legal claims, you have the right to request the restriction of the processing of your personal data instead of deletion.
If you have lodged an objection pursuant to Art. 21(1) GDPR, your interests and ours must be weighed up. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, this data – apart from its storage – may only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or a member state.

Objection to advertising e-mails

We hereby object to the use of contact data published in the context of the legal notice obligation for sending unsolicited advertising and information material. The operators of these pages expressly reserve the right to take legal action in the event of unsolicited advertising information being sent, for example by spam e-mails.

3. Data collection on this website

Cookies

Our website uses so-called “cookies” and comparable technologies (e.g. local storage). Cookies are small text files that are stored on your device. They are stored either temporarily for the duration of a session (session cookies) or permanently (permanent cookies) until you delete them yourself or your browser deletes them automatically. In some cases, cookies from third-party companies may also be stored (third-party cookies).

We use technically necessary cookies – for example to store your cookie selection or your language setting (WPML plugin, cookies “wp-wpml_current_language”, “_icl_visitor_lang_js”, “wpml_browser_redirect_test”) – on the basis of § 25(2) no. 2 TDDDG and Art. 6(1)(f) GDPR. We only use all other cookies and services (e.g. statistics and marketing) with your consent pursuant to § 25(1) TDDDG and Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future.

You can also set your browser so that you are informed about the setting of cookies, only allow cookies in individual cases or exclude them in general. If cookies are deactivated, the functionality of this website may be limited.

Cookie consent with Complianz

Our website uses the WordPress plugin Complianz to obtain and document your consent to the storage of certain cookies or the use of certain services. The manufacturer of the plugin is Complianz B.V., Kalmarweg 14-5, 9723 JG Groningen, Netherlands. The plugin runs locally on our server; your consent data is not transmitted to the manufacturer.

Complianz stores your selection in cookies in your browser (e.g. “cmplz_consented_services”, “cmplz_policy_id”, “cmplz_marketing”, “cmplz_statistics”) so that we can take your decision into account on subsequent page views. These cookies remain stored until you delete them or they expire after 365 days at the latest. The legal basis is Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR (obligation to provide evidence) and § 25(2) no. 2 TDDDG. You can change or withdraw your consent at any time via the cookie settings (button at the edge of the page).

Contact form

If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you provide there, will be stored by us (by e-mail and in our website database) for the purpose of processing the enquiry and in case of follow-up questions. We do not pass on this data without your consent. This data is processed on the basis of Art. 6(1)(b) GDPR if your enquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the enquiries addressed to us (Art. 6(1)(f) GDPR). The data you enter in the contact form will remain with us until you ask us to delete it or the purpose for data storage no longer applies (e.g. after your enquiry has been processed). Mandatory statutory provisions – in particular retention periods – remain unaffected. To protect against spam, we use hCaptcha in our forms (see below).

Enquiries by e-mail, phone or fax

If you contact us by e-mail, phone or fax, your enquiry, including all resulting personal data (name, enquiry), will be stored and processed by us for the purpose of handling your request. We do not pass on this data without your consent. This data is processed on the basis of Art. 6(1)(b) GDPR if your enquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on your consent (Art. 6(1)(a) GDPR) and/or on our legitimate interests (Art. 6(1)(f) GDPR), as we have a legitimate interest in the effective processing of enquiries addressed to us. The data you send us via contact enquiries will remain with us until you ask us to delete it, withdraw your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.

4. Social media and marketing

Meta Pixel (Facebook Pixel)

With your consent, this website uses the visitor action pixel (“Meta Pixel”) of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (“Meta”). This allows us to track the behaviour of visitors after they have been redirected to our website by clicking on a Facebook or Instagram advert, to evaluate the effectiveness of our adverts and to display targeted advertising. The data collected is anonymous to us; however, Meta stores and processes it so that a connection to the respective user profile is possible and Meta can use the data for its own advertising purposes. Data may also be transferred to the USA; Meta is certified under the EU-US Data Privacy Framework.

The Meta Pixel is only loaded once you agree to the “Marketing” category in the cookie banner. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG; it can be withdrawn at any time. Insofar as data is collected on our website and transmitted to Meta, we and Meta are joint controllers (Art. 26 GDPR). More information: https://www.facebook.com/privacy/policy/.

Links to Facebook and Instagram

On our website we link to our profiles on Facebook and Instagram (provider: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland). These are simple links; no data is transmitted to Meta when you merely visit our website. Only when you click on a link are you taken to the page of the respective network, where its privacy policy applies: Instagram, Facebook.

5. Analysis tools and advertising

Google Analytics 4 (via Google Site Kit)

This website uses functions of the web analytics service Google Analytics 4, integrated via the WordPress plugin “Site Kit by Google”. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics enables us to analyse the behaviour of website visitors (e.g. page views, length of stay, devices used, approximate location). Google shortens the IP address before storage. Data may be transferred to Google servers in the USA; Google is certified under the EU-US Data Privacy Framework.

It is used exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG (“Statistics” category in the cookie banner); consent can be withdrawn at any time. A data processing agreement has been concluded with Google. More information: https://policies.google.com/privacy?hl=en.

Google Consent Mode

We use “Google Consent Mode”. This transmits the choice you made in the cookie banner to the Google services. As long as you have not given consent, all settings are set to “denied” by default: Google services then do not set any analytics or advertising cookies. For technical reasons, the Google tag (gtag.js) is loaded from Google servers, which transmits your IP address and browser information to Google; without consent, only cookieless status signals are sent that are not assigned to a user profile. The legal basis is Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR and our legitimate interest in implementing your choice (Art. 6(1)(f) GDPR).

6. Plugins and tools

WhatsApp chat

On our website we offer the option of contacting us via WhatsApp using the “Joinchat” plugin. The plugin does not load any content from WhatsApp when the page is accessed. Only when you click the chat button and start the chat are you forwarded to WhatsApp. The provider is WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. In particular, your phone number, your WhatsApp profile and the content of your message are processed; transfer to the parent company Meta Platforms Inc. in the USA is possible.

Use is voluntary; the legal basis is Art. 6(1)(b) GDPR (enquiry about a photo shoot) or Art. 6(1)(f) GDPR. Alternatively, you can always reach us by e-mail or contact form. More information: https://www.whatsapp.com/legal/privacy-policy-eea.

Spam protection with hCaptcha

To protect our forms against spam and automated requests, we use the hCaptcha service. The provider is Intuition Machines, Inc., 350 Alabama St, San Francisco, CA 94110, USA. hCaptcha uses various characteristics (e.g. IP address, browser and device information, time spent, mouse and keyboard interactions) to check whether the input is made by a human. This data is transmitted to hCaptcha for this purpose; transfer to the USA is possible.

Processing is based on Art. 6(1)(f) GDPR. We have a legitimate interest in protecting our website from misuse and spam. hCaptcha is only loaded on pages with a form. More information: https://www.hcaptcha.com/privacy.

Fonts (hosted locally)

This site uses web fonts (e.g. Montserrat) for the uniform display of fonts. The fonts are stored locally on our server. No connection to servers of Google or other third-party providers is established.

Google Maps

On our contact page we embed a map from the Google Maps service. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. When the map is loaded, your IP address and browser information, among other things, are transmitted to Google and cookies may be set; transfer to the USA is possible (Google is certified under the EU-US Data Privacy Framework).

The map is only loaded after you have given your consent via the cookie banner or the notice on the map. The legal basis is Art. 6(1)(a) GDPR and § 25(1) TDDDG; consent can be withdrawn at any time. More information: https://policies.google.com/privacy?hl=en.

7. Contract processing

Processing of data (customer and contract data)

We collect, process and use personal data only insofar as it is necessary for the establishment, content or modification of the legal relationship (inventory data). This is done on the basis of Art. 6(1)(b) GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures. We collect, process and use personal data about the use of this website (usage data) only insofar as this is necessary to enable the user to use the service or to bill for it. The customer data collected will be deleted after completion of the order or termination of the business relationship. Statutory retention periods remain unaffected.

Data transfer upon conclusion of a contract for services and digital content

We only transfer personal data to third parties if this is necessary in the context of contract processing, for example to the bank commissioned with payment processing. Any further transfer of data does not take place or only if you have expressly consented to the transfer. Your data will not be passed on to third parties without your express consent, for example for advertising purposes. The basis for data processing is Art. 6(1)(b) GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures.

Date of this privacy policy

Last updated: October 2026. We adapt this privacy policy as soon as the services used or the legal requirements change.

This is a translation for information purposes only; the German version is legally binding.