Privacy Policy

Last updated: 15.04.2026

This Privacy Policy explains how personal data is collected and processed on this website.

  1. Controller (Data Owner)

    Name: Nilla Vary
    Business name: Nilla Nim Photo
    Address: Steinbruchstrasse 8, 5412 Puch bei Hallein, Austria
    Contact:
    Email: hello@nillanim.com
    Phone: +43 677 615 22803

  2. General Information

    We process your personal data in accordance with applicable data protection laws, in particular the General Data Protection Regulation (GDPR).

    Personal data is any information that can identify you personally.

  3. Data Collection on This Website

    a) Contact form

    If you contact us via the contact form, we collect the following data:

    – Name
    – Email address
    – Phone number
    – Message

    This data is processed for the purpose of responding to your inquiry.

    Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures)

    b) Contact via email

    If you contact us directly via email, your provided data will be stored and processed for the purpose of handling your request.
  1. Hosting

    This website is hosted by Zume.net (United Kingdom) and uses Helloly (Austria) as domain provider.
    These providers may process personal data (e.g. IP addresses) to ensure the technical operation and security of the website.

    Legal basis: Art. 6(1)(f) GDPR (legitimate interest)
  1. Server Log Files

    When you visit this website, certain technical data may be automatically collected and stored in server log files. This may include:

    – IP address
    – Date and time of access
    – Browser type and version
    – Operating system
    – Referrer URL

    This data is used to ensure the proper functioning, security, and stability of the website.

    Legal basis: Art. 6(1)(f) GDPR (legitimate interest)

  2. Analytics and Third-Party Services

    a) Google Analytics

    This website may use Google Analytics, a web analytics service provided by Google, to understand how visitors use the website.

    Google Analytics uses cookies and similar technologies to collect information such as:

    – IP address
    – Pages visited
    – Time spent on the site

    This data is anonymized where possible.

    Legal basis: Art. 6(1)(a) GDPR (consent)

    b) Embedded content (YouTube)

    This website may include embedded videos from YouTube. When you view such content, data may be transmitted to YouTube.
  1. Appointment Scheduling (Calendly)

    We may use Calendly, an online scheduling tool, to allow users to book appointments.

    When you book an appointment via Calendly, personal data such as your name, email address, and any additional information you provide may be processed.

    Calendly may also collect technical data such as IP address and usage data.

    Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(a) GDPR (consent)

  2. Social Media Links

    This website contains links to social media platforms such as Instagram and Facebook.

    When you click on these links, you will be redirected to the respective platform. The operators of those platforms are responsible for data processing on their sites.

  3. Newsletter

    If you subscribe to our newsletter, your email address will be processed by MailerLite for the purpose of sending newsletters.

    You can unsubscribe at any time via the link in the newsletter.

    Legal basis: Art. 6(1)(a) GDPR (consent)

  4. Administrative Processing

    We may use standard software tools (e.g. office applications) for internal administrative purposes such as invoicing and customer communication.

  5. Data Sharing

    Your personal data will not be shared with third parties unless:

    – it is necessary for the performance of a contract
    – you have given your consent
    – or we are legally required to do so

  6. Data Storage

    Personal data is stored only for as long as necessary for the respective purpose or as required by legal obligations.

  7. Your Rights

    You have the right to:

    – access your data
    – request correction or deletion
    – restrict processing
    – object to processing
    – data portability

    You also have the right to lodge a complaint with a data protection authority.

  8. Data Security

    We take appropriate technical and organizational measures to protect your personal data.

  9. Changes to This Privacy Policy

    We reserve the right to update this Privacy Policy at any time.