Data protection information pursuant to Art. 13 GDPR · Mustache Visuals — Steven Schneider
Last updated: 28 August 2026
The controller responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Steven Schneider (Mustache Visuals)
c/o MDC Management #1522
Welserstraße 3
87463 Dietmannsried, Germany
Email: mustache.visuals@icloud.com · Contact form: www.mustachevisuals.com/contact
We have not appointed a Data Protection Officer. As a small business we are not legally required to do so under Art. 37 GDPR / § 38 BDSG. For any privacy-related enquiry, please contact the controller named in Section 1.
We process personal data only where there is a valid legal basis under Art. 6 (1) GDPR: with your consent (lit.
a); for the performance of a contract or pre-contractual measures such as a booking enquiry (lit. b); to comply
with a legal obligation such as statutory retention periods (lit. c); or on the basis of our legitimate interests, such as the secure and efficient operation of this website (lit. f). Where we ask for your consent, you may withdraw it at any time with effect for the future.
You have the right of access (Art. 15 GDPR), to rectification (Art. 16), to erasure (Art. 17), to restriction of
processing (Art. 18), to data portability (Art. 20), and to object to processing (Art. 21). Where processing is
based on your consent, you may withdraw it at any time with effect for the future (Art. 7 (3) GDPR) without affecting the lawfulness of prior processing. To exercise any right, contact us using the details in Section 1. Right to lodge a complaint (Art. 77 GDPR)
You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18, 91522 Ansbach, Germany
www.lda.bayern.de
Where processing is based on Art. 6 (1)(f) GDPR, you have the right to object at any time, on grounds relating to your particular situation (Art. 21 GDPR). We will then no longer process the data concerned unless we can demonstrate compelling legitimate grounds overriding your interests, or the processing serves to establish, exercise or defend legal claims.
This website is hosted by an external provider (processor) acting on our behalf under a data processing
agreement pursuant to Art. 28 GDPR. When you visit the site, the provider’s servers automatically collect and
store information in server log files that your browser transmits: browser type and version, operating system,
referrer URL, host name, time of the server request, and IP address. This data is not merged with other
sources. The legal basis is Art. 6 (1)(f) GDPR; we have a legitimate interest in the technically error-free
presentation and security of our website.
Our hosting provider is Hostinger International Limited, 61 Lordou Vironos Street, 6023 Larnaca, Cyprus — an EU member state (data protection contact: gdpr@hostinger.com). A data processing agreement pursuant to Art. 28 GDPR is concluded as part of Hostinger’s Terms of Service; a separate data processing addendum is additionally available at hostinger.com/legal/dpa.
For security reasons and to protect the transmission of confidential content, this site uses SSL/TLS encryption, recognisable by the “https://” prefix and the lock symbol in your browser.
Our website uses cookies. Technically necessary cookies are set on the basis of Art. 6 (1)(f) GDPR and § 25 (2) TDDDG. Cookies or comparable technologies that are not strictly necessary — e.g. for embedded media — are set only after you consent via our consent banner, on the basis of Art. 6 (1)(a) GDPR and § 25 (1) TDDDG. For consent management we use the tool SureCookie, which records and stores your consent decision so that we can document it and load non-essential services only after you have consented. You can withdraw or change your consent at any time via the consent settings.
If you contact us by email or via our contact form, the details you provide (such as your name, email address and the content of your message) are stored and processed to handle your enquiry and any follow-up questions. Where your enquiry relates to a contract, the legal basis is Art. 6 (1)(b) GDPR; otherwise our legitimate interest in handling enquiries (Art. 6 (1)(f) GDPR) or your consent (Art. 6 (1)(a) GDPR). We retain this data until the enquiry is fully dealt with and no statutory retention obligations require longer storage.
When you engage us for photography or videography services, we process the data necessary to prepare a quote, conclude and perform the contract, and issue invoices — typically your name, contact details, event/shoot details, billing address, and the photo/video material created. The legal basis is Art. 6 (1)(b) GDPR and, for invoicing and bookkeeping, Art. 6 (1)(c) GDPR together with statutory retention periods under German commercial and tax law (typically up to 10 years). Providing this data is necessary to enter into and perform the contract. Photographs and footage of identifiable persons are handled under the separate release agreements concluded with you.
To display text consistently, this website uses Google Fonts. The fonts are stored locally on our own server and are not loaded dynamically from Google’s servers; therefore no connection to Google is established and no personal data (such as your IP address) is transmitted to Google when the fonts are displayed.
Our website may include embedded content from third-party platforms, namely Instagram and YouTube. When such content is loaded, the respective provider may receive your IP address and set cookies. We load such content only after your consent (Art. 6 (1)(a) GDPR and § 25 (1) TDDDG), for example via a two-click / consent solution. These providers may be located outside the EU/EEA; transfers are safeguarded pursuant to Art. 44 ff. GDPR. For details, please see the privacy policies of Instagram/Meta and YouTube/Google.
Unless a more specific period is stated here, your data remains with us until the purpose no longer applies. Upon a justified erasure request or withdrawal of consent, your data is deleted unless we have other lawful grounds for storage (e.g. tax/commercial retention periods), in which case deletion follows once those grounds no longer apply.
We use appropriate technical and organisational measures to protect your data against manipulation, loss, destruction or unauthorised access, and improve them in line with technological developments.
We may amend this privacy policy to keep it compliant with current legal requirements or to reflect changes to our services. The version current at the time of your visit applies; the date of the latest update is shown at the top.