
IMPRINT.
RIGHT OF WITHDRAWAL.
PRIVACY POLICY.
Erik Bont is a commercial and fashion photographer based in Austria, working internationally with brands, agencies and individuals.
Information pursuant to Section 5 E-Commerce Act (ECG), Section 63 Trade Regulation Act (GewO) and Section 25 Media Act (MedienG).
IMPRINT
Erik Bont - Photography Sole proprietor:
ERIK BONT, Rebberggasse 20, 6800 Feldkirch, AUSTRIA
+436641205566 / management@erikbont.com
Trade licence: Professional photographer (Berufsfotograf), granted in Austria
Trade and supervisory authority (ECG: Bezirkshauptmannschaft Feldkirch
Chamber membership: Austrian Economic Chamber Vorarlberg (WKV), Guild of Professional Photography
Applicable professional regulations: Trade Regulation Act 1994 (Gewerbeordnung), available at www.ris.bka.gv.at
GISA number: 23197671
VAT ID: ATU63474047
Media owner and basic direction
Media owner and publisher (Section 25 MedienG): Erik Bont, Feldkirch, Austria. Basic direction of this website: presentation of the photographic and artistic work of Erik Bont and information about his services, workshops and fine art editions.
Consumer dispute resolution
I am neither obliged nor willing to participate in dispute resolution proceedings before a consumer arbitration board.
Copyright
All content on this website – in particular photographs, texts, videos and design – is protected by copyright. All images © Erik Bont unless stated otherwise. Any use, reproduction, editing or distribution requires my prior written consent. Persons shown in the images have consented to publication. Texts partially AI-assisted. Images partially AI-assisted in post-production.
Liability for content and links
I create the content of this website with great care but cannot guarantee that it is complete, correct and up to date. This website contains links to external websites. I have no influence on their content and accept no liability for it; the respective provider is responsible. If I become aware of any legal violations, I will remove such links immediately.
Privacy
Information on how personal data is processed can be found in the Privacy Policy.
RIGHT OF WITHDRAWAL
l
This information applies to consumers within the meaning of the Austrian Consumer Protection Act (KSchG) who conclude a contract with me at a distance – via this website, by e-mail or by phone (Distance and Off-Premises Contracts Act, FAGG). It does not apply to entrepreneurs, companies or contracts concluded in person.
Right of withdrawal
You have the right to withdraw from this contract within fourteen days without giving any reason.
The withdrawal period is fourteen days:
-
for goods (e.g. fine art editions and prints): from the day on which you or a third party named by you, who is not the carrier, take physical possession of the goods. If you order several goods that are delivered separately, the period starts on the day on which you or that third party take possession of the last item;
-
for services (e.g. workshops, mentoring, coaching, photo shoots): from the day the contract is concluded.
To exercise your right of withdrawal, you must inform me
Erik Bont, Rebberggasse 20, 6800 Feldkirch, Austria Phone: +43 664 120 55 66, e-mail: management@erikbont.com
of your decision to withdraw from this contract by an unequivocal statement (e.g. a letter sent by post or an e-mail). You may use the model withdrawal form below, but it is not obligatory.
To meet the withdrawal deadline, it is sufficient for you to send your communication concerning the exercise of the right of withdrawal before the withdrawal period has expired.
Effects of withdrawal
If you withdraw from this contract, I will reimburse all payments received from you, including the costs of delivery (with the exception of supplementary costs resulting from your choice of a type of delivery other than the least expensive standard delivery I offer), without undue delay and in any event no later than fourteen days from the day on which I am informed of your decision to withdraw. I will carry out the reimbursement using the same means of payment you used for the initial transaction, unless you have expressly agreed otherwise; in any event, you will not incur any fees as a result of the reimbursement.
Goods: I may withhold reimbursement until I have received the goods back or you have supplied evidence of having sent them back, whichever is the earliest. You must send back the goods or hand them over to me without undue delay and in any event no later than fourteen days from the day on which you inform me of your withdrawal. The deadline is met if you send back the goods before the period of fourteen days has expired. You bear the direct cost of returning the goods. Please pack artworks carefully and insured. You are only liable for any diminished value of the goods resulting from handling other than what is necessary to establish the nature, characteristics and functioning of the goods.
Services: If you requested that the service begin during the withdrawal period, you must pay me an amount proportionate to the services provided until you informed me of your withdrawal, in comparison with the full scope of the contract.
Exceptions and early expiry
The right of withdrawal does not exist or expires early in the following cases (Section 18 FAGG):
-
Services fully performed: The right of withdrawal expires once the service has been fully provided, if performance began at your express request and with your acknowledgement that you lose your right of withdrawal upon full performance.
-
Customised goods: There is no right of withdrawal for goods made to your specifications or clearly personalised, e.g. prints in an individually agreed size, material or framing, commissioned works or personally dedicated editions.
Model withdrawal form
(Complete and return this form only if you wish to withdraw from the contract.)
To: Erik Bont, Rebberggasse 20, 6800 Feldkirch, Austria, e-mail: management@erikbont.com
I/We (*) hereby give notice that I/We (*) withdraw from my/our (*) contract for the purchase of the following goods (*) / for the provision of the following service (*):
-
Ordered on (*) / received on (*):
-
Name of consumer(s):
-
Address of consumer(s):
-
Signature of consumer(s) (only if this form is notified on paper):
-
Date:
(*) Delete as appropriate.
PRIVACY POLICY
This privacy policy explains which personal data is processed when you visit www.erikbont.com, contact me, book a session, buy a fine art edition or work with me as a client – why, on which legal basis, with whom it is shared and what rights you have. It is based on the EU General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and the Austrian Telecommunications Act 2021 (TKG 2021).
Contents
-
Controller and contact
-
Hosting and website operation (Wix)
-
Server log files and security
-
Cookies and consent management
-
Contact form, e-mail, phone and WhatsApp
-
Online bookings, appointments and video calls
-
Online shop, orders and member area
-
Payment processing
-
Newsletter and e-mail marketing
-
Web analytics and online marketing
-
Further integrated services
-
Social media profiles and links
-
Clients, photo shoots and image material
-
Recipients and processors at a glance
-
Transfers to third countries
-
Storage period
-
Your rights
-
Children and minors
-
Data security
-
Changes to this privacy policy
1. Controller and contact
The controller within the meaning of Art. 4(7) GDPR is:
Erik Bont Rebberggasse 20, 6800 Feldkirch, Austria Phone: +43 664 120 55 66, E-mail: management@erikbont.com
For all questions about data protection and to exercise your rights, simply write to management@erikbont.com. I am not legally required to appoint a data protection officer and have not done so.
2. Hosting and website operation (Wix)
This website runs on the platform of Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel, and its affiliated companies (including Wix.com Inc., USA, and Wix Online Platforms Ltd., Ireland). Wix provides the hosting, the content delivery network, the website builder and the integrated business apps I use (forms, bookings, shop, checkout, member area, pricing plans, video, galleries, e-mail marketing).
Wix processes personal data on my behalf as a processor under a data processing agreement (Art. 28 GDPR). Data may be processed in Israel, the USA and other countries where Wix and its sub-processors operate. For Israel, an EU adequacy decision exists. Transfers to the USA are based on the EU-U.S. Data Privacy Framework and/or the EU Standard Contractual Clauses (see section 15).
To keep the website stable and secure, Wix also uses technical monitoring and error-logging services (e.g. performance logging and error reporting via Sentry). These process technical data such as IP address, browser type and error information.
Legal basis: my legitimate interest in a secure, stable and professionally operated website (Art. 6(1)(f) GDPR).
3. Server log files and security
Each time you access the website, the following data is automatically recorded: IP address, date and time of access, page requested, referrer URL, browser type and version, operating system and device information. This data is required to deliver the website, to ensure its security (e.g. defence against attacks and misuse) and to analyse errors. It is not merged with other data sources.
Legal basis: Art. 6(1)(f) GDPR. Log data is deleted or anonymised by Wix according to its retention periods, as a rule after a few weeks at the latest, unless it is needed to investigate a specific security incident.
Forms on this website may use Wix's built-in spam and bot protection (CAPTCHA), which analyses technical interaction data to tell humans from bots. Legal basis: Art. 6(1)(f) GDPR (protection against spam and misuse).
4. Cookies and consent management
This website uses cookies and similar technologies (e.g. local storage, pixels, scripts). Under Section 165(3) TKG 2021, storing or reading information on your device is only permitted without your consent where it is strictly necessary to provide the service you requested. All other cookies and technologies are only used after you have given your consent.
On your first visit, a cookie banner asks for your choice. You can:
-
Agree – all categories are activated,
-
Dismiss – only strictly necessary cookies are used,
-
Settings – choose individual categories.
The categories are:
Category
Purpose
Legal basis
Strictly necessary: Page delivery, security (e.g. XSRF-TOKEN), load balancing, session, shopping cart, login, saving your cookie choice
Section 165(3) TKG 2021; Art. 6(1)(b) and (f) GDPR
Functional: Convenience features, e.g. language selection, embedded widgets - Consent, Art. 6(1)(a) GDPR
Analytics: Statistical analysis of website use (Google Analytics 4) - Consent, Art. 6(1)(a) GDPR
Marketing: Conversion measurement and personalised advertising (Google Ads, Meta Pixel / Conversions API) - Consent, Art. 6(1)(a) GDPR
You can withdraw or change your consent at any time with effect for the future via the “Cookie Settings” link in the footer of every page. The lawfulness of processing carried out before withdrawal remains unaffected (Art. 7(3) GDPR). You can also delete cookies in your browser settings at any time.
The consent banner itself is provided by Wix. It stores your choice in a cookie (consent-policy) so that it does not need to ask you again on every visit. Legal basis: Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR (proof of consent) and Art. 6(1)(f) GDPR.
5. Contact form, e-mail, phone and WhatsApp
If you contact me via the contact form (“Ready for Emotions?”), by e-mail or by phone, I process the data you provide – first and last name, e-mail address, phone number (optional), your message and the time of your request – in order to answer your enquiry and, where applicable, to prepare an offer. The contact form is provided by Wix (Wix Forms); submissions are stored in my Wix account and forwarded to my e-mail inbox.
Legal basis: Art. 6(1)(b) GDPR where your enquiry relates to a contract or pre-contractual measures; otherwise my legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).
WhatsApp: I offer WhatsApp as an optional channel. If you choose to contact me via WhatsApp, your phone number, profile name, messages and metadata are processed by WhatsApp Ireland Limited, Merrion Road, Dublin 4, Ireland (Meta group); data may also be transferred to Meta Platforms Inc., USA (EU-U.S. Data Privacy Framework). WhatsApp messages are end-to-end encrypted, but Meta processes metadata under its own responsibility. If you prefer not to use WhatsApp, please use e-mail or phone. Legal basis: Art. 6(1)(b) or (f) GDPR.
6. Online bookings, appointments and video calls
Wix Bookings: Workshops, mentoring and coaching sessions can be booked online via Wix Bookings. I process your name, e-mail address, phone number, the selected service, date and time, any notes you provide, payment status and the booking history. You receive booking confirmations and reminders by e-mail. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
Google Calendar appointment booking: For a free strategic call you can also book a slot via a Google Calendar booking page (calendar.app.google). When you open this link, you leave my website. Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, then processes your name, e-mail address, the selected appointment and technical data. Legal basis: Art. 6(1)(b) GDPR. Google may transfer data to the USA (EU-U.S. Data Privacy Framework).
Google Meet: Online sessions and calls take place via Google Meet (Google Ireland Limited). Processed data includes name, e-mail address, IP address, device and connection data, meeting metadata and – during the session – audio, video and chat content as well as screen shares. Sessions are not recorded unless we explicitly agree otherwise in advance. Legal basis: Art. 6(1)(b) GDPR; for any recording, your consent (Art. 6(1)(a) GDPR). Google acts as my processor under its data processing terms; transfers to the USA are covered by the EU-U.S. Data Privacy Framework and Standard Contractual Clauses.
7. Online shop, orders and member area
Orders: When you buy a fine art edition or another product, I process your name, billing and delivery address, e-mail address, phone number (if provided), ordered items, prices, payment method and payment status, as well as the order history. This data is required to process the contract, deliver the goods, issue invoices and handle withdrawals, returns and warranty claims. Shop and checkout are provided by Wix (Wix Stores, Checkout & Orders). Legal basis: Art. 6(1)(b) GDPR; for invoicing and retention, Art. 6(1)(c) GDPR.
Shipping: For delivery, I pass on your name, delivery address and – where needed for delivery notifications – your e-mail address or phone number to Österreichische Post AG, Rochusplatz 1, 1030 Vienna, Austria. Legal basis: Art. 6(1)(b) GDPR.
Member area and customer account: You can optionally create a customer account. In it, your name, e-mail address, password (stored in encrypted form by Wix), saved addresses, saved payment methods (“My Wallet” – stored by the payment provider, not by me), orders, bookings and subscriptions/pricing plans are stored, so that you can view them later. You can also order as a guest without an account. You can delete your account at any time or ask me to delete it. Legal basis: Art. 6(1)(b) GDPR.
Pricing plans: If you purchase a package or plan (Wix Pricing Plans), I process the plan, term, payment data and usage status. Legal basis: Art. 6(1)(b) GDPR.
8. Payment processing
Depending on the payment method you choose, payments are processed as follows:
-
Wix Payments (credit/debit card and similar methods): Payment data is transmitted directly to Wix and its payment processors (currently Adyen N.V., Netherlands, Stripe or PayPal and their affiliated companies and acquiring banks). I do not receive your full card details. Wix Payments complies with the PCI-DSS security standard.
-
PayPal: If you choose PayPal, you are redirected to PayPal. Your payment data is processed by PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg, under its own responsibility. PayPal may carry out identity and credit checks under its own privacy policy.
-
Bank transfer: I process your name, IBAN/account details shown on the transfer and the amount paid to match the payment to your order.
Payment providers may carry out fraud prevention checks. Legal basis: Art. 6(1)(b) GDPR (payment processing) and Art. 6(1)(c) GDPR (statutory obligations, e.g. anti-money laundering rules applicable to the payment providers); fraud prevention: Art. 6(1)(f) GDPR.
9. Newsletter and e-mail marketing
I occasionally send news about projects, exhibitions, fine art editions, workshops and offers by e-mail, using Wix E-mail Marketing.
With consent: I only send newsletters to people who have expressly subscribed (consent, Art. 6(1)(a) GDPR and Section 174(3) TKG 2021). After signing up, you receive a confirmation e-mail (double opt-in). I store the sign-up time, IP address and confirmation to be able to prove your consent.
Existing customers: If you have bought a product or service from me and provided your e-mail address, I may send you information about my own similar products or services without separate consent (Section 174(4) TKG 2021). You can object to this at any time – when the address is collected and in every e-mail – free of charge.
Success measurement: The e-mails contain technical elements that record whether an e-mail was opened and which links were clicked. I use this only in aggregated form to improve the content. Legal basis: Art. 6(1)(a) GDPR, or Art. 6(1)(f) GDPR for existing customers.
You can unsubscribe at any time via the link in every e-mail or by sending an e-mail to management@erikbont.com. Your data is then removed from the mailing list. I may keep your e-mail address in a blocklist so that you are not contacted again (Art. 6(1)(f) GDPR).
10. Web analytics and online marketing
The following services are only activated if you have consented to the relevant category in the cookie banner (Art. 6(1)(a) GDPR in conjunction with Section 165(3) TKG 2021). Without your consent, they are not loaded. You can withdraw your consent at any time via “Cookie Settings”.
Google Tag Manager: Google Tag Manager is a tool for managing website tags. It does not itself create user profiles, but it loads the Google services described below and processes your IP address in the process. Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics 4: I use Google Analytics 4 to understand how visitors use my website (e.g. pages viewed, time spent, approximate location, device and browser, source of the visit, interactions such as form submissions or bookings). Google Analytics uses cookies and a pseudonymous user ID. IP addresses are not stored in Google Analytics 4. Data is retained for a maximum of 14 months. Provider: Google Ireland Limited.
Google Ads conversion tracking and remarketing: I use Google Ads to advertise my services. Conversion tracking measures whether someone who clicked on one of my ads later carries out a defined action on my website (e.g. an enquiry, booking or purchase). Remarketing allows me to show ads to people who have already visited my website, on other websites and in Google services. For this purpose, cookies and identifiers are used, and Google may link this information to your Google account if you are logged in. Provider: Google Ireland Limited.
I use Google Consent Mode: as long as you have not consented, Google tags are either not loaded or do not set analytics or advertising cookies. Further information: Google Privacy Policy and How Google uses information from sites that use its services.
Meta Pixel and Meta Conversions API: I use the Meta Pixel and the Conversions API (server-side transmission via the Meta integration in Wix) of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland. This lets me measure the effectiveness of my ads on Facebook and Instagram, build target groups (e.g. website visitors) and show you relevant ads there. Events such as page views, enquiries, bookings or purchases are transmitted to Meta, together with technical data (IP address, browser information, cookie IDs) and – with the Conversions API – hashed contact data (e.g. hashed e-mail address or phone number) so that Meta can match the event to a Meta account. Meta can link this data to your Facebook or Instagram account and use it for its own purposes.
For the collection and transmission of data to Meta, I am jointly responsible with Meta Platforms Ireland Limited (Art. 26 GDPR). The Meta Controller Addendum sets out how responsibilities are shared: Meta is responsible for the processing after transmission and for answering your data subject requests regarding that processing. Further information: Meta Privacy Policy. Data may be transferred to Meta Platforms Inc., USA (EU-U.S. Data Privacy Framework).
Wix analytics: Wix also provides me with aggregated statistics on website use (e.g. visits, traffic sources, sales and bookings) in my Wix dashboard. Where this involves cookies that are not strictly necessary, they are only set with your consent (Art. 6(1)(a) GDPR).
11. Further integrated services
Wix Video and galleries: Videos and image galleries are hosted by Wix and played from Wix servers; no data is transferred to YouTube or Vimeo. Legal basis: Art. 6(1)(f) GDPR.
Multilingual website: The website is offered in several languages using Wix Multilingual. Translations are hosted by Wix; no third-party translation service is involved. Your language selection may be stored in a cookie or in the URL. Legal basis: my legitimate interest in offering the website in several languages (Art. 6(1)(f) GDPR).
Right-click protection: To protect my images against unauthorised copying, right-clicking on images is disabled. This function runs locally in your browser and does not process personal data.
Fonts: The fonts used on this website are delivered from Wix servers. No connection is made to Google Fonts.
12. Social media profiles and links
My website contains simple links to my profiles on Instagram (Meta Platforms Ireland Limited) and LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland), as well as share links for Facebook, X and LinkedIn. These are plain links, not plug-ins: no data is transferred to these networks when you visit my website. Data is only transferred when you click on a link and are redirected to the respective platform; the platform’s own privacy policy then applies.
If you visit or interact with my profiles on these platforms, I may be jointly responsible with the platform operator for certain statistical evaluations (“Page Insights”), in particular for my Instagram profile (Art. 26 GDPR, Meta Page Insights Controller Addendum). For enquiries about this processing, you can contact Meta or me directly. Legal basis: my legitimate interest in presenting my work and communicating with my audience (Art. 6(1)(f) GDPR).
13. Clients, photo shoots and image material
When you work with me as a private or business client, model, actor or workshop participant, I process the data needed to plan and carry out the project: contact and billing data, briefing, schedules, correspondence, contracts and model releases, and the photographs and video material created during the shoot.
-
Shoot and post-production: Images are processed and retouched to fulfil the contract. Where a project requires it, I work with external creative partners (e.g. retouchers, assistants, stylists). They only receive the data needed for the job and are bound to confidentiality.
-
Delivery: Images and videos are delivered via online galleries and file transfer services, depending on the project and our agreement: PicDrop (PicDrop GmbH, Am Kupfergraben 4/4a, 10117 Berlin, Germany), Dropbox (Dropbox International Unlimited Company, Dublin, Ireland), WeTransfer (WeTransfer B.V., Amsterdam, Netherlands) or Google Drive (Google Ireland Limited, Dublin, Ireland). The provider processes the files, your name and e-mail address and access and download data. Dropbox and Google may transfer data to the USA (EU-U.S. Data Privacy Framework, Standard Contractual Clauses). Legal basis: Art. 6(1)(b) GDPR.
-
Publication: I only publish images in which you are recognisable (portfolio, website, social media, exhibitions, competitions) if you have agreed to this in writing, e.g. in a model release or the contract. Without such agreement, your images remain private. Your rights under Section 78 of the Austrian Copyright Act (protection of likeness) remain unaffected.
-
Sensitive shoots: Boudoir, nude and fine art portrait sessions are treated with particular confidentiality. Raw files and unpublished images are only passed on to external partners bound to confidentiality where the job requires it, and are never published without your express written consent.
Legal basis: Art. 6(1)(b) GDPR (contract); publication: consent (Art. 6(1)(a) GDPR) or the agreement in the model release; statutory retention: Art. 6(1)(c) GDPR. You can withdraw consent to future publication at any time; images already printed or published in the past cannot always be withdrawn.
14. Recipients and processors at a glance
Personal data is only passed on where this is necessary for the purposes described above. Recipients are:
+ Recipient
* Purpose
# Role
+ Wix.com Ltd. and affiliates (Israel, USA, Ireland)
* Hosting, website, translations, forms, bookings, shop, member area, e-mail marketing
# Processor
+ Wix payment processors (Adyen, Stripe, PayPal)
* Card and online payments
# independent controllers / processors under the Wix Payments terms
+ PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg)
* PayPal payments
# Independent controller
+ Google Ireland Limited
* Calendar booking, Google Meet, Google Drive, Analytics, Ads, Tag Manager
# Processor (Calendar, Meet, Drive, Analytics); independent controller (Ads)
+ Meta Platforms Ireland Limited
* Meta Pixel / Conversions API, WhatsApp, Instagram
# Joint controller (Art. 26 GDPR) / independent controller
+ PicDrop GmbH (Germany)
* Online galleries and image delivery
# Processor
+ Dropbox International Unlimited Company (Ireland)
* File delivery
# Processor
+ WeTransfer B.V. (Netherlands)
* File delivery
# Processor
+ Österreichische Post AG (Austria)
* Delivery of orders
# Independent controller
+ External creative partners (e.g. retouchers)
* Post-production and production support
# Processor, bound to confidentiality
+ Tax adviser and accountant
* Bookkeeping, tax returns
# Independent controller (professional secrecy)
+ Banks
* Payment processing
# Independent controller
+ Authorities, courts, lawyers
* Only where legally required or to enforce legal claims
# Independent controller
I do not sell personal data.
15. Transfers to third countries
Some of the service providers mentioned are located outside the European Economic Area (EEA) or process data there. Such transfers only take place if one of the following safeguards applies:
-
Adequacy decision of the European Commission (Art. 45 GDPR): e.g. for Israel (Wix) and, for certified companies, the USA under the EU-U.S. Data Privacy Framework (Google, Meta, Dropbox, Wix US entities, PayPal, Stripe, where certified).
-
EU Standard Contractual Clauses (Art. 46(2)(c) GDPR): where no adequacy decision applies or as an additional safeguard.
Please note: in the USA, authorities may have access to data under certain conditions, and legal remedies for EU citizens are more limited than in the EU. You can request a copy of the safeguards in place by contacting me.
16. Storage period
I store personal data only as long as necessary for the respective purpose or as required by law:
Data
Storage period
Enquiries without a resulting contract
Up to 12 months after the last contact
Contract, order, booking and invoicing data
7 years from the end of the calendar year (Section 132 Federal Fiscal Code (BAO), Section 212 Commercial Code (UGB)); longer if needed for ongoing proceedings or warranty and liability claims
Image material from shoots
As agreed in the contract; otherwise as long as needed to prove the transfer of rights and to fulfil follow-up orders
Model releases and publication consents
As long as the images are used, plus the statutory limitation period
Customer account
Until you delete it, subject to statutory retention
Newsletter
Until you unsubscribe; proof of consent for up to 3 years thereafter
Cookies and analytics data
As stated in the cookie banner; Google Analytics max. 14 months
Server log files
As a rule, a few weeks
17. Your rights
You have the right to:
-
access your personal data (Art. 15 GDPR),
-
rectification of inaccurate data (Art. 16 GDPR),
-
erasure (Art. 17 GDPR),
-
restriction of processing (Art. 18 GDPR),
-
data portability (Art. 20 GDPR),
-
object to processing based on legitimate interests (Art. 21(1) GDPR) and at any time to direct marketing (Art. 21(2) GDPR),
-
withdraw consent at any time with effect for the future (Art. 7(3) GDPR).
To exercise your rights, simply contact me at management@erikbont.com. I will respond within one month.
You also have the right to lodge a complaint with a supervisory authority. In Austria, this is the Austrian Data Protection Authority (Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, phone +43 1 52 152-0, e-mail dsb@dsb.gv.at, www.dsb.gv.at. You may also contact the supervisory authority in your country of residence.
Obligation to provide data: You are not obliged to provide personal data. However, without the data marked as mandatory, I cannot answer your enquiry, process your order or carry out a booking.
Automated decision-making: I do not use automated decision-making within the meaning of Art. 22 GDPR. With your consent, Google and Meta may create user profiles for advertising purposes (see section 10).
18. Children and minors
My online services are aimed at adults. Bookings, orders and newsletter subscriptions are possible from the age of 18; younger persons may only use them with the consent of their legal guardians. Under Austrian law (Section 4(4) DSG), minors under 14 cannot give valid consent themselves. Shoots with minors only take place with the consent of their legal guardians, who also sign the relevant model releases.
19. Data security
This website uses SSL/TLS encryption (recognisable by “https://”). I take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access, e.g. access protection, two-factor authentication for my accounts and careful selection of service providers. Please note that unencrypted e-mail is not completely secure; for confidential content, let us agree on a secure transmission channel.
20. Changes to this privacy policy
I update this privacy policy whenever my website, my services or the legal situation change. The current version is always available on this page.
As of: October 2026