Your data on this site

What concertphotographervienna.com collects, why, and what you can do about it. The short version: the site works without collecting anything about you. Analytics only runs if you choose "Count me in", and anything you send me is used to answer you.

Last updated: 24 October 2026

1. Who is responsible

Jovan Ristić, Meldemannstraße 12/88, 1200 Vienna, Austria. Email: contact@jovanristich.com. Full details are in the Impressum.

2. Hosting (Cloudflare)

This website is hosted on Cloudflare Pages, a service of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you open a page, your browser sends technical data such as your IP address, the page requested, the date and time, and your browser and operating system. Cloudflare needs this to deliver the site and protect it from attacks, and may keep it briefly in security logs.

Legal basis: my legitimate interest in a secure, working website (Art. 6(1)(f) GDPR). Cloudflare is certified under the EU-U.S. Data Privacy Framework, so transfers to the USA are covered by the EU adequacy decision (Art. 45 GDPR).

Fonts, images and videos are served from this website itself. No other company is contacted when a page loads.

3. Booking form (Formspree)

When you send the booking form, I receive your name, email address, message, the type of project you picked and the date(s), if you entered any. The form is processed by Formspree, Inc., 21750 Hardy Oak Blvd Ste 104 #26968, San Antonio, TX 78258, USA, which forwards it to my inbox. Formspree runs its service in the USA and protects the transfer with the EU Standard Contractual Clauses (Art. 46 GDPR).

Legal basis: answering your enquiry and preparing a possible booking at your request (Art. 6(1)(b) GDPR). Sending the form is voluntary, but without an email address I can't reply.

4. Email (Namecheap Private Email)

Enquiries sent by form or email arrive in my mailbox, which is hosted by Namecheap, Inc., 4600 East Washington Street, Suite 300, Phoenix, AZ 85034, USA (Private Email). Data may be processed in the USA; Namecheap protects the transfer with the EU Standard Contractual Clauses (Art. 46 GDPR). Legal basis: Art. 6(1)(b) GDPR for enquiries about bookings, otherwise my legitimate interest in answering messages (Art. 6(1)(f) GDPR).

5. How long I keep enquiries

Enquiries that don't lead to a booking are deleted after 14 months. If you book, the correspondence and invoices are kept for seven years, as Austrian tax law requires (§ 132 BAO).

6. Your cookie choice

Your choice in the cookie banner is saved in your browser's local storage under cpv-consent, together with the date. It never leaves your device. After 12 months you are asked again. This is strictly necessary to respect your choice, so no consent is needed for it (§ 165(3) TKG 2021, Art. 6(1)(c) GDPR).

7. Google Tag Manager and Google Analytics (only with your consent)

If you choose "Count me in", the site loads Google Tag Manager, which then loads Google Analytics 4. If you choose "No thanks", or make no choice at all, neither is loaded. For visitors in the EU the provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

What is measured

Pages viewed, time on the site, scrolling and clicks on links to other websites
Approximate location (country and city), device type, browser, operating system, screen size and the website you came from
Clicks on "Get a quote" buttons and where on the page they were
Taps on or copies of my email address
That the booking form was sent, with the project type only. Your name, email address and message are never sent to Google.

According to Google, Google Analytics 4 does not log or store IP addresses. Data may still be transferred to Google LLC in the USA, which is certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR). Analytics data is deleted after 14 months. It is not used for advertising: the advertising permissions stay switched off.

Cookies set by Google Analytics

Name	Purpose	Kept for
`_ga`	Tells visits apart with a random ID	2 years
`_ga_8J5JNLL5FS`	Keeps track of the current visit	2 years

Legal basis: your consent (Art. 6(1)(a) GDPR, § 165(3) TKG 2021). You can withdraw it at any time. Analytics cookies are then deleted and nothing more is sent.

8. Links to other websites

Links to jovanristich.com and my portfolio open other websites. Their own privacy policies apply there.

9. Your rights

You have the right to access your data (Art. 15 GDPR), to have it corrected (Art. 16) or deleted (Art. 17), to restrict its processing (Art. 18), to receive it in a portable format (Art. 20), to object to processing based on legitimate interest (Art. 21), and to withdraw consent at any time (Art. 7(3)). Just email me at contact@jovanristich.com.

You can also complain to the Austrian Data Protection Authority: Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.

10. No automated decisions

No decisions about you are made automatically, and no profiles are built from your data.