This page explains which data we process, why we process it, which providers are involved, how long we retain this data, and what your rights are under the GDPR.
Navigate directly to any section. Each section includes a button to copy the link and an option to expand or collapse the content.
Stepien Digital is a company established in Germany and acts as the data controller within the meaning of the General Data Protection Regulation (GDPR).
This Privacy Policy explains how personal data is collected, used, stored, shared, and protected when you visit Stepien Digital's websites, contact us, or use any of our services.
This policy applies to visitors, prospective clients, business clients, partners, production participants, and others connected to our services including websites, Google Business Profile, photography, videography, digital content, aerial photography and videography, Step Inside immersive experiences, review management, and digital presence.
We may process the following categories of personal data, depending on the interaction and scope of the service.
We process personal data to deliver and administer our services, develop and maintain websites, configure and manage business profiles, produce photographs and videos, provide aerial photography and videography using drones where legally permitted, create Step Inside immersive experiences, support review management and digital presence, communicate with clients, maintain secure systems, process billing, and comply with legal obligations.
Depending on the situation, processing may be based on contract performance or pre-contractual measures, compliance with legal obligations, legitimate interests of Stepien Digital or third parties, and, where required, the data subject's consent. When consent is required, we will request it clearly, specifically, and in a manner that can be withdrawn at any time.
Websites and databases are hosted on SmarterASP.NET. DNS and security services are managed through Cloudflare. Media and static assets may be stored and delivered via Cloudflare R2.
We use third-party services only when necessary to provide services, execute infrastructure, process payments, improve security, or support operations.
When relying on providers, we seek to use appropriate contractual protections and technical safeguards.
Our websites process technical data necessary to display pages, protect services, prevent abuse, and measure aggregate usage. This may include server logs, IP addresses, request metadata, and security or analytics signals. We use Cloudflare Web Analytics instead of Google Analytics and avoid marketing or behavioral tracking technologies on this site.
When you contact us, we process the provided data to respond, document the request, and support service delivery.
Communication data may include message content, attachments, and technical metadata. We retain communication data for as long as necessary to handle the request and comply with legal obligations.
Billing information may be processed for invoicing, ongoing service management, and maintaining accounting records. Payments may be processed through Stripe.
We do not store complete card details in our systems. Payment card data is handled by Stripe according to its security standards.
We retain personal data only for as long as necessary for the stated purposes and to comply with legal retention obligations.
Depending on the service providers we use, personal data may be transferred to or processed outside the European Economic Area (EEA). Where such transfers occur, we rely on appropriate safeguards in accordance with the GDPR.
Data subjects have the right to access, rectification, erasure, restriction of processing, objection, and data portability under the GDPR.
Stepien Digital uses encryption during data transmission, firewall protections, access controls, and monitoring mechanisms to protect personal data.
Stepien Digital is not liable for misuse of its services, unlawful content provided by clients, or actions taken by third-party platforms.
Clients remain responsible for the legality of the content they provide and the compliance obligations that apply to their specific business activities.
This Privacy Policy may be updated to reflect legal or technical changes. The current version is published on the website.
If you have any questions about this Privacy Policy, please contact us through the channels provided below.
Stepien Digital provides photography and video production services whenever they are part of the agreed scope of work. This section explains the conditions that apply to these services.
This section defines the usage rights for material produced by Stepien Digital.
Unless otherwise agreed in writing, Stepien Digital may use completed projects, photographs and videos in its portfolio, on its website and in other marketing materials.
Stepien Digital provides drone photography and videography services in compliance with all applicable laws and regulations.
Factors such as rain, wind, temporary restrictions, controlled areas, events, emergencies, and local regulations may prevent aerial footage from being carried out.
The client is responsible for providing access to the contracted environments and obtaining all necessary authorizations for the production.
If minors appear in the images, authorization from their legal guardians is required. This authorization must be obtained by the client, and Stepien Digital may request proof of such authorization before production.
If the client provides logos, music, texts, photographs, videos, or any other content, they declare that they hold the rights to use such material.
Certain Stepien Digital services may use artificial intelligence to assist with information organization and content suggestions. Stepien Digital does not use personal data to train its own AI models. Where AI-assisted processing is used, it is based on our legitimate interest in improving the quality and efficiency of our services.
Certain services may be provided through Stepien Digital's own platform upon client authorization. These services include:
This Privacy Policy is provided in English for convenience only. In case of discrepancies or interpretation questions, the German version shall prevail.