Privacy Policy
Last updated: 2026-08-24
1. Data Controller
The data controller for data processing on this website is: Hubert Wolski Steinböckengasse 6/2/10 1140 Vienna, Austria E-mail: office@tessera.at
2. Data Collected
We collect and process the following personal data:
- Passkey credentials (WebAuthn) for secure authentication
- Names of the couple and guests
- Email addresses (if provided)
- RSVP responses and guest information
- Payment information (processed via Stripe)
- Uploaded images (gallery)
3. Legal Basis
Your data is processed based on: • Art. 6(1)(a) GDPR (Consent) • Art. 6(1)(b) GDPR (Performance of a contract) • Art. 6(1)(f) GDPR (Legitimate interest)
4. Storage Duration
• Temporary accounts: Data is automatically deleted after 24 hours • Permanent accounts: Data is stored until account deletion • Payment data: In accordance with statutory retention periods
5. Your Rights
You have the following rights regarding your personal data:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR)
6. Cookies
We use the following cookies: • Session cookies: For authentication and session management • Wedding auth cookies: For access to wedding pages These cookies are technically necessary and cannot be disabled.
7. Third-Party Services
We use the following third-party services:
- Stripe – Payment processing (https://stripe.com/privacy)
- Hetzner Online GmbH, Germany – Hosting of the web application (https://www.hetzner.com/legal/privacy-policy)
- Hetzner Online GmbH, Germany – Object storage for uploaded images (processing agreement under Art. 28 GDPR)
- Google – Maps and Fonts (https://policies.google.com/privacy)
8. Right to Complain
You have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna (dsb.gv.at).