From 3610011eaa57d47f4351e6d84df8f22388f79c56 Mon Sep 17 00:00:00 2001
From: Dominic <d.thiels@freenet.de>
Date: Tue, 3 Mar 2026 20:32:20 +0000
Subject: [PATCH] h

---
 backend/templates/datenschutz.html | 224 +++++++++++++++++++++++++----
 backend/templates/impressum.html   |  74 ++++++----
 2 files changed, 238 insertions(+), 60 deletions(-)

diff --git a/backend/templates/datenschutz.html b/backend/templates/datenschutz.html
index 032387e..d2e9074 100644
--- a/backend/templates/datenschutz.html
+++ b/backend/templates/datenschutz.html
@@ -4,63 +4,210 @@
   {% if lang == 'en' %}
   <header class="legal-header">
     <h1>Privacy Policy</h1>
-    <p>This privacy policy explains how personal data is processed when you use this website.</p>
+    <p>
+      In this privacy policy, we inform you about the processing of personal data when using this website.
+    </p>
     <p><strong>{{ t('legal_de_authoritative') }}</strong></p>
   </header>
 
-  <article class="legal-section">
+  <article class="legal-section" id="controller">
     <h2>Controller</h2>
     <p>
-      Dominic Thiels, Wiesbadener Strasse 70b, 65510 Idstein, Germany<br />
-      Phone: +49 151 70616118<br />
-      Email: <a href="mailto:d.thiels@freenet.de">d.thiels@freenet.de</a>
+      The controller responsible for data processing is:<br />
+      Dominic Thiels, Wiesbadener Straße 70b, 65510 Idstein, +49 151 70616118 and
+      <a href="mailto:d.thiels@freenet.de">d.thiels@freenet.de</a>
     </p>
   </article>
 
-  <article class="legal-section">
-    <h2>Data Processed During Website Access</h2>
-    <p>When you visit this website, technical access data may be processed, including IP address, request date/time, transmitted data volume, referrer, browser type/version, and operating system.</p>
-    <p>Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and stable operation of the website).</p>
+  <article class="legal-section" id="personal-data">
+    <h2>Personal Data</h2>
+    <p>
+      Personal data means any information relating to an identified or identifiable natural person (data subject). A
+      natural person is considered identifiable if they can be identified, directly or indirectly, in particular by
+      reference to an identifier such as a name, an identification number, location data, an online identifier, or to
+      one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social
+      identity of that natural person.
+    </p>
   </article>
 
-  <article class="legal-section">
-    <h2>Cookies</h2>
-    <p>Only technically necessary cookies are used to maintain the website and user session. No tracking cookies are used.</p>
+  <article class="legal-section" id="data-on-website-access">
+    <h2>Data Collected During Website Access</h2>
+    <p>
+      If you use this website only for information purposes and do not submit data, we process only the data required
+      to display the website on your internet-enabled device. This includes in particular:
+    </p>
+
+    <ul>
+      <li>IP address</li>
+      <li>date and time of the request</li>
+      <li>amount of data transferred in each case</li>
+      <li>the website from which the request originates</li>
+      <li>browser type and browser version</li>
+      <li>operating system</li>
+    </ul>
+
+    <p>
+      The legal basis for processing this data is legitimate interest pursuant to Art. 6(1)(f) GDPR in order to enable
+      the display of the website.
+    </p>
+
+    <p>
+      In addition, you can use various services on the website for which further personal and non-personal data may be
+      processed.
+    </p>
   </article>
 
-  <article class="legal-section">
+  <article class="legal-section" id="data-subject-rights">
+    <h2>Your Rights</h2>
+    <p>As a data subject, you have the following rights:</p>
+
+    <ul>
+      <li>Access to personal data concerning you (Art. 15 GDPR)</li>
+      <li>Rectification of inaccurate or incomplete data (Art. 16 GDPR)</li>
+      <li>Erasure (Art. 17 GDPR)</li>
+      <li>Restriction of processing (Art. 18 GDPR)</li>
+      <li>Data portability (Art. 20 GDPR)</li>
+      <li>Objection to processing (Art. 21 GDPR)</li>
+      <li>
+        Not to be subject to a decision based solely on automated processing (including profiling) (Art. 22 GDPR)
+      </li>
+      <li>
+        Right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The competent authority is the
+        supervisory authority at your habitual residence, place of work, or the place of the alleged infringement.
+      </li>
+    </ul>
+  </article>
+
+  <article class="legal-section" id="cookies">
+    <h2>Use of Cookies</h2>
+    <p>
+      When visiting the website, cookies may be stored on your device. Cookies are small text files stored by the
+      browser you use. Cookies cannot execute programs and cannot transfer viruses to your device. However, the party
+      setting the cookie may receive certain information through it. In particular, cookies can be used to recognize
+      the device from which this website was accessed when you revisit the site.
+    </p>
+
+    <p>
+      You can restrict or prevent the storage of cookies via your browser settings. For example, you can block only
+      third-party cookies or all cookies. However, blocking cookies may mean that not all functions of this website are
+      available. In the following sections of this privacy policy, we explain where and for which purposes cookies are
+      used on this website.
+    </p>
+
+    <p>
+      <strong>
+        Only technically necessary cookies are used that are required for operation of the website and maintenance of
+        the user session.
+      </strong>
+    </p>
+  </article>
+
+  <article class="legal-section" id="google-maps">
+    <h2>Google Maps</h2>
+    <p>
+      This website integrates a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4,
+      Ireland, to display geographic information visually (Google Maps).
+    </p>
+
+    <p>
+      When using Google Maps, information about your use of this website, including your IP address, is transmitted to
+      Google servers and stored there. These servers may also be located in the USA. Google may transfer this
+      information to third parties where required by law or where such third parties process the data on behalf of
+      Google.
+    </p>
+
+    <p>
+      The use of Google Maps is in the interest of an appealing presentation of event locations and easy findability of
+      the places indicated on this website. This constitutes a legitimate interest pursuant to Art. 6(1)(f) GDPR.
+    </p>
+
+    <p>
+      If consent is requested (e.g., via a consent mechanism), processing is based exclusively on Art. 6(1)(a) GDPR.
+      Consent can be withdrawn at any time.
+    </p>
+
+    <p>
+      Further information about data processing by Google can be found in Google's privacy policy:
+      <a href="https://policies.google.com/privacy" target="_blank" rel="noopener">https://policies.google.com/privacy</a>
+    </p>
+  </article>
+
+  <article class="legal-section" id="google-fonts">
     <h2>Google Fonts</h2>
     <p>
-      This website uses Google Fonts, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland,
-      to ensure consistent and appealing typography.
+      This website uses Google Fonts for the uniform display of fonts, provided by Google Ireland Limited, Gordon
+      House, Barrow Street, Dublin 4, Ireland.
     </p>
     <p>
-      When loading fonts, your browser establishes a connection to Google servers. In this process, technical data such
-      as your IP address may be transmitted to Google.
+      When loading the page, your browser loads required fonts from Google servers. In this process, technical data,
+      in particular your IP address, may be transmitted to Google.
     </p>
     <p>
-      Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a uniform and visually appealing presentation of the website).
+      Use is based on Art. 6(1)(f) GDPR (legitimate interest in a consistent and appealing website presentation).
     </p>
     <p>
-      More information: <a href="https://policies.google.com/privacy" target="_blank" rel="noopener">Google Privacy Policy</a>
+      Further information about data processing by Google:
+      <a href="https://policies.google.com/privacy" target="_blank" rel="noopener">https://policies.google.com/privacy</a>
     </p>
   </article>
 
-  <article class="legal-section">
-    <h2>Google Maps</h2>
-    <p>Google Maps is only loaded after an explicit user click on the location page. Once activated, data such as your IP address may be transferred to Google.</p>
-    <p>More information: <a href="https://policies.google.com/privacy" target="_blank" rel="noopener">Google Privacy Policy</a></p>
+  <article class="legal-section" id="external-links">
+    <h2>External Links</h2>
+    <p>
+      This website contains links to external websites (e.g., the location website). Clicking such a link causes your
+      browser to establish a direct connection to the respective provider.
+    </p>
+    <p>
+      In this process, technical data such as your IP address and, depending on browser settings, the referrer URL may
+      be transmitted to the external site.
+    </p>
+    <p>
+      Legal basis is Art. 6(1)(f) GDPR (legitimate interest in providing additional information about the venue).
+    </p>
+    <p>
+      Once you leave this website, only the privacy policy of the respective external provider applies.
+    </p>
   </article>
 
-  <article class="legal-section">
+  <article class="legal-section" id="photo-upload">
     <h2>Photo Uploads</h2>
-    <p>When guests upload photos, the uploaded file, optional metadata, and technical access data may be processed to provide the shared wedding gallery.</p>
+    <p>
+      This website provides the option to upload photos, for example as part of a shared wedding gallery.
+    </p>
+
+    <p>When uploading photos, the following personal data may be processed:</p>
+
+    <ul>
+      <li>the uploaded image file</li>
+      <li>
+        metadata that may be contained in the file (e.g., capture date, camera information, or location data/GPS
+        coordinates)
+      </li>
+      <li>the name entered by the user (if applicable)</li>
+      <li>technical access data (e.g., IP address, upload timestamp)</li>
+    </ul>
+
+    <p>
+      Processing is carried out to provide a shared photo gallery for event guests. Legal basis is Art. 6(1)(b) GDPR
+      (performance of the website function) and Art. 6(1)(f) GDPR (legitimate interest in providing a shared memories
+      platform).
+    </p>
+
+    <p>
+      Please note that uploaded photos may include personal data of third parties (e.g., images of persons). The user
+      uploading content is responsible for ensuring that publication is permissible under data protection law and that
+      consent of depicted persons has been obtained where required.
+    </p>
+
+    <p>
+      Photos are stored exclusively for the intended purpose and are not shared with third parties unless there is a
+      legal obligation.
+    </p>
   </article>
 
-  <article class="legal-section">
-    <h2>Your Rights</h2>
-    <p>Under GDPR, you may have rights of access, rectification, erasure, restriction, portability, objection, and the right to lodge a complaint with a supervisory authority.</p>
-  </article>
+  <footer class="legal-footer">
+    <p><small>Source: Template privacy policy by anwalt.de</small></p>
+  </footer>
   {% else %}
   <header class="legal-header">
     <h1>Datenschutzerklärung</h1>
@@ -218,6 +365,25 @@
     </p>
   </article>
 
+  <article class="legal-section" id="externe-links">
+    <h2>Externe Links</h2>
+    <p>
+      Diese Website enthält Verlinkungen zu externen Webseiten (z. B. zur Website der Location). Beim Anklicken eines
+      solchen Links stellt Ihr Browser eine direkte Verbindung zum jeweiligen Anbieter her.
+    </p>
+    <p>
+      Dabei können technische Daten wie Ihre IP-Adresse und je nach Browser-Einstellung auch die Referrer-URL an die
+      externe Seite übermittelt werden.
+    </p>
+    <p>
+      Rechtsgrundlage ist Art. 6 Abs. 1 lit. f DSGVO (berechtigtes Interesse an weiterführenden Informationen zum
+      Veranstaltungsort).
+    </p>
+    <p>
+      Ab dem Verlassen dieser Website gilt ausschließlich die Datenschutzerklärung des jeweiligen externen Anbieters.
+    </p>
+  </article>
+
   <article class="legal-section" id="foto-upload">
     <h2>Upload von Fotos durch Nutzer</h2>
     <p>
diff --git a/backend/templates/impressum.html b/backend/templates/impressum.html
index f6a4dd5..ce6cd04 100644
--- a/backend/templates/impressum.html
+++ b/backend/templates/impressum.html
@@ -2,38 +2,50 @@
 {% block content %}
 <section class="legal-page card" lang="{{ lang }}">
   {% if lang == 'en' %}
-  <h1>Imprint</h1>
-  <p>Information according to Section 5 DDG.</p>
+  <h1>Imprint</h1> 
+  <p>Information pursuant to Section 5 DDG</p> 
+  <p>Dominic Thiels<br> 
+  <br> 
+  Wiesbadener Straße 70b<br> 
+  65510 Idstein <br> 
+  </p> 
+  <p> <strong>Represented by: </strong><br>
+  Dominic Thiels<br>
+  </p> 
+  <p><strong>Contact:</strong> <br>
+  Phone: +49-151 70616118<br>
+  Email: <a href="mailto:d.thiels@freenet.de">d.thiels@freenet.de</a></br></p> 
+  <p><strong>Consumer dispute resolution / Universal arbitration board</strong>
+  <br>We do not participate in dispute resolution proceedings before a consumer arbitration board and are not obliged to do so.
+  </p> 
+  <p><strong>Disclaimer: </strong>
+  <br><br><strong>Liability for content</strong><br>
+  The contents of our pages were created with the greatest care. However, we cannot guarantee the accuracy,
+  completeness, or timeliness of the content. As a service provider, we are responsible for our own content on these
+  pages according to general laws pursuant to Section 7(1) DDG. According to Sections 8 to 10 DDG, however, we are not
+  obliged as a service provider to monitor transmitted or stored third-party information or to investigate circumstances
+  that indicate illegal activity. Obligations to remove or block the use of information under general laws remain
+  unaffected. Liability in this respect is only possible from the time of knowledge of a specific infringement. Upon
+  becoming aware of corresponding infringements, we will remove such content immediately.<br><br><strong>Liability for links</strong><br>
+  Our offer contains links to external third-party websites over whose content we have no influence. Therefore, we
+  cannot assume any liability for this external content. The respective provider or operator of the linked pages is
+  always responsible for their content. The linked pages were checked for possible legal violations at the time of
+  linking. Illegal content was not recognizable at the time of linking. However, permanent monitoring of the content
+  of linked pages is not reasonable without concrete indications of a legal violation. Upon becoming aware of legal
+  violations, we will remove such links immediately.<br><br><strong>Copyright</strong><br>
+  The content and works created by the site operators on these pages are subject to German copyright law.
+  Reproduction, editing, distribution, and any kind of use outside the limits of copyright law require the written
+  consent of the respective author or creator. Downloads and copies of this site are only permitted for private,
+  non-commercial use. Insofar as the content on this site was not created by the operator, third-party copyrights are
+  respected. In particular, third-party content is marked as such. Should you nevertheless become aware of a copyright
+  infringement, please inform us accordingly. Upon becoming aware of legal violations, we will remove such content
+  immediately.</p> 
+  <p>Created with the <a href="https://impressum-generator.de" rel="dofollow">Imprint Generator</a> by WebsiteWissen.com, the guide for
+  <a href="https://websitewissen.com/website-erstellen" rel="dofollow">website creation</a>, <a href="https://websitewissen.com/homepage-baukasten-vergleich" rel="dofollow">website builders</a>, and
+  <a href="https://websitewissen.com/shopsysteme-vergleich" rel="dofollow">shop systems</a>. Legal text by
+  <a href="https://www.kanzlei-hasselbach.de/" rel="dofollow">Kanzlei Hasselbach</a>. 
+  </p>
   <p><strong>{{ t('legal_de_authoritative') }}</strong></p>
-
-  <h2>Provider</h2>
-  <p>
-    Dominic Thiels<br />
-    Wiesbadener Strasse 70b<br />
-    65510 Idstein<br />
-    Germany
-  </p>
-
-  <h2>Represented by</h2>
-  <p>Dominic Thiels</p>
-
-  <h2>Contact</h2>
-  <p>
-    Phone: +49 151 70616118<br />
-    Email: <a href="mailto:d.thiels@freenet.de">d.thiels@freenet.de</a>
-  </p>
-
-  <h2>Consumer Dispute Resolution</h2>
-  <p>We do not participate in dispute resolution proceedings before a consumer arbitration board and are not obliged to do so.</p>
-
-  <h2>Liability for Content</h2>
-  <p>The contents of this website were created with due care. However, no guarantee is given for correctness, completeness or timeliness.</p>
-
-  <h2>Liability for Links</h2>
-  <p>This website contains links to external third-party websites. We have no influence on their contents. The respective provider is responsible for those contents.</p>
-
-  <h2>Copyright</h2>
-  <p>The content created by the site operator is subject to German copyright law. Any use beyond statutory limits requires prior written consent.</p>
   {% else %}
   <h1>Impressum</h1> 
   <p>Angaben gemäß § 5 DDG</p>