# Privacy for photo receipts: consent and alternatives | Guide

Canonical: https://x25pronto.at/en/blog/datenschutz-bei-foto-belegen-einwilligung-und-alternativen.html

VW Tiguan R · 320 PS 4MOTION · discreet · direct

DIRECT COURIER · NO TRANSHIPMENT · MON–SUN

Austrian courier drivers.
No detours.
Even overnight.

x25pronto Austria carries approved goods shipments by car, van or Van XL personally and without unnecessary transhipment. Direct and overnight trips can be booked Monday to Sunday – subject to availability in the booking calendar.

[Calculate price](https://x25pronto.at/en/#quote)[How overnight works](https://x25pronto.at/en/overnight.html)

Direct Mon–Sun Overnight Mon–Sun Car & van up to 1,000 kg

COURIER INSIGHTS

# Privacy for photo receipts: consent and alternatives

Photo receipts are practical but often contain personal data. This guide explains when you need consent, gives template texts and privacy-friendly alternatives for companies operating in Austria.

22 September 2026

## Quick answer

You need consent for photo receipts when the image reveals identifiable persons or personal address data. Alternatives include anonymisation, pseudonymisation, or photographing only the relevant area. Use clear consent statements, record your legal basis and minimise data collected and retained.

## When is consent required?

Consent is required if the photo includes identifiable people or personal data linked to an individual. This covers faces, readable names, and private addresses. If the image only shows non-personal details—such as a tracking number without address—another legal basis may apply. Assess each case and document your choice.

## Legal basis and data minimisation

Under the GDPR you need a legal ground: consent, contract performance, legitimate interest, or legal obligation. Consent is often the clearest option for photos, especially when third parties appear. Keep data minimal: capture the signature or parcel number instead of the entire doorstep. Define retention limits and delete images when no longer needed.

## Template consent text

Short consent for delivery situations: „I consent to [Company] taking a photo of the delivery situation for the purpose of delivery confirmation and storing it until [date]. I can withdraw this consent at any time.“ Add information about voluntary nature, how to withdraw, and the data protection contact. Adapt wording for apps or paper forms.

## Privacy-friendly alternatives

Anonymise: blur or mask faces and addresses. Pseudonymise: store photos with a reference code separated from identity data. Strip metadata like GPS or device info when not needed. Use QR-based confirmations or standardized checklists to avoid photos entirely.

## Technical and organisational measures

Restrict access, encrypt transfers and storage, and log access and deletion. Train couriers and customer-facing staff on where and how to take photos, how to mask sensitive areas immediately, and how to record consent.

## Implementing this in your company

Define rules: when photos are allowed, who approves them, and how consent is collected. Use digital forms that timestamp consent and automated retention rules. Conduct a Data Protection Impact Assessment when photos are collected at scale. Keep concise records for audits and supervisory authorities.

## Frequently asked questions

Can I use photos without consent as proof of delivery? Only if no identifiable persons or personal data are shown and another legal basis applies. Often consent or anonymisation is safer. Consider alternatives like QR confirmation.

What should a consent text include? A clear purpose, retention period, withdrawal right and contact details of the data controller. Use simple language for customers.

How long may I keep photo receipts? Keep them only for as long as needed. Define retention periods in policy, for example until delivery is clarified or a fixed short period, and delete automatically afterwards.

When is a DPIA needed for photo receipts? If you process photos systematically and at scale or the images involve sensitive contexts, perform a Data Protection Impact Assessment to identify risks and safeguards.

## Plan a courier trip in Austria

x25pronto Austria carries small and well packed shipments by car. Businesses can choose a direct courier trip or overnight service. Route, timing and shipment details can be entered online before booking. The guide price is then shown for the planned courier order.

[Direct courier →](https://x25pronto.at/en/direct-courier.html)[Overnight →](https://x25pronto.at/en/overnight.html)[Services →](https://x25pronto.at/en/services.html)[Calculate guide price →](https://x25pronto.at/en/#quote)

### Key points from this article

Privacy for photo receipts: consent and alternatives.

When is consent required? Consent is required if the photo includes identifiable people or personal data linked to an individual.

Legal basis and data minimisation Under the GDPR you need a legal ground: consent, contract performance, legitimate interest, or legal obligation.

Template consent text I can withdraw this consent at any time.“ Add information about voluntary nature, how to withdraw, and the data protection contact.

Privacy-friendly alternatives Anonymise: blur or mask faces and addresses. Pseudonymise: store photos with a reference code separated from identity data.

Technical and organisational measures Restrict access, encrypt transfers and storage, and log access and deletion. Train couriers and customer-facing staff on where and how to take photos, how to mask sensitive areas immediately, and how to record consent.

Plan a suitable trip Use the advice in this article to prepare your shipment. Then check the route, available times and guide price for the specific trip.

[Direct courier](https://x25pronto.at/en/direct-courier.html) · [Small shipments](https://x25pronto.at/en/small-shipments.html)
