This website is currently under construction.
DE

Privacy policy

This English version is provided for convenience. The German version of this privacy policy is legally binding.

1. Controller

The controller responsible for data processing on this website is:

Address (shown as an image)

Email:

I only process personal data to the extent necessary to operate this website, answer your enquiries and provide your photos.

2. Hosting

This website is hosted by Alfahosting GmbH, [address as stated in the contract with Alfahosting]. The host processes the data described below on my behalf on servers in Germany. A data processing agreement pursuant to Art. 28 GDPR is in place with the host. [Please check that the data processing agreement has been concluded in the Alfahosting customer centre.]

3. Server log files

Each time this website is accessed, the server automatically stores information transmitted by your browser:
- IP address
- date and time of access
- page or file requested
- browser type and operating system
- referrer URL (the page visited before)

This data is needed to run the website securely and reliably and to fend off attacks. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in secure operation). The log files are deleted by the host after [retention period according to Alfahosting, e.g. 7 days].

4. Encryption

This website is delivered exclusively via an encrypted HTTPS connection, so data you send via the website cannot be read by third parties.

5. Contact form and email

If you write to me via the contact form or by email, I process your details (name, email address, selected topic, message) in order to answer your enquiry. Messages from the form are delivered to me by email and are also stored on the website's server so that no enquiry gets lost.

The legal basis is Art. 6 (1) (b) GDPR if your enquiry relates to a contract (e.g. a photo shoot), otherwise Art. 6 (1) (f) GDPR (legitimate interest in answering enquiries) or your consent pursuant to Art. 6 (1) (a) GDPR, which you give via the checkbox in the form. I delete your enquiry once it has been dealt with and no statutory retention obligations (e.g. for business records) apply any longer.

To protect against automated spam submissions, your IP address is stored briefly when you submit the form (to limit the number of messages, for at most 24 hours).

6. Client galleries

I provide photos to clients in password-protected galleries. The following is processed:
- the photos themselves as well as the client's name and, where applicable, email address
- ratings (stars) that you give in the gallery
- for VIP access: name, username and time of the last login

The legal basis is Art. 6 (1) (b) GDPR (performance of the contract for the photo shoot). I delete the photos and galleries when they are no longer needed for our collaboration or when you ask me to, unless retention obligations prevent this.

To protect against guessing of login details, your IP address is stored briefly during login attempts (for at most 24 hours).

7. Cookies and storage in the browser

This website does not use cookies for advertising or analytics, does no tracking and does not load content from third-party servers (the fonts are also hosted on this server).

  • Session cookie: When you log in to a client gallery, the website sets a technically necessary session cookie so that you stay logged in. It is deleted when you close the browser or log out.
  • Rating cookie (project access only): When several people share a project access, the website sets a cookie "flowlight_voter" with a random identifier when a project gallery is opened. Its only purpose is to tell your own star ratings apart from those of the other project participants; it contains no personal details and is deleted after one year.
  • Language cookie: When you switch the language using the flag button, the website remembers your choice in a cookie "lang" (content only "de" or "en") so that all pages appear in that language. It is deleted after one year.
  • Storage in the browser: Your choice of "images per row" in the galleries is stored in your browser's storage (localStorage) so that it is kept for your next visit. Selected images in a client gallery are remembered for the duration of the browser session (sessionStorage). This information does not leave your browser and can be deleted at any time via your browser settings.

The legal basis is § 25 (2) no. 2 TDDDG (strictly necessary for the service you requested) in conjunction with Art. 6 (1) (f) GDPR.

8. Your rights

You have the right at any time to:
- access the data stored about you (Art. 15 GDPR)
- rectification of inaccurate data (Art. 16 GDPR)
- erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR)
- data portability (Art. 20 GDPR)
- object to processing based on legitimate interests (Art. 21 GDPR)
- withdraw consent given, with effect for the future (Art. 7 (3) GDPR)

Simply send me an email at .

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for me is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.

9. Version

This privacy policy was last updated [month year].