Data protection information

Privacy policy

Last updated: September 2026

This website does not use a contact form or its own analytics or marketing services.

1. Controller

2. Provision and hosting of the website

When you visit this website, connection data required for its operation is processed. This may include your IP address, the date and time of access, the requested file, the referrer URL, browser type, operating system and device information. This processing is necessary to deliver the website and maintain its stability and security.

The legal basis is Article 6(1)(f) GDPR. My legitimate interest is the secure and reliable provision of my website. The website is hosted through an OpenAI service. Technical service providers and subprocessors may be involved. Processing outside the European Economic Area is possible; the provider describes appropriate safeguards in its European privacy policy.

3. Contact by email

If you contact me by email, I process your email address, the content of your message and any other information you provide. This is done to handle your enquiry and to arrange or carry out a photo shoot under Article 6(1)(b) GDPR. If no contract is concluded, I delete the data once it is no longer needed to handle the enquiry, unless statutory retention obligations apply.

4. Social networks and external links

This website contains links to Instagram, Facebook, Threads and Telegram. Simply visiting this website does not establish a connection to those platforms through these links. Only when you click a link do you leave this website. The respective provider then processes data according to its own privacy policy. I have no influence over that processing.

5. Cookies, audience measurement and fonts

I do not use analytics, marketing or tracking cookies myself. The hosting service may use technically necessary storage or security mechanisms. Fonts are displayed without connecting to an external font provider.

6. Retention period

Personal data is stored only for as long as necessary for the relevant purpose or to meet legal obligations. Technical log data is retained according to the hosting provider’s policies and subsequently deleted or anonymised.

7. Your rights

Under the GDPR, you have rights of access, rectification, erasure, restriction of processing and data portability, subject to its provisions. You may object to processing based on legitimate interests. You can withdraw consent at any time with effect for the future. You may also lodge a complaint with a data protection supervisory authority.

Competent supervisory authority in Bavaria:
Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18, 91522 Ansbach
www.lda.bayern.de

8. Updates

This privacy policy is updated when website features, services used or legal requirements change.