Privacy

Draft – have it reviewed before publishing. The German version is legally binding. Date: [DATE]

1. Controller

Finja Nitschke, [STREET NUMBER], [POSTCODE CITY], Germany, email: [EMAIL ADDRESS]

2. Overview

This website deliberately uses no tracking, advertising cookies, analytics, social media plugins or external fonts. Data is processed only as far as necessary to run the website, answer your request or fulfil your order.

3. Hosting and server logs

Hosted by ALL-INKL.COM – Neue Medien Münnich, Germany, under a data processing agreement (Art. 28 GDPR). The server automatically logs technical data (IP address, date/time, page, browser) for secure operation (Art. 6(1)(f) GDPR). Logs are deleted after [NUMBER] days.

4. Cookies and local storage

Regular visitors receive no cookie. A strictly necessary session cookie is only set when you open a code-protected gallery, submit a form, go to checkout or log in to the admin area. Your cart is stored only in your browser (localStorage).

5. Contact, booking and removal requests

Form data (name, email, optional phone, sport, date, message, image number) is used to answer your request (Art. 6(1)(b) or (f) GDPR). For abuse prevention a hashed IP address is kept for up to 24 hours. Completed requests are deleted after 12 months at the latest unless legal obligations apply.

6. Orders

Order data is processed to fulfil the contract (Art. 6(1)(b) GDPR) and retained according to statutory retention duties (Art. 6(1)(c) GDPR). Name, shipping address and ordered images are passed to the print partner [COMPANY AND ADDRESS OF FLYERAGENT.DE] for production and shipping. Payment is handled by PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg; the PayPal script only loads after you click “Order with obligation to pay”.

7. Photos of athletes

Publication and sale of images showing identifiable people are based on consent (Art. 6(1)(a) GDPR) or, for portfolio publication, legitimate interest (Art. 6(1)(f) GDPR) in line with §§ 22, 23 KUG. Only images with consent or without identifiable people are sold as prints. Minors are never named. Metadata such as GPS positions is removed. You can object or withdraw consent at any time via Image rights & removal; for minors, parents can do this too.

8. Your rights

You have the right to access, rectification, erasure, restriction, data portability and objection (Art. 15–21 GDPR), to withdraw consent at any time, and to lodge a complaint with a supervisory authority, e.g. [COMPETENT AUTHORITY].