Privacy

1. Name and contact details of the controller:

This data protection information applies to data processing by Tilman Vogler Photography (hereinafter: “we”)

Responsible: Photographer Tilman Vogler, Glasgower Str. 29, 13349 Berlin

Email: mail(at)tilmanvogler.com

Phone: +49 163 7664778

2. Collection and storage of personal data and the nature and purpose of their use

a) When visiting the website

When you visit the website “foto.tilmanvogler.com”, the browser used on your device automatically sends information to the server of our website. This information is temporarily stored by the host of the site (“Domainfactory GmbH”) in a so-called log file. The following information is collected without any action on your part and stored until it is automatically deleted (3 days):

• IP address of the requesting computer,
• Date and time of access,
• Name and URL of the retrieved file,
• Website from which access is made,
• the browser used and, if applicable, the operating system of your computer and the name of your access provider.
• Status code.

We process the aforementioned data for the following purposes:

• Ensuring a smooth connection to the website,
• To ensure a comfortable use of our website,
• Evaluation of system security and stability and
• for other administrative purposes.

The legal basis for data processing is Art. 6 paragraph 1 page 1 lit. f GDPR. Our legitimate interest results from the data collection purposes listed above. A corresponding contract for commissioned data processing has been concluded with the web host “domainfactory GmbH”. Under no circumstances do we use the data collected for the purpose of drawing conclusions about your person.

We also use cookies and analysis services when you visit our website. You find more detailed explanations in the sections 4 and 5 of this privacy policy.

b) When using our contact form

If you have any questions, you can contact us using the form provided on the website. A valid e-mail address is required so that we know who sent the request and can respond to it. Further information can be provided voluntarily. Data processing for the purpose of contacting us is carried out in accordance with Art. 6 para. 1 p. 1 lit. a GDPR on the basis of your voluntarily given consent. The personal data collected by us for the use of the contact form will be automatically deleted after your request has been dealt with.

c) Upon conclusion of the contract

The following data is collected from you when the contract is concluded:

• Name,
• Residential or business address,
• Billing address, if applicable,
• Email address,
• Phone number.

Data collection for the purpose of concluding a contract with us is carried out in accordance with Art. 6 para. 1 p. 1 lit. b GDPR on a legal basis. This data is stored for as long as it is necessary for the fulfillment of contractual obligations or is required by law or, in the case of (ii), your consent to the storage of the data is revoked. In the case of (ii), data is collected in accordance with Art. 6 para. 1 p. 1 lit. a GDPR on the basis of your voluntarily given consent.

3. Disclosure of data

Your personal data will not be transferred to third parties for purposes other than those listed below.

We only pass on your personal data to third parties if:

• You have given your consent in accordance with Art. 6 para. 1 p. 1 lit. a GDPR have expressly consented to this,
• the disclosure pursuant to Art. 6 para. 1 p. 1 lit. f GDPR is necessary for the establishment, exercise or defense of legal claims and there is no reason to assume that you have an overriding legitimate interest in the non-disclosure of your data,
• in the event that the disclosure pursuant to Art. 6 para. 1 p. 1 lit. c GDPR there is a legal obligation, and
• this is legally permissible and in accordance with Art. 6 para. 1 p. 1 lit. b GDPR is required for the processing of contractual relationships with you.

4. Cookies

We use cookies on our website. These are small files that your browser automatically creates and that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not cause any damage to your end device and do not contain any viruses, Trojans or other malware.

Information is stored in the cookie that results in each case in connection with the specific end device used. However, this does not mean that we obtain direct knowledge of your identity.

On the one hand, the use of cookies serves to make the use of our website more pleasant for you. We use so-called session cookies to recognize that you have already visited individual pages of our website. These are automatically deleted after you leave our site.

On the other hand, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer for you (see section 5). These cookies enable us to automatically recognize that you have already visited our site when you return. These cookies are automatically deleted after a defined period of time.

The data processed by cookies are necessary for the purposes mentioned to protect our legitimate interests and those of third parties in accordance with Art. 6 para. 1 p. 1 lit. f GDPR is required.

Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a message always appears before a new cookie is created. However, the complete deactivation of cookies may mean that you cannot use all the functions of our website.

5. Analysis tool (Matomo)

Die im Folgenden aufgeführten und von uns eingesetzten Tracking-Maßnahmen werden auf Grundlage des Art. 6 Abs. 1 p. 1 lit. f DSGVO durchgeführt. With the tracking measures used, we want to ensure a needs-based design and the continuous optimization of our website. On the other hand, we use tracking measures to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer for you. These interests are to be regarded as legitimate within the meaning of the aforementioned provision.

We use the open source software Matomo to analyze and statistically evaluate the use of the website. Cookies are used for this purpose (see section 4). The information generated by the cookie about website usage is transmitted to our servers and summarized in pseudonymous usage profiles. The cookies are stored for one week and then deleted. The information is used to evaluate the use of the website and to enable a needs-based design of our website. The data collected are: the type and version of browser you are using, the operating system you are using, country, date and time of the visit, number of visits, how long you spend on the website and the external links you have confirmed. The information will not be passed on to third parties.

Under no circumstances will the IP address be associated with other data relating to the user. The IP addressesare anonymized so that an assignment is not possible (IP masking).

Users can object to the anonymized data collection at any time with effect for the future. To do this, the box below must be deactivated. In this case, a so-called opt-out cookie is stored in your browser and Matomo no longer collects any session data. If users delete their cookies, this also results in the opt-out cookie being deleted and must therefore be reactivated here.

6. Social media plug-ins

We don’t use any Social media plugins on this website. Via the symbols you can reach the Instagram or Facebook page.

7. Rights of data subjects

You have the right:

• to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
• in accordance with Art. 16 GDPR, to immediately request the correction of incorrect or incomplete personal data stored by us;
• in accordance with Art. 17 GDPR, to demand the deletion of your personal data stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
• in accordance with Art. 18 GDPR, to demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful but you refuse to delete it and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR;
• in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller
• in accordance with Art. 7 para. 3 GDPR, to revoke your consent once given to us at any time. The consequence of this is that we may no longer continue the data processing that was based on this consent in the future and
• to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters.

8. Right of objection

If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 para. 1 p. 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for this arising from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right to object, which will be implemented by us without specifying a particular situation.

If you wish to exercise your right of revocation or objection, simply send an email to mail(at)tilmanvogler.com

9. Data security

We use the widespread SSL (Secure Socket Layer) method in conjunction with the highest level of encryption supported by your browser when you visit our website. As a rule, this is 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can recognise whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser.

We also use suitable technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

10. Accuracy and amendment of this privacy policy

This privacy policy is based on the requirements of the General Data Protection Regulation applicable from May 2018 and the Federal Data Protection Act (new). It is updated on an ongoing basis.