Privacy Policy

1. Data controller

Responsible for data processing on this website:

D&T PHOTOgraphy & Visual Arts GbR
Torsten Wieczorek, D.E. Wieczorek
Hauptstraße 80 F, 82386 Huglfing
Germany
Email: info@dtphotography.eu

2. Data collected when visiting this site

This website is hosted with Strato. When you visit the site, the hosting provider automatically collects technical access data ("server log files") that your browser transmits automatically, including IP address, date and time of the request, page/file accessed, referrer URL, and the browser and operating system used.

This data is used solely for the technical provision and security of the website (e.g. detecting attacks) and is not combined with other data. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure, functioning operation of the website).

This website uses a technically necessary session cookie (PHPSESSID) once you use the shopping cart, to store your cart's contents during your visit. No social media plugins are used.

To compile visitor statistics for internal use only (e.g. daily/monthly visit counts, pages viewed), this website collects the following data server-side for each page view: a one-way hash value derived from an already-anonymized IP address (last octet, or last 80 bits for IPv6, removed) combined with the browser's user-agent string, the page visited, the date and time of the visit, the language used, and the domain of the referring website (not the full URL). The actual IP address and the full user-agent string are never stored at any point. No cookie is set for this purpose, this data is never shared with any third party, and no external analytics service is used. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in analyzing and improving website usage). This data is automatically deleted after 12 months. These statistics are only ever viewable through a password-protected internal admin area and are never displayed anywhere on the public website.

3. Ordering from the print shop

If you order a fine-art print through this website, we collect the shipping information you enter in the cart: name, street and house number, postal code, city, optionally state/province/region, country, email address, and optionally a phone number. This data is used solely to process your order — specifically for payment processing via PayPal and for passing the necessary details to our print fulfillment partner, WhiteWall, where we place the print order manually on your behalf. The legal basis is Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures).

For payment processing we use PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg, as our payment service provider. The data entered during checkout is transmitted to PayPal. For details on how PayPal handles your data, please see PayPal's own privacy policy.

Your order data is retained for ten years due to statutory commercial and tax record-keeping obligations under German law (Section 257 of the German Commercial Code (HGB), Section 147 of the German Fiscal Code (AO)).

4. Getting in touch

If you contact us via the email address given on the Contact page, the information you provide (e.g. email address, name, message content) is processed and stored solely to handle your inquiry. The legal basis is Art. 6(1)(f) GDPR, or Art. 6(1)(b) GDPR where the contact concerns the initiation of a contract. Your data is not passed on to third parties.

5. Your rights

You have the right at any time to request information about data stored about you (Art. 15 GDPR), request correction of inaccurate data (Art. 16 GDPR), request deletion of your data (Art. 17 GDPR), request restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), and to object to processing (Art. 21 GDPR).

Please contact us at the address above. You also have the right to lodge a complaint with a data protection supervisory authority, e.g. the Bavarian State Office for Data Protection Supervision (BayLDA).

6. Changes to this privacy policy

This privacy policy will be updated as needed, in particular if new features are added that require processing of personal data by additional service providers.