Privacy Policy
1. Data protection at a glance
General information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you. Detailed information on the subject of data protection can be found in the privacy policy below.
Data collection on this website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find their contact details in the “Controller Information” section of this privacy policy.
How do we collect your data?
Some data is collected when you provide it to us – for example, by filling out a contact form.
Other data is collected automatically by our IT systems when you visit the website. This includes technical data (e.g. browser, operating system, or time of page access). This data is collected automatically as soon as you access the website.
What do we use your data for?
Some of the data is used to ensure the proper functioning of the website. Other data may be used to analyze user behavior.
What rights do you have regarding your data?
You have the right to request information, free of charge, about the origin, recipients, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given your consent to data processing, you can revoke this consent at any time. You also have the right to request the restriction of processing under certain circumstances and the right to lodge a complaint with a supervisory authority.
If you have any questions about data protection, you can contact us at any time.
Analytics and third-party tools
When visiting this website, your browsing behavior may be statistically analyzed using analytics programs.
Details on these tools are provided below.
2. Hosting
Hetzner
This website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany.
Their privacy policy can be found at: https://www.hetzner.com/legal/privacy-policy
The use of Hetzner is based on Art. 6 (1) lit. f GDPR. We have a legitimate interest in a reliable presentation of our website. Where consent has been requested, processing is based exclusively on Art. 6 (1) lit. a GDPR and § 25 (1) TTDSG, to the extent that consent includes storing cookies or accessing information on the user's device. Consent can be revoked at any time.
3. General notes and mandatory information
Data protection
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with legal data protection regulations and this privacy policy.
When you use this website, various personal data are collected. This privacy policy explains what data we collect and what we use it for, as well as how and why it is done.
Please note that data transmission over the Internet (e.g. communication by email) may have security gaps. Complete protection of the data against access by third parties is not possible.
Controller information
The controller responsible for data processing on this website is:
Isabelle Droege Fotografie
Isabelle Dröge
Gartenstraße 1
31785 Hameln
Germany
Phone: +49 176 63706402
Email: kontakt@isabelledroege.de
The controller is the natural or legal person who determines the purposes and means of processing personal data.
Storage duration
Unless a more specific storage period has been stated in this policy, your personal data will remain with us until the purpose for data processing no longer applies. If you request deletion or revoke consent, your data will be deleted unless we are legally obligated to retain it (e.g. for tax or commercial law reasons).
Legal basis for data processing
Where you have given consent, we process your data on the basis of Art. 6 (1) lit. a GDPR or Art. 9 (2) lit. a GDPR (for special categories). If data is transferred to third countries with your explicit consent, this is done on the basis of Art. 49 (1) lit. a GDPR.
Processing required for the performance of a contract is based on Art. 6 (1) lit. b GDPR.
Processing to comply with legal obligations is based on Art. 6 (1) lit. c GDPR.
In other cases, processing is based on our legitimate interest (Art. 6 (1) lit. f GDPR).
Revoking your consent
You can withdraw your consent at any time. The legality of processing prior to withdrawal remains unaffected.
Right to object under Art. 21 GDPR
If data is processed based on Art. 6 (1) lit. e or f GDPR, you have the right to object for reasons arising from your particular situation.
If your data is processed for direct marketing, you may object at any time.
Right to lodge a complaint
You have the right to lodge a complaint with a supervisory authority, especially in your place of residence, place of work, or the place of the alleged violation.
Right to data portability
You have the right to receive your data in a machine-readable format or have it transferred to a third party, if technically feasible.
Right of access, rectification, and erasure
You have the right to access, correct, or delete your stored personal data in accordance with legal requirements.
Right to restriction of processing
You may request restriction of processing in certain cases, such as while verifying contested data, or if deletion is not possible and you still need the data to exercise legal claims.
SSL / TLS encryption
This website uses SSL or TLS encryption for security reasons. You can recognize an encrypted connection by “https://” in the browser address and the lock icon.
4. Data collection on this website
Cookies
This website uses technically necessary cookies only. These cookies are essential for certain functions, such as contact forms.
Cookies are stored on the basis of Art. 6 (1) lit. f GDPR unless consent is required. Where consent is required, it is based on Art. 6 (1) lit. a GDPR and § 25 (1) TTDSG. Consent can be revoked at any time.
You can set your browser to notify you about cookies, allow cookies only in individual cases, block cookies for specific cases, or delete cookies automatically. Disabling cookies may limit website functionality.
If other cookies are used (e.g. analytics), this will be explained in this privacy policy.
Server log files
The hosting provider automatically collects and stores the following information in server log files:
– Browser type and version
– Operating system
– Referrer URL
– Host name of accessing device
– Time of request
– IP address
This data is not merged with other data and is processed based on Art. 6 (1) lit. f GDPR for technical stability and security.
Contact form
If you contact us via form, the entered data will be stored to process your request. These details are not shared without consent.
Processing is based on Art. 6 (1) lit. b GDPR where the request is contract-related, or Art. 6 (1) lit. f GDPR in other cases, or Art. 6 (1) lit. a GDPR if consent is given.
Contact by email or phone
If you contact us via email or phone, your inquiry and related data will be stored and processed for the purpose of handling your request, based on Art. 6 (1) lit. b or lit. f GDPR.
We retain this data until you request deletion, revoke consent, or the purpose for storage no longer applies.
5. Analytics Tools
Plausible Analytics
This website uses the open-source tool Plausible for web analytics. It is fully GDPR-compliant and does not use cookies or collect personal data.
Only aggregated, anonymized data is collected and stored on our own servers.