Privacy policy
Updated: 8 September 2026. These notes describe processing on this website and when you contact me.
1. Controller
Karsten Pfeifer · PFEIFER PHOTOGRAPHY · Kistlerhofstraße 243 · 81379 Munich · Germany. Telephone: +49 1577 1561619. Email: hallo@erfolgsphoto.de.
2. Website access and hosting
This website is hosted by ALL-INKL.COM – Neue Medien Münnich, proprietor René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. Access involves technically necessary connection data, including IP address, time, requested file, browser information and, where applicable, referrer. Where I process these data to provide and secure the website, the basis is Article 6(1)(f) GDPR and my legitimate interest in reliable and secure operation. Logs are retained only as long as needed for the relevant operational or security purpose; a specific security incident may require longer retention for investigation. The enabled logs and deletion periods depend on the hosting configuration.
3. Enquiries and business communication
When you contact me by telephone, email or WhatsApp, I process the information you supply, such as name, contact details, company and project information, to handle your enquiry and perform the contract. The basis is Article 6(1)(b) GDPR if you are the contracting party or a contract with you is being prepared. For company representatives and other business enquiries, the basis is Article 6(1)(f) and my legitimate interest in business communication. Statutory record-keeping is based on Article 6(1)(c). Providing information is voluntary, but I cannot respond without the necessary contact details.
4. WhatsApp contact
The WhatsApp button is an external link with a locally stored graphic. Merely visiting this website does not establish a WhatsApp connection. The service opens only after a click. For EEA users, the provider is WhatsApp Ireland Limited. WhatsApp processes telephone numbers, communication data and technical usage data under its own privacy policy; data may also be processed outside the EEA. Its linked privacy policy explains recipients, transfers and safeguards. My processing of your message is described in section 3. Telephone and email are available as alternatives.
5. Reviews, QR code and other links
Review links and the locally generated QR code lead to the Google profile of PFEIFER PHOTOGRAPHY or its review form. Google content is not automatically embedded. A connection is made only after opening a link or scanning and opening the QR destination. The same applies to map directions and other external services. Their own privacy policies apply on the destination sites.
6. Fonts, images and technical storage
Fonts and images are served locally. This website sets no cookies itself and stores no gallery, language or header preferences in your browser. The header photograph is randomly selected on every page load. No analytics or marketing services are loaded and no user identifiers are created.
7. Recipients and retention
Data are received only by parties requiring them for the relevant purpose, such as appointed communications or IT providers and, where legally required, authorities or tax advisers. Additional specific services are identified in these notes where applicable. Enquiry data are deleted after processing is complete unless contractual, evidentiary or statutory retention grounds remain. Business records subject to statutory retention are kept for the applicable legal period, with processing restricted to that purpose.
8. Your rights
Subject to the legal conditions, you have rights of access, rectification, erasure, restriction and data portability. You may object under Article 21 GDPR to processing based on legitimate interests on grounds relating to your particular situation. Consent may be withdrawn at any time with future effect. You may complain to a data protection authority, particularly the Bavarian State Office for Data Protection Supervision. This website does not make solely automated decisions producing legal or similarly significant effects.
WhatsApp – Privacy
Google – Privacy
Bayerisches Landesamt für Datenschutzaufsicht
9. Image archive and client delivery
I archive client photographs in multiple copies and can provide images and project files for longer through my own Nextcloud server by arrangement. Where files, contact information or access logs contain personal data, processing serves the agreed service or secure business delivery under the legal bases described in section 3. Files are made available to the agreed recipients. Duration and scope follow the order or a supplementary agreement; unlimited storage is not intended. Data are deleted when their purpose ends and no other legal basis applies. Data protection roles and any necessary agreements for processing personal image content on a client’s behalf must be established for the particular project.
