Privacy Policy

Overview

This privacy policy explains which personal data is processed when visiting shutterspeed.photography. The website is used exclusively to present a photographic portfolio. No analytics tools, newsletter, shop or marketing cookies are used.

Controller

The controller responsible for data processing on this website is Fridolin von Einsiedel, address as stated in the imprint, email: [email protected].

Website access and server log files

When this website is accessed, technically necessary access data is processed so the website can be delivered, operated reliably and protected against misuse. This may include IP address, date and time of access, requested file, referrer URL, browser type, operating system, transferred data volume and technical connection data.

The website is provided as a static website via GitLab Pages. The domain and technical delivery are managed via Cloudflare. GitLab and Cloudflare may process access data as technical service providers, in particular for website delivery, DNS resolution, content delivery, connection security and attack prevention.

The legal basis is Art. 6(1)(f) GDPR. The legitimate interest lies in the secure, stable and efficient operation of the website. Access data is processed only for as long as required for operation, security, error analysis and abuse prevention.

Contact by email

If you contact me by email, the data you provide is processed, in particular email address, name, message content and technical email metadata. The processing is carried out to handle the request.

The legal basis is Art. 6(1)(b) GDPR if the request relates to contractual or pre-contractual communication, otherwise Art. 6(1)(f) GDPR. The legitimate interest lies in responding to inquiries. The data is deleted once it is no longer required for handling the request, unless statutory retention obligations apply.

Publication of photographs

Photographs are published on this website as a portfolio. People may be recognizable in the images, for example drivers as the subject of the photograph as well as spectators or other people in the background. Photos on which people are recognizable may constitute personal data.

The purpose of publication is the presentation of photographic work. Where no consent has been obtained, the legal basis is Art. 6(1)(f) GDPR. The legitimate interest lies in the publication and presentation of my own photographic work, in particular in the context of motorsport, event and portfolio presentation. When selecting images, the interests and rights of depicted persons are taken into account appropriately. Persons who are not the subject of the photograph generally appear only incidentally or in an event context.

If you are recognizable in a photograph and would like a review, removal or anonymization, you can contact me at the email address above. Please describe as precisely as possible which image is concerned.

Image and metadata

Images may contain technical metadata or display capture information such as camera model, lens, focal length, aperture, exposure time or ISO value. This information is used for photographic documentation. Personal image metadata, if present, serves copyright attribution and rights management.

Cookies, tracking and external embeds

This website does not use its own cookies, web analytics, user tracking, advertising networks, embedded videos, maps or externally loaded fonts. A cookie banner is therefore not required for the currently used functions.

Recipients and service providers

Recipients of personal data may be technical service providers used for operation, delivery, DNS management, security or email communication. Relevant service providers are in particular GitLab Pages for hosting and Cloudflare for domain, DNS, security and delivery functions.

International transfers

When using GitLab and Cloudflare, processing of personal data in countries outside the European Union or the European Economic Area, in particular the USA, cannot be excluded. Where required, processing is based on appropriate safeguards within the meaning of Art. 44 et seq. GDPR, in particular standard contractual clauses or adequacy decisions.

Your rights

Subject to the requirements of the GDPR, you have the right of access, rectification, erasure, restriction of processing, data portability and objection to processing based on Art. 6(1)(f) GDPR. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence, place of work or place of the alleged infringement.

Security

This website is transmitted using TLS/SSL encryption. This protects transmission between browser and server.

Status

Status: May 2026. This privacy policy will be updated if technical, legal or organizational changes occur.