Privacy Policy

With this Privacy Policy, we inform you about the type, scope and purpose of the personal data we collect and process. We also explain what rights you have as a data subject.

Although we take appropriate technical and organisational measures to safeguard your personal data as thoroughly as possible, internet-based data transmission may carry inherent security risks. For this reason, you are also free to provide us with personal data through other means, such as by telephone.

1. Definitions

Terms used in this Privacy Policy follow the definitions set out in the General Data Protection Regulation (GDPR). The aim is to ensure clarity and transparency for both the public as well as for our customers and business partners.

• Personal data: any information relating to an identified or identifiable natural person.
• Processing: any operation performed on personal data — such as collecting, storing, transferring or deleting it.
• Controller: the natural or legal person who determines the purposes and means of processing personal data.

(Additional GDPR legal terms apply in line with Articles 4 and 5 GDPR.)

2. Data Controller

Sascha and Ingo Maas
Bernhard-Klein-Str. 11
53604 Bad Honnef
Germany

Tel.: +49 2224 / 94 92 10
E-mail: info@maaswildlifeportraits.com
Website: maaswildlifeportraits.com

3. Cookies

Our website uses cookies. Cookies are small text files stored on your device via your browser. They allow your browser to be recognised and enable certain website features.

Cookies help us make our website easier to use — for example, by remembering preferences or settings. You can disable cookies at any time via your browser settings. However, please note that some website functions may not operate correctly if cookies are disabled.

4. Collection of General Data and Information

Each time our website is accessed, certain general technical information is automatically collected and stored in server log files. This may include:

• browser type and version
• operating system used
• the website from which our site was accessed (referrer)
• sub-pages accessed on our website
• date and time of access
• IP address
• the internet service provider
• other similar technical data required for security purposes

This information is not used to identify individuals. It is required to ensure the website functions properly, to guarantee system security, to optimise our content, and to provide authorities with necessary information in the event of cyber attacks. Anonymous server log data is stored separately from any personal data you may provide elsewhere.

5. Data Retention and Erasure

We will process and store personal data only for as long as necessary to fulfil the purpose for which it was collected, or for as long as applicable legal retention periods require us to store it. Once a purpose no longer applies, or a statutory retention period expires, data will be deleted or restricted in accordance with legal requirements.

6. Rights of Data Subjects

Under the GDPR, you have the following rights in relation to your personal data:

• Right of access: You may request confirmation as to whether we process personal data relating to you and, if so, receive a copy of that data.
• Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Right to erasure (“right to be forgotten”): You may request deletion of your personal data where legally permitted — for example if it is no longer needed, you withdraw consent, or it has been unlawfully processed.
• Right to restriction of processing: You may request processing to be restricted under certain circumstances — for example while accuracy is being verified.
• Right to data portability: You may receive personal data you have provided to us in a structured, commonly used and machine-readable format and have this transmitted to another controller where technically feasible.
• Right to object: You may object to processing based on legitimate interests, or for direct marketing purposes, at any time.
• Right to withdraw consent: Where processing is based on consent, you may withdraw this consent at any time with effect for the future.

To exercise any of these rights, simply contact us using the details provided above.

7. Legal Basis for Processing

We process personal data in accordance with Article 6 GDPR, for example:

• consent (Art. 6(1)(a) GDPR)
• performance of a contract or steps prior to entering into a contract (Art. 6(1)(b) GDPR)
• compliance with legal obligations (Art. 6(1)(c) GDPR)
• protection of vital interests (Art. 6(1)(d) GDPR)
• legitimate interests pursued by us or a third party (Art. 6(1)(f) GDPR)

8. Legitimate Interests

Where processing is based on legitimate interests under Article 6(1)(f) GDPR, our legitimate interest is the proper operation of our business in the interest of our customers, partners, employees and owners.

9. Storage Duration

The criteria for determining the storage period are always the applicable statutory retention periods. After these periods expire, relevant data will be deleted unless required for contract fulfilment or initiation.

10. Requirement to Provide Personal Data

In some cases, the provision of personal data is required by law (e.g. tax regulations) or by contract. In certain instances, a contract cannot be concluded if personal data is not provided. If you have questions about whether providing personal data is mandatory, please contact us before providing such data.

11. Automated Decision-Making

We do not conduct automated individual decision-making or profiling.