Privacy Policy.

Thank you for your interest in our website. The protection of your personal data is important to us. This website is deliberately lean and built without third-party tracking. In principle, you can use it without providing personal data. Below we inform you about which data we process.

Controller

medianautik
Michael von der Forst
Rothenburg 43/44
48143 Münster
Germany

Phone: +49 (0)251 52 34 31
Email: info@medianautik.com

Server log files with the hosting provider

This website is hosted by an external service provider (ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany). When the website is accessed, the host automatically records information that your browser transmits, in so-called server log files. These are:

  • the page accessed and the time of access
  • the amount of data transferred and notification of successful retrieval
  • browser type and browser version
  • the operating system used
  • the previously visited page (referrer)
  • the IP address in truncated or anonymised form

These data serve solely the technical operation, the security and the stability of the website. The legal basis is our legitimate interest in a secure and functional website (Art. 6(1)(f) GDPR). A data processing agreement is in place with the host. The log files are deleted after a short period.

Fonts

The fonts used on this website are stored locally on our server and delivered from there. There is no connection to third-party servers (such as Google Fonts), and no data is transferred to third parties for this purpose.

Contacting us

If you contact us by email or telephone, we process the data you provide (for example your name, your email address and your message) in order to handle your enquiry. The legal basis is our legitimate interest in answering your enquiry (Art. 6(1)(f) GDPR) or, where a contract is concerned, Art. 6(1)(b) GDPR. These data are deleted as soon as they are no longer required and no statutory retention obligations apply.

Personal invitation links (discount codes)

If we make you a personal offer, we create an individual code for it. We store your first name for the personal greeting, the type of offer and, where applicable, an internal note of our own. This information comes from our previous contact with you and is not collected automatically by the website. We also record when the invitation link was opened and when the code was redeemed. If you redeem the code via our contact form, it is transmitted to us together with your enquiry. The legal basis is the initiation or performance of a contract (Art. 6(1)(b) GDPR) and our legitimate interest in addressing customers individually (Art. 6(1)(f) GDPR). The invitation page is not publicly linked and is excluded from search engines.

Moodboards

To prepare a shoot together, we can set up a private moodboard that is only accessible via a link that cannot be guessed. There, you and we collect visual ideas. We store a reduced-size copy of each image on our server, the address of the source page, its title, optional notes and a first name for allocation. The images are regenerated on the server, which removes embedded additional information such as EXIF data. The legal basis is the initiation or performance of a contract (Art. 6(1)(b) GDPR). The moodboard is not publicly linked and is excluded from search engines.

Photo selection after the shoot

After a shoot we provide your images for selection in a private gallery that is only accessible via a link that cannot be guessed. We process the photographs from your shoot, a first name for allocation, the favourites you mark and an optional message to us. When you submit your selection, this information is sent to us by email and stored on our server. The legal basis is the performance of our contract with you (Art. 6(1)(b) GDPR). The gallery is not publicly linked, is excluded from search engines and offers no download function.

Retention period for the private areas

We keep the data from invitation links, moodboards and photo selections for as long as it is required for the respective purpose, as a rule until the project has been completed. After that we delete it, unless statutory retention obligations apply. You can request deletion at any time without any particular form. The associated files are held in areas of our server that are blocked against direct external access.

Storage on your device

This website does not set cookies for analytics or advertising purposes. In the private areas, however, your browser stores individual details locally on your device so that the functions can be used: with an invitation link the code, so that it can be carried over into the contact form, and with the photo selection the favourites you have marked so far. These details remain on your device until you delete them via your browser settings and are not transmitted to third parties.

Protection against misuse

To limit misuse of the functions described above, we restrict the number of accesses per hour. For this purpose your IP address is stored briefly in irreversibly encrypted form (a hash value) together with the time of access. It is not possible to draw conclusions about your person from this. The legal basis is our legitimate interest in the secure operation of the website (Art. 6(1)(f) GDPR).

Web analytics with Matomo

This website uses Matomo, a self-hosted open-source software for the statistical evaluation of usage. Matomo runs exclusively on our own server; no data is transferred to third parties. Matomo does not set cookies and does not store any information on your device. Your IP address is anonymised before storage (the last digits are removed), so that no conclusions can be drawn about your person. A "Do Not Track" setting in your browser is respected. The legal basis is our legitimate interest in a data-minimising statistical evaluation to improve our offering (Art. 6(1)(f) GDPR).

Appointment booking with Cal.com

To book an intro call we embed the calendar service Cal.com. The calendar only loads once you actively consent (two-click solution). Only then is data transferred to Cal.com, including your IP address and the details you provide for the booking such as your name and email address. A transfer of data to countries outside the EU (for example the USA) cannot be ruled out. The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time with effect for the future. The provider is Cal.com, Inc. Further information can be found in the Cal.com privacy policy.

SSL / TLS encryption

For security reasons, this website uses SSL / TLS encryption. You can recognise an encrypted connection by "https://" in the address bar of your browser and by the padlock symbol.

Your rights

Within the framework of the statutory provisions, you have the right at any time to:

  • information about your stored personal data (Art. 15 GDPR)
  • rectification of incorrect data (Art. 16 GDPR)
  • erasure of your data (Art. 17 GDPR)
  • restriction of processing (Art. 18 GDPR)
  • data portability (Art. 20 GDPR)
  • objection to processing (Art. 21 GDPR)

An informal message to the contact details given above is sufficient to exercise your rights. In addition, you have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen).

Currency

This privacy policy is dated July 2026. Due to the further development of the website or as a result of changed legal requirements, it may become necessary to adjust this privacy policy.