Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

Lukas Blömeke
LUKE B. PHOTOGRAPHY
Lange Straße 101
34131 Kassel
Germany

Phone: +49 162 6612164
Email: kontakt@lukebphotography.de

2. Hosting and server log data

This website is hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. A data processing agreement with IONOS is in place. When the website is accessed, technical access data is transmitted to IONOS so that the requested content can be delivered securely and reliably. According to IONOS, its Webhosting product records the referring page, requested page or file, browser type and version, operating system, device type, access time and an IP address anonymised directly during collection. IONOS states that these visitor data are retained for eight weeks, are not disclosed to third parties and are not transferred to third countries. The legal basis relied on is our legitimate interest in the secure, stable and technically sound provision of the website (Art. 6(1)(f) GDPR).

3. Cookies and browser storage

A fresh public visit does not set a website cookie and does not use Local Storage, Session Storage, IndexedDB, Cache Storage or a service worker. ProcessWire session cookies are used for the protected content-management login. A browser that already presents such a first-party session cookie may continue that session on the public site, for example for an authenticated preview. These session cookies are not used for tracking and carry Secure, HttpOnly and SameSite=Lax attributes.

4. IONOS WebAnalytics

IONOS states that WebAnalytics tracking and logging are enabled by default for Webhosting. Data are derived from a pixel or logfiles for statistical evaluation and technical optimisation. WebAnalytics does not use its own analytics cookies. The IP address required to transmit the page request is, according to IONOS, anonymised directly after transmission and then processed without direct reference to an individual. The information can include referrer, requested page or file, browser type and version, operating system, device type, access time and an anonymised IP address. The legal basis relied on is our legitimate interest in statistical evaluation and technical optimisation (Art. 6(1)(f) GDPR). According to IONOS, the underlying Webhosting visitor data are retained for eight weeks. IONOS's public WebAnalytics privacy information does not state a separate retention period for prepared statistics.

5. Contact by email

This website provides an email address for contact. If you contact us by email, we process the information you provide and the communication metadata in order to respond to your request. The legal basis is Art. 6(1)(b) GDPR where the request relates to a contract or pre-contractual measures; otherwise Art. 6(1)(f) GDPR. We delete correspondence when it is no longer needed, unless statutory retention obligations require a longer period.

6. Portfolio photographs and uploaded media

The portfolio may contain photographs of identifiable persons. ProcessWire keeps uploaded originals unchanged; technical checks found that generated web variants did not retain camera EXIF or GPS data, while sampled stored originals could still contain EXIF data. New publishing files are therefore prepared without GPS and non-essential EXIF data before CMS upload. Metadata-bearing master files are kept, where needed, only in a private archive outside the public webspace.

Public files are retained while deliberately used in the portfolio. Unneeded drafts and orphaned uploads are deleted after review within 30 days. After a removal decision, the public file is removed within seven days. Private duplicate quarantines and recovery manifests are deleted 30 days after successful verification; private master archives are reviewed at least annually for a continuing contractual, licensing or business purpose. Requests relating to images are recorded and assessed individually against the applicable rights and obligations. The appropriate legal basis and any overriding retention duty depend on the circumstances of the specific photograph; no blanket legal basis or automatic deletion outcome is asserted here.

7. External links

This website contains ordinary links to external services, including YouTube full-set videos, social profiles and Artist websites. These services are not embedded: no player, external preview image or other resource is loaded from those providers before you actively click a link. Once you leave this website, the privacy information of the respective provider applies.

8. Recipients and international transfers

We disclose personal data only where necessary for the purposes described above or required by law. IONOS is the service provider for hosting and WebAnalytics. IONOS states for its Webhosting product that visitor data are not disclosed to third parties and are not transferred to third countries, and for WebAnalytics that data are not disclosed to third parties. The website does not use additional analytics, advertising or social-media embed services. If you actively follow an external link, the selected external provider receives the normal technical request data under its own responsibility.

9. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and, where processing is based on Art. 6(1)(f) GDPR, the right to object. You may also lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work or the place of the alleged infringement. The competent authority for our place of business is the Hessian Commissioner for Data Protection and Freedom of Information.

10. Automated decisions

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

Technical status: 8 September 2026. The German version is authoritative where German law applies.