Data Policy

Last updated: July 8, 2026

1. Data Controller

The controller responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

By Denise Speck Photography
Sole Proprietorship (Einzelunternehmen)
Owner: Denise Speck
Tengener Strasse 20
78187 Geisingen
Germany

Email: bydenisespeck@gmail.com

2. General Information

Protecting your personal data is important to us. This Privacy Policy explains how we collect, process, and use your personal information when you visit our website.

We process your personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable German data protection laws.

Personal data means any information relating to an identified or identifiable natural person.

3. Hosting

This website is hosted by Squarespace.

When you visit our website, Squarespace automatically collects certain technical information necessary for the operation and security of the website. This may include:

  • IP address

  • browser type and version

  • operating system

  • referring website

  • pages visited

  • date and time of access

  • server log information

The processing is carried out to ensure the secure and reliable operation of the website.

Legal basis:
Article 6(1)(f) GDPR (legitimate interest).

4. Server Log Files

When you access this website, information is automatically transmitted by your browser and temporarily stored in server log files.

This information may include:

  • IP address

  • browser type

  • operating system

  • date and time of request

  • accessed pages

  • referrer URL

These data are processed solely for technical security, troubleshooting, and ensuring the stability of the website.

Legal basis:
Article 6(1)(f) GDPR.

5. Contact Form

If you contact us using our contact form, we collect the information you voluntarily provide, including:

  • Name

  • Email address

  • Phone number

  • Company

  • Message

We use this information solely to respond to your inquiry and communicate with you.

Legal basis:

  • Article 6(1)(b) GDPR, where your inquiry relates to a potential contract.

  • Article 6(1)(f) GDPR for general inquiries.

Your data will not be shared unless required by law or necessary for processing your request.

6. Contact by Email

If you contact us by email, the information you provide will be processed to answer your request.

Legal basis:

  • Article 6(1)(b) GDPR

  • Article 6(1)(f) GDPR

7. Newsletter

If you subscribe to our newsletter, we process your email address and any additional information you voluntarily provide.

The newsletter is sent only after you have provided your explicit consent.

Legal basis:

Article 6(1)(a) GDPR (consent).

You may withdraw your consent at any time by using the unsubscribe link included in every newsletter or by contacting us directly.

8. Blog Comments

If you leave comments on blog posts, we process the information you provide, including:

  • your name

  • your comment

  • date and time of submission

  • IP address where required for security purposes

Comments are published together with the information you choose to provide.

Legal basis:

Article 6(1)(a) GDPR or Article 6(1)(f) GDPR, depending on the circumstances.

We reserve the right to remove comments that violate applicable laws or our community standards.

9. YouTube Videos

This website may embed videos from YouTube.

When you play an embedded video, YouTube may process personal data, including your IP address and information about your device.

If you are logged into your Google account, YouTube may associate your visit with your account.

Processing may involve transfers of personal data to countries outside the European Economic Area.

Where required, such processing is based on your consent.

Legal basis:

Article 6(1)(a) GDPR.

10. Google reCAPTCHA

We use Google reCAPTCHA to protect our website against spam and automated abuse.

reCAPTCHA analyses user behaviour to determine whether requests originate from humans.

This may include processing:

  • IP address

  • browser information

  • mouse movements

  • time spent on the website

  • other technical information

Legal basis:

Article 6(1)(f) GDPR.

Where required under applicable law, processing is carried out only after obtaining your consent.

11. Social Media Links

Our website contains links to our social media profiles, including:

  • Instagram

  • Facebook

  • LinkedIn

  • YouTube

These are simple external links.

No personal data are transmitted to these providers merely by visiting our website.

Only when you click one of these links will your browser establish a connection with the respective provider.

12. International Data Transfers

Some services used on this website may involve the transfer of personal data to countries outside the European Economic Area, particularly the United States.

Where such transfers occur, appropriate safeguards are implemented in accordance with Articles 44 et seq. GDPR, including the use of Standard Contractual Clauses where applicable or reliance on an adequacy decision of the European Commission.

13. Cookies

Our website uses cookies necessary for the technical operation and security of the website.

Where legally required, cookies or similar technologies that are not strictly necessary are only used after obtaining your consent.

You may adjust your cookie preferences at any time through the cookie settings available on our website.

14. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy or as required by statutory retention obligations.

Once the applicable retention period has expired, the data will be deleted unless further processing is legally permitted.

15. Your Rights

Under the GDPR, you have the following rights:

  • Right of access (Article 15 GDPR)

  • Right to rectification (Article 16 GDPR)

  • Right to erasure (Article 17 GDPR)

  • Right to restriction of processing (Article 18 GDPR)

  • Right to data portability (Article 20 GDPR)

  • Right to object (Article 21 GDPR)

  • Right to withdraw consent at any time (Article 7(3) GDPR)

To exercise your rights, please contact us using the details provided above.

16. Right to Lodge a Complaint

You have the right to lodge a complaint with a competent data protection supervisory authority if you believe that the processing of your personal data violates applicable data protection law.

17. Data Security

We implement appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.

18. Changes to this Privacy Policy

We reserve the right to amend this Privacy Policy to reflect legal, technical, or business developments.

The latest version will always be published on this website.