Legal

Privacy policy

This English version is provided for convenience. Only the German version is legally binding.

  1. Controller
  2. Overview
  3. Hosting and server log files
  4. Encryption
  5. Contact form
  6. Email and phone
  7. Cookies and Google Analytics
  8. External links
  9. Storage period
  10. Your rights
  11. Right to complain
  12. Changes

1. Controller

The controller responsible for processing personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Ashkan Amir Ghiyasvand
Saarland Fotograf
Waldwiese 5
66123 Saarbrücken
Phone: +49 152 25 61 68 20
Email: kontakt@saarland-fotograf.de

2. Overview

This website is deliberately lean. Google Analytics cookies are only set with your consent. There are no advertising networks and no embedded third-party content such as maps, social media plugins or external video players. Personal data is only processed when you visit the website (technically necessary server log files), when you consent to web analytics or when you contact me via the contact form, by email or by phone.

Depending on the case, the legal bases for processing are Art. 6 (1) (a) GDPR (consent), Art. 6 (1) (b) GDPR (contract or pre-contractual measures), Art. 6 (1) (c) GDPR (legal obligation) and Art. 6 (1) (f) GDPR (legitimate interest).

3. Hosting and server log files

This website is hosted by the following provider:

febas
Ostlandstraße 5a
49565 Bramsche
Germany

A data processing agreement in accordance with Art. 28 GDPR has been concluded with the host.

When the website is accessed, the server automatically stores information transmitted by your browser in so-called server log files:

  • IP address of the requesting device
  • Date and time of access
  • page or file accessed
  • Referrer URL (the previously visited page)
  • browser and operating system used
  • amount of data transferred and HTTP status code

This data is technically necessary to deliver the website, ensure its stability and security and fend off attacks. The legal basis is Art. 6 (1) (f) GDPR. The data is not combined with other data sources and is not used to identify individual visitors. It is deleted as soon as it is no longer required for these purposes.

4. Encryption

For security reasons, this website uses SSL or TLS encryption. You can recognise an encrypted connection by “https://” in the address bar and the lock symbol in your browser. Data you send via the contact form cannot be read by third parties.

5. Contact form

When you use the contact form, your details are processed in order to answer your enquiry:

  • Name and email address (required)
  • Company and phone number (optional)
  • requested service and your message
  • Date and time of the enquiry and the page from which it was sent

The information is sent by the server directly to me as an email and is not stored in a database on the web server. No external form or captcha services are used. To protect against spam, the form contains an invisible field and a time check that work without cookies and without transferring data to third parties.

The legal basis is Art. 6 (1) (b) GDPR if your enquiry relates to a contract or a quote, and otherwise your consent under Art. 6 (1) (a) GDPR, which you give by ticking the box in the form. You can withdraw your consent at any time with effect for the future; an informal message by email is sufficient.

6. Contact by email and phone

If you contact me by email or phone, I process the data provided, for example name, contact details and the content of the enquiry, in order to deal with your request. The legal basis is Art. 6 (1) (b) GDPR for enquiries about jobs and otherwise Art. 6 (1) (f) GDPR, my legitimate interest in answering enquiries.

7. Cookies and Google Analytics

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics is only loaded if you expressly agree in the cookie notice. Without your consent, no analytics cookies are set and no data is transferred to Google.

With your consent, Google Analytics collects information about how the website is used, for example pages viewed, time spent, approximate location, device and browser. Cookies are set for this purpose (_ga, _ga_*). Google Analytics 4 does not store IP addresses. The data may also be transferred to servers of Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework, for which an adequacy decision of the EU Commission exists. The data is deleted in Google Analytics after 14 months at the latest.

The legal basis is your consent under Art. 6 (1) (a) GDPR and § 25 (1) TDDDG (German Telecommunications Digital Services Data Protection Act). You can withdraw your consent at any time with effect for the future by clicking “Cookie settings” at the bottom of the page.

Your choice in the cookie notice is saved in your browser's local storage so the notice does not appear again on every page. This storage is technically necessary (§ 25 (2) no. 2 TDDDG).

Fonts, images and videos are loaded directly from this server. There is no connection to font or video services of third parties.

This website contains simple links to my profiles on Instagram and LinkedIn. They are normal links and not embedded plugins. Data is only transferred to Instagram (Meta Platforms Ireland Limited) or LinkedIn (LinkedIn Ireland Unlimited Company) when you click a link and open the respective page. The privacy policy of the respective provider applies to data processing there.

9. Storage period

Personal data is deleted as soon as the purpose of storage no longer applies, for example when your enquiry has been fully processed and no contract is concluded. If a contract is concluded, data is retained where statutory retention obligations exist, in particular under commercial and tax law (up to ten years for invoices and accounting records). The legal basis is then Art. 6 (1) (c) GDPR.

10. Your rights

You have the right at any time:

  • to obtain information about your data stored by me (Art. 15 GDPR),
  • to request the correction of inaccurate data (Art. 16 GDPR),
  • to request the deletion of your data (Art. 17 GDPR),
  • to request the restriction of processing (Art. 18 GDPR),
  • to receive your data in a common, machine-readable format (Art. 20 GDPR),
  • to object to processing based on Art. 6 (1) (f) GDPR (Art. 21 GDPR),
  • to withdraw consent given at any time with effect for the future (Art. 7 (3) GDPR).

A short message to kontakt@saarland-fotograf.de is sufficient.

11. Right to lodge a complaint with the supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your data violates the GDPR (Art. 77 GDPR). The competent authority is:

Independent Data Protection Centre Saarland
The State Commissioner for Data Protection and Freedom of Information
PO Box 10 26 31
66026 Saarbrücken
www.datenschutz.saarland.de

There is no automated decision-making or profiling.

12. Changes

This privacy policy is updated when the website or the legal requirements change. The version published here applies.

As of: October 2026

Go to the legal notice →