Privacy Policy

1. Controller

The controller responsible for data processing on this website is:
Alexis Papageorgiou, Louis-Gellersen Weg 16, 21271 Hanstedt, Germany, email: hi@ninja-photographer.com.

2. Hosting

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit the website, technically necessary data (e.g. IP address, time of access) is processed. The legal basis is our legitimate interest in operating the website securely (Art. 6 (1) (f) GDPR). Vercel is certified under the EU-US Data Privacy Framework; transfers to the USA are based on the European Commission's adequacy decision (Art. 45 GDPR).

3. Server log files

The host automatically collects and stores information in server log files (browser type, operating system, referrer URL, host name, time). This data cannot be attributed to specific persons and is processed to keep the website running.

4. Contact

If you contact us by email, your details are stored to handle your enquiry (Art. 6 (1) (b) or (f) GDPR). Enquiries via the form on the contact page are handled by Tally (Tally BV, Belgium), where your details are stored to process your enquiry.

5. Orders & payment

To process orders we use the data you provide (name, shipping and billing address, email). Payments are handled by Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland; the data required for payment is transmitted to Stripe. The legal basis is Art. 6 (1) (b) GDPR (performance of a contract).

6. Printing and shipping

To produce and deliver your order, we pass your name, shipping address and the ordered item to the print lab and the shipping carrier, to the extent necessary for delivery (Art. 6 (1) (b) GDPR).

7. Cookies

This website only uses technically necessary cookies. Non-essential cookies or analytics/tracking services are only used with your consent (Art. 6 (1) (a) GDPR).

8. Retention

Order data is kept for as long as statutory retention obligations apply (generally up to 10 years under § 147 AO). Enquiries are deleted once they have been dealt with.

9. Your rights

You have the right to:

• access (Art. 15 GDPR)
• rectification (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• object (Art. 21 GDPR)

10. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Data Protection Commissioner of Lower Saxony (Die Landesbeauftragte für den Datenschutz Niedersachsen), Prinzenstraße 5, 30159 Hannover, Germany.