PHOTOGRAPHER & VIDEOGRAPHER – MUNICH SENDLING

Privacy Policy.

Book Appointment Online
View Gallery

Privacy Policy

Thank you for your interest in Paul Paulsen Photodesign. The protection of your personal data is important to me. This Privacy Policy informs you about what data I collect on my website, the purpose for which I process it, and what rights you have.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Paul Paulsen Photodesign
Paul Paulsen
Pfeuferstraße 38
81373 München
Deutschland

Phone: +49 179 5095828
E-Mail: post@paulpaulsen.de
Website: https://www.paulpaulsen.de

2. General Information on Data Processing

It is generally possible to use my website without providing personal data. Insofar as personal data (such as name, address, or email addresses) is collected on my pages, this is done, as far as possible, always on a voluntary basis. This data will not be passed on to third parties without your explicit consent.

I would like to point out that data transmission over the Internet (e.g. when communicating via email) may have security vulnerabilities. Complete protection of data against access by third parties is not possible.

3. Legal Basis for Processing

Art. 6(1)(a) GDPR serves as the legal basis for processing operations for which I obtain consent. Art. 6(1)(b) GDPR is the legal basis for processing operations necessary for the performance of a contract or pre-contractual measures. Art. 6(1)(c) GDPR applies to legal obligations (e.g. tax retention obligations). Art. 6(1)(f) GDPR permits processing to protect legitimate interests, provided that your fundamental rights do not override these interests.

4. Hosting

My website is hosted by:

dogado GmbH
Antonio-Segni-Straße 11
44263 Dortmund
Deutschland

A data processing agreement pursuant to Art. 28 GDPR has been concluded with the provider. The host collects the following data transmitted by your browser in so-called log files: IP address, date and time of the request, time zone difference from Greenwich Mean Time, content of the request, access status, amount of data transferred, website from which the request originates, browser, operating system, language, and version of the browser software.

Legal basis: Art. 6(1)(f) GDPR. My legitimate interest lies in the correct display and security of my website. Log files are automatically deleted after 7 to 14 days, unless indications of an attack require longer storage.

5. Cookies and Consent Management

My website uses cookies, small text files that are stored on your device. I place technically necessary cookies on the basis of Art. 6(1)(f) GDPR and § 25(2) TDDDG. I only set all other cookies with your consent in accordance with Art. 6(1)(a) GDPR and § 25(1) TDDDG.

To obtain and manage your consent, I use the cookie opt-in system integrated into my website theme (Enfold). On your first visit to my website, a notice will be displayed where you can grant or decline consent to optional cookies and external services. You can revoke or adjust your decision at any time via the corresponding link in the footer.

You can also block or delete cookies via your browser settings. This may limit the functionality of my website.

6. Contacting Me

When you contact me by email or through a contact form, the data you submit (name, email address, phone number, message) will be stored to process your inquiry. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in processing inquiries). This data will be deleted after your request has been fully processed, provided that no statutory retention obligations prevent this.

7. Google reCAPTCHA

To protect my contact forms from automated requests (spam, bot attacks), I use Google reCAPTCHA v3 (with v2 as a fallback) provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

reCAPTCHA analyzes various pieces of information to distinguish between humans and bots (e.g. IP address, mouse movements, duration of stay, browser data). This data is transmitted to Google and processed there. I do not personally link this data to a specific individual.

Legal basis: Art. 6(1)(f) GDPR. My legitimate interest lies in protecting my website from abusive, automated use.

Transmission to the USA is based on the EU-US Data Privacy Framework (DPF) and the Standard Contractual Clauses of the EU.

Further information: https://policies.google.com/privacy and https://www.google.com/recaptcha/intro/

8. OpenStreetMap and Leaflet

To display interactive maps (such as my studio location), I use OpenStreetMap on my website in combination with the Leaflet JavaScript library.

The provider of OpenStreetMap is the OpenStreetMap Foundation (OSMF), St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom.

The Leaflet library is integrated locally on my server. When you access a page containing a map, map tiles are loaded from servers of the OpenStreetMap Foundation. Your IP address is transmitted to OSM in the process.

Legal basis: Art. 6(1)(a) GDPR (consent via cookie opt-in) or Art. 6(1)(f) GDPR (legitimate interest in a user-friendly display of location information).

OpenStreetMap Privacy Policy: https://osmfoundation.org/wiki/Privacy_Policy

9. Online Appointment Booking via Calendly

To book photo shoot appointments, I use the service Calendly by Calendly LLC, 271 17th St NW, Suite 1000, Atlanta, Georgia, 30363, USA. When booking an appointment, your name, email address, and the selected date/time are transmitted to Calendly.

The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures). Transmission to the USA is based on the EU-US Data Privacy Framework (DPF) and the Standard Contractual Clauses of the EU.

Calendly Privacy Policy: https://calendly.com/pages/privacy

10. WhatsApp Contact Button (Social Chat)

On my website, I integrate a WhatsApp contact button via the WordPress plugin “Social Chat” (QuadLayers). Clicking the button opens WhatsApp (in your browser or application) to send a message directly to me.

The provider of WhatsApp is WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (part of Meta Platforms Inc.).

Data (including your phone number, message, and WhatsApp account information) is transmitted to WhatsApp only upon actively clicking the WhatsApp button. Prior to clicking, no data transfer to WhatsApp occurs.

Legal basis: Art. 6(1)(a) GDPR (consent through active use) and Art. 6(1)(b) GDPR (pre-contractual measures).

WhatsApp Privacy Policy: https://www.whatsapp.com/legal/privacy-policy-eea

11. Google Reviews via Trustindex.io

On my website, I display Google reviews using the Trustindex plugin. The provider is Trustindex Nonprofit Kft., Teleki Blanka Str. 15/A, 1142 Budapest, Hungary. When the widget loads, a connection to Trustindex servers is established, during which your IP address and technical browser information may be transmitted.

Legal basis: Art. 6(1)(f) GDPR. My legitimate interest lies in the transparent presentation of customer reviews.

Trustindex Privacy Policy: https://www.trustindex.io/data-protection/

12. Google Search Console

To analyze my website in Google Search, I use Google Search Console provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Search Console shows me anonymized data regarding search queries and traffic. No personal data processing takes place on my website through Google Search Console, as the data is processed server-side at Google.

Legal basis: Art. 6(1)(f) GDPR. My legitimate interest lies in optimizing my website.

Google Privacy Policy: https://policies.google.com/privacy

13. Google Fonts (Local Hosting)

My website uses fonts provided by Google Fonts. These fonts are embedded locally on my server. No connection to Google servers is established, and no data is transmitted to Google.

14. Multilingualism via WPML

To display my website in multiple languages, I use the WordPress plugin WPML (OnTheGoSystems Limited, 83 Victoria Street, London, SW1H 0HW, UK). WPML sets technically necessary cookies to store your language selection.

Legal basis: Art. 6(1)(f) GDPR.

15. SEO Tool Rank Math

To optimize my website, I use the WordPress plugin Rank Math SEO (One SEO LLC). Rank Math does not process any personal data of website visitors; it serves exclusively for technical SEO configuration.

16. Caching with W3 Total Cache

To speed up my website, I use the plugin W3 Total Cache (BoldGrid). W3 Total Cache sets technically necessary cookies to deliver pages faster. No personal data is collected.

Legal basis: Art. 6(1)(f) GDPR.

17. Social Media Links

On my website, I link to my profiles on external platforms. These are simple links and not social media plugins involving automatic data transmission. When you click a link, you leave my website, and no data is transmitted from my page to the respective platform.

I maintain profiles on the following platforms:

When visiting these external platforms, the respective privacy policies of the providers apply. I have no influence over the data collected there.

18. Data Protection in the Recruitment Process

If you send me an unsolicited application, I process your application documents exclusively for the purpose of the application procedure. Legal basis is § 26 BDSG (German Federal Data Protection Act). After completion of the process, your documents will be deleted after 6 months at the latest, unless you consent to longer storage or an employment relationship is established.

19. Your Rights as a Data Subject

You have the following rights at any time against the controller:

  • Right of access (Art. 15 GDPR) regarding your stored data
  • Right to rectification (Art. 16 GDPR) of inaccurate data
  • Right to erasure (Art. 17 GDPR) of your data
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object to processing (Art. 21 GDPR)
  • Right to revoke consent given (Art. 7(3) GDPR)
  • Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

To exercise your rights, please contact me as the controller (see Section 1).

The competent supervisory authority is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
https://www.lda.bayern.de

20. Storage Duration

I store personal data only as long as necessary to achieve the respective purpose or as required by statutory retention periods (e.g. 6 years according to § 257 HGB [German Commercial Code] or 10 years according to § 147 AO [German Tax Code] for tax-relevant documents). After expiration of these periods, the data is routinely deleted.

21. Automated Decision-Making

I do not use automated decision-making or profiling pursuant to Art. 22 GDPR.

22. Data Transmission to Third Countries

Insofar as I use services that transfer data to countries outside the EU/EEA (in particular the USA for Calendly, Tumblr, Google reCAPTCHA, and WhatsApp), this is done on the basis of the EU-US Data Privacy Framework (DPF) or the Standard Contractual Clauses of the EU Commission. An adequate level of data protection is thereby ensured.

23. Changes to this Privacy Policy

I reserve the right to amend this Privacy Policy so that it always complies with current legal requirements or to implement changes to my services. The revised Privacy Policy will apply from your next visit.

Status: October 2026

QR Code

Back to top