Privacy Policy

1. Controller

The controller responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Kerstin Ellinghoven
c/o Impressumservice Dein-Impressum
Stettiner Str. 41
35410 Hungen

Contact
Email: lady-sahmara-photo@gmx.de
Phone: +49 178 4783757

Please contact me by SMS first. I will be happy to call you back.

2. General Information on Data Processing

When you visit and use this website, personal data may be processed. Personal data means any information relating to an identified or identifiable natural person.

When the website is used solely for informational purposes, technical data in particular is processed where necessary to provide and secure the website. This may include, for example, the IP address, date and time of access, pages viewed, browser type, operating system, device type and other technical connection data.

Additional personal data is processed if you provide it yourself or use certain functions of the website. This may be the case, for example, when using the contact form or the comment or guestbook function.

The following sections of this Privacy Policy explain which data is processed in each case, for what purposes, and which services are involved.

3. Hosting and Provision of the Website by Wix

This website is provided via the Wix.com platform. The provider is Wix.com Ltd., Yunitsman 5 St, Tel Aviv, Israel.

When the website is accessed, Wix processes technical data required to provide, securely operate and display the website. This may include, in particular, the IP address, date and time of access, pages and files accessed, browser type and browser version, operating system, device type and other technical connection data.

This data is processed in particular in order to make the website technically available, ensure its stability and security, and identify and resolve technical errors.

Where processing is necessary for the technically required provision and secure operation of this website, it is based on Article 6(1)(f) GDPR. The legitimate interest lies in the secure, reliable and functional operation of this website.

Wix processes data in connection with the provision of its platform. Personal data may also be processed outside the European Union or the European Economic Area. Where special data protection requirements apply to such transfers, according to Wix the relevant data transfers are based on applicable adequacy decisions or appropriate safeguards and transfer mechanisms. Further information can be found in the section “Recipients of Data and International Data Transfers”.

4. Cookies and Similar Technologies

This website uses cookies and similar technologies. Cookies are small files that may be stored on the device used when visiting a website. They may be used, among other things, to provide technical website functions, store settings or analyse use of the website.

Some of these technologies are necessary for the technical operation and basic functions of the website. Where their use is technically necessary, it is based on Section 25(2) TDDDG. Where personal data is processed in this context, the subsequent processing is based on Article 6(1)(f) GDPR. The legitimate interest lies in the secure and functional operation of this website.

Cookies and comparable technologies that are not technically necessary are used only where consent has been given. In this case, the legal basis for storing or accessing information on the end device is Section 25(1) TDDDG. Where personal data is subsequently processed, such processing is based on Article 6(1)(a) GDPR.

Usercentrics for Wix is used on this website to manage consent. The provider is Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany.

The service is used to obtain, store, manage and document visitors’ consent decisions. In particular, the date and time of the visit or of consent or refusal, as well as device information, may be processed. The processing serves to manage and document the consent decisions made and to provide evidence of consent given. The legal basis is Article 6(1)(c) GDPR in conjunction with Article 7(1) GDPR. According to Usercentrics, consent data is stored for one year.

Consent that has been given may be changed or withdrawn at any time with effect for the future. For this purpose, the privacy trigger that is permanently accessible on the website can be used to reopen the cookie settings.

Where necessary, the following sections of this Privacy Policy explain which services use cookies or similar technologies and for what purposes.

5. Wix Analytics and Visitor Statistics

This website uses the analytics and statistics functions provided by Wix. Information may be processed about how visitors access and use the website.

The information processed may include, in particular, the IP address, approximate location, date and time of the visit, browser and browser version used, operating system, device type, pages viewed, time spent on the website, navigation paths within the website, and the origin or source of access to the website.

The analysis is used to understand how the website is used, identify technical and content-related opportunities for improvement, and develop the website accordingly.

Where analytics and statistics involve cookies or similar technologies that are not technically necessary, or information is stored on or accessed from the end device, this takes place only after prior consent. The legal basis is Section 25(1) TDDDG. The subsequent processing of personal data is based on Article 6(1)(a) GDPR.

Consent may be withdrawn with effect for the future. Further information about the use of cookies and the available settings can be found in the section “Cookies and Similar Technologies”.

6. Contact and Contact Form

A Wix contact form is available on this website.

If you use the contact form, the information you enter will be processed. This may include, in particular, your first name, last name, email address, subject and the content of your message. The information is used to process your enquiry and, where appropriate, to reply to you.

The information submitted via the form is processed through Wix Forms and stored as a form submission in the website administration. When a new message is received, I receive an automatic notification by email. An automatic confirmation email is currently not sent to the person submitting the form.

To protect the contact form against spam and automated submissions, a Wix spam protection function including Google reCAPTCHA is used. Technical information and information about use of the form may be processed in order to distinguish automated access from human input. Further information about processing by Wix and possible international data transfers can be found in the section “Recipients of Data and International Data Transfers”.

The personal data you voluntarily provide in the contact form is processed for the purpose of handling your enquiry on the basis of Article 6(1)(b) GDPR where your enquiry concerns the initiation or performance of a contract. In all other cases, processing is based on Article 6(1)(f) GDPR. My legitimate interest lies in the proper handling of and response to enquiries.

Data submitted through the contact form is stored only for as long as necessary to process the relevant enquiry or for as long as statutory retention obligations apply. It is then deleted.

7. Guestbook

This website uses the Wix Comments function provided by Wix.com Ltd. It enables visitors to publish posts or comments in designated areas.

Registration as a website member is not required in order to submit a post. When using the function as a guest, the information requested in the relevant input fields is processed. This currently includes a freely chosen username, an email address and the content of the post. The username and the post are published on the website. The email address provided is not displayed publicly.

The information submitted through Wix Comments is processed and stored via Wix infrastructure. In addition, technical data required to provide, secure and manage the function may be processed.

The processing is carried out for the purpose of providing the guestbook function, communicating with visitors, and managing and moderating posts. The legal basis is Article 6(1)(f) GDPR. My legitimate interest lies in offering visitors an opportunity to provide feedback on the content of this website.

Posts may be moderated and deleted by me. The data is stored for as long as the relevant post remains published or further storage is required for legal reasons. If a post is deleted and there is no other retention obligation or other legal basis for continued storage, the associated data will be deleted.

Further information about data processing by Wix and possible international data transfers can be found in the sections “Hosting and Provision of the Website by Wix” and “Recipients of Data and International Data Transfers”.

8. Image Galleries and Visitor Interactions

Images and, in some cases, other media are displayed on this website using Wix Pro Gallery.

Some galleries offer additional interaction options. Visitors can mark images using a heart icon. The number of these reactions may be displayed publicly as a counter. Wix processes technical information required to provide the interaction and recognise that a reaction has already been made.

As the operator of this website, I do not receive information about which visitor has marked a particular image with a heart. I am shown only the number of reactions.

Some galleries also provide a function for sharing content. After opening this function, visitors can select one of the external services offered. These may include, in particular, Facebook, X, Pinterest and Tumblr. Alternatively, content can be shared by email or the corresponding link can be copied.

Only when an external service is selected is the visitor redirected to that provider. Personal data may then be processed by the respective provider. The privacy policy of the selected service applies to any further data processing.

As the operator of this website, I do not receive information via Wix Pro Gallery about which visitor has shared gallery content through any of these services.

9. Internal Search Function

This website uses Wix Site Search provided by Wix.com Ltd. The search function enables visitors to search the content of this website for specific terms.

When the search function is used, the search term entered and technical usage data required to provide and evaluate the search function may be processed.

The processing is carried out for the purpose of providing the internal website search and enabling visitors to find relevant content.

The search function is technically provided by Wix.com Ltd. Further information about data processing by Wix can be found in the section “Hosting and Provision of the Website by Wix”.

10. Wix Blog

Wix Blog provided by Wix.com Ltd. is set up on this website. The blog is currently not publicly accessible. The blog’s comment and rating functions are disabled.

The blog is technically provided and managed by Wix.com Ltd. Where personal data is processed in this context, the general information on data processing by Wix in the section “Hosting and Provision of the Website by Wix” applies.

11. External Links and Social Media

11.1 External Links

This website contains links to external websites and third-party services. In the case of simple external links, merely accessing this website does not establish a connection to the linked website. A connection to the respective provider is established only when a visitor clicks the corresponding link.

After the external website has been accessed, the privacy policy and data processing practices of the respective provider apply. I have no influence over the nature and scope of the data processing carried out there.

11.2 Links to Social Networks and Other Platforms

This website contains links to external platforms and social networks. These are simple links and not embedded social media plugins.

The respective external platform is accessed only when such a link is clicked. Personal data, in particular technical connection and usage data, may then be processed by the respective provider. If the visitor is logged in to that platform, the provider may be able to associate the visit with the existing user account.

The respective provider is responsible for further data processing on the platform accessed.

12. Recipients of Data and International Data Transfers

For the provision and operation of this website, personal data is processed by Wix.com Ltd. and, where applicable, by affiliated companies and service providers engaged by Wix. These may provide services in particular in the areas of hosting, technical infrastructure, security, communications and other technical services.

Wix.com Ltd. is based in Israel. The European Commission has adopted an adequacy decision for Israel, meaning that an adequate level of data protection is recognised for corresponding data transfers.

In connection with the provision of Wix services, personal data may also be processed outside the European Union or the European Economic Area. Wix states that personal data is stored, among other locations, in data centres in Ireland and the United States and that it works worldwide with affiliated companies and other service providers.

Where personal data is transferred to countries for which no adequacy decision of the European Commission exists, Wix states that it uses appropriate transfer mechanisms and safeguards. These include, in particular, the European Commission’s Standard Contractual Clauses and, where appropriate, additional technical, contractual and organisational safeguards. For transfers to the United States, the EU-US Data Privacy Framework may also serve as a basis where the relevant requirements are met.

Usercentrics for Wix is used to manage and document consent decisions. The provider is Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany. Usercentrics in turn uses service providers and subprocessors to provide the Consent Management Platform. According to Usercentrics, the Consent Management Platform is hosted within the European Union. Server locations in Germany and Belgium are specified for the Google Cloud Platform.

Usercentrics states that a transfer of personal data to the United States nevertheless cannot be completely ruled out. In the event of a transfer to the United States or other third countries, Usercentrics states that it uses appropriate safeguards in accordance with Articles 44 et seq. GDPR. These include, in particular, Standard Contractual Clauses and additional safeguards.

A contact form is provided on this website via Wix Forms. To protect the form against spam and automated misuse, reCAPTCHA is integrated into the spam protection of Wix Forms. The behaviour of website visitors is analysed in order to distinguish between human access and automated access. In the event of suspicious activity, an additional reCAPTCHA check may be displayed. Data may be processed by Google in connection with this function. Further information about processing via the contact form and the spam protection used can be found in the section “Contact and Contact Form”.

Personal data is disclosed to other recipients only where this is necessary to provide the website and its functions, where there is a legal obligation to do so, or where another legal basis under data protection law applies.

Further information about the service providers used and international data transfers is provided by Wix and Usercentrics in their respective privacy information and information on subprocessors.

13. Storage Period and Deletion

Personal data is generally stored only for as long as necessary for the respective purpose of processing or for as long as a legal obligation or another legal basis for continued storage exists.

If the purpose of processing no longer applies and there are no statutory retention obligations or other legal reasons for continued storage, the personal data concerned will be deleted.

Where personal data is processed on the basis of consent, it is processed only for as long as necessary for the respective processing purpose or as provided for by the storage periods applicable to the respective service. Consent that has been given may be withdrawn at any time with effect for the future. Where there is no other legal basis for continued processing, the data concerned will subsequently be deleted.

Different storage periods may apply to individual functions of this website. This applies in particular to data from contact enquiries, comments, and technical usage and log data. The respective storage period is determined in particular by the purpose of processing, statutory retention obligations, and the technical and contractual requirements of the services used.

Personal data that is no longer required and whose deletion is within my control is reviewed regularly and deleted, provided that there are no statutory retention obligations or other legal reasons for continued storage.

14. Rights of Data Subjects

Where personal data is processed, data subjects have, in particular, the following rights subject to the statutory requirements:

Right of Access
Under Article 15 GDPR, you have the right to obtain confirmation as to whether personal data concerning you is being processed and, where that is the case, to obtain access to the personal data and further information about its processing.

Right to Rectification
Under Article 16 GDPR, you have the right to request the rectification of inaccurate personal data or the completion of incomplete personal data.

Right to Erasure
Under Article 17 GDPR, you may request the erasure of personal data subject to the statutory requirements.

Right to Restriction of Processing
Under Article 18 GDPR, you may request restriction of the processing of personal data subject to the statutory requirements.

Right to Data Portability
Under Article 20 GDPR and subject to the statutory requirements, you have the right to receive personal data in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller.

Right to Object
Where personal data is processed on the basis of Article 6(1)(e) or (f) GDPR, you have the right to object to the processing subject to the statutory requirements under Article 21 GDPR.

Withdrawal of Consent
Consent that has been given may be withdrawn at any time with effect for the future in accordance with Article 7(3) GDPR. The lawfulness of processing carried out on the basis of consent before its withdrawal remains unaffected.

Right to Lodge a Complaint with a Supervisory Authority
Under Article 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you consider that the processing of your personal data infringes the GDPR.

To exercise your rights, you may use the contact details provided in Section 1 of this Privacy Policy.

15. Currency and Amendments to this Privacy Policy

This Privacy Policy reflects the current status of the functions and services used on this website.

Changes to this Privacy Policy may become necessary as the website develops, services used are changed, or new statutory or regulatory requirements arise. The current version published on this website applies.

Last updated: August 2026