Privacy policy
Last updated: 22 August 2026
Controller
The controller for the processing of personal data on this website is Gökhan Önol, Riegeler Str. 2, 79111 Freiburg im Breisgau, phone +49 176 42954835, e-mail info@gknportraits.de. Please use the same details for any question about data protection.
Visiting the website and hosting
The website runs on a server operated by netcup GmbH in Germany. Every visit causes the web server to process technically necessary connection data: IP address, time, address requested, amount of data transferred and browser and operating system identifiers. The legal basis is Art. 6(1)(f) GDPR, our legitimate interest in an operation that works and is protected against attacks. These logs are deleted automatically after 30 days at the latest.
Booking an appointment
To book an appointment we process your name, e-mail address, the package chosen, the time, the agreed price and the language of the booking; phone number and note are optional. Without a name and an e-mail address we cannot confirm an appointment. The legal basis is Art. 6(1)(b) GDPR: the data are necessary to prepare and carry out the appointment. They are stored in a database on the same server; a randomly generated key in the link in your confirmation mail lets you cancel or move the appointment yourself.
E-mails
Confirmation, cancellation and rescheduling are sent to you by e-mail. The mail server used runs on the same machine as the website; no external sending service is involved. If you write to us, we process your message in order to answer your enquiry.
Phone, WhatsApp and Instagram
If you call us or write via WhatsApp, we process the data transmitted in order to answer your enquiry (Art. 6(1)(b) and (f) GDPR). The WhatsApp and Instagram links are ordinary links: data only flow there once you click them. Processing within those services is the responsibility of Meta Platforms Ireland Ltd., not ours.
Cookies, fonts and statistics
This website sets no cookies for advertising or statistics and includes no analytics service. There is a single cookie, in the administration area and only for signed-in operators. Fonts are served from our own server; no connection is made to Google Fonts. That is also why you find no cookie banner here: there is nothing to consent to.
Deletion
Appointment data are deleted six months after the appointment. A job runs daily on the server to do this, so that the deadline does not depend on somebody remembering it. Paid appointments are kept for as long as tax retention obligations require (§ 147 of the German Fiscal Code). Server logs are deleted after 30 days at the latest, and e-mail correspondence is kept for as long as it is needed for our work together.
Your rights
You have the right of access (Art. 15 GDPR), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18), to data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). An informal message to the contact details above is enough. No automated decision-making or profiling takes place.
Right to complain
You may complain to a data protection supervisory authority at any time. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany.
This text describes what this website actually processes and is no substitute for legal review. If the service changes — by adding online image selection, for instance — it needs to be checked again. This is a translation; the German version prevails.