.png)
Privacy Policy
Information pursuant to Articles 13, 14 and 21 of the General Data Protection Regulation (GDPR)
Preamble
With this privacy notice, we inform you about the processing of your personal data by us and about the rights and claims to which you are entitled under data protection regulations. The specific data processed and the manner in which it is used depend primarily on the services requested by you or agreed upon with you.
1. Who is responsible for data processing and whom can I contact?
The controller responsible for data processing is:
Lorant Petrik
Fröbelstraße 48
58454 Witten
Germany
E-mail: info@petrik-fotografie.de
Website: www.petrik-fotografie.de
2. What sources and data do we use?
We process personal data that we receive from you within the framework of our business relationship. Furthermore, to the extent necessary for the provision of our services, we process personal data that we have lawfully received from other parties (e.g. schools and daycare centers where we provide photography services), for example for the execution of orders, fulfillment of contracts, or based on your consent.
We may also process personal data that we have lawfully obtained from publicly accessible sources (e.g. public debtor registers, press, and media) and are permitted to process.
Relevant personal data includes personal details and contact information such as:
Name
Address
Telephone number
E-mail address
In addition, this may include order-related data, information arising from the fulfillment of contractual obligations, marketing and sales data, documentation data, information regarding your use of our online services, and other data comparable to the categories mentioned above.
3. For what purposes do we process your data and on what legal basis?
We process personal data in accordance with the provisions of the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
3.1 Fulfillment of contractual obligations (Art. 6(1)(b) GDPR)
Personal data is processed for the provision of photography services and the associated sale of photographs, their electronic delivery, production on photographic products, and shipment to customers.
In particular, processing is carried out for the performance of contracts and pre-contractual measures and for the execution of your orders.
The purposes of data processing primarily arise from the obligations under the purchase contract entered into through an order in our online shop and may also include reminders about important events.
Further details regarding the purposes of data processing can be found in the applicable terms and conditions.
3.2 Legitimate interests (Art. 6(1)(f) GDPR)
Where necessary, we process your data beyond the actual fulfillment of the contract to protect our legitimate interests or those of third parties.
This includes:
Advertising, market research, and opinion surveys, provided you have not objected to the use of your data
Assertion and defense of legal claims
Ensuring IT security
Prevention and investigation of criminal offenses
Business management measures
Further development of services and products
Processing inquiries submitted via contact forms
Communication with customers and institutions
Appointment scheduling
Provision of our online ordering system
If you contact us through our contact form, we collect and process the personal data required to handle your request. Once your inquiry has been processed, your data will be deleted unless legal retention obligations apply.
If we provide photography services at events, we process personal data collected during such events based on our legitimate interest in fulfilling the assignment entrusted to us and making the resulting photographs available for purchase.
Where applicable, participants will be informed during the event that photography is taking place and that they have the right to object.
Please note that any objection only applies to future processing. Processing already carried out remains unaffected.
3.3 Consent (Art. 6(1)(a) GDPR)
Where you have given us consent to process personal data for specific purposes (e.g. publication or use of photographs), such processing is lawful based on your consent.
You may withdraw your consent at any time with effect for the future.
Please note that withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
3.4 Legal obligations (Art. 6(1)(c) GDPR) and public interest (Art. 6(1)(e) GDPR)
We also process personal data where required by law.
For example, we store invoice data (name and address) in accordance with statutory retention obligations arising from German commercial and tax law, including the German Commercial Code (HGB) and the German Fiscal Code (AO).
4. Who receives my data?
Within the scope of the use of our online shop, your data is made available only to those parties who require it for the fulfillment of contractual and legal obligations.
Service providers engaged by us as processors pursuant to Art. 28 GDPR may also receive data for these purposes.
These service providers include companies operating in the areas of:
IT services
Production of photo products
Logistics
Telecommunications
Debt collection services
Personal data is only disclosed to recipients outside Lorant Petrik where:
required by law,
you have given your consent,
or we are authorized to provide such information.
Recipients may include:
Public authorities and institutions where there is a legal or regulatory obligation
Service providers operating the online shop and image ordering system (e.g. Fotograf.de / Fotografen Online Service GmbH)
Additional recipients may include parties for whom you have granted consent for the transfer of data.
5. How long will my data be stored?
Where necessary, we process and store your personal data for as long as required to fulfill our contractual obligations.
In addition, we are subject to various statutory retention and documentation requirements arising, among others, from the German Commercial Code (HGB) and the German Fiscal Code (AO).
The retention periods specified therein generally range from two to ten years.
Furthermore, the storage period is determined by statutory limitation periods, which according to Sections 195 et seq. of the German Civil Code (BGB) are generally three years, but in certain cases may extend up to thirty years.
6. Will data be transferred to a third country or an international organization?
Data transfers to countries outside the European Economic Area (EEA) will only take place if this is necessary for the performance of contracts concluded with you, required by law, or if you have given your consent.
Where legally required, we will provide you with separate information regarding the details of such transfers.
7. What data protection rights do I have?
Every data subject has the following rights under the GDPR:
Right of access pursuant to Art. 15 GDPR
Right to rectification pursuant to Art. 16 GDPR
Right to erasure pursuant to Art. 17 GDPR
Right to restriction of processing pursuant to Art. 18 GDPR
Right to data portability pursuant to Art. 20 GDPR
The restrictions under Sections 34 and 35 of the German Federal Data Protection Act (BDSG) apply to the right of access and the right to erasure.
In addition, you have the right to lodge a complaint with a data protection supervisory authority pursuant to Art. 77 GDPR.
8. Am I required to provide data?
Within the scope of our business relationship, you are only required to provide personal data that is necessary for establishing, performing, and terminating the business relationship or that we are legally required to collect.
Without such data, we will generally be unable to conclude or perform a contract or execute an order and may be required to terminate an existing contractual relationship.
Furthermore, for the provision of fee-based services, it may be necessary for us to collect additional information, such as your preferred payment method.
9. Notifications About Important Events
When subscribing to receive notifications by e-mail and/or SMS, the data you provide will be used exclusively for this purpose.
For documentation purposes, we record your consent to receive notifications, including your IP address.
No additional data is collected.
The data is used solely for sending notifications and will only be shared with third parties to the extent necessary for delivering these notifications.
You may withdraw your consent to the processing of your personal data and its use for notification purposes at any time.
Each notification contains a corresponding unsubscribe link. You may also withdraw your consent at any time by sending an e-mail to:
info@petrik-fotografie.de
Please note that the withdrawal of consent only takes effect for future processing. Processing that occurred before the withdrawal remains lawful.
10. Third-Party Functions
10.1 Cookies
What are cookies?
Cookies are text files stored on your computer that allow analysis of your use of a website.
What exactly do cookies do?
The information generated by cookies about your use of this website is generally transmitted to and stored on a server.
On certain websites, IP anonymization may be activated so that your IP address is shortened within member states of the European Union or other states party to the Agreement on the European Economic Area before being transmitted.
Depending on the service provider, the shortened IP address may be stored.
What are the transferred data used for?
On behalf of Lorant Petrik, third-party providers use this information to evaluate your use of the website, compile reports on website activity, and provide further services related to website and internet usage.
How can cookies be disabled?
You can prevent the storage of cookies by adjusting your browser settings accordingly.
Please note that if you disable cookies, you may not be able to use all features of this website to their full extent.
Which third-party cookies are used?
We use cookies from the following third-party providers:
Google Analytics
Further information:
https://support.google.com/analytics/answer/6004245
Google Ads (formerly Google AdWords)
Further information:
https://policies.google.com/privacy
fotograf.de (Fotografen Online Service GmbH)
Further information:
https://www.fotograf.de/datenschutzhinweise/
[Additional providers may be added or removed as necessary.]
10.2 Social Media Plugins
Our websites use social media plugins (links to social networks) from the providers listed below.
These plugins can generally be identified by the respective provider's logo.
Through these plugins, information, including personal data, may be transmitted to the service provider and processed by them.
To prevent the unintentional transmission of data, we use a two-click activation solution.
A social media plugin must first be activated by clicking the corresponding button before any information is transmitted to the provider.
Only after activation will information be collected and transmitted.
We do not collect personal data ourselves through social media plugins or through their use.
We have no influence over which data an activated plugin collects or how such data is used by the provider.
Currently, it must be assumed that a direct connection to the provider's services is established and that at least the IP address and device-related information are collected and processed.
Service providers may also attempt to store cookies on your device.
For information about which data is collected and how it is processed, please refer to the privacy policies of the respective providers.
Please note: If you are simultaneously logged into Facebook, Facebook may be able to identify you as a visitor to a particular page.
Our website includes social media buttons from the following providers:
Facebook Inc.
1601 S. California Ave, Palo Alto, CA 94304, USA
https://www.facebook.com/policy.php
Twitter Inc.
795 Folsom Street, Suite 600, San Francisco, CA 94107, USA
https://twitter.com/privacy
Pinterest Europe Ltd.
Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland
https://policy.pinterest.com/en/privacy-policy
WhatsApp Ireland Limited
4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
https://www.whatsapp.com/legal/
Google Inc. (Google+)
1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
https://policies.google.com/privacy
Last updated: 14 May 2026
Information Regarding Your Right to Object
Pursuant to Article 21 GDPR
1. General Right to Object
You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(f) GDPR (processing based on legitimate interests).
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or unless the processing serves the establishment, exercise, or defense of legal claims.
2. Right to Object to Direct Marketing
In individual cases, we process personal data for direct marketing purposes.
You have the right to object at any time to the processing of personal data concerning you for such marketing purposes.
If you object to processing for direct marketing purposes, your personal data will no longer be processed for those purposes.
The objection should be submitted in writing by e-mail to:
Lorant Petrik
info@petrik-fotografie.de
