Last updated:
Valid from:
Melda Photography respects your privacy and processes your personal data in accordance with the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
This Privacy Policy describes how we collect, use, protect, and delete your data.
Melda Photography has not appointed a separate Data Protection Officer. For questions about data protection and your data protection rights, you can contact the Data Controller (see above).
– Name
– Email address
– Phone number
– Address / Location of the session
– Desired data and session details
– Special requests or notes
– We create photos and/or videos during the session
– This data is considered personal data under the GDPR
– IP address (automatically collected)
– Browser information
– Pages you visit
– Click behavior and conversions
– This is done via Google Analytics 4
– All data you enter into our contact form
– This is stored in the WordPress database (encrypted)
We process your data on the following legal bases:
| Data Processing | Legal Basis |
|---|---|
| Booking and Contract Fulfillment | Article 6(1)(b) GDPR - Contract Fulfillment |
| Photos and Photo Use on Social Media | Article 6(1)(a) GDPR - Your Explicit Consent |
| Website Analytics | Article 6(1)(a) GDPR - Your Consent (Cookie Consent) |
| Google Ads Conversion Tracking | Article 6(1)(a) GDPR - Your Consent |
| Communication via Email | Article 6(1)(b) GDPR - Contractual Communication |
– We may ONLY use your photos for our portfolio, website, and social media channels (Instagram, Facebook) if you give us written consent
– We request this consent during the booking process
– After your session, we retain photos for 14–30 days (depending on your chosen package)
– After that:
– We delete all original photos from our cloud storage
– We store a personal copy locally (USB) for our archives
– Your photos remain accessible via your personal download link for the specified period
– After expiry, the download link is no longer available
– Discount policy: If you give us permission to use your photos on our social media channels, you receive a 5% discount on your session
– Minimum term: This discount is tied to consent for at least 12 months after publication
– Revocation: You may revoke your consent, but::
– Within 12 months: Revoking consent results in a refund of the 5% discount
– After 12 months: You can revoke consent without consequences
– We NEVER share your photos with third parties without your consent
– We NEVER use photos for commercial purposes outside our own marketing
– Your photos are stored in Nextcloud (open source, independently hosted on a VPS)
– Connection via HTTPS (encrypted)
– Only I (Melda) have access to this data
– Regular backups are performed
– Form data is stored encrypted
– Only I have access to this data
– Your VPS is managed by a professional hosting provider
– We perform DevOps management
| Data Type | Retention Period | Reason |
|---|---|---|
| Booking and Customer Data | 1 Year | Legal Requirements & Archiving |
| Contact Form Data | 1 Year | Communication History |
| Photos in Cloud Storage | 14-30 Days | Customer Service & Delivery |
| Personal Photo Copies (USB) | Unlimited | Archival Use for Portfolio |
| Website Analytics (Google) | 14 Months | Google Standard Policy |
After these periods expire, data will be deleted unless we are legally obligated to retain it longer.
– We track pages you visit
– We record conversions (e.g., when you click “Book a session”)
– We analyze user behavior to improve our website
– Google Analytics shares your data with Google LLC (United States)
– Google processes this data in accordance with its own privacy policy
– Note: The USA does not offer the same level of protection as the EU
– You can opt out of Analytics via your cookie settings
– You can use the Google Analytics Opt-out Browser Extension
– We use Google Ads Conversion Tracking to measure which ads lead to bookings
– This helps us use our advertising budget more effectively
– Whether you click on a Google ad
– Whether you book a session after clicking on an ad
– This information is linked to your Google Ads ID
– We do NOT use Facebook Pixel or any other retargeting
– Your data is used only for conversion reporting
– Google Analytics cookies — for website analytics
– Google Ads cookies — for conversion tracking
– Funktionale cookies — for basic website functionality
– You give consent for cookies via our cookie consent banner
– You can change your preference at any time in your browser settings
You have the following rights regarding your personal data:
– You can request what data we have stored about you
– We will provide you with a copy within 30 days
– You can have incorrect data corrected
– You can request that your data be deleted
– This is possible unless we are legally required to retain it
– You can request that the processing of your data be restricted
– You can receive your data in a machine-readable format
– You can object to certain types of processing
– E.g., against marketing emails (though we currently do not send any)
– For all these requests, send an email to: info@melda.photography
– Write “GDPR Request” in the subject line
– We will respond within 30 days
You may withdraw your consent for the following at any time:
– Photo use on Social Media → Send an email to info@melda.photography
– Analytics & Ads → Adjust your cookie settings
– Email communication → Click the “Unsubscribe” link in an email
We NEVER share your data with third parties except:
– Google — for Analytics, Ads, and Conversion Tracking (based on your cookie consent)
– Hosting provider — for VPS management (under a Data Processing Agreement)
– Legal requirements — if the tax office or other authorities require it
Melda Photography has entered into Data Processing Agreements with the following parties:
– Hosting provider (Website): STRATO GmbH
– Hosting provider (VPS): Hetzner GmbH
– Google (Analytics & Conversion Tracking): Google’s Data Processing Agreement for Analytics and Ads services
– Your data may be transferred to the USA
– Google has committed to the EU-US Data Privacy Framework
– Risk: The USA offers less legal protection than the EU
– You can opt out of Google Analytics & Ads via your cookie settings
Our services are not intended for persons under 18 years of age. If you are under 18:
– Ensure that a parent/guardian gives consent
– Data of minors is handled with particular care
This Privacy Policy is valid until revoked or amended. We will inform you of important changes by:
– Updating this Privacy Policy
– State Commissioner for Data Protection North Rhine-Westphalia
– Kavalleriestrasse 8-10
– 40213 Düsseldorf
– Email: poststelle@ldi.nrw.de
– Website: www.ldi.nrw.de
This Privacy Policy has been prepared in accordance with the following regulations:
– GDPR (EU Regulation 2016/679)
– BDSG (German Federal Data Protection Act)
– TTDSG (German Telecommunications-Telemedia Data Protection Act)
If you have any questions or comments about this Privacy Policy, please contact us at info@melda.photography.
Melda Photography
Follow us
© Melda Photography 2026, All rights reserved.