Privacy Policy
Melda
Photography
Last updated:
Valid from:
1. Introduction
Melda Photography respects your privacy and processes your personal data in accordance with the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
This Privacy Policy describes how we collect, use, protect, and delete your data.
2. Data Controller
2.1 Data Protection Officer (DSB)
Melda Photography has not appointed a separate Data Protection Officer. For questions about data protection and your data protection rights, you can contact the Data Controller (see above).
3. What Data Do We Collect?
3.1 When Booking a Session
– Name
– Email address
– Phone number
– Address / Location of the session
– Desired data and session details
– Special requests or notes
3.2 Photos and Videos
– We create photos and/or videos during the session
– This data is considered personal data under the GDPR
3.3 Website and Analytics
– IP address (automatically collected)
– Browser information
– Pages you visit
– Click behavior and conversions
– This is done via Google Analytics 4
3.4 Contact Form
– All data you enter into our contact form
– This is stored in the WordPress database (encrypted)
4. Legal Basis for Data Processing
We process your data on the following legal bases:
| Data Processing | Legal Basis |
|---|---|
| Booking and Contract Fulfillment | Article 6(1)(b) GDPR - Contract Fulfillment |
| Photos and Photo Use on Social Media | Article 6(1)(a) GDPR - Your Explicit Consent |
| Website Analytics | Article 6(1)(a) GDPR - Your Consent (Cookie Consent) |
| Google Ads Conversion Tracking | Article 6(1)(a) GDPR - Your Consent |
| Communication via Email | Article 6(1)(b) GDPR - Contractual Communication |
5. Photo Use and Consent
5.1 Use for Portfolio & Social Media
– We may ONLY use your photos for our portfolio, website, and social media channels (Instagram, Facebook) if you give us written consent
– We request this consent during the booking process
5.2 Photo Retention Period
– After your session, we retain photos for 14–30 days (depending on your chosen package)
– After that:
– We delete all original photos from our cloud storage
– We store a personal copy locally (USB) for our archives
– Your photos remain accessible via your personal download link for the specified period
– After expiry, the download link is no longer available
5.3 Discount for Social Media Consent
– Discount policy: If you give us permission to use your photos on our social media channels, you receive a 5% discount on your session
– Minimum term: This discount is tied to consent for at least 12 months after publication
– Revocation: You may revoke your consent, but::
– Within 12 months: Revoking consent results in a refund of the 5% discount
– After 12 months: You can revoke consent without consequences
5.4 Excluded Use
– We NEVER share your photos with third parties without your consent
– We NEVER use photos for commercial purposes outside our own marketing
6. How Do We Protect Your Data?
6.1 Cloud Storage
– Your photos are stored in Nextcloud (open source, independently hosted on a VPS)
– Connection via HTTPS (encrypted)
– Only I (Melda) have access to this data
– Regular backups are performed
6.2 Contact Form & WordPress
– Form data is stored encrypted
– Only I have access to this data
6.3 Hosting & VPS
– Your VPS is managed by a professional hosting provider
– We perform DevOps management
7. How Long Do We Keep Your Data?
| Data Type | Retention Period | Reason |
|---|---|---|
| Booking and Customer Data | 1 Year | Legal Requirements & Archiving |
| Contact Form Data | 1 Year | Communication History |
| Photos in Cloud Storage | 14-30 Days | Customer Service & Delivery |
| Personal Photo Copies (USB) | Unlimited | Archival Use for Portfolio |
| Website Analytics (Google) | 14 Months | Google Standard Policy |
After these periods expire, data will be deleted unless we are legally obligated to retain it longer.
8. Google Analytics 4
8.1 How Do We Use Google Analytics?
– We track pages you visit
– We record conversions (e.g., when you click “Book a session”)
– We analyze user behavior to improve our website
8.2 Data Sharing with Google
– Google Analytics shares your data with Google LLC (United States)
– Google processes this data in accordance with its own privacy policy
– Note: The USA does not offer the same level of protection as the EU
8.3 Your Rights
– You can opt out of Analytics via your cookie settings
– You can use the Google Analytics Opt-out Browser Extension
9. Google Ads & Conversion Tracking
9.1 How Do We Use Google Ads?
– We use Google Ads Conversion Tracking to measure which ads lead to bookings
– This helps us use our advertising budget more effectively
9.2 What Google Tracks
– Whether you click on a Google ad
– Whether you book a session after clicking on an ad
– This information is linked to your Google Ads ID
9.3 Your privacy
– We do NOT use Facebook Pixel or any other retargeting
– Your data is used only for conversion reporting
10. Cookies & Cookie Consent
10.1 Which Cookies Do We Use?
– Google Analytics cookies — for website analytics
– Google Ads cookies — for conversion tracking
– Funktionale cookies — for basic website functionality
10.2 Cookie consent
– You give consent for cookies via our cookie consent banner
– You can change your preference at any time in your browser settings
11. Your Rights Under the GDPR
You have the following rights regarding your personal data:
11.1 Right of Access
– You can request what data we have stored about you
– We will provide you with a copy within 30 days
11.2 Right to Rectification
– You can have incorrect data corrected
11.3 Right to Erasure ("Right to be Forgotten")
– You can request that your data be deleted
– This is possible unless we are legally required to retain it
11.4 Right to Restriction of Processing
– You can request that the processing of your data be restricted
11.5 Right to Data Portability
– You can receive your data in a machine-readable format
11.6 Right to Object
– You can object to certain types of processing
– E.g., against marketing emails (though we currently do not send any)
11.7 Submitting Requests
– For all these requests, send an email to: info@melda.photography
– Write “GDPR Request” in the subject line
– We will respond within 30 days
12. Withdrawal of Consent
You may withdraw your consent for the following at any time:
– Photo use on Social Media → Send an email to info@melda.photography
– Analytics & Ads → Adjust your cookie settings
– Email communication → Click the “Unsubscribe” link in an email
13. Disclosure of Data to Third Parties
We NEVER share your data with third parties except:
– Google — for Analytics, Ads, and Conversion Tracking (based on your cookie consent)
– Hosting provider — for VPS management (under a Data Processing Agreement)
– Legal requirements — if the tax office or other authorities require it
13.1 Data Processing Agreements
Melda Photography has entered into Data Processing Agreements with the following parties:
– Hosting provider (Website): STRATO GmbH
– Hosting provider (VPS): Hetzner GmbH
– Google (Analytics & Conversion Tracking): Google’s Data Processing Agreement for Analytics and Ads services
14. International Data Transfers
14.1 Google Analytics & Ads (USA)
– Your data may be transferred to the USA
– Google has committed to the EU-US Data Privacy Framework
– Risk: The USA offers less legal protection than the EU
14.2 Your Choice
– You can opt out of Google Analytics & Ads via your cookie settings
15. Data Protection for Minors
Our services are not intended for persons under 18 years of age. If you are under 18:
– Ensure that a parent/guardian gives consent
– Data of minors is handled with particular care
16. Validity of This Privacy Policy
This Privacy Policy is valid until revoked or amended. We will inform you of important changes by:
– Updating this Privacy Policy
17. Complaints & Contact Details
17.1 Contact Details Melda Photography
17.2 German Supervisory Authority
– State Commissioner for Data Protection North Rhine-Westphalia
– Kavalleriestrasse 8-10
– 40213 Düsseldorf
– Email: poststelle@ldi.nrw.de
– Website: www.ldi.nrw.de
18. Disclaimer
This Privacy Policy has been prepared in accordance with the following regulations:
– GDPR (EU Regulation 2016/679)
– BDSG (German Federal Data Protection Act)
– TTDSG (German Telecommunications-Telemedia Data Protection Act)
If you have any questions or comments about this Privacy Policy, please contact us at info@melda.photography.
Melda Photography
Follow us
© Melda Photography 2026, All rights reserved.