Note: This is a translation for convenience. The legally binding version is the German original.
Privacy Policy
1. Controller
Katja Steinführer
Katja Steinführer Photography
Ady Endre utca 8, 9632 Sajtoskál, Hungary
E-Mail: k.steinfuehrer@startmail.com
2. General information on data processing
This website collects and processes personal data only to the extent technically necessary. Processing is carried out on the basis of Art. 6 (1) GDPR.
3. Hosting
This website is hosted by STRATO AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. A data processing agreement pursuant to Art. 28 GDPR is in place with STRATO. When you visit the website, information is automatically stored in so-called server log files transmitted by your browser:
- Browser type and version
- Operating system used
- Referrer URL
- Host name of the accessing computer
- Time of the server request
- IP address (anonymized)
The legal basis is Art. 6 (1) (f) GDPR (legitimate interest).
4. Contact form — Web3Forms
The contact form on this website uses the service Web3Forms (operator: Amr Hosny, web3forms.com). When you submit the form, your details (name, email address, message and technical transmission data) are sent to Web3Forms servers and forwarded to my email address. Web3Forms temporarily processes submissions on Cloudflare infrastructure (global, including the USA). No permanent storage by Web3Forms takes place; data is used solely for delivery. Further information: web3forms.com/privacy.
The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures) and Art. 6 (1) (f) GDPR (legitimate interest in a reliable means of contact).
5. Contact via WhatsApp
You can also contact me via WhatsApp. The provider is WhatsApp Ireland Limited, Merrion Road, Dublin 4, Ireland (Meta group). When you use it, your phone number, message content (end-to-end encrypted) and metadata (e.g. time, profile name) are processed; a transfer to Meta servers in the USA is possible. I use WhatsApp solely to answer your enquiry. Contact with WhatsApp is only established when you click a WhatsApp link, not when the page loads. The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures) or (f) GDPR (legitimate interest in fast communication). If you prefer not to use WhatsApp, you can reach me at any time by email or via the contact form.
6. Spam protection (arithmetic check)
The contact form is protected against automated spam by a simple arithmetic question (e.g. "7 + 3 = ?"). This check runs entirely locally in your browser; no data is transmitted to third parties and no cookies are set.
7. Cookies
This website uses no tracking cookies. No analytics tools such as Google Analytics are used. Only technically necessary cookies are used, where required.
8. Fonts
This website uses the fonts “Bricolage Grotesque” and “Hanken Grotesk”. The font files are loaded primarily locally from the web server. As a technical fallback, they may in individual cases be loaded via the jsDelivr CDN (Prospect One, Croatia). Your IP address is transmitted to the CDN operator in the process. No connection to Google servers takes place. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in a consistent presentation).
9. Your rights
You have the following rights regarding your personal data vis-à-vis the controller:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR)
10. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data. The competent supervisory authority at the company’s registered office is:
Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH)
Falk Miksa utca 9-11, 1055 Budapest, Ungarn
www.naih.hu
For complaints in Germany, you may also contact the state data protection authority responsible for you.
11. Web analytics (Plausible Analytics)
This website uses Plausible Analytics, a privacy-friendly analytics tool. Plausible collects no personal data, sets no cookies and stores no IP addresses. Data processing takes place on EU servers. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in measuring reach and improving the website). More information: plausible.io/data-policy.
12. External links
This website contains links to external websites (e.g. Instagram). When you click these links, you are redirected to the servers of the respective providers. We have no influence over the data processing there. Please consult the privacy policy of the respective provider.
13. Currency
This privacy policy is currently valid. Last updated: June 2026