1. Controller
The controller responsible for the processing of personal data on this website is:
Michaela Hayn
Michalea Hayn Photography
Hölenderweg 77
40883 Ratingen-Eggerscheidt
Germany
Email: photography@hayn-online.de
2. General information on data processing
The protection of your personal data is important to me. I treat your personal data confidentially and in accordance with applicable data protection laws, in particular the General Data Protection Regulation (GDPR).
This Privacy Policy informs you about which personal data is processed when using my website, for what purposes this data is processed, and what rights you have.
Personal data means any information relating to an identified or identifiable individual.
3. Hosting and technical provision of the website
This website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany.
When you access my website, the hosting provider processes technically necessary data. This may include, in particular:
- IP address
- date and time of access
- websites and files accessed
- amount of data transferred
- browser type and version
- operating system
- referrer URL
- technical information about the device used
This data is processed for the technical provision, stability and security of my website, as well as for the detection and prevention of misuse and attacks.
The legal basis for this processing is Art. 6(1)(f) GDPR. My legitimate interest is the secure, stable and functional provision of my website.
Where required, I have concluded a data processing agreement with STRATO pursuant to Art. 28 GDPR.
4. Server log files
When you visit my website, technical access data may be processed in so-called server log files.
This may include:
- IP address
- date and time of access
- requested page or file
- amount of data transferred
- browser type and version
- operating system
- referrer URL
This processing is carried out in particular to ensure the secure and trouble-free operation of my website and to detect and prevent attacks.
The legal basis is Art. 6(1)(f) GDPR.
The log data is deleted as soon as it is no longer required for the respective purpose and provided that there are no statutory retention obligations.
5. Contact via the contact form
My website provides the possibility to contact me using a contact form.
I use WPForms Lite, a WordPress plugin provided by WPForms LLC, to provide the contact form.
When you use the contact form, I process the personal data you enter. This may include, in particular:
- name
- email address
- telephone number, if provided
- content of your message
- other information you voluntarily provide
The data is used exclusively to process and respond to your enquiry.
WPForms Lite does not normally store form entries in the WordPress database. The data you submit is instead sent to me by email for the purpose of processing your enquiry.
The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to the initiation or performance of a contract.
In all other cases, processing is based on my legitimate interest in processing and responding to enquiries pursuant to Art. 6(1)(f) GDPR.
The data submitted via the contact form will be deleted once your enquiry has been conclusively dealt with, unless statutory retention obligations or other legitimate reasons require continued storage.
Spam protection
To protect my contact form against automated spam submissions and misuse, I use the modern anti-spam protection integrated into WPForms Lite.
I do not use external CAPTCHA services such as Google reCAPTCHA, hCaptcha or Cloudflare Turnstile.
The processing is based on my legitimate interest pursuant to Art. 6(1)(f) GDPR in maintaining a secure contact form protected against automated misuse and spam.
Data security
The transmission of data between your browser and my website is protected by an encrypted HTTPS connection.
6. Email transmission via WP Mail SMTP and IONOS
For sending emails generated by my website, I use WP Mail SMTP.
WP Mail SMTP is a WordPress plugin that enables WordPress to send emails through an SMTP server configured by me.
For sending messages generated through the contact form, I use my email service provided by IONOS.
The data submitted via the contact form is sent to my business email address:
As part of the technical email transmission, the information required for delivery is processed. This includes, in particular, the sender and recipient email addresses as well as the content of the email.
The processing is carried out to process and respond to contact enquiries and to ensure the technical delivery of the communication.
The legal basis is Art. 6(1)(b) GDPR if the enquiry relates to the initiation or performance of a contract. In other cases, processing is based on my legitimate interest pursuant to Art. 6(1)(f) GDPR.
7. Contact by email
If you contact me by email, the personal data you provide will be processed for the purpose of handling your enquiry.
This includes your email address and all information you provide to me in your message.
The processing is carried out for the purpose of handling and responding to your enquiry.
The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to the initiation or performance of a contract. Otherwise, processing is based on my legitimate interest pursuant to Art. 6(1)(f) GDPR.
The data will be deleted once your enquiry has been conclusively dealt with and provided that no statutory retention obligations apply.
8. Newsletter via Brevo
My website provides the possibility to subscribe to my newsletter.
For sending and managing my newsletter, I use Brevo, a service provided by Brevo SAS, 106 boulevard Haussmann, 75008 Paris, France.
When you subscribe to my newsletter, I process your email address and, where applicable, any additional information you voluntarily provide.
Subscription takes place using a double opt-in procedure. After entering your email address, you will receive a confirmation email. Your subscription is only completed and your email address added to my active newsletter mailing list after you click the confirmation link contained in that email.
The double opt-in procedure enables me in particular to demonstrate that the specified email address was actually used to subscribe to the newsletter.
The legal basis for processing and sending my newsletter is your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 7 of the German Act Against Unfair Competition (UWG).
You may withdraw your consent at any time with effect for the future. You can do so by using the unsubscribe link contained in every newsletter or by contacting me directly.
After unsubscribing, your email address will be removed from my active newsletter mailing list or blocked from further newsletter delivery. Your data may continue to be stored where necessary to document your consent or to comply with legal obligations.
Newsletter sender
My newsletter is sent from the following email address:
newsletter@hayn-photography.de
This email address is provided through STRATO. The actual sending and management of newsletter recipients are carried out through Brevo.
Processing by Brevo
As part of the newsletter service, Brevo receives the personal data required to send and manage the newsletter.
Brevo processes this data in particular to manage contacts, send newsletters, and document subscriptions, unsubscribes and consents.
Brevo provides appropriate data processing agreements for the processing of personal data.
Newsletter tracking
Brevo processes information about whether my newsletters are opened and whether links contained in my newsletters are clicked.
This enables me to understand how recipients interact with my newsletters and to optimise my content accordingly.
This may include information about newsletter openings, link clicks, the time of interaction and technical information relating to the interaction.
The processing of this data takes place as part of the newsletter communication on the basis of the consent provided for the newsletter pursuant to Art. 6(1)(a) GDPR.
9. Cookies
My website uses cookies.
Cookies are small text files that are stored on your device.
Where cookies are technically necessary, they are used to ensure the proper provision and functionality of my website.
Non-essential cookies, particularly those used for analytics, marketing or tracking purposes, are only used where the required consent has been obtained.
You can control the storage of cookies through your browser settings and delete cookies that have already been stored.
Language functionality with Polylang
I use Polylang to provide my website in multiple languages.
Polylang uses the cookie pll_language to store the language you have selected and to provide the website in that language when you visit again.
The cookie is used solely to provide the technical language functionality of my website.
I use the free version of Polylang, not Polylang Pro.
10. Brevo website tracking
The Brevo website tracker is not activated on my website.
Brevo therefore does not carry out any additional tracking of your visit to my website.
This does not affect the processing of newsletter data by Brevo in connection with sending and analysing newsletter campaigns.
11. Links to Instagram
My website contains links to my Instagram profile.
These are external links. Merely visiting my website does not normally establish a connection to Instagram as a result of these links.
Only when you click on such a link will you leave my website and be redirected to Instagram.
From that point onwards, the privacy policies of the respective platform operator apply.
I have no influence over the nature, scope or duration of data processing carried out by Instagram.
12. No automated decision-making
No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place on my website.
13. Data retention
I only store personal data for as long as necessary for the respective processing purpose or as required by statutory retention obligations.
Once the relevant purpose no longer applies, the data will be deleted unless there are legal grounds requiring continued storage.
The specific retention period may particularly result from statutory retention and documentation obligations relating to business correspondence, contractual documents and records of consent.
14. Your rights
Subject to the applicable legal requirements, you have the following rights:
Right of access
Pursuant to Art. 15 GDPR, you have the right to obtain information about the personal data I process about you.
Right to rectification
Pursuant to Art. 16 GDPR, you have the right to request the correction of inaccurate personal data.
Right to erasure
Pursuant to Art. 17 GDPR, you have the right to request the deletion of your personal data where the applicable legal requirements are met.
Right to restriction of processing
Pursuant to Art. 18 GDPR, you have the right, under certain circumstances, to request restriction of the processing of your personal data.
Right to data portability
Pursuant to Art. 20 GDPR, you have, under certain circumstances, the right to receive personal data concerning you in a structured, commonly used and machine-readable format.
Right to object
Pursuant to Art. 21 GDPR, you have the right, on grounds relating to your particular situation, to object to certain processing of your personal data.
Right to withdraw consent
Where processing is based on consent, you may withdraw your consent at any time with effect for the future.
The lawfulness of processing carried out before the withdrawal remains unaffected.
To exercise your rights, you may contact me at any time using the contact details provided above.
15. Right to lodge a complaint with a supervisory authority
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates applicable data protection law.
You may contact the supervisory authority in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement.
16. Updates and amendments to this Privacy Policy
I reserve the right to amend this Privacy Policy if legal requirements, the technical services I use or the functions of my website change.
The current version published on this website shall apply.
Last updated: September 2026