Privacy policy
Last updated: 26 August 2026
Please note: this is a translation for convenience. In case of doubt the German version at munichpixart.com/datenschutz/ is the one that applies.
The short version first. This site sets no cookies, measures nothing and embeds nothing from other people’s servers. Fonts and images sit on my own server. If you only read, no data arises that leads back to you. You give me something only when you send the enquiry form — and then exactly what you type into it.
1. Controller
Christian Heil, MUNICHPIXART
Wildrosenweg 36, 81929 Munich, Germany
Phone +49 176 14651982
E-Mail ch@munichpixart.com
I am not required to appoint a data protection officer; my business does not reach the statutory thresholds.
2. Where this site runs
The website sits on a server on my own premises at the address given above. There is no web host to which your data is passed.
The domain munichpixart.com is registered with Strato AG, Otto-Ostrowski-Strasse 3, 10249 Berlin, Germany. Strato answers the name resolution and also runs the outgoing mail for my email addresses. When the site is opened, Strato therefore learns that somebody asked for this domain, but not which page you read afterwards.
3. Access logs
For every request the web server records which file was delivered at what time with what result, along with the referring page and the browser name. No IP address is stored in the process — the log format has no field for it. I need this record to spot faults and to run the site technically; the legal basis is my legitimate interest under Art. 6(1)(f) GDPR. The log is capped at a fixed size and overwrites itself continuously; older entries are then no longer present.
4. Enquiry form
When you send the form you transmit to me: your name, your email address, optionally your phone number and a preferred date, the occasion, scope and place you selected, and your message. These details go into a database on my server and are additionally delivered to me as an email. You receive a confirmation at the address you gave.
- Purpose: to answer your enquiry and prepare a quote.
- Legal basis: Art. 6(1)(b) GDPR, as the processing serves the steps prior to entering a contract.
- Recipients: Strato AG as processor, for sending the emails. Nobody else.
- Retention: If the enquiry does not lead to a booking, I delete it after six months at the latest. If a booking does come about, the commercial and tax retention periods of six to ten years apply.
Your IP address is not stored when you send the form. To fend off automated bulk submissions, the server remembers in memory for one hour how many enquiries came from the same connection. After that the information is gone; it is never written to disk.
5. Email and telephone
If you write or call me directly, I process your details only in order to deal with your enquiry. The legal basis is Art. 6(1)(b) GDPR, or (f) for general enquiries. Email is usually encrypted in transit but is not an absolutely secure medium; for anything strictly confidential the telephone is better.
6. Gift vouchers
If you order a gift voucher, I process the amount, the wording you want, the name of the person receiving it and your email address for delivery. The legal basis is Art. 6(1)(b) GDPR. The details are kept for as long as the voucher can be redeemed, plus the tax retention period.
7. Client area
After delivery, clients receive a protected page with their images. Favourites and notes you set there are first stored only by your own browser (in what is called local storage). They reach me only when you explicitly send the selection. This storage is necessary for the page to work; no consent under section 25 TDDDG is required for it. You can clear local storage at any time in your browser settings.
8. Photographs
As part of a booking I take photographs of you and, at parties and weddings, of your guests. The basis is the contract concluded with you (Art. 6(1)(b) GDPR). Publication — on this site, on social networks or in print — happens only with your prior consent under Art. 6(1)(a) GDPR and section 22 of the German Act on Copyright in Works of Art. That consent is voluntary, it is not a condition of the booking, and you may withdraw it at any time with effect for the future. The photographs themselves sit on my own systems; I back them up several times over and pass them to nobody without your instruction.
9. No sharing, no analytics
I do not sell data, run no audience measurement, use no advertising networks and make no automated individual decisions. No transfer to countries outside the European Union takes place.
10. Your rights
You may at any time request information about the data stored about you (Art. 15 GDPR), ask for it to be corrected (Art. 16), erased (Art. 17) or restricted (Art. 18), object to the processing (Art. 21) and receive your data in a portable format (Art. 20). You may withdraw consent you have given at any time; the lawfulness of processing up to that point is unaffected. An informal message to ch@munichpixart.com
is enough.
11. Right to complain
You may lodge a complaint with a supervisory authority. The one responsible for me is the Bayerisches Landesamt für Datenschutzaufsicht, Promenade 27, 91522 Ansbach, Germany.
12. Changes
If new functions are added — the option for guests to contribute their own photographs, for instance — I will amend this policy beforehand. The version available here, with the date given above, is the one that applies.