Privacy Policy

‍Last updated: June 2026
‍
‍1. Privacy at a Glance
General Information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified.

Data Collection on This Website
‍Who is responsible for data collection? Data processing on this website is carried out by the website operator. Contact details can be found in the Legal Notice.
‍How do we collect your data? Some data is collected when you provide it to us directly (e.g. via a contact form or newsletter sign-up). Other data is collected automatically by our IT systems when you visit the website (e.g. internet browser, operating system, time of access).
‍What do we use your data for? Some data is collected to ensure the website functions correctly. Other data may be used to analyse your user behaviour.
‍What rights do you have? You have the right, at any time and free of charge, to obtain information about the origin, recipient, and purpose of your stored personal data, as well as the right to have this data corrected or deleted. You may contact us at any time with questions regarding data protection.

2. Hosting
This website is hosted by STRATO AG:
STRATO AG
Pascalstraße 10
10587 Berlin
Germany

Personal data collected on this website is stored on the host's servers. This may include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website access data, and other data.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and efficient provision of services)
Data processing agreement: We have concluded a data processing agreement (DPA) with STRATO.

3. General Information and Mandatory Disclosures
ControllerTim Häufle Foto- und Videografie (operating under the commercial name "Nullraum Studios")
Beta-Straße 10 A
85774 Unterföhring

Phone: +49 89 248805-010
E-Mail: info@nullraum-studios.com

‍Retention Period
Unless a more specific retention period has been stated, your personal data will remain with us until the purpose for data processing no longer applies. Upon a legitimate request for deletion or withdrawal of consent, your data will be deleted, provided no statutory retention obligations exist (e.g. tax law: 10 years).

Note on Data Transfers to Third Countries
This website integrates tools from companies based in the United States. When these tools are active, your personal data may be transferred to the USA. The USA does not have a level of data protection comparable to that of the EU. We use EU Standard Contractual Clauses and rely on adequacy decisions by the EU Commission where available.

Withdrawal of Consent
Many data processing operations are only possible with your explicit consent. You may withdraw any consent you have already given at any time. The lawfulness of data processing carried out prior to the withdrawal remains unaffected.

Right to Object (Art. 21 GDPR)
If data processing is based on Art. 6(1)(e) or (f) GDPR, you have the right to object at any time to the processing of your personal data on grounds relating to your particular situation. If your personal data is processed for direct marketing purposes, you have the right to object to such processing at any time.

Right to Lodge a Complaint with a Supervisory Authority
You have the right to lodge a complaint with a supervisory authority.The competent authority for Bavaria:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach

Phone: +49 981 180093-0
E-Mail: poststelle@lda.bayern.de

‍Right to Data Portability
You have the right to receive data that we process automatically on the basis of your consent or in performance of a contract, in a structured, commonly used, and machine-readable format — either handed to you or transferred to a third party.

Right of Access, Rectification, and Erasure
You have the right, at any time and free of charge, to obtain information about your stored personal data, its origin, recipients, and the purpose of data processing, as well as the right to have this data corrected or deleted.

4. Data Collection on This Website
Cookies
Our website uses cookies — small text files stored on your device. We use both technically necessary cookies and marketing cookies.
‍Technically necessary cookies: Required for the website to function (e.g. session cookies).
Legal basis: Art. 6(1)(f) GDPR
‍Marketing cookies: Used to analyse your user behaviour and only set with your consent.
Legal basis: Art. 6(1)(a) GDPR
‍Cookie consent tool: We use Usercentrics to manage your cookie preferences.

Server Log Files
The provider automatically collects information in server log files, including: browser type and version, operating system, referrer URL, hostname of the accessing device, time of server request, IP address. This data is not merged with other data sources. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in technically error-free operation)

Contact Form
When you submit enquiries via our contact form, the information provided — including your contact details — is stored for the purpose of processing the enquiry and any follow-up questions.
Data processed: first name, last name, e-mail address, phone number, message content. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest). Retention period: Until the enquiry is fully processed, then in accordance with statutory retention periods (generally 3 years).

5. Newsletter
Newsletter Data
To subscribe to our newsletter, we require your e-mail address and confirmation of your consent to receive it.
Newsletter tool: Kit (formerly ConvertKit)
Data processed: e-mail address, name (optional), time of sign-up, IP address at sign-up, open rates, click behaviour.
Double opt-in: After signing up, you will receive a confirmation e-mail with a link. Your e-mail address will only be activated once you confirm.
Legal basis: Art. 6(1)(a) GDPR (consent)
Withdrawal: Possible at any time via the unsubscribe link in the e-mail.
Data transfer to third countries: On the basis of EU Standard Contractual Clauses (USA).
Retention period: Until unsubscription from the newsletter.

6. Analytics and Advertising
Google Analytics
This website uses Google Analytics (Google Ireland Limited). Cookies record your usage behaviour, e.g. page visits and clicks.
IP anonymisation: Enabled — IP addresses are truncated within the EU. Legal basis: Art. 6(1)(a) GDPR Data transfer: To the USA on the basis of EU Standard Contractual Clauses. Retention period: 14 months. Opt-out: Browser add-on → https://tools.google.com/dlpage/gaoptout DPA: Concluded with Google. More info: https://policies.google.com/privacy

‍Meta Pixel (Facebook Pixel)Enables conversion tracking and audience building. Legal basis: Art. 6(1)(a) GDPR More info: https://www.facebook.com/privacy/policy/

‍7. Plugins and Tools
Webflow
This website was built with Webflow. Legal basis: Art. 6(1)(f) GDPR More info: https://webflow.com/legal/eu-privacy-policy

‍Google Maps
When the map is loaded, your IP address is transmitted to Google. Legal basis: Art. 6(1)(a) or (f) GDPR More info: https://policies.google.com/privacy

‍Calendly
Used for online appointment scheduling. Legal basis: Art. 6(1)(b) GDPR More info: https://calendly.com/privacy

‍Elfsight (Google Reviews Widget)
Used to display our Google reviews. Legal basis: Art. 6(1)(f) GDPR More info: https://elfsight.com/privacy-policy/

‍Instagram Feed
When embedded Instagram content is loaded, your IP address is transmitted to Meta. Legal basis: Art. 6(1)(a) or (f) GDPR More info: https://help.instagram.com/519522125107875

‍Social Media Buttons
Links to social media platforms only transmit data upon click. Legal basis: Art. 6(1)(f) GDPR

8. Usercentrics Consent Management Platform
Usercentrics GmbH
Sendlinger Straße 7
80331 München
Germany

Stores your cookie preferences and documents your consent. Legal basis: Art. 6(1)(c) GDPR Retention period: 12 months More info: https://usercentrics.com/privacy-policy/

‍9. SSL/TLS Encryption
This website uses SSL/TLS encryption to protect confidential content. An encrypted connection is indicated by "https://" and the padlock icon in your browser. Data transmitted in this way cannot be read by third parties.

10. Changes to This Privacy Policy
We reserve the right to update this Privacy Policy to reflect legal or technical changes. The current version in effect at the time of your visit applies.

Questions about data protection?
Tim Häufle Foto- und Videografie (Nullraum Studios)
Beta-Straße 10 A
85774 Unterföhring

E-Mail: info@nullraum-studios.com
Phone: +49 89 248805-010
‍