Privacy policy

Controller

The controller within the meaning of data protection law, in particular the EU General Data Protection Regulation (GDPR), is:

PN Media
Philipp Naumann
Lauenburger Straße 14
51643 Gummersbach
Germany

Email: hello@pn-media-gm.de
Phone: +49 178 2305187

Your rights

Using the contact details given above, you can exercise the following rights under the GDPR at any time:

• access to the data we store about you and information about its processing (Art. 15 GDPR),
• rectification of inaccurate personal data (Art. 16 GDPR),
• erasure of the data we store about you (Art. 17 GDPR),
• restriction of the processing of your data (Art. 18 GDPR), for example while the accuracy of your data is being checked; if we are not yet allowed to erase your data because of legal obligations, we also restrict its processing,
• data portability, where the processing is based on your consent or on a contract with us and is carried out by automated means (Art. 20 GDPR), and
• objection to the processing of your data by us (Art. 21 GDPR, see “Right to object under Art. 21 GDPR”).

Withdrawing your consent

If you have given us your consent, you can withdraw it at any time with effect for the future (Art. 7(3) GDPR). The lawfulness of the processing carried out before the withdrawal remains unaffected.

Right to lodge a complaint with a supervisory authority

If you believe that the processing of your data infringes the GDPR, you can lodge a complaint with a data protection supervisory authority at any time (Art. 77 GDPR). This can be any supervisory authority, in particular one in the Member State of your habitual residence, your place of work or the place of the alleged infringement, for example the supervisory authority of the German federal state in which you live.

The supervisory authority responsible for us is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
(LDI NRW, the North Rhine-Westphalia Commissioner for Data Protection and Freedom of Information)
Kavalleriestraße 2–4
40213 Düsseldorf
Germany
Postal address: PO Box 20 04 44, 40102 Düsseldorf, Germany
www.ldi.nrw.de

The Federal Commissioner for Data Protection and Freedom of Information (BfDI) provides an overview of the data protection supervisory authorities of the German federal states, with contact details: Data protection authorities of the federal states.

Hosting and server log files

This website is a static website. It is hosted on webspace provided by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany (“IONOS”).

Nature and purpose of the processing

Each time our website is accessed, general information is collected automatically and stored in server log files. This also happens if you do not send us any further information. According to IONOS, this information comprises:

• the page visited previously (referrer),
• the page or file requested,
• browser type and browser version,
• the operating system used,
• the device type,
• the time of access and
• your IP address in anonymised form, which is used only to determine the location of access.

According to IONOS, the IP address is anonymised as soon as it is collected.

This data is processed in particular for the following purposes:

• ensuring that a connection to the website can be established without problems,
• ensuring that the website can be used smoothly,
• ensuring and evaluating system security and stability, in particular to detect misuse, and
• displaying the website correctly from a technical point of view and optimising it.

We do not use this data to draw conclusions about you personally. However, we reserve the right to review the server log files retrospectively if there are specific indications of unlawful use.

Legal basis and legitimate interest

The processing is carried out under Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website and in ensuring system security and detecting misuse.

Recipients and processing on our behalf

The recipient of the data is IONOS as our hosting provider. IONOS acts as our processor within the meaning of Art. 28 GDPR. According to IONOS, the data is not passed on to third parties and is not transferred to third countries (countries outside the EU and the EEA).

In addition, the data may be received by technical service providers who act as processors for the operation and maintenance of our website.

Retention period

According to IONOS, server log files are stored for a maximum of 8 weeks. If a security-relevant event occurs (for example a DDoS attack), the server log files concerned are retained until the event has been resolved and fully investigated.

Obligation to provide data

Providing the data listed above is not required by law or by contract. However, our website cannot technically be delivered or used without your IP address.

Objection

Please see the information in the section “Right to object under Art. 21 GDPR”.

Contact by email and phone

Nature and purpose of the processing

You can reach us by email at hello@pn-media-gm.de. In this case, we store the personal data transmitted with your email. This includes the date and time it was sent, your email address, IP addresses and information about the servers involved in the email communication.

You can also reach us by phone on +49 178 2305187. In this case, we collect log data containing your phone number (if it is transmitted) and the duration of the call.

Whichever channel you choose, we collect the content of your enquiry. We store your data in order to communicate with you individually and to deal with your enquiry.

Legal basis

If you contact us to request a quote, the processing is carried out in order to take steps prior to entering into a contract (Art. 6(1)(b) GDPR).

Otherwise, the processing is based on our legitimate interest (Art. 6(1)(f) GDPR). Our legitimate interest is to make it easy for you to contact us.

Recipients

Our email mailbox is operated by IONOS (address in the section “Hosting and server log files”). IONOS acts as our processor. In addition, the data may be received by technical service providers who act as processors for the operation and maintenance of our website.

Retention period

We delete your data no later than 14 days after your enquiry has been fully dealt with, unless statutory retention obligations apply.

If a contractual relationship is established, we are subject to statutory retention periods for reasons of proper bookkeeping and because of tax requirements. Under § 147 AO (German Fiscal Code) and, where applicable, § 257 HGB (German Commercial Code), these periods are 6, 8 or 10 years depending on the type of document: for example 6 years for commercial and business letters, 8 years for accounting vouchers such as invoices and 10 years for books and records. The legal basis for this retention is Art. 6(1)(c) GDPR.

Obligation to provide data

Providing your personal data is voluntary. However, we can only deal with your enquiry if you give us the data required for it and the reason for your enquiry.

Objection

Please see the information in the section “Right to object under Art. 21 GDPR”.

Contact form

On our website, you can write to us using a contact form.

Nature and purpose of the processing

In the contact form, we collect the following information:

• your name (required),
• your email address (required),
• your phone number (optional),
• your choice of what your enquiry is about: “Photography”, “Video production”, “Social media management” or “Editing & post-production” (optional), and
• your message (required).

The form also contains three hidden fields that are transmitted together with your information: a field that people cannot see and therefore do not fill in (known as a honeypot), the time taken to fill in the form, which JavaScript enters on submission (milliseconds since the page was loaded), and the language of the page (German or English).

We use this information to deal with your enquiry and to get in touch with you.

When you submit the form, your information is transmitted to a script on our webspace at IONOS. The script checks the input and sends it by email to our mailbox hello@pn-media-gm.de at IONOS. The email also contains the date and time of submission and the language of the page. The form data is not stored on the web server, only as an email in our mailbox. As with every visit to our website, this also creates the server log files described in the section “Hosting and server log files”.

Spam protection

To protect against automatically sent messages, the script checks every enquiry before forwarding it by email. It rejects an enquiry if

• the hidden field (honeypot) has been filled in,
• the recorded time taken to fill in the form is less than 3 seconds,
• the message contains more than 3 links, or
• your browser reports a domain other than our own as the origin of the request (Origin header).

This check takes place only on our webspace. Nothing is stored on your device or on the web server in the process, no third-party service is involved and no CAPTCHA is used.

Legal basis

If your enquiry is aimed at concluding a contract, for example because you are asking for a quote, the processing is carried out in order to take steps prior to entering into a contract (Art. 6(1)(b) GDPR). Otherwise, it is based on our legitimate interest (Art. 6(1)(f) GDPR) in being able to receive and answer enquiries easily.

The spam check is based on Art. 6(1)(f) GDPR. Our legitimate interest is to protect our mailbox and our webspace against abusive messages.

Recipients

The recipient of the data is IONOS as the provider of our webspace and our email mailbox. IONOS acts as our processor. No other service providers are involved in the transmission.

Retention period

We delete the email containing your enquiry no later than 14 days after your enquiry has been fully dealt with, unless statutory retention obligations apply. For the retention periods that apply if a contractual relationship is established, see the section “Contact by email and phone”.

Obligation to provide data

Using the contact form is voluntary. We need your name, email address and message to be able to deal with and answer your enquiry. The form cannot be submitted without this information. Your phone number and topic selection are optional. You can also reach us by email or phone instead.

Objection

Please see the information in the section “Right to object under Art. 21 GDPR”.

WhatsApp

Our website contains a link to WhatsApp that you can use to send us a message. It is a simple link to the address wa.me, not an embedded plugin. As long as you do not click the link, no data is transmitted to WhatsApp.

When you click the link, you leave our website: your browser calls up the page wa.me and opens the WhatsApp app or WhatsApp Web. From that point on, WhatsApp processes your data on its own responsibility, for example your IP address and information about your browser and device. The provider of WhatsApp in the European Economic Area is WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.

According to WhatsApp, data is also transferred to WhatsApp LLC and Meta Platforms, Inc. in the USA. WhatsApp states that it relies on the EU-US Data Privacy Framework for this and otherwise on standard contractual clauses approved by the European Commission. For details, see WhatsApp’s privacy policy.

If you write to us via WhatsApp, we process your phone number, your WhatsApp profile name and the content of your messages in order to deal with your enquiry. The legal basis is Art. 6(1)(b) GDPR if you are asking for a quote, and otherwise Art. 6(1)(f) GDPR (our legitimate interest in making it easy for you to contact us). The information on the retention period in the section “Contact by email and phone” applies accordingly.

If you prefer not to use WhatsApp, you can also reach us by email at hello@pn-media-gm.de or by phone on +49 178 2305187.

Our presence on social networks

We maintain a Facebook page and an Instagram profile. On our website, we link to them with simple links; no plugins are embedded. As long as you do not click one of these links, no data is transmitted to Facebook or Instagram. When you click, you leave our website and go to the network concerned.

The provider of Facebook and Instagram in the European Economic Area is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (“Meta”). When you visit our page or our profile, Meta processes personal data about you, for example your IP address, information about your device and, if you are logged in, information from your user account. Meta describes which data it processes and for what purposes in its privacy policies (links below).

Joint controllership for Page Insights

Meta compiles statistics for operators of Facebook pages on how visitors use their page (Page Insights). According to the judgment of the Court of Justice of the European Union (CJEU) of 5 June 2018 (C-210/16, Wirtschaftsakademie Schleswig-Holstein), we are joint controllers with Meta for the processing of personal data for this purpose (Art. 26 GDPR). According to Meta, page operators only receive aggregated statistics and have no access to the data of individual visitors.

The details are set out in the Page Insights Controller Addendum provided by Meta. In it, Meta undertakes to fulfil the GDPR obligations for Insights data, in particular informing data subjects and handling requests concerning their rights. Under the addendum, the lead supervisory authority is the Irish Data Protection Commission. Meta makes the essence of this agreement available in its information about Page Insights data (links below).

You can exercise your rights against both Meta and us (Art. 26(3) GDPR). Where Meta is responsible for responding to a request, we forward it to Meta.

Insofar as we are joint controllers with Meta in connection with our Instagram profile, the above applies accordingly.

Legal basis

We operate our presence on these networks on the basis of our legitimate interest (Art. 6(1)(f) GDPR) in presenting our services there and getting in touch with people who are interested in them. Meta describes the legal bases on which it relies for its own processing in its privacy policies.

Data transfers to the USA

According to Meta, data is also transferred to Meta Platforms, Inc. in the USA. Meta Platforms, Inc. states that it is certified under the EU-US Data Privacy Framework. In its decision of 10 July 2023, the European Commission found that the level of data protection is adequate for transfers to companies certified under this framework (Art. 45 GDPR). You can check whether a company is certified on the Data Privacy Framework website.

Further information

• Meta privacy policy (Facebook)
• Meta privacy policy (Instagram)
• Information about Page Insights data
• Page Insights Controller Addendum

Audience measurement with IONOS SiteAnalytics (formerly WebAnalytics)

This website uses SiteAnalytics (formerly WebAnalytics), the visitor statistics feature of our hosting provider IONOS. According to IONOS, this feature is activated by default.

Nature and purpose of the processing

SiteAnalytics is used to analyse visitor flows on our website. This allows us to see, for example, which pages are accessed most frequently at what times and which areas need to be adapted. According to IONOS, the data is collected solely for statistical analysis and the technical optimisation of the website.

IONOS can collect the data either via a tracking pixel or via the server log files. No tracking pixel is embedded on this website. Only the server log files that are created anyway when the website is accessed are therefore analysed (see “Hosting and server log files”): referrer, page or file requested, browser type and browser version, operating system, device type, time of access and the anonymised IP address, which is used only to determine the location of access.

According to IONOS, the IP address is anonymised immediately after transmission and processed without any personal reference. Accordingly, IONOS does not store any personal data of visitors, so no conclusions can be drawn about individual visitors and no personal user profiles are created. SiteAnalytics does not use cookies.

Legal basis

The processing is carried out under Art. 6(1)(f) GDPR on the basis of our legitimate interest. Measuring reach, and the information this provides, helps us to adapt and improve our website.

Recipients

The recipient of the data is IONOS as our processor. According to IONOS, no data is passed on to third parties.

Retention period

According to IONOS, the statistics do not contain any personal data; the underlying server log files are stored for a maximum of eight weeks (see the section “Hosting and server log files”).

Obligation to provide data

Providing the data is not required by law or by contract.

Objection

Please see the information in the section “Right to object under Art. 21 GDPR”.

Fonts and icons

The fonts and icons on this website are stored locally on our webspace at IONOS and are loaded from there when the website is accessed. No connection is made to third-party servers, such as Google Fonts or a content delivery network. No data is transmitted to third parties in this process.

Cookies and local storage

This website does not set any cookies and does not store any information in your browser, for example in local storage. It contains no tracking scripts, no tracking pixels and no embedded third-party content. The time value used for the spam protection of the contact form is only entered into the form and is not stored on your device.

If you click a link to Facebook, Instagram or WhatsApp, these providers may set cookies on their own pages. We have no influence over this. The privacy information of the provider concerned applies.

Changes to this privacy policy

We reserve the right to amend this privacy policy so that it always meets current legal requirements, or to reflect changes to our services in the privacy policy, for example when we introduce new services. The new privacy policy will then apply to your next visit.

Questions about data protection

If you have any questions about data protection, please email us at hello@pn-media-gm.de or contact the controller named above.

Note on the basis of this text

Based on the generator by activeMind AG (version #2024-10-25), adapted to this website.

Last updated: October 2026