Privacy policy

Last updated: 30 October 2026

Controller

Maximilian Zeitler, Reinickendorfer Str. 116, 13347 Berlin
Email: info@maximilianzeitler.com · Phone: +49 160 550 38 66

I only process personal data to the extent necessary to run this website and my services.

Hosting and server log files

This website and the shop at shop.maximilianzeitler.com are hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. A data processing agreement under Art. 28 GDPR is in place with IONOS. When you visit, technically necessary data is processed, such as IP address, date and time of access, page requested and browser. The legal basis is Art. 6(1)(f) GDPR, my legitimate interest in secure and stable operation. IONOS shortens the IP addresses in the log files and deletes them after eight weeks at the latest.

Fonts and media

Fonts, images and videos are loaded directly from my server. No connection is made to Google Fonts, YouTube or other third parties.

Contact and inquiry forms

If you write to me via a form (contact, work inquiry, event inquiry, workshop date request) or by email, I process your details such as name, email address, message and, where applicable, date, location and number of guests. I use them only to answer your inquiry and, if applicable, to fulfil a contract.

The legal basis is Art. 6(1)(b) GDPR, for general inquiries Art. 6(1)(f) GDPR. The data is not passed on to third parties.

Booking via Acuity Scheduling

To book portrait sessions and workshops I use Acuity Scheduling, a service of Squarespace Ireland Limited, Squarespace House, Ship Street Great, Dublin 8, D08N12C, Ireland. When you open the booking calendar, it is loaded from Acuity. When you book, your details (name, email, phone, selected appointment, notes if any) are processed by Acuity.

The legal basis is Art. 6(1)(b) GDPR. Data may be transferred to the parent company Squarespace, Inc. in the USA and to other service providers engaged by Squarespace, mostly in the USA (for example for hosting and for sending emails and text messages). Squarespace, Inc. is certified under the EU-US Data Privacy Framework; the transfer is therefore covered by the European Commission’s adequacy decision (Art. 45 GDPR). Transfers to other service providers are covered by the Data Privacy Framework or the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR). Processing is governed by Squarespace’s Data Processing Addendum (data processing under Art. 28 GDPR).

Payment providers

Online payments are made through the Acuity booking calendar. Payment data is processed directly by the payment provider you choose: Stripe Payments Europe, Ltd., One Wilton Park, Wilton Place, Dublin 2, D02 FX04, Ireland (card payments) or PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg. I only receive confirmation of the payment, no card or account details. The legal basis is Art. 6(1)(b) GDPR. The privacy notices of the respective provider also apply.

Web analytics

To understand which pages and works are read, I use the open-source software Matomo. It runs on my own web space at IONOS; the data is not shared with third parties. Matomo is configured to set no cookies and to shorten IP addresses before storing them (last two bytes). It is therefore not possible to identify you personally.

Data recorded includes pages visited, time on page, the referring page, device type, browser and approximate country. The legal basis is Art. 6(1)(f) GDPR, my legitimate interest in improving the website. Individual visit data is deleted after 14 months; after that, only aggregated figures without reference to individual visits remain. The shop at shop.maximilianzeitler.com is counted in the same statistics in the same way.

You can object to this at any time by unticking the box. Your browser remembers your choice in local storage (not a cookie), after which your visits to this website are no longer counted. For the shop, you can object separately on its privacy page.

My visits may be counted anonymously.

Map

The directions map is only loaded when you click “Load map”. Only then is data such as your IP address transferred to the OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom. The European Commission has issued an adequacy decision for the United Kingdom. The legal basis is your consent under Art. 6(1)(a) GDPR.

External links

This website links to Instagram and my newsletter on Substack. No plugins are embedded. Data is only transferred when you click a link and open the external site. The privacy policy of the respective provider applies there.

Storage period

I only store your data for as long as necessary for the respective purpose. Statutory retention periods, e.g. for invoices, remain unaffected.

Your rights

You have the right to:

• Access to your stored data (Art. 15 GDPR)
• Rectification (Art. 16 GDPR) and erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Object to processing based on legitimate interests (Art. 21 GDPR)
• Withdraw consent with effect for the future (Art. 7(3) GDPR)

You can also lodge a complaint with a data protection supervisory authority, for example the Berlin Commissioner for Data Protection and Freedom of Information.