photo-hosting.com
Isprobajte besplatno

Jezik

Deutsch English Čeština Dansk Español Français Hrvatski Italiano Magyar Nederlands Norsk Polski Português Română Slovenčina Suomi Svenska Türkçe Ελληνικά Български

Valuta

EUR € USD GBP £ AUD CAD CHF CZK DKK NOK PLN zł RON SEK TRY

Datenschutzerklärung

Last updated: July 2026

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:
giant Computer Systems, Marc Breuer
Am Altengraben 23
90768 Fürth
Germany
Phone: +49 (0) 911 976912-0
Email: [email protected]

2. General information

The protection of your personal data is important to us. We process your data exclusively on the basis of the statutory provisions (GDPR, German Federal Data Protection Act, TDDDG). photo-hosting.com is a platform with which photographers provide image galleries to their clients for viewing, selection (proofing) and final download. In this privacy policy we inform you about the most important aspects of data processing within this platform.

3. Your rights

You generally have the following rights:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object to processing (Art. 21 GDPR)
  • Right to withdraw a given consent (Art. 7 (3) GDPR)

If you believe that the processing of your data violates data protection law or that your data protection rights have otherwise been infringed, you may lodge a complaint with the competent supervisory authority (Art. 77 GDPR).

4. Hosting

Our platform is operated by a service provider (host) with servers located in Germany. The personal data collected on this website is stored on the host's servers. We have concluded a data processing agreement with the host in accordance with Art. 28 GDPR. The legal basis is our legitimate interest in the secure and efficient provision of our offer (Art. 6 (1) (f) GDPR).

5. SSL / TLS encryption

For security reasons and to protect the transmission of confidential content, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://".

6. Server log files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are: browser type and version, operating system used, referrer URL, host name of the accessing computer, time of the server request and the IP address. This data is not merged with other data sources. The collection is carried out on the basis of Art. 6 (1) (f) GDPR for the technically error-free presentation and optimisation of the website and to ensure system security. Server log files are deleted automatically once they are more than 90 days old. They are kept for longer only where this is necessary to investigate a specific security incident; in that case the data concerned is retained until the investigation has been concluded.

7. Cookies

We use only technically necessary cookies that are required for the operation of the platform (e.g. session cookie, CSRF protection, storage of the chosen language, and a cookie by which visitors to a gallery are recognised via a share link so that their selection and feedback are retained). These cookies contain no advertising or tracking functions. The legal basis is § 25 (2) TDDDG and Art. 6 (1) (f) GDPR.

8. Registration and customer account

When you create an account as a photographer, we process the data you provide (name, email address, password in encrypted form, optionally billing and company details) to provide the account and to perform the contractual relationship. The legal basis is Art. 6 (1) (b) GDPR (performance of a contract). The data is deleted as soon as the account is closed and no statutory retention obligations conflict with this.

9. Galleries: upload and delivery

The core of our service is providing image galleries. As a photographer, you upload photos and videos to make them available to your clients for viewing and selection. The uploaded content may contain personal data (e.g. depicted persons, metadata/EXIF). The processing is carried out to perform the contract on the basis of Art. 6 (1) (b) and (f) GDPR. As a photographer, you are the party responsible under data protection law for the content you upload; only upload content for which you hold the necessary rights and – where persons are recognisably depicted – for which their consent has been obtained. Galleries are accessible only via an unguessable share link (optionally additionally password-protected), are not publicly indexed, and originals and downloads are checked server-side on every request, while reduced-size preview images are delivered via a content delivery network under unguessable random addresses.

10. Proofing feedback (selection, flags, likes, comments)

Visitors to a gallery can, without logging in, select images, mark them with colour flags and "likes" and leave comments; they optionally provide a name or email address. The resulting data (e.g. name, comment text, selection, timestamp) is processed to provide these functions and to transmit them to the respective photographer (Art. 6 (1) (b) and (f) GDPR).

11. Media storage (Cloudflare R2)

Uploaded originals and the preview/derivative files generated from them are stored as objects in the Cloudflare R2 storage service of Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. Reduced-size preview images are delivered via Cloudflare's content delivery network under unguessable random addresses; originals and downloads are checked server-side on every request. Storage takes place in an EU region. A data processing agreement pursuant to Art. 28 GDPR is in place with Cloudflare; for any transfer to the USA, the EU standard contractual clauses and/or the EU-U.S. Data Privacy Framework apply. The legal basis is Art. 6 (1) (b) and (f) GDPR.

12. Payment processing (Stripe)

For paid plans we offer payment by credit card or SEPA direct debit via the payment service provider Stripe and – where offered – by bank transfer. When paying via Stripe, the data required for processing is transmitted to Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. Stripe's privacy policy applies. When paying by bank transfer, we process the information required to allocate the payment. The legal basis is Art. 6 (1) (b) GDPR. Tax and commercial retention periods remain unaffected.

13. Email notifications

If you have enabled notifications, we send you emails about activity in your galleries (e.g. new selection, likes or comments) and about the status of your account and billing. The legal basis is Art. 6 (1) (b) and (f) GDPR.

14. Web fonts (Bunny Fonts)

To display fonts consistently, we use Bunny Fonts provided by BunnyWay d.o.o., Dunajska cesta 165, 1000 Ljubljana, Slovenia. When a page is called up, the required fonts are loaded from their EU servers. Bunny Fonts is a privacy-friendly service which, according to the provider, does not collect personal data for advertising purposes and does not set cookies. The legal basis is Art. 6 (1) (f) GDPR.

15. Storage period and deletion

We store personal data only for as long as is necessary for the respective purposes. Galleries and media are kept available for the duration of the active account or subscription. If you delete a gallery or your account, the associated media and data are deleted, subject to statutory retention obligations.

16. Changes to this privacy policy

We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or in order to implement changes to our services. The new privacy policy will then apply to your next visit.