Last updated: August 2026

1. Privacy at a Glance

General Information

The following information provides an overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. Detailed information on the processing of personal data can be found in the following sections of this Privacy Policy.

Controller

The controller responsible for data processing on this website is:

Emma Schmid
Baumreute 80
70199 Stuttgart
Germany

Email: hello@emmaschmidphoto.com

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

How is your data collected?

Some of your data is collected when you provide it to me directly. This is the case, for example, when you use the contact form or contact me by email.

Other data is collected automatically by the technical systems used when you visit the website. This includes, in particular, technical information such as your IP address, browser type, operating system, device type or the time the page was accessed.

In addition, data may be processed for the statistical analysis of website usage if you have given your consent.

What is your data used for?

Data is processed in particular to:

• provide the website securely and without technical errors,
• process your enquiries,
• initiate or perform contracts where applicable,
• statistically analyse the use of the website, and
• improve the content and usability of the website.

Analytics services that require consent are only used after you have given the corresponding consent.

What rights do you have?

Subject to the applicable legal requirements, you have in particular the right to:

• obtain information about your stored personal data,
• have inaccurate data corrected,
• request the deletion of your data,
• request restriction of processing,
• object to certain types of processing,
• data portability, and
• withdraw consent you have previously given with effect for the future.

You also have the right to lodge a complaint with a competent data protection supervisory authority.

 

2. Hosting

IONOS

This website is hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany.

When you access this website, IONOS processes technical data necessary to provide and secure the website. This may include, in particular, your IP address, the page or file accessed, browser type and version, operating system, device type, referrer and time of access. Processing is carried out on the basis of Art. 6(1)(f) GDPR. My legitimate interest lies in the secure, stable and reliable provision of this website.

Data Processing Agreement

A data processing agreement pursuant to Art. 28 GDPR has been concluded with IONOS. This ensures that IONOS processes personal data in connection with the hosting of this website only in accordance with my instructions and in compliance with applicable data protection law.

 

3. General Information on Data Processing

Data Protection

The protection of your personal data is important to me. I treat personal data confidentially and in accordance with the applicable data protection laws and this Privacy Policy. Please note that data transmission over the internet, for example when communicating by email, may involve security risks and cannot be completely protected against access by third parties.

Legal Bases for Processing

Personal data is only processed on this website where there is a legal basis for doing so. Depending on the type of processing, the following legal bases may apply in particular:

Art. 6(1)(a) GDPR – Consent
where you have expressly consented to a specific form of data processing.

Art. 6(1)(b) GDPR – Contract and pre-contractual measures
where processing is necessary for the performance of a contract or to respond to an enquiry relating to the potential conclusion of a contract.

Art. 6(1)(c) GDPR – Legal obligation
where processing is necessary to comply with a legal obligation.

Art. 6(1)(f) GDPR – Legitimate interests
where processing is necessary for the purposes of a legitimate interest and those interests are not overridden by your interests, rights or freedoms.

Where information is stored on or accessed from your device, the requirements of Section 25 TDDDG also apply.

Storage Period

Personal data is generally stored only for as long as necessary for the respective purpose. If you withdraw your consent or request the deletion of your data, the relevant data will be deleted unless statutory retention obligations or other legally permissible reasons require continued storage. Where statutory retention periods apply, the data will be deleted once those periods have expired.

Recipients of Personal Data

Personal data is disclosed to external parties only where this is necessary to provide a service or perform a contract, where there is a legal obligation to do so, where you have given your consent, or where another legal basis permits the disclosure. Where processors are used, the required agreements pursuant to Art. 28 GDPR are concluded.

Data Transfers to Third Countries

Some services used on this website are provided by companies that are based outside the European Union or the European Economic Area, or that may process data there. This applies in particular to services provided by Google. Where personal data is transferred to third countries, such transfers are carried out only in accordance with the applicable legal requirements for international data transfers. Further information can be found in the sections relating to the individual services below.

Withdrawal of Consent

Where processing is based on your consent, you may withdraw that consent at any time with effect for the future. The lawfulness of processing carried out before the withdrawal of consent remains unaffected.

Right to Object under Art. 21 GDPR

Where personal data is processed on the basis of Art. 6(1)(e) or (f) GDPR, you have the right to object to such processing at any time on grounds relating to your particular situation. If you object, I will no longer process the personal data concerned unless there are compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims. Where personal data is processed for direct marketing purposes, you may object to such processing at any time.

Right to Lodge a Complaint with a Supervisory Authority

If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a data protection supervisory authority. This applies in particular to the supervisory authority in the Member State of your habitual residence, place of work or the place of the alleged infringement.

Right of Access, Rectification and Erasure

Subject to the applicable legal requirements, you have the right to request information about the personal data I process, including its source, recipients and purposes of processing. You may also request the correction of inaccurate data and, where the legal requirements are met, the deletion of your personal data.

Right to Restriction of Processing

Subject to the applicable legal requirements, you may request the restriction of the processing of your personal data.

This applies in particular where:

• you contest the accuracy of the stored data and verification has not yet been completed,
• the processing is unlawful and you request restriction instead of deletion,
• the data is no longer required for the original purposes but you need it for the establishment, exercise or defence of legal claims, or
• you have objected to processing and the balancing of interests has not yet been completed.

Right to Data Portability

Where personal data is processed automatically on the basis of your consent or a contract, you have the right, subject to the applicable legal requirements, to receive that data in a structured, commonly used and machine-readable format or to request its transfer to another controller.

SSL/TLS Encryption

This website uses SSL/TLS encryption for security purposes. You can recognise an encrypted connection in particular by the fact that the website address begins with “https://”. Data transmitted to this website over an encrypted connection cannot easily be read by third parties.

 

4. Cookies and Consent Management

Cookies and Similar Technologies

This website uses cookies and similar technologies. Cookies are small pieces of information that are stored on your device. Some cookies are technically necessary for the website to function properly or to store choices you have made, such as your privacy preferences. Technically necessary cookies are used where required for the provision of the website. Cookies and similar technologies used for analytics or statistical purposes and which are not technically necessary are only used with your prior consent. In these cases, processing is carried out on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You may withdraw your consent at any time with effect for the future. Further information about the cookies and services used on this website can be found in the Cookie Policy.

Complianz

This website uses Complianz to manage consent for cookies and similar technologies. Complianz allows you to decide, when you first visit this website, which non-essential technologies you wish to consent to. Your selection is stored so that it can be taken into account on subsequent visits. You can change or withdraw your consent at any time via the cookie settings on this website. As part of consent management, technically necessary information may be stored on your device, for example in order to remember your selection regarding the different cookie categories. Processing is carried out in order to comply with legal data protection obligations on the basis of Art. 6(1)(c) GDPR. Where the storage of your consent decision is technically necessary, access to your device is based on Section 25(2) TDDDG.

 

5. Contact

Contact Form

If you contact me using the contact form, I process the information you enter in order to respond to your enquiry.

This may include, in particular:

• your name,
• email address,
• telephone number, where provided, and
• the content of your message.

Processing is carried out on the basis of Art. 6(1)(b) GDPR where your enquiry relates to the initiation or performance of a contract. For other enquiries, processing is based on my legitimate interest in efficiently responding to enquiries addressed to me pursuant to Art. 6(1)(f) GDPR. Data submitted through the contact form will be deleted once the purpose of the processing no longer applies and there are no statutory retention obligations or other legitimate reasons requiring continued storage.

Contact by Email

If you contact me by email, the personal data you provide will be processed in order to respond to your enquiry. Processing is carried out on the basis of Art. 6(1)(b) GDPR where your message relates to the initiation or performance of a contract. In all other cases, processing is based on my legitimate interest in responding to enquiries addressed to me pursuant to Art. 6(1)(f) GDPR. The data will be deleted once it is no longer required to respond to your enquiry and there are no statutory retention obligations or other legal grounds requiring continued storage.

 

6. Analytics Tools

IONOS WebAnalytics

This website uses IONOS WebAnalytics, an analytics service provided by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany.

IONOS WebAnalytics is used for statistical analysis and technical optimisation of this website.

The following information may in particular be analysed:

• referrer, meaning the website previously visited,
• website or file accessed,
• browser type and version,
• operating system used,
• device type,
• time of access, and
• approximate geographical origin of the access.

According to IONOS, WebAnalytics does not use cookies. The IP address technically transmitted when the website is accessed is processed in anonymised form. IONOS WebAnalytics is used on the basis of Art. 6(1)(f) GDPR. My legitimate interest lies in statistically analysing the use of my website and improving its technical performance and content.

WP Statistics

This website uses the WordPress analytics tool WP Statistics provided by Veronalabs. WP Statistics enables the statistical analysis of the use of this website. This may include information about page views, referrers, browsers, devices, search engines and the approximate origin of visitors. The analytics data collected by WP Statistics is stored on this website’s server. WP Statistics is configured on this website in a privacy-friendly manner. IP addresses are anonymised or hashed and are not stored as complete IP addresses. In this configuration, WP Statistics does not use tracking cookies to recognise individual visitors. Processing is carried out on the basis of Art. 6(1)(f) GDPR. My legitimate interest lies in the privacy-friendly statistical analysis of website usage in order to improve the content and usability of the website.

Google Tag Manager

This website uses Google Tag Manager. For users in the European Economic Area, the provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager allows me to centrally manage various website tags. On this website, it is used in particular to integrate and control Google Analytics. Google Tag Manager itself is not used directly to statistically analyse user behaviour. However, technical information may be transmitted to Google in connection with the operation of the service. Google Tag Manager and the analytics services integrated through it are only activated on this website after you have given the corresponding consent.

Google Analytics

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics allows me to statistically analyse how this website is used. The information processed may include, in particular:

• pages viewed,
• number of users and sessions,
• time spent on the website and interactions,
• approximate geographical location,
• traffic sources,
• browser,
• operating system, and
• device used.

Google Analytics may use cookies. In particular, the “_ga” cookie may be used to distinguish between users or sessions. Google Analytics is only activated on this website after you have consented to the use of analytics technologies. Processing is carried out on the basis of your consent pursuant to Art. 6(1)(a) GDPR. Where information is stored on or accessed from your device, this is additionally based on Section 25(1) TDDDG. You may change or withdraw your consent at any time with effect for the future via the cookie settings on this website. According to Google, individual IP addresses of users in the European Union are not logged or stored in Google Analytics. However, the IP address is technically required for communication between your device and Google’s servers and may be used to derive an approximate geographical location. In connection with the use of Google services, data may be processed by Google companies outside the European Economic Area, in particular in the United States. Further information on the processing of personal data can be found in Google’s privacy information.

Data Processing for Google Analytics

The data processing terms provided by Google apply to the use of Google Analytics. These terms govern the respective data protection obligations in connection with the processing of Analytics data.

 

7. Links to Social Networks and External Websites

This website contains links to external websites and social networks, including Instagram. When this website is merely accessed, a standard external link does not establish a connection with the respective external provider. Only when you click such a link do you leave this website and are redirected to the respective provider. From that point onwards, the privacy policy of the respective external provider applies. No Instagram posts, Instagram feeds or other Instagram social plugins are embedded on this website.