Privacy Policy

Last updated: 26 June 2026. This Privacy Policy explains how Delim Fotoc GmbH ("we", "us") collects, uses, and protects your personal data when you visit delimfotoc.digital or contact us regarding our lighting design services.

1. Data Controller

Delim Fotoc GmbH, Leopoldstraße 31, 80802 München, Germany. Email: [email protected]. Phone: +49 89 4523 8710. Managing Directors: Stefan Delimann, Claudia Fotopoulos.

2. Personal Data We Collect

We may collect: name, email address, phone number, postal address, project details, IP address, browser type, and cookie identifiers. Data is collected when you email us, call our studio, visit our website, or engage us for lighting design services.

3. Legal Basis for Processing (GDPR Art. 6)

• Contract performance (Art. 6(1)(b)): Processing necessary to provide lighting design services and respond to project enquiries.
• Legitimate interests (Art. 6(1)(f)): Website analytics, security monitoring, and business communication.
• Consent (Art. 6(1)(a)): Non-essential cookies and optional marketing communications.
• Legal obligation (Art. 6(1)(c)): Tax records, invoicing, and regulatory compliance under German law.

4. How We Use Your Data

Your data is used to respond to enquiries, deliver design services, issue invoices, improve our website, and comply with legal obligations. We do not sell personal data to third parties or use it for automated decision-making with legal effects.

5. Data Retention

Enquiry emails are retained for 24 months. Contract and invoice data is kept for 10 years per German tax law (§147 AO). Website analytics data is anonymised after 14 months. Cookie consent records are stored locally on your device until cleared.

6. Data Processors & Third Parties

We use the following processors: Hetzner Online GmbH (web hosting, Germany), Google Ireland Limited (analytics, when consented), and Deutsche Post AG (physical correspondence). All processors operate under GDPR-compliant data processing agreements.

7. International Transfers

Primary data processing occurs within the European Union. Where Google Analytics is enabled with your consent, data may be transferred to the United States under EU Standard Contractual Clauses. You may withdraw consent at any time via our cookie settings.

8. Your Rights

Under GDPR, you have the right to access, rectify, erase, restrict processing, data portability, and object to processing based on legitimate interests. You may withdraw consent without affecting prior lawful processing. To exercise rights, contact [email protected].

9. Supervisory Authority

You may lodge a complaint with the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany, or your local EU data protection authority.

10. Security

We implement TLS encryption, access controls, and regular security reviews. While no system is completely secure, we take appropriate technical and organisational measures to protect your personal data.