Holger Pfeiffer respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how personal information is collected, used, stored and protected when you visit this website, explore the photographic works or contact the artist.

Personal data is processed in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable data protection legislation.

The person responsible for processing personal data through this website is:

Holger Pfeiffer
Rua Colonel Garcez de Lencastre 407
2775-378 Parede, Portugal

Email: works@holgerpfeiffer.com
Phone: +49 172 262 48 02

For any questions concerning your personal data or this Privacy Policy, please contact the email address above.

Depending on how you interact with this website, we may process the following categories of personal data:

INFORMATION PROVIDED DIRECTLY BY YOU

When you use the contact form or communicate by email, we may collect your first name, last name, email address, telephone number (if provided), the content of your message and any additional information you voluntarily share.

TECHNICAL INFORMATION

When you visit the website, certain technical information may be processed to operate and protect it. Depending on the hosting configuration, this may include your IP address, browser type, device information, operating system, access dates and times, and server log information.

We aim to collect only the personal data necessary for the purposes described in this policy.

Personal data may be processed for the following purposes:

RESPONDING TO ENQUIRIES

To respond to messages, requests for information about photographic works, commissions, availability, prices or other enquiries.

Legal basis: Article 6(1)(f) GDPR (legitimate interests in responding to enquiries), or Article 6(1)(b) GDPR where processing is necessary to take steps prior to entering into a contract or to perform a contract.

WEBSITE OPERATION AND SECURITY

To maintain the functionality, reliability and security of the website, diagnose technical problems and prevent misuse.

Legal basis: Article 6(1)(f) GDPR (legitimate interests in operating and protecting the website).

LEGAL AND CONTRACTUAL OBLIGATIONS

To comply with applicable legal requirements and fulfil contractual obligations where relevant.
Legal basis: Article 6(1)(b) and/or Article 6(1)(c) GDPR, as applicable.

Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before its withdrawal.

When you submit an enquiry through the contact form, the information you provide is used to process and respond to your request.

Fields marked as mandatory are required to submit the form. Providing a telephone number is optional.
Your information will not be used for unrelated marketing communications solely because you have submitted an enquiry.

Information may be retained for as long as necessary to manage your enquiry, maintain relevant correspondence, or comply with applicable legal obligations.

This website relies on technical service providers for hosting, maintenance and the secure delivery of its content.

These providers may process technical information, including IP addresses and server logs, as necessary to deliver the website and maintain its security.

Where service providers process personal data on behalf of the controller, appropriate contractual and data protection safeguards will be implemented as required by applicable law.

This website is hosted by Bluehost, a web hosting service provider responsible for the infrastructure supporting the website’s operation, availability and security.

As part of its hosting services, Bluehost may process technical information, including IP addresses, server logs, browser information and connection data, where necessary to deliver the website, maintain its functionality and protect against security threats.

Such processing is carried out for legitimate technical and security purposes, subject to applicable data protection laws.
Where personal data is processed by hosting or technical service providers on behalf of the data controller, appropriate contractual, technical and organisational safeguards will be implemented in accordance with applicable data protection requirements.

This website may use cookies or similar technologies to ensure its functionality, remember preferences or provide additional services.

Strictly necessary technologies may be used where permitted by applicable law.

Optional technologies, including analytics or marketing cookies, will only be used where the required consent has been obtained.

Where applicable, visitors will be able to manage or withdraw their cookie preferences.

This website does not currently use third-party cookies for analytics, advertising, marketing or user tracking purposes.

The website may use strictly necessary cookies or similar technologies to ensure its proper functioning, security and technical performance. These technologies do not require prior consent where permitted by applicable law.

No personal data is collected through third-party tracking or advertising technologies.

Should additional cookies or tracking technologies be introduced in the future, this policy will be updated accordingly, and appropriate consent mechanisms will be implemented where required by applicable data protection laws.

This website may contain links to external platforms, including Instagram and LinkedIn.

When you follow an external link, you leave this website and become subject to the privacy practices of the relevant platform.

We recommend reviewing the privacy policies of these services before sharing personal information with them. If third-party content or social media features are embedded directly into the website, additional data processing may occur and must be described separately.

Personal data may be shared with service providers where necessary for website operation, communication or the handling of enquiries, or where disclosure is required by law.

We do not sell personal data.

Where personal data is transferred outside the European Economic Area, appropriate safeguards will be applied as required by the GDPR, such as an applicable adequacy decision or Standard Contractual Clauses.

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by law.

The applicable retention period depends on the nature of the information, the purpose of processing and any relevant legal obligations.

When personal data is no longer required, it will be securely deleted or anonymised, where appropriate.

Under applicable data protection legislation, you may have the right to:

— Request access to your personal data.
— Request correction of inaccurate or incomplete data.
— Request deletion of your personal data.
— Request restriction of processing.
— Object to processing based on legitimate interests.
— Request data portability where applicable.
— Withdraw consent at any time where processing is based on consent.
— Lodge a complaint with a competent data protection supervisory authority.

To exercise your rights, please contact works@holgerpfeiffer.com.
You may also contact the Portuguese Data Protection Authority (Comissão Nacional de Proteção de Dados — CNPD) at www.cnpd.pt.

Appropriate technical and organisational measures are used to protect personal data against unauthorised access, accidental loss, alteration or disclosure.

Where implemented, encrypted HTTPS connections help protect information transmitted between your browser and the website.

However, no method of electronic transmission or storage can guarantee absolute security.

This Privacy Policy may be updated to reflect changes in the website, its services or applicable legal requirements.

The latest version will be made available on this page, together with its date of revision.