Privacy Policy
Draft for the current website preview · Updated 17 October 2026.
1. Data controller
Levin Müllerschön
Müllerschön Studio / LF2M Photography · Photography and filmmaking
Neureutherstraße 37
80798 Munich
Germany
Email: [email protected]
Phone: +49 178 5195835
Please use the email address above for privacy enquiries or to exercise your rights.
2. Website access and hosting
This website is hosted through Cloudflare Pages. The provider is Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. Delivering and securing the website and diagnosing faults involves processing data such as your IP address, the requested URL, request time, browser information and technical connection data. Recipients include Cloudflare and service providers involved in delivering its hosting and security services.
The legal basis is Article 6(1)(f) GDPR. The legitimate interest is the reliable, secure and efficient operation of this website. Technical data is retained for as long as necessary for these purposes and to prevent or investigate security incidents. The specific retention period depends on the Cloudflare configuration used.
Data may be processed outside the EU or EEA, particularly in the United States. Cloudflare’s data processing addendum describes the transfer mechanisms it uses, including the EU–US Data Privacy Framework and standard contractual clauses. Further information is available in Cloudflare’s privacy policy and its data processing addendum.
3. Cookies and browser storage
The supplied website code does not use analytics or marketing cookies, tracking pixels, persistent visitor identifiers, localStorage or sessionStorage. Fonts, images and scripts are served by this website. No active video embeds are included.
This version therefore does not display an advertising or analytics consent banner. Google Ads is not integrated. If conversion tracking, remarketing or another service requiring consent is added later, it will be activated only after consent, with an equivalent option to decline, a way to withdraw consent and updated privacy information.
Technically necessary processes at the hosting provider depend on the actual account configuration. The external contact form service may carry out its own security checks when a form is submitted. The absence of a consent banner on this site does not provide blanket consent for processing by external services.
4. Contact form and email enquiries
When you contact me, your first and last name, email address, project description, message and any optional location are processed to respond to your enquiry. Required fields are marked. Without the required information, the form cannot be submitted; you can also contact me at the email address above. Please do not send health information or other sensitive personal data.
Only when you submit the form are its contents sent to FormSubmit at formsubmit.co. With JavaScript enabled, the request is sent in the background and a response appears on this website. FormSubmit processes the submitted information and technical connection data and forwards the enquiry to the controller’s iCloud mailbox. The service’s privacy policy applies. This form uses a hidden spam-trap field; an interactive reCAPTCHA is not loaded by the website code. Without JavaScript, the form opens the provider’s confirmation page, where the provider’s own processes may apply. The provider’s precise legal entity details, processing locations, retention periods and required contractual arrangements must be clarified before production use.
For enquiries relating to a contract or steps prior to a contract, the legal basis is Article 6(1)(b) GDPR. Other enquiries are processed under Article 6(1)(f) GDPR, with the legitimate interest of responding to incoming messages. Submitting this form does not subscribe you to a newsletter.
Apple’s iCloud Mail is used to receive and manage emails. This may involve processing message contents, contact details and delivery data. Information about the applicable Apple entity, processing, recipients and international transfers is provided in Apple’s privacy policy. Processing outside the EU or EEA may occur.
Enquiries are deleted when they have been dealt with and no statutory retention obligation or legitimate reason for keeping them remains. Contractual and business correspondence is retained where required by the applicable commercial and tax laws. Your information is not used for automated decision-making or profiling.
5. Instagram, YouTube and TikTok
This website contains ordinary links to Instagram, YouTube and TikTok. Displaying these links and locally drawn icons does not establish a connection to those platforms through the website code. A connection occurs when you open a link; the external platform then processes data under its own responsibility. The respective Instagram privacy policy, Google/YouTube privacy policy or TikTok privacy policy applies.
No YouTube videos are embedded in this preview. If video embeds or analytics are added, consent controls and this policy must be updated before those features are activated.
6. Your rights
Subject to the GDPR, you have rights of access (Article 15), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18) and data portability (Article 20). Where processing is based on consent, you may withdraw that consent at any time with effect for the future. This does not affect the lawfulness of processing before withdrawal.
Right to object: Where data is processed under Article 6(1)(f) GDPR, you may object under Article 21 GDPR on grounds relating to your particular situation. For direct marketing, you may object without giving specific grounds.
You may lodge a complaint with a data protection supervisory authority under Article 77 GDPR. For private-sector organisations in Bavaria, the Bavarian State Office for Data Protection Supervision is a relevant authority.
7. Security and changes
The published website should be served exclusively over HTTPS. Despite technical safeguards, no internet data transmission can be guaranteed to be entirely risk-free. This policy will be updated if the services used or the purposes of processing change.