Privacy Policy
Last updated: December 11, 2024

## 1. Overview of Data Protection

I, Kasper Helml, take the protection of your personal data very seriously. This Privacy Policy explains what information I collect when you visit my website (www.kasperhelml.com), how I use it, and what rights you have regarding your data.

## 2. Information I Collect

### 2.1 Automatically Collected Data
When you visit my website, certain information is automatically collected:
- IP address
- Browser type and version
- Operating system
- Date and time of access
- Pages visited
- Referrer URL (the page from which you arrived)

### 2.2 Contact Form Data
When you use the contact form, I collect:
- Name (if provided)
- Email address
- Message content
- Any additional information you choose to provide

### 2.3 Portfolio and Third-Party Content
My website includes:
- Photography work
- Videos
- Project descriptions
- References to clients and collaborators

## 3. How I Use Your Data

I use your data for the following purposes:
- To operate and maintain the website
- To respond to your inquiries via the contact form
- To improve the website experience
- To protect against misuse or unauthorized access
- To comply with legal obligations

## 4. Legal Basis for Processing

I process your data based on:
- Your consent (Art. 6 para. 1 lit. a GDPR)
- The necessity to fulfill contractual obligations (Art. 6 para. 1 lit. b GDPR)
- Legal obligations (Art. 6 para. 1 lit. c GDPR)
- My legitimate interests (Art. 6 para. 1 lit. f GDPR)

## 5. Data Storage and Security

### 5.1 Duration of Storage
- Contact form data is stored until the purpose is fulfilled or you request deletion
- Server logs are stored by our hosting provider onepage.io in accordance with their data retention policies
- Technical data necessary for website operation is stored only as long as necessary
- If legal retention periods apply, data may be stored longer

### 5.2 Security Measures
I use appropriate technical and organizational measures to protect your data, including:
- SSL/TLS encryption for data transmission
- Regular security updates
- Access restrictions

## 6. Your Rights

You have the right to:
- Request information about your stored data
- Request correction of incorrect data
- Request deletion of your data
- Restrict processing of your data
- Data portability
- Withdraw consent at any time
- File a complaint with a supervisory authority

## 7. Third-Party Services

### 7.1 Hosting
This website is hosted by onepage.io. The hosting provider processes:
- IP addresses
- Technical data necessary for hosting and security
- Server logs and usage data
- Other data required for the operation of the website

The processing of this data is necessary for the fulfillment of our hosting contract and the secure operation of our website (Art. 6 para. 1 lit. b and f GDPR). For specific information about data processing by onepage.io, please refer to their privacy policy.

### 7.2 Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics helps me understand how visitors interact with my website by collecting and analyzing data about:
- Pages visited
- Time spent on the website
- Navigation patterns
- Device information
- Geographic location (country/city level)

#### How Google Analytics Works
Google Analytics uses "cookies" (text files placed on your device) and other identification technologies to track visitor behavior. The information generated about your use of the website is typically transmitted to and stored on Google servers.

#### Data Protection Measures
I have implemented the following measures to protect your privacy:
- IP anonymization (IP addresses are truncated within the EU/EEA before transfer)
- Data processing agreement with Google
- Reduced storage period for user data
- Disabled data sharing with Google for advertising purposes

#### Your Control Over Analytics
You can:
- Use the Google Analytics opt-out browser add-on (https://tools.google.com/dlpage/gaoptout)
- Delete existing cookies through your browser settings
- Configure your browser to reject cookies

#### Legal Basis
The use of Google Analytics is based on Art. 6 para. 1 lit. f GDPR (legitimate interest in analyzing and improving our website) and your consent (Art. 6 para. 1 lit. a GDPR).

#### Data Transfer to the USA
Data may be transferred to the USA under the EU standard contractual clauses. For more information, visit: https://privacy.google.com/businesses/controllerterms/mccs/

## 8. Contact Information

For questions about data protection:
Kasper Helml

## 9. Updates to This Policy

I reserve the right to update this Privacy Policy as needed. Changes will be posted here with a new "Last updated" date.

## 10. Special Notes for Portfolio Content

### 10.1 Client References
- Client names and projects are displayed for portfolio purposes
- References to third parties are based on existing work relationships
- Third parties may request removal of references

### 10.2 Embedded Content
- My website may include embedded content (videos, images, etc.)
- These may collect data about you
- I only embed content necessary for portfolio presentation

## 11. Cookies and Tracking

### 11.1 What Are Cookies?
Cookies are small text files that are stored on your device when you visit a website. They serve various purposes, from enabling basic website functionality to tracking usage patterns.

### 11.2 Cookies Used on This Website

#### Essential Cookies
- Purpose: Enable basic website functionality
- Legal basis: Necessary for providing the service (Art. 6 para. 1 lit. b GDPR)
- Storage duration: Until browser session ends or as technically required
- These cookies are strictly necessary and cannot be declined if you want to use the website

#### Analytics Cookies (Google Analytics)
- Purpose: Help understand how visitors interact with the website
- Legal basis: Your consent (Art. 6 para. 1 lit. a GDPR)
- Provider: Google Ireland Limited
- You can opt-out of these cookies (see Section 7.2 for details)

### 11.3 Your Cookie Choices
You can control cookies through your browser settings:
- Block all cookies
- Delete existing cookies
- Allow cookies from specific websites
- Set cookie preferences for different browsers

Please note that blocking some types of cookies may impact your experience of the website.

### 11.4 Third-Party Cookies
The only third-party cookies used on this website are from Google Analytics. We do not use:
- Advertising cookies
- Social media cookies
- Other tracking cookies