Privacy notice

Controller and contact

This website is operated by Lens Media 25, contactable through Sevtu & Tarik at Germersheimer Str. 175, 90469 Nürnberg, Germany.

Email: info@lensmedia25.de
Phone: +49 911 48095369
Mobile: +49 1511 2511539

Please use these contact details for privacy questions or to exercise your data protection rights.

Website access, hosting and technical support

When you visit our website, the web server processes technical connection data. This may include your IP address, the date and time, the page or file requested, the amount of data transferred, HTTP status, browser, operating system and referring page, where your browser supplies this information. These details help us deliver the website, investigate errors and protect it against attacks.

Technical support and website hosting are arranged by skyisnolimit-Media, Heinrich Hawel. The website runs on GoDaddy web hosting. GoDaddy and its infrastructure providers may access technical data as part of their hosting services. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is to provide a secure, reliable and functional website.

Hosting logs are retained in line with the hosting provider’s operational and security requirements. The relevant criterion is how long the data is needed to deliver the service, investigate faults or address specific security incidents. Statutory retention requirements remain unaffected.

Provider information: GoDaddy privacy notice and GoDaddy Data Processing Addendum.

Enquiries, email and telephone

When you contact us, we process the information you provide so we can reply and discuss possible coverage. The form requires your names, email address, occasion, preferred service and a date, or confirmation that your date is undecided. Your phone number, location, package preference and message are optional. Please only share information needed for your enquiry.

The form sends your details to our website server over HTTPS. They are then emailed to info@lensmedia25.de. The website does not maintain a separate enquiry database. Messages are processed in our email system; the mailboxes are currently hosted by STRATO. See STRATO’s privacy information for further details.

Where an enquiry concerns a proposal or booking, processing is based on Article 6(1)(b) GDPR. Other enquiries are handled under Article 6(1)(f) GDPR; our legitimate interest is to communicate with you and deal with your request. Article 6(1)(c) GDPR applies where retention is required by law.

We retain correspondence for as long as needed to deal with your enquiry or carry out your booking. We then delete it unless statutory retention duties or specific reasons for establishing, exercising or defending legal claims require otherwise. We cannot process a form enquiry without the required contact details. We do not make automated booking decisions or carry out profiling.

Keeping the form secure

Accessing the form endpoint uses the necessary session cookie lensmedia_inquiry. It associates an enquiry with the current browser session and helps prevent cross-site or repeated submissions. The cookie is intended for the session; the submission token is valid for no more than 30 minutes.

To prevent misuse, a hash of the IP address created with a secret key, counters and timestamps are processed in a non-public server directory. Form contents are not stored there. The sending limit uses a one-hour window. Expired counter files are cleaned up when the form endpoint is next accessed. This hash is pseudonymous technical data; it does not mean that all connection data has been anonymised.

These security measures are based on Article 6(1)(f) GDPR. Our legitimate interest is to prevent spam and abusive enquiries. Where storage or access on your device is strictly necessary for this purpose, Section 25(2)(2) TDDDG applies.

Cookies and local display preferences

The website currently uses no analytics or advertising services. Selecting “Accept all” therefore does not activate Google Analytics, a Meta Pixel or any other advertising tracker.

Your cookie-dialog choice is saved locally under lensmedia25-privacy-v1 and recognised for up to 180 days. An explicitly chosen light or dark appearance is stored under lensmedia25-theme in session storage for your current visit. Your reduced-motion preference is saved locally under lens-motion until you change it or clear your browser storage. The language follows the page address; our language selector does not set an additional cookie.

This storage allows us to remember your choices and provide the functions you request. The legal bases are Section 25(2)(2) TDDDG and Article 6(1)(f) GDPR. You can change your cookie choice through “Cookie settings” in the footer. You can also clear data in your browser, which may remove preferences you previously saved.

Photos, videos, fonts and social networks

Photos, videos, fonts and icons are served from our own website server. We do not embed Google Fonts servers, YouTube players or social media feeds for these purposes.

Instagram, TikTok and Threads are included as ordinary external links. The respective platform is opened only when you follow its link. Its own data processing practices and privacy information then apply. Further information: Instagram and Threads and TikTok.

Recipients and possible processing outside the EEA

Access to data is limited to people and service providers who need it to handle your enquiry, maintain the website or provide hosting and email services. Information is disclosed to authorities or other recipients where required by law or needed to pursue legal claims. Your enquiries are not sold to advertising data brokers.

GoDaddy is an international group. Operations, support or subprocessors may involve processing outside the European Economic Area, particularly in the United States. Its linked Data Processing Addendum describes the applicable transfer mechanisms, including relevant adequacy decisions and EU Standard Contractual Clauses. The conditions and entities specified there govern each transfer.

Your rights

Subject to the legal conditions, you have rights of access to your personal data (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18) and data portability (Article 20). Where processing is based on consent, you may withdraw it at any time for the future. Withdrawal does not affect the lawfulness of earlier processing.

Where we process data under Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation under Article 21 GDPR. You may object to processing for direct marketing at any time. To exercise your rights, email info@lensmedia25.de. Where necessary, we may request details to identify the relevant records or verify your identity.

Under Article 77 GDPR you may also complain to a data protection supervisory authority, particularly where you live, work or believe an infringement has occurred. For private businesses in Bavaria, you can contact the Bavarian State Office for Data Protection Supervision (BayLDA).

Security and updates

Our website uses HTTPS to encrypt transmission between your browser and the web server. This does not automatically provide end-to-end encryption for ordinary email. Please do not send unnecessary sensitive information through the form or by email.

We update this notice when our features, providers or legal requirements change. The current version is available on this page.