Last updated: August 2026
The controller for data processing on this website is:
Milen Lesemann
Lesemann Photography
Karl-Lade-Strasse 36
10369 Berlin
Deutschland
Phone: +49 157 528 899 87
E-Mail: info@mlesemann.com
The protection of your personal data matters to me. This website deliberately works without advertising trackers and without social media plug-ins. Fonts are loaded directly from my own server and not fetched from Google or other providers. No cookies are set for advertising purposes.
This website is hosted by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, USA. When the website is accessed, technically necessary data is transmitted to Netlify servers and stored there in server log files:
This processing takes place on the basis of Art. 6 (1) (f) GDPR. My legitimate interest lies in the technically faultless presentation and the security of the website. The data is not combined with other data sources.
As Netlify is based in the USA, personal data may be transferred to the USA. Netlify is certified under the EU-US Data Privacy Framework; standard contractual clauses are additionally in place. A data processing agreement has been concluded with Netlify. Further details can be found in the Netlify privacy policy: netlify.com/privacy.
Several forms are available on this website. Transmission and storage take place via the "Netlify Forms" service of the provider named above. Submissions are additionally forwarded to me by e-mail.
The details you enter are processed: name, type of shoot, e-mail address, phone number and, optionally, preferred date, location and your message. I use this data exclusively to handle your enquiry and to make you an offer.
Processed are your name and e-mail address as well as, optionally, your company, phone number, your channel or website, your goal, your preferred time frame, the services you selected and your message.
The legal basis is Art. 6 (1) (b) GDPR where your enquiry aims at concluding a contract, otherwise Art. 6 (1) (f) GDPR based on my legitimate interest in answering enquiries. I delete the data as soon as it is no longer required for that purpose - at the latest when no commission results from the enquiry and no statutory retention periods apply.
The price list is only shown after you have entered your e-mail address. I store this address in order to give you access to the price list and to occasionally send you news about my offers.
The legal basis is your consent under Art. 6 (1) (a) GDPR, which you give by submitting the form. You may withdraw this consent at any time with effect for the future - an informal message to info@mlesemann.com is sufficient. The lawfulness of processing carried out until withdrawal remains unaffected. After withdrawal I delete your address.
This website uses no cookies. To improve usability, only a few entries are stored in your browser's local storage:
These entries contain no personal data, never leave your device and are not transmitted to me. You can delete them at any time via your browser settings.
This website does not set cookies for analytics or advertising.
To understand how my site is used, I use Microsoft Clarity by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Clarity records how the site is used – mouse movements, clicks, taps and scrolling – and turns this into replays and heatmaps. This shows me what is clear and where something does not work. What you type into form fields is not recorded.
Clarity runs here without cookies: each page view is treated on its own, and you are not recognised across visits. Among other things, device, browser, screen size, approximate location and your IP address (shortened by Microsoft) are processed; processing in the USA is possible (Microsoft is certified under the EU-US Data Privacy Framework).
The legal basis is my legitimate interest in making my website clear and free of errors (Art. 6(1)(f) GDPR). You can object at any time (Art. 21 GDPR) – one click is enough, after which nothing more is recorded on this device:
More: Microsoft privacy statement.
So that I can see whether my site is being found, I receive a short message via the Telegram messenger when a page is opened. It contains only: the approximate location (city, region, country, derived from the IP address by my host Netlify), the time, the page opened, where you came from (e.g. "Google search"), the type of device (e.g. "iPhone") and the browser language. Your IP address is not transmitted, and nothing is stored on your device.
To recognise returning visits, the server creates a shortened, irreversible checksum (SHA-256) from the IP address and browser identifier and stores it with a sequential number at Netlify. The plain IP address is not stored for this. I delete these entries after 12 months at the latest.
The legal basis is my legitimate interest in knowing how my website is used (Art. 6(1)(f) GDPR). Telegram is provided by Telegram Messenger Inc.; the messages may be processed on servers outside the EU. You can object to this processing at any time (Art. 21 GDPR); a short message to me is enough.
The fonts of this website are embedded directly and are not loaded from an external server. Further connections to third parties only occur in the cases stated explicitly: the client galleries (point 8) and content you click on yourself.
After a shoot you can receive access to a password-protected gallery with your pictures. I give you the password personally. It is checked on the server; only then are the pictures shown.
The pictures in your gallery are stored with Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, in the Google Drive service. When viewing and downloading the pictures your browser establishes a direct connection to Google servers. Your IP address and technical details about your browser are transmitted to Google in the process. A transfer to countries outside the EU cannot be ruled out.
The legal basis is Art. 6 (1) (b) GDPR, as providing your pictures is part of the contract concluded with you. Further information can be found in the Google privacy policy: policies.google.com/privacy.
You can mark pictures as favourites. These marks are initially stored only locally in your browser (see point 6) and are not transmitted to me. Only when you click "Send favourites" do I receive the list of selected file names and - if provided - your name and message, so that I can act on your selection. The legal basis is Art. 6 (1) (b) GDPR.
After a booking I set up a personal appointment page for you at mlesemann.com/termin/…. The address contains a random string and is not linked anywhere; only someone who received the link from me can open the page.
There you can see your appointment, how to prepare and the payment status. You may voluntarily add details that help me prepare the shoot: names of the people attending, a phone number, the number of people, details about any children coming along, and wishes or notes. You can also send me a question through the page. All of this is voluntary - the shoot takes place just the same without it.
Details about children are collected only if you enter them yourself, and are used solely to prepare the shoot.
This data is stored with Netlify (see point 3) in their data store. The legal basis is Art. 6 (1) (b) GDPR, as the details serve the performance of the contract concluded with you. I delete the appointment and its details once they are no longer needed, at the latest after the statutory retention periods have expired.
I send a few automatic e-mails around your appointment - a welcome message, a reminder with the preparation, and a note that your gallery is ready. For delivery I use the service Resend (Resend, Inc., 2261 Market Street, San Francisco, CA 94114, USA). Your e-mail address and the content of the message are transmitted to Resend and processed there for delivery. This involves processing in the USA; the transfer is based on standard contractual clauses under Art. 46 (2) (c) GDPR. The legal basis for sending is Art. 6 (1) (b) GDPR.
For security reasons this website uses SSL or TLS encryption. You can recognise this by the address bar of your browser starting with "https://". This means the data you send me cannot be read by third parties.
You have the right at any time to:
For this, simply contact info@mlesemann.com.
You have the right to complain to a data protection supervisory authority. The competent authority is:
Berlin Commissioner for Data Protection and Freedom of Information
Alt-Moabit 59-61
10555 Berlin
I adapt this privacy policy whenever the website or the legal situation changes. The version published here always applies.
This English privacy policy is provided for convenience only. Should the two versions differ, the German version is legally binding.