Privacy Policy

Last updated: June 2026

This privacy policy explains how personal data is processed when you visit and use this website.

1. Controller

The controller responsible for data processing on this website is:

Hannes Rietze
Simrockstr. 54
80997 Munich
Germany

Email: hannesrietze@gmail.com

2. General information

This website is a personal blog and photography portfolio. I process personal data only where necessary to operate this website, provide its content, communicate with visitors, improve the website, or where you have given your consent.

Personal data means any information relating to an identified or identifiable person, such as a name, email address, IP address, message content, or technical information about a website visit.

3. Hosting and website platform: Squarespace

This website is hosted and provided through Squarespace.

Provider:

Squarespace Ireland Ltd.
Le Pole House
Ship Street Great
Dublin 8
Ireland

When you visit this website, Squarespace may process technical data that is necessary to display the website and keep it secure. This may include:

  • IP address

  • browser type and version

  • operating system

  • device information

  • pages visited

  • date and time of access

  • referrer URL

  • technical log data

The legal basis for this processing is Article 6(1)(f) GDPR. My legitimate interest is the secure, reliable and user-friendly operation of this website.

Squarespace may also process data outside the European Union or the European Economic Area, in particular in the United States. Where this happens, Squarespace states that it uses appropriate safeguards, such as standard contractual clauses.

More information is available in Squarespace’s privacy policy:
https://www.squarespace.com/privacy

4. Contact form

If you contact me through the contact form on this website, the data you enter will be processed in order to receive, handle and respond to your message.

This may include:

  • your name, if provided

  • your email address

  • the content of your message

  • the date and time of your request

  • technical metadata related to the form submission

The contact form is provided through Squarespace. This means that the submitted information may be processed and stored by Squarespace as part of providing the website service.

The legal basis is Article 6(1)(b) GDPR if your message relates to pre-contractual or contractual matters. In all other cases, the legal basis is Article 6(1)(f) GDPR. My legitimate interest is to respond to messages and inquiries from visitors.

Contact form submissions are kept only for as long as necessary to handle the request, unless legal retention obligations or legitimate interests require longer storage.

5. Email contact

If you contact me by email, I process your email address, the content of your message and any other information you provide in order to respond to your request.

The legal basis is Article 6(1)(b) GDPR if your message relates to pre-contractual or contractual matters. In all other cases, the legal basis is Article 6(1)(f) GDPR.

6. Comments

This website may allow visitors to leave comments on blog posts or other content.

If you leave a comment, the information you provide may be processed and displayed on the website. This may include:

  • the name or display name you provide

  • the comment text

  • the date and time of the comment

  • your email address, if required for commenting

  • technical data such as IP address or browser information, where necessary for security and spam prevention

The legal basis for processing comment data is Article 6(1)(f) GDPR. My legitimate interest is to enable discussion, prevent misuse and maintain the security and integrity of the website.

Please do not include sensitive personal data in public comments. Comments may remain visible until they are deleted by me or until you request deletion, unless there are legitimate reasons to keep them.

7. Cookies and similar technologies

This website uses cookies and similar technologies. Cookies are small text files stored on your device.

Some cookies are technically necessary for the website to function properly, for example for security, navigation, form submissions or remembering cookie preferences. These cookies are used on the basis of Article 6(1)(f) GDPR.

Non-essential cookies, especially analytics or performance cookies, are used only if you have given your consent. The legal basis for such processing is Article 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future.

8. Cookie consent

This website uses Squarespace’s cookie and visitor data tools to manage cookie consent.

When you visit the website, you may be asked whether you accept or reject non-essential cookies. Your choice may be stored in a cookie so the website can remember your preference.

You can change or withdraw your cookie consent at any time through the cookie settings provided on this website.

9. Squarespace Analytics

This website uses Squarespace Analytics to understand how visitors use the website and to improve its content and structure.

Squarespace Analytics may process information such as:

  • pages visited

  • traffic sources

  • approximate location

  • device and browser information

  • interaction with website content

  • date and time of visits

  • IP address or similar technical identifiers

Squarespace Analytics is used only where permitted by your cookie consent settings. If analytics cookies or similar technologies are used, the legal basis is your consent under Article 6(1)(a) GDPR.

If you reject non-essential cookies, analytics may be limited or disabled, depending on Squarespace’s technical implementation.

10. Maps and location features

This website may use map or location features provided through Squarespace, for example in connection with blog posts or location-based content.

Depending on how the feature is implemented, map content may be provided by Squarespace or by a third-party map provider. When such content is loaded, technical data such as your IP address and browser information may be transmitted to the relevant provider.

Where map features are not technically necessary, they will only be loaded where permitted by your cookie or privacy settings, or where you choose to interact with the feature.

11. Embedded YouTube videos

This website may embed videos from YouTube in the future.

Provider:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

When you load or play an embedded YouTube video, Google may process personal data such as your IP address, device information, browser information and information about your interaction with the video. Google may also set cookies or use similar technologies.

YouTube videos are only loaded where permitted by your cookie or privacy settings, or when you choose to interact with the embedded content.

More information is available in Google’s privacy policy:
https://policies.google.com/privacy

12. External links

This website may contain links to external websites. If you click on an external link, you leave this website. I have no control over the data processing on external websites. The respective provider or operator of the linked website is responsible for its own privacy practices.

13. Data retention

Personal data is kept only for as long as necessary for the purposes described in this privacy policy, unless legal retention obligations or legitimate interests require longer storage.

Contact requests are generally kept only as long as needed to respond to the request. Comments may remain visible until they are deleted. Technical data may be stored for security, troubleshooting and website operation purposes.

14. Your rights

Under the GDPR, you have the following rights:

  • the right of access to your personal data

  • the right to rectification of inaccurate personal data

  • the right to erasure of your personal data

  • the right to restriction of processing

  • the right to data portability

  • the right to object to certain processing

  • the right to withdraw consent at any time with effect for the future

  • the right to lodge a complaint with a data protection supervisory authority

If you want to exercise any of these rights, you can contact me at the email address listed above.

15. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates data protection law.

You may contact the supervisory authority responsible for your place of residence or the authority responsible for me.

16. Changes to this privacy policy

I may update this privacy policy if this website, the services used or legal requirements change.