Legal notice & privacy
Legal notice
Angaben gemäß § 5 DDG:
Christian Brehmen
52249 Eschweiler
Deutschland
Contact:
Email: mail@brehmen.com
Privacy policy
1. Privacy at a glance
The following information provides an overview of how your personal data is handled when you visit this website.
Data controller:
Christian Brehmen (Kontaktdaten siehe Impressum)
2. Data collected on this website
Technical storage: A session cookie (PHPSESSID, without a fixed lifetime and usually retained until the browser closes) protects forms and enables admin sign-in. When you rate an image, your rating is associated with a random identifier within this session so you can change it. No persistent rating cookie is set. The identifier is stored with the rating in our database without being linked to your name. It does not identify you across sessions. Your chosen appearance (dark mode) and download selection are stored locally in your browser until you reset them or delete website data. This storage supports the features you choose, not visitor analytics.
Your language choice (German/English) is stored in a functional cookie for up to one year. You can change it in the footer at any time.
Server log files: The hosting provider automatically collects and stores information in server log files, such as browser type, operating system, referring URL, time of the server request and IP address.
Internal statistics: To improve the portfolio, we count page views, opened image detail views and broad browser and operating-system groups (Art. 6(1)(f) GDPR). Image views are stored only as daily counters per image. To estimate visitors' origins, the IP address transmitted for technical reasons is temporarily compared with a local country database; only the country is stored, not the IP address. The IP address is not sent to a geolocation service. VPNs and mobile networks may affect accuracy. IP Geolocation by DB-IP (CC BY 4.0). The live counter uses a random identifier per open tab, held only in browser memory. The server stores only its hash, country and last activity time. After two minutes without visible activity, the entry is deleted on the next statistics query or activity report and stops counting even before deletion. This identifier is not linked to image views. No cookies or local storage are used for it. Multiple tabs may count separately; unique people are not identified. Signed-in administrators and detected bots are excluded. Earlier aggregated visitor and interaction figures are retained as historical records.
Download requests: When you request a download link, we store your email address, selected files, request and sending times, sending status, and view and download-start counts to provide and manage the requested download. The email address is not used for advertising. The personal link is valid for 48 hours; anyone with access to it can download the selection. Requests are automatically deleted after 90 days on the next use of the request or administration area. Our hosting provider handles email delivery. Short-lived hashed identifiers help limit abusive requests. A download start does not prove a completed transfer.
Photo subscription: For the optional email subscription, we store your email address, signup and confirmation times and the version of the consent text. Photo notifications are sent only after you confirm using the emailed link. Confirmation links are valid for 48 hours; unconfirmed subscriptions are deleted during the next cleanup afterwards. Every notification includes an unsubscribe link. Unsubscribing immediately removes the address from the mailing list; a reduced record containing an address hash and timestamps remains until cleanup after 90 days. Logs of completed notifications are cleaned up after 90 days when this area is used. Short-lived hashed identifiers limit abusive requests. We use our hosting provider for email delivery. There is no individual email-open or click tracking; preview images are loaded from our webspace. Addresses from contact and download requests are not subscribed automatically.
3. External services
Suggestions for the website project: The project-page form stores the title, description, source (project page or self-hosted admin), email address, and submission, confirmation and review times. After confirming your email address, you receive only messages about reviewing and implementing your suggestion. Unconfirmed suggestions expire after 48 hours and are deleted during the next cleanup. After six months without editing, the email address is removed on the next use of this area; the suggestion is retained for development without an address association. Please do not include credentials or personal information in your suggestion. To request deletion or withdraw consent, contact the address in the legal notice. Our hosting provider sends messages without open tracking. Only an operator-reviewed anonymised description, status, target version and support count are public. Original text, contact details and personal replies remain private. Supporting a suggestion sends one confirmation email; the email address is not stored in the database for this. To prevent duplicate votes, a pseudonymised identifier derived with a secret key and unique to each suggestion is retained. Unconfirmed support identifiers are removed during the next cleanup after 48 hours. No individual voting history is published.
OpenStreetMap: The photo map loads only with your explicit consent (Art. 6(1)(a) GDPR). Map tiles are loaded from OpenStreetMap and map libraries from the unpkg.com CDN. For technical reasons, these providers receive your IP address and browser and connection information. unpkg may process data outside the EU. Information: OpenStreetMap privacy policy and unpkg. Your choice applies only to the currently open page and is not stored in the browser. You can close the map using “Disable map” at any time to stop further requests. Data already transmitted cannot be recalled. The gallery works without the map.
