Privacy Policy

  1. Introduction

    This Privacy Policy explains how personal data is collected and processed when visitors use this website or contact the owner.
    The website owner takes data protection seriously and processes data in accordance with the EU General Data Protection Regulation (GDPR).

  2. Data Controller

    Mariam Soliman
    Adress Placeholder

    Contact: me@mariamsoliman.com

  3. Hosting and Website Provision

    This website is hosted by Squarespace, Inc.
    Squarespace automatically processes data such as IP addresses, browser information, and usage statistics when the site is accessed.

    Data may be processed outside the European Union, including in the United States. Appropriate safeguards such as Standard Contractual Clauses apply in accordance with GDPR requirements.

  4. Personal Data Collected

    4.1 Contact Form

    If you contact the site owner via the contact form, the following personal data is processed:

    • Name (required)

    • Email address (required)

    • Telephone number (optional)

    • Pronouns (optional)

    • Message content

    These details are collected so that inquiries can be received, understood, and answered.

    4.2 Invoicing and Client Work

    If a working relationship is established (e.g., commissioning a photography service), the following additional information is collected:

    • Name

    • Postal address

    These details are necessary for fulfilling legal obligations such as invoicing and accounting in accordance with German tax law.

    4.3 Website Usage Information

    Squarespace Analytics may record non-identifying usage information such as:

    • page views

    • device type

    • browser type

    • geographical location

    • referring websites

    This data is processed for website performance analysis and improvement, provided cookies are accepted.

    No personally identifiable usage profiles are created without consent.

  5. Legal Bases for Processing

    Data is processed on the following legal bases under the GDPR:

    • Art. 6(1)(b) — performance of a contract or pre-contractual steps (e.g. responding to inquiries, preparing invoices)

    • Art. 6(1)(a) — consent (e.g. optional data fields, cookie consent)

    • Art. 6(1)(f) — legitimate interests (e.g. interest in secure and efficient website operation and analysis)

  6. Data Retention

    6.1 Contact Form Data

    Messages and inquiries submitted via the contact form are stored in Squarespace without a time limitation, but can be deleted at any time upon request.

    6.2 Accounting and Legal Obligations

    Data collected for invoicing and financial documentation is retained for at least 10 years, in accordance with German commercial and tax retention periods.

  7. Cookies and Consent

    This site uses the standard Squarespace cookie banner.
    Visitors can reject all non-essential cookies at any time. When cookies are declined, website analytics and data transfers to third parties are limited according to Squarespace’s policy.

    Squarespace’s cookie policy applies, and data collection by analytics tools is based on visitor consent.

  8. Embedded Content and External Links

    8.1 Instagram

    This website may include a simple outbound hyperlink to Instagram.
    No data is transferred to Instagram unless the visitor actively clicks the link.
    Once the visitor leaves this site, Instagram’s own data policies apply.

    8.2 External Websites

    This policy applies only to this domain.
    The website owner has no control over the data processing practices of external pages and services.

  9. Photography and Image Rights

    All images on this website are the property of the photographer.
    Where individuals are shown, publication takes place with consent. Documentation of consent is kept internally.

  10. Data Security

    Appropriate technical and organizational measures have been implemented to protect personal data, including encrypted communication (SSL/TLS) and secure access controls.

  11. Your Rights Under GDPR

    Visitors and clients have the following rights:

    • Access to personal data (Art. 15 GDPR)

    • Correction of inaccurate data (Art. 16 GDPR)

    • Deletion (“right to be forgotten”) (Art. 17 GDPR)

    • Restriction of processing (Art. 18 GDPR)

    • Data portability (Art. 20 GDPR)

    • Objection to processing (Art. 21 GDPR)

    • Withdrawal of consent at any time (Art. 7(3) GDPR)

    Requests can be made via the contact information noted above.

  12. Changes to This Policy

    This policy may be updated to reflect legal or operational changes.
    The latest version will always be available on this website.