Privacy Policy

December 31, 2013

Thank you for your interest in Norbert Woehnl Photography. Protecting your personal data is important to me. I process personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. This policy explains the nature, scope, and purpose of the data processed when you visit this website, subscribe to updates, or contact me.

1. Controller

Norbert Woehnl
Itabashi-ku Shimura 1-8-1
Crest Court Shimurasakaue 1004
174-0056 Tokyo
Japan

E-mail: please click here to e-mail me

2. Access data and hosting

You can generally use this website without actively providing personal data. When you access the site, the server and hosting infrastructure may automatically process technical data such as IP address, browser type, operating system, referrer, date and time of access, and requested pages. This is necessary to deliver the website, maintain security, detect misuse, and produce basic technical statistics. The legal basis is Art. 6(1)(f) GDPR. Such data is stored only as long as necessary for these purposes or as required by law.

3. Publication via Leaflet / AT Protocol

This website is published using Leaflet, a publishing tool built on the AT Protocol. In this system, published content is associated with an account on a Personal Data Server (PDS), meaning the server that stores and serves an account’s AT Protocol data. Leaflet describes its service as social publishing on AT Protocol and states that publication data is stored on the publisher’s PDS.

Because of this architecture, content intentionally published on this site may also be accessible through AT Protocol-related services, clients, feeds, indexes, or caches operated by third parties outside my direct control. Public content may therefore be copied, cached, indexed, or displayed elsewhere. If such content is later edited or deleted here, copies may remain visible on third-party services for some time. The legal basis for publication is generally Art. 6(1)(b) GDPR where necessary to provide the requested publishing or subscription functionality, and/or Art. 6(1)(f) GDPR for my legitimate interest in operating this publication.

4. Analytics

This website uses Vercel Web Analytics for privacy-friendly visitor measurement. According to Vercel’s documentation, Vercel Web Analytics does not use cookies, stores anonymized data, and identifies visitors using a request-based hash that is valid for one day only and then reset. Vercel further states that its Web Analytics does not collect personal identifiers for cross-site tracking and is designed to provide only aggregated statistics.

The analytics data may include:

page views and visited URLs,
referrer information,
filtered query parameters,
approximate geolocation,
browser and browser version,
operating system and version,
device type,
timestamps, and
analytics script version.

I use this information solely to understand reach, improve the website, and maintain performance. The legal basis is Art. 6(1)(f) GDPR, namely my legitimate interest in operating and improving the site using privacy-focused, aggregated analytics. Based on Vercel’s documentation, these analytics are cookie-free and not intended to identify individual visitors.

5. Subscriptions

Visitors may subscribe to updates from this website in two ways:

a) Subscription via AT Protocol

If you are logged in with an AT Protocol account, you may subscribe or follow using your AT Protocol handle/account. In that case, the relevant account identifier and related public subscription relationship may be processed through AT Protocol services in order to provide the subscription feature. Because AT Protocol is a federated network, this information may also be visible to or processed by third-party services participating in that network. Leaflet describes subscriptions and follows as part of its AT Protocol-based publishing model.

b) Subscription via e-mail

You may also subscribe by providing your e-mail address. I use your e-mail address only to send website updates and, where appropriate, to confirm your subscription. The legal basis is Art. 6(1)(a) GDPR (consent). You may withdraw your consent and unsubscribe at any time with future effect, for example via the unsubscribe option in the e-mails or by contacting me directly.

I store subscription data only as long as the subscription remains active or as otherwise required by law.

6. Contact

If you contact me by e-mail or through a contact form, I process the data you provide, such as your name, e-mail address, and message, solely to handle your inquiry and any follow-up communication. The legal basis is Art. 6(1)(a) GDPR, Art. 6(1)(b) GDPR, or Art. 6(1)(f) GDPR, depending on the nature of the inquiry. Your data will not be shared with third parties except where necessary to process your request or where required by law.

If this site contains links or sharing options for external platforms, data is generally transmitted to those providers only when you actively click them. Once you visit an external service, its own privacy policy applies.

8. Storage period

I process and store personal data only for as long as necessary for the relevant purpose or for as long as statutory retention obligations require. Data is then deleted, blocked, or anonymized as appropriate.

9. Your rights

You have the rights granted by the GDPR, including the right to:

obtain confirmation as to whether personal data concerning you is being processed;
access your personal data;
rectify inaccurate data;
request erasure;
request restriction of processing;
object to processing;
receive data portability where applicable;
withdraw consent at any time with future effect; and
lodge a complaint with a competent supervisory authority.

To exercise your rights, please contact me using the details above.

Norbert Woehnl Photography

Norbert Woehnl is a photographer in Tokyo, Japan, specializing in travel, location, editorial and street photos.