The Ordered Eye
Privacy policy
Information about personal-data processing on this deliberately lean photography website.
1. Controller
ROTE PLACE®
Owner: Robert Seemann
Lombardeiweg 2
91325 Adelsdorf
Germany
Email: robert@theorderedeye.de
Phone: +49 160 91542093
2. Hosting by STRATO
This website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. When the site is accessed, STRATO processes technically necessary server and log data.
According to STRATO privacy information, this may include the customer domain, anonymised client IP, request line, timestamp, status code, response size, referrer and user agent. Non-anonymised IP addresses may be stored temporarily for attack detection and are subsequently anonymised.
This processing is used to provide the website securely, reliably and without technical faults. The legal basis is Article 6(1)(f) GDPR.
3. Local fonts
The font files used by the site are served locally from the web space. Displaying the fonts does not establish a connection to Google Fonts or another external font service.
4. Language selection
German and English are selected through the “lang” URL parameter. The site does not set a cookie or use local browser storage for language selection.
5. Analytics, tracking and external content
The site currently uses no analytics or advertising services, no social-media tracking and no embedded content from external platforms. This policy must be updated before any such technology is added.
6. Email contact and Microsoft Exchange / Microsoft 365
If you contact us or make a purchase enquiry by email, the contact details, metadata and message content you provide are processed in order to answer the enquiry and, where applicable, prepare a contract. The legal basis is Article 6(1)(b) GDPR where the communication concerns a contract; otherwise Article 6(1)(f) GDPR may apply.
Microsoft Exchange / Microsoft 365 is used for business email. Email and contact data are therefore processed by Microsoft in the course of providing the service. Microsoft describes the processing of customer data in its Data Protection Addendum (DPA) and, for Microsoft 365 services within scope, its EU Data Boundary. Where transfers to third countries occur, Microsoft states that the applicable data-protection safeguards are used.
7. Telephone and WhatsApp Business
The telephone number shown may be used for business calls. If you voluntarily contact us through WhatsApp Business, the contact data, message content and technically necessary metadata you provide are processed in connection with the WhatsApp service. WhatsApp is not embedded in this website, so merely visiting the website does not establish a connection to WhatsApp.
For users in the European Economic Area, WhatsApp is provided in part by WhatsApp Ireland Limited. According to WhatsApp’s terms, data may also be transferred to affiliated Meta companies and recipients outside the European Economic Area, subject to the transfer mechanisms and safeguards described by WhatsApp. The controller’s legal basis is Article 6(1)(b) GDPR for pre-contractual or contractual communication and otherwise Article 6(1)(f) GDPR.
8. Contract, payment and shipping data
If a purchase is concluded, the data required for the contract, payment, invoicing and delivery are processed. For payment in advance, payment data are processed by the banks involved in the bank transfer. Recipient data required for delivery are passed to the shipping carrier used.
Under the intended standard workflow, the photo laboratory commissioned to make the print does not receive the buyer’s delivery address because the finished print is first delivered to the seller and then forwarded to the buyer. If this workflow changes later, this privacy notice must be updated.
9. Retention
Enquiry data are retained only for as long as needed to deal with the enquiry unless statutory retention requirements or legitimate reasons require longer storage. Contract and invoice data are retained in accordance with statutory commercial and tax retention requirements.
10. Your rights
Where the statutory requirements are met, data subjects have rights including access, rectification, erasure, restriction of processing, data portability and objection. There is also a right to lodge a complaint with a competent data-protection supervisory authority.
11. Updates
Status: August 2026. Changes to hosting, email services, communication channels, ordering processes, analytics, external embeds or cookies may require this privacy notice to be updated.