Privacy Policy
Last updated: 7 October 2026
1. Controller
Ingo Kügler
Schönbrunner Straße 3
85244 Röhrmoos
Germany
Email: info [at] foto-gorilla.de
2. Hosting and technical provision
When you access this website, technically necessary connection data may be processed, including IP address, date and time, requested content, amount of data transferred, referrer, browser and operating system. Processing serves the secure, stable and error-free provision of the website and is based on Art. 6(1)(f) GDPR.
3. Consent management with Complianz
We use Complianz to manage consent for cookies and similar technologies. It records the choices made in the cookie banner. Where processing is required to meet legal documentation obligations, Art. 6(1)(c) GDPR applies; otherwise our legitimate interest in compliant consent management under Art. 6(1)(f) GDPR applies.
Details are available in our Cookie Policy (EU).
4. Analytics and Google services
Analytics functions are configured on the website. Complianz has detected Google Analytics as a statistics service and Google Site Kit is installed. Where Google Analytics or other non-essential Google services process personal data or store/read information on your device, they are used only after your consent. The legal basis is Art. 6(1)(a) GDPR and, where applicable, German telecommunications data protection law. Consent can be withdrawn at any time through the cookie settings.
Burst Statistics is also installed for audience measurement. Current cookies and storage technologies are listed in the Cookie Policy.
5. Contact form and email
If you contact us through the contact form or by email, we process the information you provide to handle your request. Depending on the request, processing is based on Art. 6(1)(b) or Art. 6(1)(f) GDPR. Data is deleted when it is no longer required, unless statutory retention duties apply.
6. Newsletter with Brevo
We use Brevo for our newsletter. We process your email address and technical information needed for registration and proof of consent. Registration uses a double opt-in procedure. Newsletter processing is based on your consent under Art. 6(1)(a) GDPR. You can withdraw consent at any time, particularly through the unsubscribe link in each newsletter.
7. Web push notifications with PushEngage
We use PushEngage to send web push notifications at your request. Subscription only takes place if you explicitly grant notification permission in your browser or operating system. For delivery and management of notifications, technical subscription or subscriber identifiers, browser and device information, IP address, usage and interaction data such as delivery, view or click events, and the notification topics you select may be processed. An email address or phone number is not required for standard web push notifications.
Processing is based on your consent under Art. 6(1)(a) GDPR. Where information is stored on or read from your device for the push function, this is based on your consent under the applicable German telecommunications data protection rules. You can withdraw consent at any time with future effect by disabling notification permission in your browser or device settings. You can also change your topic selection at any time on the “My Notifications” page.
PushEngage processes data as a service provider in connection with the delivery of web push notifications. Further information on PushEngage’s data processing is available in the provider’s privacy information.
For the personalised “Clear skies”, “Deep sky” and “Moon & planets” alerts, we additionally store the observing location you enter, the geographic coordinates and time zone derived from it, together with your technical push subscriber ID and the categories you have enabled. These data are used solely to calculate and deliver location-based observing conditions, suitable celestial targets and useful observing times for your selection. The data are retained only for as long as they are needed for these functions.
8. External content and services
Complianz has detected indications of YouTube, Google Fonts and Instagram on the website. Detection does not mean that these services are loaded on every page. Where embedded third-party content transfers data, consent-requiring content is loaded only after approval. Ordinary external links transfer data to the destination only after you click them.
9. Security
Security functions are used to protect the website against unauthorized access and abuse. Technical data such as IP address, time and type of access may be processed where necessary to detect and prevent attacks. The legal basis is Art. 6(1)(f) GDPR.
10. Recipients and international transfers
External providers may process personal data through their service providers. Transfers outside the EEA may occur and, where required, rely on an adequacy decision, appropriate safeguards such as standard contractual clauses, or another lawful basis.
11. Retention
We retain personal data only for as long as necessary for the relevant purpose or required by statutory retention and evidence obligations. Cookie retention periods are stated in the Cookie Policy.
12. Your rights
Subject to the statutory requirements, you have rights including access, rectification, erasure, restriction, data portability and objection. You may withdraw consent at any time with future effect and lodge a complaint with a competent data protection supervisory authority.
13. Updates
We update this Privacy Policy when services, technical processes or legal requirements change.