Privacy Policy.
Last updated: September 2026
1. Controller
The controller responsible for the processing of personal data on this website is:
Michael Knaf
Auestraße 16
63303 Dreieich
Germany
Email: photography@michaelknaf.com
2. General information
I take the protection of your personal data seriously. Personal data is any information relating to an identified or identifiable individual.
This Privacy Policy explains what personal data may be collected when you visit this website, why it is processed and what rights you have under the General Data Protection Regulation (GDPR).
I only process personal data where this is necessary to operate this website, respond to enquiries, provide requested services or where you have given your consent.
3. Hosting and Squarespace
This website is hosted using Squarespace.
Squarespace provides the technical infrastructure required to operate and deliver this website. In doing so, Squarespace may process information transmitted by your browser, including IP address, browser and device information, requested pages, referring URLs and date and time of access.
This processing is necessary to provide the website securely and reliably and to protect it against misuse and technical problems.
The legal basis is Article 6(1)(f) GDPR. My legitimate interest is the secure, reliable and efficient operation of this website.
Squarespace processes personal data on my behalf under its Data Processing Addendum. Data may also be processed outside the European Economic Area, including in the United States. Where required, Squarespace provides appropriate safeguards for such transfers, including the Standard Contractual Clauses approved by the European Commission.
Further information about Squarespace’s processing of personal data is available in the Squarespace Privacy Policy.
4. Cookies and cookie preferences
This website uses cookies and similar technologies.
Some cookies are technically necessary for the secure and proper operation of the website. These cookies may be used without your consent where they are strictly necessary to provide the website and its functions.
The legal basis for the storage of technically necessary information on your device is Section 25(2) TDDDG. Where personal data is processed, the legal basis is Article 6(1)(f) GDPR.
Squarespace also provides analytics and performance cookies. These cookies are only activated after you have given your consent through the cookie banner.
The legal basis is your consent pursuant to Section 25(1) TDDDG and Article 6(1)(a) GDPR.
You can refuse non-essential cookies by selecting Decline All, choose individual settings through Manage Cookies, or change your decision later using Cookie Settings.
Your consent can be withdrawn at any time with effect for the future.
Squarespace may use the following analytics and performance cookies after you have given your consent:
ss_cid — Used to identify unique visitors and sessions. Storage duration: 2 years.
ss_cpvisit — Used to identify unique visitors and sessions. Storage duration: 2 years.
ss_cvisit — Used to identify visitor sessions. Storage duration: 30 minutes.
ss_cvr — Used to identify unique visitors and sessions. Storage duration: 2 years.
ss_cvt — Used to identify visitor sessions. Storage duration: 30 minutes.
Squarespace also uses technically necessary cookies, including cookies that help protect forms and the website against misuse and cookies that remember your privacy preferences. These may include:
Crumb — Used to help protect forms and the website against cross-site request forgery (CSRF). Storage duration: session.
ss_performancecookiesAllowed — Stores your choice regarding analytics and performance cookies. Storage duration: 30 days.
ss_marketingcookiesAllowed — Stores your choice regarding marketing cookies. Storage duration: 30 days.
Necessary cookies used by Squarespace may vary depending on the features enabled on this website. They are used only where required for security, website functionality or to remember your cookie preferences.
At present, this website does not use Google Analytics, Meta Pixel or comparable third-party advertising trackers.
5. Squarespace Analytics
With your consent, I use Squarespace Analytics to understand in general terms how visitors use this website. This may include information such as page views, visits, traffic sources, device information and popular content.
The purpose is to understand how the website is used and to improve its content and structure.
Analytics and performance cookies remain restricted unless you consent to them through the cookie banner. Squarespace confirms that these cookies are used to populate its analytics reports, including visitor and traffic information.
The legal basis is Article 6(1)(a) GDPR.
You can withdraw your consent at any time through Cookie Settings.
6. Contact form and email enquiries
If you contact me using the contact form or by email, I process the information you provide in order to respond to your enquiry.
This may include:
your name
your email address
the subject of your enquiry
your message
any other information you voluntarily provide
Contact form submissions are processed through Squarespace. Where the form includes a required email address, Squarespace also stores the submitter and the submitted information in its Contacts and Form Submitters functions.
The legal basis is Article 6(1)(b) GDPR where your enquiry relates to a possible contractual relationship, such as an enquiry about purchasing a print.
For other enquiries, the legal basis is Article 6(1)(f) GDPR. My legitimate interest is responding to messages and communicating with visitors to this website.
I retain enquiries only for as long as necessary to respond and deal with the matter concerned. If an enquiry results in a contractual relationship or other legally relevant correspondence, statutory retention obligations may apply.
7. Newsletter
You can voluntarily subscribe to my photography newsletter.
The newsletter may include new photographs, journal stories, project updates and occasional information about my photographic work.
Newsletter subscriptions are managed through Squarespace mailing lists. Subscribers are stored in Squarespace’s Contacts and Lists & Segments functions. Squarespace mailing lists can be used to collect subscribers even before a paid Squarespace Email Campaigns subscription is activated.
When confirmation by email is enabled, you will receive an email asking you to confirm your subscription before you are added to the active mailing list.
The legal basis for processing your email address for the newsletter is your consent under Article 6(1)(a) GDPR.
You can withdraw your consent at any time by using the unsubscribe link in a newsletter or by contacting me at photography@michaelknaf.com.
After unsubscribing, your email address will no longer be used to send marketing emails. Information necessary to demonstrate that consent was previously given may be retained where required to comply with legal obligations.
If Squarespace Email Campaigns is used to send newsletters, Squarespace may provide aggregated or campaign-related information such as delivery, opening, click and unsubscribe statistics.
8. International data transfers
Squarespace is an international service provider and personal data may be processed outside the European Economic Area.
Where European data protection law requires additional safeguards for such transfers, Squarespace states that it uses mechanisms including the European Commission’s Standard Contractual Clauses.
9. Data retention
Personal data is retained only for as long as necessary for the purpose for which it was collected or for as long as required by applicable law.
In particular:
contact enquiries are retained until the enquiry has been dealt with and no longer needs to be kept;
newsletter data is processed until you unsubscribe or withdraw your consent, subject to any legally required documentation of consent;
technical and analytics information is retained according to the relevant Squarespace system and cookie retention periods.
10. SSL/TLS encryption
This website uses SSL/TLS encryption to protect information transmitted between your browser and the website.
You can recognise an encrypted connection by the https:// address and the security indicator shown by your browser.
11. Your rights under the GDPR
Where the legal requirements are met, you have the right to:
request access to your personal data;
request correction of inaccurate personal data;
request deletion of your personal data;
request restriction of processing;
receive personal data you have provided in a portable format;
object to certain processing based on legitimate interests;
withdraw consent at any time with effect for the future.
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
These rights arise in particular from Articles 15 to 21 GDPR.
To exercise your rights, contact:
12. Right to lodge a complaint
You also have the right to lodge a complaint with a competent data protection supervisory authority.
The supervisory authority responsible for private organisations based in Hesse is:
Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Wilhelmstraße 7
65185 Wiesbaden
Germany
Email: poststelle@datenschutz.hessen.de
Phone: +49 611 1408-0
The Hessian supervisory authority confirms that it is responsible for private companies and organisations based in Hesse.
13. Changes to this Privacy Policy
I may update this Privacy Policy if the website, the services used on it or the applicable legal requirements change.
The current version is always available on this website.