Paul Graf
Privacy policy
Last updated:
This notice covers Paul Graf’s photography portfolio at paul-graf.com and the invitation page at model.paul-graf.com.
Who is responsible
Paul Graf
Switzerland
Privacy contact: contact@paul-graf.com
Visiting the website
Your browser sends technical information needed to deliver pages and photographs, including your IP address, requested URL, browser information, request time and, where supplied, a referring page. Hosting infrastructure may process this information in access and security logs to operate, protect and troubleshoot the site. The website application does not create its own visitor database or request logs.
Cookies and your language choice
The website code does not set cookies or use analytics, advertising pixels, fingerprinting or session recording. When you choose a language, it stores only the language code in your browser’s local storage under paul-graf-language. This preference is read on later visits, is not sent to us as a tracking identifier and has no automatic expiry. You can remove it by clearing this website’s data in your browser. Pages and images may also be cached by your browser for loading performance.
The language storage described above applies to the portfolio. The model invitation page uses ordinary language links and does not store your language choice.
Services and international processing
Railway hosts the website; the application is currently deployed in its Netherlands region. Railway is a US provider, and its network, support and subprocessors may process technical data in the United States and other countries. Its data processing terms describe transfer safeguards, including standard contractual clauses. GoDaddy provides DNS and the redirect from paul-graf.com to www.paul-graf.com and may handle connection data for those services. Provider notices linked below explain their processing. GitHub stores source code and supplies deployments; ordinary portfolio browsing does not load content directly from GitHub. Images, scripts and styles are served from this website; fonts use your device’s installed fonts. Forward Email processes incoming messages sent to contact@paul-graf.com to route them to the mailbox used for enquiries and orders.
Apple iCloud Mail hosts the receiving mailbox. Forward Email’s published processing terms list US and UK subprocessors and describe safeguards for international transfers, including standard contractual clauses where applicable. Apple may process email data internationally, including in the United States, under its published privacy terms.
Purpose and retention
Technical processing supports delivery, reliability and security. Where the GDPR applies, we rely on legitimate interests in operating a secure portfolio for that processing. The language preference provides the functionality you request. Railway currently documents a 30-day log access window for our Pro plan; this is not a guarantee that every provider-side copy is deleted after 30 days. Providers may retain security or legal records under their own policies. We do not keep a separate visitor log archive.
Where the GDPR applies, general enquiries are handled on the basis of our legitimate interest in responding to correspondence; steps you request before a book purchase and fulfilment of an order are based on contract; records required by law are retained to meet those legal obligations.
Contact and photographs
Book orders are arranged directly with Paul Graf by email. Order links open your email application. If you email us, we use your email address, message and any information you provide to respond and handle your enquiry or order. Correspondence is retained while needed for that purpose and for any applicable legal obligations or disputes. The portfolio displays photographs that may depict identifiable people. If you have a privacy concern about a photograph, contact us with its page or a description so we can review it. This site has no visitor accounts, uploads, newsletter signup, contact form, on-site checkout or payment processing, and does not sell visitor data or use it for targeted advertising.
Providing information by email is voluntary, but without the details needed to answer an enquiry or arrange an order, we may be unable to do so.
The invitation page links to WhatsApp with a draft message; no message is sent until you send it. The page loads no WhatsApp widget or tracking code. If you contact Paul through WhatsApp, he uses your phone number, profile information visible to him, messages and information you share to reply and arrange a shoot. Correspondence is kept only as needed for that purpose and applicable legal obligations or disputes. WhatsApp processes information under its own privacy policy. Using WhatsApp is optional; you may contact Paul by email instead.
Your choices and rights
Depending on the law that applies to you, you may request access, correction or deletion of your personal data, restriction of processing, portability or object to processing. You may also complain to the competent data protection authority. Contact the operator using the details above. We may ask for proportionate information to verify a request. Clearing site data removes the saved language preference from your device.
The website does not make automated decisions about you or profile you.
Changes to this notice
This notice is reviewed when the website’s features, providers or data practices change. Material changes are reflected here with a revised date. It describes the current site, not features that may be added later.