Privacy Policy

Controller

The controller responsible for data processing on this website is:
Matthias Schöning
Bensheimer Str. 11
51107 Köln
Germany
Phone: +49 151 59852475
Email: post@matthias-schoening.de

No data protection officer has been appointed, as there is no legal obligation to do so.

Summary

This website is a portfolio. It does not use cookies for advertising or analytics, no tracking and no social media plugins. Fonts and images are loaded directly from our own web space. Personal data is only processed to the extent technically required to operate the website, when embedded Vimeo videos are shown, and when you contact us on your own initiative. We use Umami for anonymous, cookie-free visitor statistics (see “Visitor statistics”).

Hosting

This website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. The servers are located in Germany. When you visit the website, STRATO processes the necessary data on our behalf. A data processing agreement pursuant to Art. 28 GDPR is in place with STRATO. The legal basis is our legitimate interest in providing the website securely and reliably (Art. 6(1)(f) GDPR).

Server log files

Each time you access the website, your browser automatically transmits information that is stored in server log files: IP address, date and time of access, requested page or file, amount of data transferred, status code (e.g. successful or not found), referrer URL, and browser type and operating system.

This data is not combined with other data sources and is not used to create user profiles. It is used solely to deliver the website, ensure its stability and security, and detect errors or misuse. The legal basis is Art. 6(1)(f) GDPR. The hosting provider deletes the log files automatically after a short period unless they are exceptionally needed for longer to investigate a security incident.

SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” in the address bar and the lock icon in your browser.

Embedded Vimeo videos

This website embeds videos from the Vimeo platform, provided by Vimeo.com, Inc., New York, USA. When you open a page with an embedded video, a connection to Vimeo’s servers is established. In particular, your IP address, information about your browser and device, and the page visited are transmitted to Vimeo. If you play a video, Vimeo also processes playback data.

We embed the videos using Vimeo’s “Do Not Track” parameter. According to Vimeo, this means no cookies or similar technologies are set to track your behaviour, and no session analytics data is collected. If you are logged in to Vimeo, Vimeo may still associate the visit with your account. To prevent this, log out of Vimeo first.

Videos are embedded on the basis of our legitimate interest in presenting our film work attractively and reliably (Art. 6(1)(f) GDPR). Vimeo is certified under the EU-U.S. Data Privacy Framework, so transfers to the USA are covered by an adequacy decision of the European Commission (Art. 45 GDPR).

For more information, see Vimeo’s privacy policy: https://vimeo.com/privacy

Visitor statistics (Umami)

To understand which content is of interest, we use the analytics service Umami Cloud provided by Umami Software, Inc., 28 Geary St, Suite 650 #243, San Francisco, USA. Umami does not set cookies and does not store any data on your device. Only aggregated information is collected: pages visited, referrer, approximate country or region, device type, screen size, browser and operating system. Your IP address is processed only briefly to derive an anonymous visitor identifier and your approximate location, and is not stored in the analytics data.

Analytics data is stored in Umami’s EU data region and deleted after six months at the latest. For technical services such as delivery, security and operational logging, Umami may also use service providers outside the EU. For such transfers to the USA, Umami has agreed to the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR). A data processing agreement pursuant to Art. 28 GDPR is in place with Umami.

The legal basis is our legitimate interest in privacy-friendly audience measurement (Art. 6(1)(f) GDPR). You may object to this processing at any time (Art. 21 GDPR).

More information: https://umami.is/privacy

Fonts

The fonts used on this website are stored locally on our web space. No connection to Google or other font providers is made when you visit the website.

Password-protected pages

Some project pages may be password protected. If you enter the password, it is stored only locally in your browser for the duration of the session (session storage), so you do not have to re-enter it on every page view. It is not transmitted to us. This storage is strictly necessary for the function you requested (Section 25(2) no. 2 TDDDG) and is deleted when you close the browser window.

Contact by email or phone

If you contact us by email or phone, we process the information you provide, such as your name, contact details and the content of your enquiry, in order to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract or pre-contractual steps (e.g. a project request), and otherwise our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR). We delete your data once it is no longer required for this purpose, unless statutory retention obligations (e.g. under commercial or tax law) apply.

Links to Instagram and Vimeo

This website contains simple links to our Instagram and Vimeo profiles. These are not plugins: merely visiting our website does not transmit any data to these providers. Only when you click a link are you taken to the provider’s website, where its own privacy policy applies.

Your rights

Within the scope of the law, you have the right at any time to:
– access the data we store about you (Art. 15 GDPR)
– rectification of inaccurate data (Art. 16 GDPR)
– erasure (Art. 17 GDPR)
– restriction of processing (Art. 18 GDPR)
– data portability (Art. 20 GDPR)
– withdraw any consent given, with effect for the future (Art. 7(3) GDPR)

Right to object: Where we process data on the basis of Art. 6(1)(f) GDPR, you may object to the processing at any time on grounds relating to your particular situation (Art. 21 GDPR).

For any data protection request, an informal message to post@matthias-schoening.de is sufficient.

Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Kavalleriestraße 2–4, 40213 Düsseldorf, Germany
www.ldi.nrw.de

All images and videos shown on this website are protected by copyright and are for viewing only. Any use, in whole or in part, requires prior written permission.

Last updated: November 2026