Last updated: 12 August 2026
This website is a personal photography site run by Melle Koletzki. There is no company behind it and nothing on it is sold. I collect as little personal data as I reasonably can, and this policy explains exactly what happens to what is left.
Who is responsible
Melle Koletzki is the data controller for this website. The easiest way to reach me about anything in this policy is through the contact form.
What I collect, and why
1. The contact form
When you use the contact form I receive your first and last name, your email address, your message, and the photo reference you optionally enter. This is sent to me as an email. It is not stored in a database on this website.
- Legal basis: your consent, given by submitting the form.
- Retention: I keep the email for as long as the conversation is useful and clear out old correspondence periodically. Ask me to delete it sooner and I will.
2. Sending you an image
If you ask for a high-resolution image, I send it as a WeTransfer link. WeTransfer therefore receives your email address, purely in order to deliver the download. WeTransfer is a Dutch company and its own privacy statement applies to that transfer.
3. Comments
If you leave a comment, WordPress stores the name, email address and text you enter, together with your IP address and browser user agent string. Comments are publicly visible, so please do not put anything private in one. Your email address is never shown, but a hashed version of it may be sent to the Gravatar service (Automattic Inc., United States) to look up a profile picture.
- Legal basis: your consent.
- Retention: for as long as the comment is published.
4. Visitor statistics
I use WP Statistics, which runs entirely on this website’s own server. It sets no cookies and sends nothing to any third party. IP addresses are anonymised (the last part is stripped) and then hashed, so they cannot be traced back to you. I use it only to see roughly how many people read which page.
- Legal basis: legitimate interest in understanding how the site is used, with a negligible impact on your privacy.
- Retention: aggregated counts only; no identifiable visitor records are kept.
5. Server logs
My hosting provider, Keurig Online in the Netherlands, keeps standard technical logs of requests to the server, including IP addresses, for security and troubleshooting. They act as my processor.
What this site does not do
- No Google Analytics, no advertising trackers, no social media pixels.
- No selling, renting or trading of your data — to anyone, ever.
- No profiling and no automated decision-making.
- No newsletter or mailing list. I used to run one; I no longer do, and any list from that period is not in use.
Where your data goes
Everything is held on servers in the Netherlands. There are two exceptions, both described above: Gravatar, only when a comment avatar is loaded, and WeTransfer, only when I send you an image.
Your rights
Under the GDPR you can ask me to:
- tell you what data I hold about you
- correct it
- delete it
- restrict or object to how I use it
- hand it over in a portable format
- let you withdraw consent you previously gave, at any time
Ask through the contact form and I will respond within a month. If you are unhappy with how I handle it, you have the right to lodge a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens.
Security
The site is served over HTTPS, and WordPress and its plugins are kept up to date. No website can promise perfect security, but the amount of personal data held here is deliberately very small.
Cookies
See the separate Cookie Policy. In short: this site sets no tracking cookies and needs no cookie banner.
Changes to this policy
If anything changes I will update the date at the top of this page.