Privacy Policy

Data Protection at a Glance

General Information

Data Controller

Hui WANG-STEPHAN
Aalkrautweg 50
22395 Hamburg

E-Mail: admin@huiportrait.com

Processing of Personal Data

When you visit this website, certain technical information (such as your IP address, browser type, and the date and time of access) may be collected automatically by the hosting provider and stored in server log files. This processing is carried out on the basis of Article 6(1)(f) GDPR, reflecting a legitimate interest in the secure and reliable operation of the website.

If you contact me by email, via a contact form, or through an online appointment booking system, the information you provide will be processed for the purpose of handling your enquiry and, where applicable, providing requested services. The legal basis for this processing is Article 6(1)(b) GDPR and/or Article 6(1)(a) GDPR.

Payment Processing

For paid services, payments may be processed through PayPal. In this case, the information required to complete the payment transaction will be transmitted to PayPal. PayPal’s privacy policy is available at:

https://www.paypal.com/uk/legalhub/privacy-full

Third-Party Services

This website may include content or services provided by third parties, including:

  • YouTube (video content)
  • Google services (such as Fonts, Maps, or Analytics, where used)
  • LinkedIn (profile or business page links)
  • Online appointment booking services (such as Calendly or Microsoft Bookings)

When such services are used, personal data, including your IP address, may be transmitted to the respective provider.

Data Retention

Personal data will be retained only for as long as necessary to respond to your enquiry, fulfil contractual obligations, or comply with applicable legal requirements.

Your Rights

Under the GDPR, you have the right to:

  • Request access to your personal data
  • Request correction of inaccurate personal data
  • Request erasure of your personal data
  • Request restriction of processing
  • Receive your personal data in a portable format
  • Object to processing based on legitimate interests
  • Withdraw consent at any time, where processing is based on consent

You also have the right to lodge a complaint with a competent data protection supervisory authority.

Data Security

Appropriate technical and organisational measures are implemented to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.