Privacy Policy

1. Controller

2. Principle

This website is used to present and license nature photography. Personal data is processed only to the extent required for operation, communication, orders, licensing, security or statutory duties.

• RMU Foto stands exclusively for nature photography.
• Slogan: Nat��rlicher geht nicht.
• The photographs are generally 100% unedited.
• Black-and-white photos originate from originally colour photographs.
• Delivery is made in the quality selected during the licensing process.

3. Hosting / server logs

This website is hosted by the following hosting provider:

cyon GmbH
Brunng�0�1sslein 12
4052 Basel, Switzerland

When this website is accessed, the hosting provider and/or web server automatically records server log files, in particular IP address, timestamp, accessed pages, referrer, browser information and status codes.

This processing is carried out to ensure operational security, system stability and protection against misuse.

4. Categories of processed data

• Order and contact data: name, address, phone, email, optional company
• Licence and order data: image IDs, licence parameters, prices, purpose information
• Buyout and series information: indications of buyout, affected image or series IDs, scope of provision
• Payment information: payment method and payment status, but no card or access data
• Security data: IP address, user agent, timestamp, technical verification data
• Communication data: contents of emails and enquiries
• Technical data: session cookies and LocalStorage, for example cart data

5. Purpose of data processing

• Processing image orders and licensing
• Communication and processing of orders
• Verification of the licence scope including buyout and provision of the agreed files
• Documentation and proof of licence conditions
• Ensuring secure website operation
• Enforcement and defence of legal claims

6. Legal bases

• Contract performance and pre-contractual measures
• Legitimate interests, in particular security, documentation and prevention of misuse
• Statutory retention obligations, in particular under Swiss Code of Obligations and tax law

7. Disclosure to third parties / processing by service providers

Disclosure takes place only to the extent required for hosting, IT operation or contract processing. No disclosure for marketing purposes takes place.

• Hosting: cyon GmbH for server operation, logs and backups
• Email communication: email service or provider used for delivery and storage of order and support emails

8. Data transfer abroad

The website is operated in Switzerland. Targeted transfer of data abroad is not intended. However, technical transfer via the internet, in particular email communication, may involve routing through infrastructure abroad in individual cases.

If data is transferred in an individual case to a country without an adequate level of data protection, this will only occur under suitable safeguards and to the extent permitted under Swiss data protection law.

9. Automated decisions

There is no automated decision-making and no profiling.

10. Retention and deletion

Order and contract data is retained according to statutory requirements, in particular under Swiss Code of Obligations and tax law, for up to 10 years.

Internal minimum retention period: 365 days.

Server logs and security data are deleted or anonymised as soon as reasonably possible, unless they are required for defence against attacks, investigation of misuse or preservation of evidence.

11. Cookies / LocalStorage

Only technically necessary cookies, sessions and LocalStorage are used. Tracking or marketing cookies are not used.

• Session cookie: technically necessary for page functions and security mechanisms
• LocalStorage: for example cart and licence configuration per image, stored only on your device in your browser

12. Rights of data subjects

• Access
• Correction
• Deletion or restriction, where permitted
• Objection
• Data release or transfer, where applicable

To exercise your rights, please contact us at rmufoto@bluewin.ch. You may also lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC).

13. Data security

Appropriate technical and organisational measures are used to protect personal data.

• Access protection and authorisation concepts
• Transport encryption via HTTPS
• Protection against misuse through technical checks and log analysis
• Minimisation of data collection to what is necessary for orders and licensing

14. Changes

This privacy policy may be amended. The current version published on this website applies.