Privacy policy.
How personal data is handled.
1. Controller
Henk ReinickeHenk Reinicke Media
Bismarckstraße 23
20259 Hamburg
Germany
Email: contact@henks.pics
Telephone: +49 176 30605015
2. Website hosting and security
Hosting and the henks.pics email accounts are provided by ALL-INKL.COM – Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. Connection data, including IP address, request time, requested page, response status, browser information and referring page, is processed to deliver the website and protect it against abuse. The legal basis is Article 6(1)(f) GDPR: secure and reliable operation.
Website access logging and visitor statistics are disabled in our hosting account. This does not prevent the hosting provider from processing the technical data necessary to deliver the service and maintain its own infrastructure security. Where a specific security incident requires preservation, relevant data is retained only for the period necessary to investigate and resolve it. Website-side payment and withdrawal request limits use a keyed hash of the IP address rather than recording the raw IP address in those counters.
3. Browser storage and external content
There are no advertising trackers, visitor analytics, embedded social-media feeds or externally loaded fonts. Photographs, fonts and website scripts are served from this website. Links to Instagram and other websites transfer you to those services only when followed.
The print bag and checkout attempt are kept in session storage with a maximum validity of 24 hours. The selected delivery country, withdrawal-form review state and payment-return reference are also used to operate the requested checkout and prevent duplicate actions. Session storage normally ends with the tab session; restoration depends on your browser. You can remove it in your browser settings. Browser caching may retain website assets. This necessary storage serves the functions you request (§ 25(2)(2) TDDDG); associated personal-data processing is based on Article 6(1)(b) or (f) GDPR. Stripe may use its own storage when you visit its checkout; see its policy below.
4. Enquiries, orders and invoices
When you email or telephone us, we process your contact details and the information you provide to respond. Contract-related communication is based on Article 6(1)(b) GDPR; other enquiries on Article 6(1)(f), our legitimate interest in responding. Email is handled through ALL-INKL and accessed through our email applications.
For orders we process selected prints, paper sizes, quantities, prices, email, billing and delivery names/addresses, payment status and transaction references. This is necessary to conclude and perform the contract (Article 6(1)(b)). Invoice and tax records are processed to comply with legal obligations (Article 6(1)(c)). Order confirmations and PDF invoices are sent by email. We do not receive or store your complete payment-card number or security code.
5. Stripe and payment methods
Payment is handled through a redirect to Stripe Checkout. For European customers, the Stripe services include Stripe Payments Europe, Limited, Ireland, and the relevant Stripe group companies and payment-method providers. We transmit the order description, amount, selected delivery country and order reference. Stripe collects billing, delivery and payment details and returns the details needed to record your payment and fulfil the order.
Payment processing is based on Article 6(1)(b) GDPR. Stripe also processes information for its own fraud-prevention, security and legal obligations as described in its policy. Apple Pay, PayPal and other methods are available only where shown in checkout; using them also involves their respective providers.
Stripe processes data internationally, including in the United States. Its policy describes the applicable adequacy decisions and safeguards, including standard contractual clauses where required. Details, recipients and rights: Stripe privacy policy and Stripe Privacy Center.
6. Printing and shipping
To fulfil your order, we manually submit the necessary print selection, delivery name and address to theprintspace / Creativehub, operated by Printspace Studios Limited, 74 Kingsland Road, London E2 8DL, United Kingdom. Contact details are shared only where needed for delivery. Payment-card details are not passed to the printer by us. Production and delivery also involve the printer’s production partners and parcel carriers. The legal basis is Article 6(1)(b) GDPR.
Processing may involve the United Kingdom and the locations of relevant production and delivery partners. Applicable international-transfer requirements must be met, using an adequacy decision or other appropriate safeguards where required. Details: theprintspace privacy policy.
7. Withdrawal declarations
The online withdrawal form processes your name, email, identification of the contract, declaration and receipt timestamp. We retain the declaration and send an acknowledgement so that we can fulfil our obligations and handle returns or reimbursement (Article 6(1)(b) and (c) GDPR). A reason for withdrawal is not required. You may instead contact orders@henks.pics or use the postal address above.
8. Retention
Enquiries without a resulting contract are deleted when resolved, unless a continuing legal obligation or a specific legal claim requires retention. Contract-related correspondence is generally retained for six years and invoices/accounting vouchers for eight years, calculated from the end of the relevant calendar year. Longer retention applies where legally required, for example during an ongoing tax procedure. Other order data is deleted when fulfilment, applicable claims periods and legal retention requirements no longer require it.
Deletion includes removing unnecessary operational copies; statutory records are retained with restricted access. We do not use order details for unsolicited advertising.
9. Your rights
Subject to the conditions of the GDPR, you have rights of access, rectification, erasure, restriction and data portability. You may object to processing based on legitimate interests for reasons arising from your particular situation. Where processing relies on consent, you may withdraw it with future effect. Contact contact@henks.pics.
You can complain to a supervisory authority, including the authority at your habitual residence, workplace or the place of the alleged infringement. Our local authority is the Hamburg Commissioner for Data Protection and Freedom of Information.
10. Required data and automated decisions
Browsing requires connection data. Providing enquiry details is voluntary; sufficient information is needed to reply. Payment, billing and delivery details are necessary to complete an order. We do not use profiling or solely automated decisions with legal or similarly significant effects; payment providers may perform their own fraud and security checks as explained in their policies.