Last updated: 12 September 2026
Who is responsible
This privacy policy explains how personal data is processed when you visit luisdaserra.com or contact us about the photography portfolio.
The controller is:
Ludwig Blochberger, working under the artistic name Luis da Serra
Paul-Lincke-Ufer 37
10999 Berlin
Germany
Email: contact@luisdaserra.com
Hosting and server logs
This website is hosted by STRATO GmbH in Germany. To deliver pages and protect the service, the hosting infrastructure processes technical request data, including your IP address, the requested resource, access time, browser information and, where transmitted, the referring page. STRATO processes hosting data on our behalf.
The legal basis is Article 6(1)(f) GDPR: our legitimate interest in operating a reliable and secure website. According to STRATO, IP addresses used to detect and prevent attacks are retained for a maximum of seven days. The access logs made available to hosting customers contain anonymised IP addresses. Further information is available in STRATO’s information on hosting and data processing.
Contact by email
If you contact us, we process your email address, the information you provide and the correspondence needed to handle your enquiry. Providing this information is voluntary, but we need a way to reply.
For enquiries about a possible commission or licence, the legal basis is Article 6(1)(b) GDPR. For other correspondence, it is Article 6(1)(f) GDPR, based on our legitimate interest in responding to enquiries. Correspondence is retained for as long as needed to handle the matter and any applicable retention obligations or legal claims. We do not use an enquiry as consent to marketing emails.
Portfolio filters and browser storage
The website uses session storage in your browser to remember the selected portfolio filters and scroll position when you return from a series. It stores a page path, filter choices and scroll position, rather than your name or email address. This information remains in your browser and is normally removed when the browsing session ends. Its purpose is to provide the navigation function you use. You can clear it through your browser settings.
WordPress may also use functional cookies for authenticated administration. The public portfolio has no customer account, shopping cart or checkout.
Visitor statistics
The website includes Plausible Analytics. According to its provider, Plausible Insights OÜ, Estonia, this service does not use cookies or persistent identifiers and processes visitor statistics within the EU. Statistics include pages visited, referring websites, approximate location and device or browser categories. We use these statistics to understand which parts of the portfolio are visited. Where personal data is processed in providing this service, our legal basis is Article 6(1)(f) GDPR and our legitimate interest in understanding and improving the website. See Plausible’s visitor data policy.
The website also has Statify installed for local access statistics. It records page views and referring pages in the website database without storing visitors’ IP addresses or setting visitor cookies.
Fonts and technical resources
The public portfolio uses system fonts. WordPress styles and scripts are served from this website rather than Google Fonts, BootstrapCDN or the WordPress.com asset CDN. The previous Jetpack tracking scripts are no longer included on public pages.
Instagram and external links
The portfolio links to the Instagram profile @luis.daserra. This is an ordinary link, not an embedded Instagram feed. When you follow it, Instagram processes data under its own privacy policy. Other external websites likewise apply their own privacy notices. Messages you send us through Instagram are used to handle your enquiry; the platform also processes them under its own terms.
Your rights
Subject to the applicable conditions, you may request access to your personal data, correction, deletion, restriction of processing and data portability. Where processing relies on your consent, you may withdraw it for the future without affecting the lawfulness of earlier processing.
You may object to processing based on Article 6(1)(f) GDPR for reasons relating to your particular situation. Contact us using the details above.
You may also complain to a data protection supervisory authority, including the Berlin Commissioner for Data Protection and Freedom of Information, or the authority where you live or work. We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.