PRIVACY POLICY
Last updated: June 2026
1. Identity of the Controller
The controller responsible for the processing of your personal data within the meaning of the General Data Protection Regulation (GDPR) and the Luxembourg Law of 1 August 2018 on the organisation of the National Commission for Data Protection is:
pitski
Pit Weiler
1A, Rue Jean de Beck
L-7308 Heisdorf, Luxembourg
E-mail: info@pitweiler.lu
Website: www.pitski.lu
2. Data We Collect
We may collect and process the following categories of personal data:
- —Contact data: Name, e-mail address, and any information you voluntarily provide via the contact form.
- —Booking data: Preferred event dates, locations, and details related to your photography inquiry.
- —Technical data: IP address, browser type, and pages visited, collected automatically via server logs for security and performance purposes.
We do not collect sensitive data (e.g. health, political opinions, racial or ethnic origin) and we do not perform automated decision-making or profiling.
3. Purposes and Legal Basis for Processing
Your personal data is processed for the following purposes and on the following legal bases under Article 6 GDPR:
Responding to contact and booking inquiries
Article 6(1)(b) GDPR — performance of a pre-contractual or contractual relationship.
Sending follow-up communication related to your inquiry
Article 6(1)(b) GDPR — necessary steps at the request of the data subject prior to entering into a contract.
Compliance with legal obligations
Article 6(1)(c) GDPR — compliance with applicable Luxembourg and EU law.
Legitimate interests (e.g. website security, fraud prevention)
Article 6(1)(f) GDPR — legitimate interests pursued by the controller.
4. Photography & Image Rights
Photos taken during public sporting events are captured in the context of legitimate journalistic, artistic, and editorial activity. Individuals photographed in a public sporting context generally do not have a right to object under GDPR, as the processing is based on Article 6(1)(f) GDPR (legitimate interest) and, where applicable, journalistic or artistic freedom as provided under Luxembourg law.
However, if you believe a specific image featuring you has been published in a context that harms your rights or dignity, you may submit a removal request to info@pitweiler.lu. Each request will be reviewed individually.
Images submitted by clients or event organizers for portfolio or delivery purposes are processed solely for the purpose of fulfilling the agreed service and are not shared with third parties without consent.
5. Data Retention
Personal data collected via the contact form is retained for a maximum of 3 years from the date of last contact, unless a longer retention period is required by law (e.g. accounting obligations under Luxembourg law which require retention for 10 years).
Technical log data is retained for a maximum of 12 months for security purposes.
After expiry of the applicable retention period, your data is securely deleted or anonymised.
6. Recipients & Data Transfers
Your personal data is not sold, rented, or shared with third parties for marketing purposes. Data may be disclosed to:
- —Hosting provider: Hostinger International Ltd., Larnaca, Cyprus — for infrastructure and storage.
- —Payment processors or invoicing tools, if applicable, solely to fulfil the contracted service.
- —Public authorities, if required by applicable law.
Hostinger is an EEA-based provider. Any transfer outside the EEA is subject to appropriate safeguards as required by Chapter V of the GDPR.
7. Cookies & Tracking
This website may use technical cookies strictly necessary for the proper functioning of the site. No advertising cookies or third-party tracking cookies are deployed without your prior consent.
If analytics tools are used in the future, this policy will be updated and a cookie consent mechanism will be put in place in accordance with the ePrivacy Directive and Luxembourg law.
8. Your Rights
Under the GDPR and Luxembourg data protection law, you have the following rights:
Right of access (Art. 15 GDPR)
You may request confirmation of whether we process your personal data and obtain a copy.
Right to rectification (Art. 16 GDPR)
You may request correction of inaccurate or incomplete data.
Right to erasure (Art. 17 GDPR)
You may request deletion of your data where no legitimate purpose for retention exists.
Right to restriction (Art. 18 GDPR)
You may request that processing be restricted under certain conditions.
Right to data portability (Art. 20 GDPR)
You may request your data in a structured, machine-readable format where processing is based on consent or contract.
Right to object (Art. 21 GDPR)
You may object to processing based on legitimate interests, including profiling.
Right to withdraw consent
Where processing is based on consent, you may withdraw it at any time without affecting prior processing.
To exercise any of these rights, please contact: info@pitweiler.lu
9. Right to Lodge a Complaint
You have the right to lodge a complaint with the Luxembourg supervisory authority:
Commission Nationale pour la Protection des Données (CNPD)
15, Boulevard du Jazz
L-4370 Belvaux, Luxembourg
10. Changes to This Policy
This privacy policy may be updated periodically to reflect changes in our practices or applicable law. The date at the top of this page indicates when the policy was last revised. We encourage you to review it periodically.
11. Applicable Law
This privacy policy is governed by the General Data Protection Regulation (EU) 2016/679 and the Luxembourg Law of 1 August 2018 on the organisation of the National Commission for Data Protection and the general data protection framework.