Privacy Notice for Photographers

We’re glad you’re part of Contrima. It’s very important to us that you feel well taken care of here—and that includes being able to understand at any time what happens to your data. On the following pages, we’ll therefore explain to you in detail and as clearly as possible which personal data we process and why. This notice applies specifically to you as a photographer who has a subscription with us or would like to sign up for one. It supplements our general privacy policy, which you can read here at any time: Privacy Policy. If you have any questions, we’re happy to help.

Version 2 · Jul 26, 2026

Privacy Notice: Information Sheet for Photographers

Contrima is committed to protecting your privacy. With the following information, we provide you with details regarding the processing of personal data by Contrima. This privacy notice explicitly refers to data processing activities that photographers who are or wish to become our subscription customers. They supplement our general privacy policy, which you can find at the following link: Privacy Policy.

I. Data Controller

The data controller is Contrima GmbH, represented by its managing director, Mr. Mark Reinhardt, Enzianweg 29, 71384 Weinstadt (hereinafter “CONTRIMA”).

Contact address: info@contrima.com

II. Processing of Personal Data, Legal Bases

This Privacy Policy informs you, in accordance with Art. 12 et seq. of the GDPR, about the handling of your personal data when you create an account with us or already have one. In particular, it explains what data we collect and for what purposes we use it. We also inform you about how and for what purpose this is done.

We process your personal data in accordance with Article 6(1) of the GDPR, i.e., for the processing of your personal data, we either have your consent or there is another legal basis for doing so. We also work with service providers who process your personal data on our behalf (e.g., hosting the CONTRIMA website).

Personal data is any information relating to an identified or identifiable natural person (hereinafter “data subject”); ; a natural person is considered identifiable if they can be identified, directly or indirectly, in particular by association with an identifier such as a name, an identification number, location data, an online identifier, or one or more specific characteristics that reflect the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person (see Art. 4(1) of the GDPR). Personal data therefore includes data that can be linked to a specific individual, such as an IP address. Other examples include: title, first name, last name, job title, email address, company, street, ZIP code, and city.

Processing means any operation or set of operations performed on personal data, whether or not by automated means, data, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or any other form of provision, the alignment or linking, restriction, erasure, or destruction (see Art. 4(2) of the GDPR).

III. Purposes and Legal Bases for Data Processing

1. Registration

To use the CONTRIMA platform and the services it offers, we provide the option to create a user account linked to your email address. The actions you perform on the website can then be attributed to this account. In order to complete the registration process, you must provide the following personal data: first and last name, email address.

The legal basis for data processing is the user relationship established upon registration (Art. 6(1)(b) GDPR). Providing your data is required for registration, as otherwise a user account associated with you cannot be created. Your data will be stored for the duration of the user relationship and to comply with any applicable retention requirements.

2. Contracts and Subscriptions

To use the services offered by the CONTRIMA platform, you can sign up for a subscription (Personal, Professional) or first click to get a trial account.

When you sign up for a subscription, we will ask you for various additional data, including, in particular, address, billing, and payment information. We use this information to provide the subscription and to bill you. Data processing is legally permitted for the purpose of fulfilling the contract being entered into (Art. 6(1)(b) GDPR). Providing the data we request is necessary to complete the subscription. Your data record will be stored in our database for the duration of the subscription. Any storage beyond this period is only for the purpose of complying with the legal retention obligations to which we are subject.

In the case of a trial subscription, the processing of the data we request is permitted for the purpose of fulfilling any resulting contracts as well as to safeguard our legitimate interests (Art. 6(1)(b), (f) GDPR). Providing your data is voluntary, but it is required for the provision of our services.

3. Communication via Your User Account / by Email

In your user account, we will notify you of new information regarding your projects and collections (such as a notification that all claimings have been processed or that a response has been received from a person depicted). The legal basis for this is Art. 6(1)(b) of the GDPR.

Based on the consent you have provided—which you may revoke at any time—we also communicate with you via email for promotional purposes. For this purpose, we use your profile data, in particular your email address, which you entered during registration. The purpose of the sending of emails is to introduce you to new features and to inform you about updates to our range of services. You can revoke your consent to the processing of your data in connection with the notifications described here at any time, with effect for the future, in the settings of your user account, so that you will no longer receive any messages.

IV. Payment

To process payments (such as for a subscription), we use the payment service provider Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, D02 H210, Dublin, Ireland (hereinafter: “Stripe”). When you sign up for a paid subscription, the data required for payment (e.g., email address, payment or account information) is transmitted directly to Stripe and processed there. The payment methods available depend on the options offered by Stripe and enabled by CONTRIMA. Please note: We do not store any banking information in our systems. We merely keep track of the amounts due and whether they have been paid.

Stripe may transfer data to the U.S. and is certified under the EU-U.S. Data Privacy Framework. For more information: https://stripe.com/de/privacy.

  1. When you make a payment by credit card, you will be prompted to enter payment details (email address, credit card information). The data is transmitted directly to Stripe with a transaction ID and processed there. We receive only a confirmation from Stripe that the payment has been made, as well as the data necessary to assign the payment to your account.

  2. Depending on the selected payment method, the data required to process the payment (specifically your name, your billing and, if applicable, shipping address, your email address, the amount to be paid, and order details, as well as your IP address (for fraud prevention and geolocation)) are also transmitted to the respective payment service provider or other parties involved in the payment processing. Please note that these providers may also process personal data in some cases in countries outside the EU or the EEA. These providers base such data transfers on appropriate safeguards. Please note that these providers may, in some cases, process personal data in countries outside the EU or the EEA. These providers base such data transfers on appropriate safeguards, such as, for example, binding internal data protection policies or standard contractual clauses, and the service providers are also certified under the EU-U.S. Data Privacy Framework.

    • If you select PayPal as your payment method, the data required for the payment processing will be transmitted directly to Stripe and processed there. You will then be redirected to the PayPal website to continue the payment process. The provider of this payment service is PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. Stripe transmits the data necessary for the transaction to PayPal. After the payment is completed, PayPal notifies us via Stripe of the successful transaction, as well as your email address and name on file with PayPal. For more information on data protection at PayPal, please see PayPal’s Privacy Policy at: PayPal Privacy Policy.
    • If you select Apple Pay as your payment method, the data required for the payment processing is transmitted directly to Stripe and processed there. You will then be redirected to the Apple Pay page to continue the payment process. The provider of this payment service is Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland. Stripe transmits the data necessary for the transaction to Apple Pay. After successful payment, Apple Pay notifies us via Stripe of the successful transaction, as well as your email address on file with Apple Pay and your name. For more information on Apple’s privacy practices, please see: Apple Privacy Policy.
    • If you select Amazon Pay as your payment method, the data required for the payment processing is transmitted directly to Stripe and processed there. You will then be redirected to the Amazon Pay page to complete the payment process. The provider of this payment service is Amazon Payments Europe S.C.A., 38 avenue John F. Kennedy, L-1855 Luxembourg. Stripe transmits the data necessary for the transaction to Amazon Pay. After successful payment, Amazon Pay notifies us via Stripe of the successful transaction, as well as your email address and name on file with Amazon Pay. For more information on Amazon’s privacy practices, see: Amazon Payments Europe Privacy Policy – Personal Accounts.
    • If you select Klarna as your payment method, the data required for the payment processing is transmitted directly to Stripe and processed there. You will then be redirected to the Klarna website to complete the remaining steps of the payment process. The provider of this payment service is Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden. Stripe transmits the data necessary for the transaction to Klarna. After successful payment, Klarna notifies us via Stripe of the successful transaction, as well as your email address and name on file with Klarna. For more information on data protection at Klarna, please visit: Privacy Policy | Klarna Germany.

V. Your Rights as a Data Subject

  1. Right to Withdraw Consent: You may withdraw your consent to the processing of personal data, which was granted pursuant to Art. 6(1)(a) of the GDPR, at any time by notifying us. Please note that the withdrawal is effective only for the future. Processing that took place prior to the withdrawal is not affected by this. To withdraw your consent, an informal notification—e.g., via email—to us at info@contrima.com is sufficient.

  2. Right to Object: You have the right, under the conditions set forth in Article 21 of the GDPR—specifically, in cases of processing based on legitimate interests pursuant to Article 6(1)(f) of the GDPR—to object to the processing of your personal data, in which case we must cease processing your personal data. The right to object applies only within the limits set forth in Article 21 of the GDPR. In addition, our interests may preclude a cessation of processing, meaning that despite your objection, we are still entitled to process your personal data. We will act on an objection to any direct marketing measures immediately and without further weighing of the existing interests.

Information about your right to object under Art. 21 of the GDPR: You have the right to object at any time to the processing of your data that is based on Art. 6(1), sentence 1, (f) of the GDPR (data processing based on a balancing of interests) or Article 6, paragraph 1, sentence 1, subparagraph (e) of the GDPR (data processing in the public interest), if there are grounds for doing so arising from your specific situation. If you object, we will no longer process your personal data, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims. The objection may be submitted in any form and should, if possible, be addressed to: info@contrima.com

  1. You have the right to request confirmation from us as to whether we process personal data concerning you. If this is the case, you have a right to access this personal data to the extent provided by law (Art. 15 GDPR in conjunction with § 34 BDSG). You also have the right to have inaccurate personal data concerning you rectified and, where applicable, to have it erased.

  2. You also have the right to request the rectification of any incorrect personal data concerning you, and, where applicable—taking into account the purposes of the processing—to request the completion of incomplete personal data, including by means of a supplementary statement (Article 16 of the GDPR). (Article 16 of the GDPR).

  3. In the cases specified in Article 17(1)(a) through (f) of the GDPR, you are also entitled to the right to erasure of personal data, provided that no exception under Article 17(3) of the GDPR applies, as well as, in the cases covered by Article 18(1) of the GDPR, a right to restriction of the processing.

  4. In the cases specified in Article 20(1) of the GDPR, you also have the right to data portability.

  5. You have the right to lodge a complaint with a supervisory authority, if you believe that the processing of your personal data violates the GDPR. The competent lead supervisory authority for us is: The State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg (LfDI BW), P.O. Box 10 29 32, 70025 Stuttgart, email: poststelle@lfdi.bwl.de, Website: baden-wuerttemberg.datenschutz.de.

Version 2 · Jul 26, 2026

Privacy Notice: Information Sheet for Photographers

Contrima is committed to protecting your privacy. With the following information, we provide you with details regarding the processing of personal data by Contrima. This privacy notice expressly relates to data processing operations that photographers who are, or wish to become, our subscription customers. They supplement our general privacy policy, which you can find via the following link: Privacy Policy.

I. Data Controller

The data controller is Contrima GmbH, represented by its managing director, Mr Mark Reinhardt, Enzianweg 29, 71384 Weinstadt (hereinafter “CONTRIMA”).

Contact address: info@contrima.com

II. Processing of personal data, legal bases

This privacy notice informs you, in accordance with Article 12 et seq. of the GDPR, about the handling of your personal data when you create an account with us or already have one. In particular, it explains what data we collect and for what purpose we use it. We also inform you about how and for what purpose this is done.

We process your personal data in accordance with Article 6(1) of the GDPR, i.e. for the processing of your personal data, we either have your consent or there is another legal basis for doing so. We also work with service providers who process your personal data on our behalf (e.g. hosting the CONTRIMA website).

Personal data is any information relating to an identified or identifiable natural person (hereinafter referred to as the ‘data subject’) ; a natural person is considered to be identifiable if they can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or one or more specific characteristics that reflect the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person (see Article 4(1) of the GDPR). Personal data therefore includes data that can be linked to an individual, such as an IP address. Other examples include: title, first name, surname, job title, email address, company, street, postcode and town.

Processing means any operation or set of operations, whether or not carried out by automated means, performed on personal data data, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction (see Article 4(2) of the GDPR).

III. Purposes and legal bases for the processing of data

1. Registration

To use the CONTRIMA platform and the services it provides, we offer the option to create a user account linked to your email address. The actions carried out on the website can then be attributed to this account. In order to complete the registration process, you must provide the following personal data: first name and surname, email address.

The legal basis for data processing is the user relationship established upon registration (Article 6(1)(b) of the GDPR). The provision of your data is therefore necessary for registration, as otherwise a user account associated with you cannot be created. Your data will be stored for the duration of the user relationship and in accordance with any applicable retention obligations.

2. Contracts and subscriptions

To use the services offered by the CONTRIMA platform, you can take out a subscription (Personal, Professional) with us or first sign up for a trial account.

When taking out a subscription, we will ask you for various additional details, including, in particular, address, billing and payment details. We use these to provide the subscription and to invoice you. Data processing is permitted by law for the purpose of fulfilling the contract entered into (Article 6(1)(b) of the GDPR). The provision of the data we request is necessary to take out the subscription. Your data record will be stored in our database for the duration of the subscription. Any storage beyond this period is solely for the purpose of complying with the statutory retention obligations to which we are subject.

In the case of a trial subscription, the processing of the data we request is permitted for the purpose of fulfilling any contracts entered into and to safeguard our legitimate interests (Article 6(1)(b) and (f) of the GDPR). Providing your data is voluntary, but is required for the provision of our service.

3. Communication via your user account / by email

In your user account, we will keep you informed of new information regarding your projects and collections (such as notification that all claims have been resolved or that a response has been received from a person depicted). The legal basis for this is Article 6(1)(b) of the GDPR.

Based on the consent you have given, which may be withdrawn at any time, we also communicate with you via email for marketing purposes. For this, we use your profile data, in particular the email address you provided during registration. The purpose of the sending of emails is to introduce you to new features and to inform you about updates to our range of services. You may withdraw your consent to the processing of your data in connection with the notifications described here at any time, with effect for the future, in the settings of your user account, so that you will no longer receive any messages.

IV. Payment

To process payments (such as for a subscription), we use the payment service provider Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, D02 H210, Dublin, Ireland (hereinafter: ‘Stripe’). When you take out a paid subscription, the data required for payment (e.g. email address, payment or bank account details) is transmitted directly to Stripe and processed there. The payment methods available depend on the options offered by Stripe and activated by CONTRIMA at any given time. Please note: We do not store any bank details in our systems ourselves. We merely record the amounts due and whether they have been paid.

Stripe may transfer data to the USA and is certified under the EU-US Data Privacy Framework. Further information: https://stripe.com/de/privacy.

  1. When you make a payment by credit card, you will be asked to provide payment details (email address, credit card details). The data is transmitted directly to Stripe with a transaction ID and processed there. We only receive confirmation from Stripe that the payment has been made, as well as data necessary to link the payment to your account.

  2. Depending on the payment method selected, the data required to process the payment (in particular your name, your billing and, where applicable, delivery address, your email address, the amount to be paid and order details, as well as your IP address (for fraud prevention and geolocation)) also transmitted to the respective payment service provider or other parties involved in the payment processing. Please note that these providers may, in some cases, also process personal data in countries outside the EU or the EEA. These providers base such data transfers on appropriate safeguards. Please note that these providers may, in some cases, process personal data in countries outside the EU or the EEA. These providers base such data transfers on appropriate safeguards, such as, for example, binding internal data protection policies or standard contractual clauses, and the service providers are also certified under the EU-US Data Privacy Framework.

    • If you select PayPal as your payment method, the data required for the payment transaction will be transmitted directly to Stripe and processed there. You will then be redirected to the PayPal website to complete the payment process. You will then be redirected to the PayPal website to continue with the payment process. The provider of this payment service is PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg. Stripe transmits the data required for the transaction to PayPal. Once the payment has been successfully completed, PayPal notifies us via Stripe of the successful transaction, as well as your email address and name as held on file with PayPal. Further information on data protection at PayPal can be found in PayPal’s privacy policy at: PayPal Privacy Policy.
    • If you select Apple Pay as your payment method, the data required for the payment processing will be transmitted directly to Stripe and processed there. You will then be redirected to the Apple Pay page to continue with the payment process. The provider of this payment service is Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, You will then be redirected to the Apple Pay page to continue with the payment process. The provider of this payment service is Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland. Stripe transmits the data required for the transaction to Apple Pay. Once payment has been successfully completed, Apple Pay notifies us via Stripe of the successful transaction, as well as your email address on file with Apple Pay and your name. You can find further information on Apple’s data protection policy at: Apple Privacy Policy.
    • If you select Amazon Pay as your payment method, the data required for the payment processing is transmitted directly to Stripe and processed there. You will then be redirected to the Amazon Pay page to continue with the payment process. The provider of this payment service is Amazon Payments Europe S.C.A., 38 avenue John F. Kennedy, L-1855 Luxembourg. Stripe transmits the data required for the transaction to Amazon Pay. Once the payment has been made, Amazon Pay informs us via Stripe of the successful transaction, as well as your email address and name as held by Amazon Pay. Further information on data protection at Amazon can be found at: Amazon Payments Europe Privacy Policy – Personal Accounts.
    • If you select Klarna as your payment method, the data required for the payment processing is transmitted directly to Stripe and processed there. You will then be redirected to the Klarna website to complete the payment process. The provider of this payment service is Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden. Stripe transmits the data required for the transaction to Klarna. Once payment has been successfully completed, Klarna notifies us via Stripe of the successful transaction, as well as your email address and name as held by Klarna. Further information on data protection at Klarna can be found at: Privacy Policy | Klarna Germany.

V. Your rights as a data subject

  1. Right to withdraw consent: You may withdraw your consent to the processing of personal data, given under Article 6(1)(a) of the GDPR, at any time by notifying us. Please note that the withdrawal only applies from the point in time of withdrawal onwards. Processing carried out prior to the withdrawal is not affected by this. To withdraw your consent, an informal notification, e.g. by email to us, is sufficient: info@contrima.com

  2. Right to object: You are entitled, subject to the conditions set out in Article 21 of the GDPR, and consequently in the case of processing carried out on the basis of a legitimate interest pursuant to Article 6(1)(f) of the GDPR, to object to the processing of your personal data, meaning that we must cease processing your personal data. The right to object applies only within the limits set out in Article 21 of the GDPR. Furthermore, our interests may preclude a cessation of processing, meaning that, despite your objection, we are still entitled to process your personal data. We will take any objection to direct marketing measures into account immediately and without further weighing up the existing interests.

Information regarding your right to object under Article 21 of the GDPR: You have the right to object at any time to the processing of your data carried out on the basis of Article 6(1), first sentence, (f) of the GDPR (data processing based on a balancing of interests) or Article 6 (1), first sentence, (e) of the GDPR (data processing in the public interest), if there are grounds arising from your particular circumstances. If you object, we will no longer process your personal data, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims. The objection may be made in any form and should, where possible, be addressed to: info@contrima.com

  1. You have the right to request confirmation from us as to whether we are processing personal data relating to you. If this is the case, you have the right to access this personal data to the extent provided for by law (Article 15 of the GDPR in conjunction with Section 34 of the BDSG).

  2. You also have the right to request the rectification of any incorrect personal data concerning you, and, where applicable – taking into account the purposes of the processing – to request the completion of incomplete personal data, including by means of a supplementary statement (Article 16 of the GDPR). In the cases referred to in Article 17(1)(a) to (f) of the GDPR, you are also entitled to the erasure of personal data, provided that

  3. In the cases specified in Article 17(1)(a) to (f) of the GDPR, you are also entitled to the erasure of personal data, provided that no exception under Article 17(3) of the GDPR applies, as well as, in the cases referred to in Article 18(1) of the GDPR, a right to restriction of the processing.

  4. In the cases referred to in Article 20(1) of the GDPR, you also have a right to data portability.

  5. You have the right to lodge a complaint with a supervisory authority, if you believe that the processing of your personal data infringes the GDPR. The competent lead supervisory authority for us is: The State Commissioner for Data Protection and Freedom of Information in Baden-Württemberg (LfDI BW), PO Box 10 29 32, 70025 Stuttgart, email: poststelle@lfdi.bwl.de, website: baden-wuerttemberg.datenschutz.de.

© 2026
All rights reserved.
Contact Legal Notice Privacy Policy Privacy Notice for Photographers Terms of Use Data Processing Agreement Restore Permanent Link