Legal
Privacy policy
This is a translation for convenience. The binding version is the German Datenschutzerklärung. It covers photobox-gallery.com, this product page. Galleries running on subdomains are covered by the privacy policy of whoever operates them.
Controller
Till Heidrich – Content Creation, Rotdornweg 17, 21255 Tostedt, Germany, info@tillheidrich.de. See the legal notice for more.
What this page does, and what it does not
- It sets no cookies.
- It loads nothing from foreign servers: no CDN fonts, no maps, no embedded video, no social widgets.
- There is no analytics in place.
- There is no contact form. Contact goes by email and phone.
Hosting and server logs
The site runs on a server operated by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. On each request the web server processes technically necessary data: IP address, time, requested path, status code, bytes transferred, user agent. The legal basis is Art. 6(1)(f) GDPR, the legitimate interest in secure and stable operation. These logs are kept briefly and then deleted; they are not combined with other data and not used for analysis.
Sign-in forwarding
The sign-in page is only a switch: you enter the name of your
gallery and the browser jumps to name.photobox-gallery.com/admin. You enter
your credentials there, not here. This page never sees them.
So that you do not have to type the name every time, it is stored in your browser’s
local storage (key pb-subdomain), as is your choice of light
or dark appearance (pb-schema). Both stay on your device, are never transmitted
and can be cleared in your browser settings at any time. The legal basis is § 25(2)(2) TDDDG:
it is necessary for the service you explicitly requested.
Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21). Write to the address above. You may also lodge a complaint with a supervisory authority; the competent one here is the State Commissioner for Data Protection of Lower Saxony.
Changes
This policy is dated 19 September 2026.