Privacy Policy

At Lefti Samo Pictures, we value your privacy. This policy explains how we collect and protect your data when you visit our studio, shop, or use our communication tools.

1. Controller

2. What We Collect

Interaction: When you contact us via email, we store your details to process your inquiry (Art. 6(1)(b) GDPR).

Shop Orders: To fulfill your purchases (LUTs, Digital Assets), we collect billing details. This data is stored for 10 years to comply with German tax laws (HGB/AO).

Technical Data: Our server logs record technical data (IP address, Browser type) to ensure site security (Art. 6(1)(f) GDPR).

3. Analytics

Google Analytics: We use Google Analytics (Google Ireland Ltd.) with your consent (Art. 6(1)(a) GDPR) to analyze usage. Data is anonymized. Opt-out Link.

Umami Analytics (Self-Hosted): To protect your privacy further, we use Umami. Unlike other tools, Umami is hosted on our own IONOS VPS. It does not use cookies, does not collect personal data, and anonymizes all information. The legal basis is Art. 6(1)(f) GDPR (Legitimate interest in web optimization).

4. Live-Chat (Chatwoot)

We offer a Live-Chat service via Chatwoot to provide real-time support. Chatwoot is self-hosted on our secure IONOS VPS servers (chat.leftisamo.com).

Data processed: Chat history, IP address, and any information you provide (e.g., Name, Email). Chatwoot sets a necessary session cookie to maintain the chat connection across subpages. Legal basis: Art. 6(1)(b) GDPR (Support for orders/inquiries) or Art. 6(1)(f) GDPR (Legitimate interest in efficient customer communication).

5. Payments & International Transfer

We use trusted partners (PayPal, Apple Pay, Stripe, Google Pay) to process payments. For US-based services, protection is ensured via the EU-U.S. Data Privacy Framework or standard contractual clauses.

6. Google Web Fonts

This site uses Google Web Fonts for a consistent visual experience. Your browser loads fonts into its cache. If not hosted locally, Google may learn your IP address (Art. 6(1)(f) GDPR).

7. Media & Hosting

YouTube: Videos are embedded in “Extended Data Protection Mode”. Data is only sent to YouTube if you play the video.

Hosting: Our website and self-hosted services (Umami, Chatwoot) are hosted on VPS servers provided by IONOS SE (Germany). We have a Data Processing Agreement (AV-Vertrag) in place according to Art. 28 GDPR to ensure your data stays within secure EU-compliant infrastructures.

8. Your Rights

You have the right to Access, Rectify, or Erase your data (Art. 15-21 GDPR) and to lodge a complaint with the Hamburg Commissioner for Data Protection. For concerns, contact us at info@leftisamo.com.

Last Updated: January 2026