Datenschutzerklärung
Last updated: 11 September 2026
This Privacy Policy explains how Laurin Strele handles personal data when you visit laurinstrele.com, purchase a book or print, enquire about photography or workshops, or subscribe to Field Notes.
1. Who is responsible
The controller is Laurin Strele, Josef-Abentung-Weg 30a, 6091 Götzens, Austria.
Email: info@laurinstrele.com
Telephone: +43 664 1040511
You can use these contact details for privacy questions and requests concerning your personal data.
2. Website access and Shopify
The website and online shop are hosted by Shopify. For customers in the European Economic Area, Shopify's relevant entity is Shopify International Ltd., Ireland. When you browse the site, technical information such as your IP address, browser and device details, requested pages, timestamps and error information is processed to deliver the website, maintain security and prevent misuse. The legal basis is Laurin's legitimate interest in operating a reliable, secure website (Article 6(1)(f) GDPR). Data needed to provide a service you request is also processed under Article 6(1)(b) GDPR.
Shopify processes store and customer data to provide hosting, checkout, order management and related services. Shopify Network Intelligence is enabled: Shopify can combine information about interactions with this store, other merchants and Shopify to provide enhanced services, including personalisation, analytics, security and advertising. Shopify acts as a processor for some activities and as a controller for its own enhanced services. Information may be shared with Shopify and its service providers in other countries. Personalised advertising requires consent where applicable.
Details and choices: Shopify Consumer Privacy Policy, Shopify Data Processing Addendum and Shopify privacy portal.
3. Enquiries, photography and workshops
If you contact Laurin by email, telephone or the contact form, Laurin processes the contact details, enquiry topic, message and any materials you provide to respond and organise the requested work. For bookings and pre-contract enquiries, the legal basis is Article 6(1)(b) GDPR. General correspondence is handled on the basis of Laurin's legitimate interest in responding to enquiries (Article 6(1)(f) GDPR).
Only provide information needed for your enquiry. Any additional participant information needed for a workshop will be requested separately, with an explanation of its purpose and any recipients. Sending an enquiry does not subscribe you to the newsletter.
4. Orders, payments and delivery
For purchases, Laurin processes your name, contact details, billing and delivery addresses, order contents, payment status and correspondence to fulfil the contract, arrange delivery and handle support or returns (Article 6(1)(b) GDPR). Necessary information is shared with Shopify, the payment provider you select, and delivery or fulfilment providers. Accounting and tax records are processed to meet legal obligations (Article 6(1)(c) GDPR).
Payments are available through Shopify Payments and PayPal. Payment details are processed by the selected provider under its applicable privacy terms; Laurin receives information needed to confirm and administer the order. Providers may perform automated security and fraud checks. Contact Laurin if you have a question about an order affected by such a check. See Shopify's privacy information and PayPal's Privacy Statement.
5. Field Notes newsletter
If you subscribe to Field Notes, Laurin processes your email address, subscription preferences and consent records to send occasional updates about stories, books, exhibitions and workshops. Subscriptions are registered and managed through Shopify. If newsletters are sent through Shopify's messaging services, Shopify processes the recipient details needed for delivery. The legal basis is your consent (Article 6(1)(a) GDPR).
You can withdraw consent at any time through the unsubscribe link in an email or by contacting Laurin. This does not affect earlier lawful processing or necessary messages about an existing order. A limited record may be kept to document consent and respect your decision not to receive further marketing.
6. Cookies, analytics and advertising
The website uses cookies and similar technologies. Some support essential functions, such as the cart, checkout, security and remembering privacy choices. Optional technologies measure website use and advertising or support personalisation. Consent is the legal basis for optional cookies and related analytics or advertising processing where required (Article 6(1)(a) GDPR and applicable cookie rules).
- Google Analytics and Google Ads: These integrations measure visits, shopping actions and advertising results. Google can receive page and event information, device and browser details, IP addresses and identifiers, and may associate information with other Google data depending on your settings. Google Ireland Limited is the relevant Google entity for users in the EEA. See how Google uses information from partner sites and Google's Privacy Policy.
- Meta / Facebook and Instagram: The store uses Meta's pixel and server-side integration to measure advertising results and support relevant advertising. Events can include page visits, viewed products and purchases, together with technical identifiers and, where supplied by the integration, customer information used for matching. Meta may associate these events with a Facebook or Instagram account. See Meta's Privacy Policy and its Controller Addendum, which addresses responsibilities for shared event-data processing.
- Pinterest: The Pinterest integration measures visits and conversions and supports advertising. Pinterest can receive shopping events and identifiers and associate them with other Pinterest information. Its relevant entities include Pinterest Europe Ltd. and Pinterest, Inc. See Pinterest's Privacy Policy and personalisation and data settings.
- uptain: An uptain GmbH integration for shopping-interaction and conversion support is installed. Depending on its activation and configuration, its functions can process technical and session information, such as clicks, time spent and cart activity. Optional tracking or marketing requires consent where applicable; installation alone does not establish that every optimisation function is in use. See uptain's privacy information. You may object to processing based on legitimate interests by contacting Laurin.
You can block or delete cookies in your browser and use the privacy settings offered by Google, Meta and Pinterest. Browser controls do not necessarily prevent server-side processing or remove data already received by a provider. Blocking essential cookies can affect shopping functions. For Shopify-related advertising and data-sharing choices, visit the Shopify privacy portal; you can also contact Laurin. The Shopify portal manages Shopify's processing and does not replace the separate controls of Google, Meta or Pinterest. Cookie information is available in Shopify's cookie notice and the provider notices linked above.
7. Security, external content and links
Shopify provides security and spam-prevention functions. Where a form triggers hCaptcha, Intuition Machines, Inc., USA, processes technical information and interaction signals to distinguish human visitors from automated traffic. The purpose is to protect forms and prevent abuse, based on Article 6(1)(f) GDPR. See hCaptcha's Privacy Policy.
The website links to social networks, publishers, partners and event or booking websites. Following a link takes you to a service with its own privacy terms. Embedded external media can transmit technical information to its provider when loaded.
8. Recipients and international transfers
Personal data is made available to the service providers described above and, where necessary, to email and IT providers, delivery partners, professional advisers and public authorities. Access is limited to the relevant purpose. Service providers acting on Laurin's behalf are subject to applicable data-processing obligations.
Some providers process data outside Austria and the EEA, including in Canada and the United States. Where required, transfers rely on an applicable adequacy decision or safeguards such as the European Commission's Standard Contractual Clauses. The relevant provider notices describe their arrangements. You may contact Laurin for further information or a copy of applicable safeguards.
9. How long data is kept
Data is retained for the purpose for which it was collected and for any applicable legal or claims-related retention period. Enquiry records are kept as needed to deal with the matter and related obligations. Newsletter information is kept until withdrawal, subject to limited consent and suppression records. Austrian accounting and tax records are generally retained for seven years from the end of the relevant calendar year, and longer where required for pending proceedings.
Technical and analytics retention depends on the purpose, security needs and the applicable service and cookie settings. When data is no longer needed and no retention obligation applies, it is deleted or anonymised.
10. Your rights
Subject to the applicable legal conditions, you may request access, correction, deletion, restriction of processing and data portability. You can withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
You may object to processing based on legitimate interests for reasons relating to your particular situation. You may object to direct marketing at any time. Contact info@laurinstrele.com to exercise these rights. Laurin may request proportionate information to verify your identity and will respond within the period required by law, normally one month.
If local law gives you a right to opt out of targeted advertising or the sale or sharing of personal information, you can exercise it by contacting Laurin or through the relevant provider's privacy controls. The Shopify privacy portal applies to Shopify's processing. Exercising privacy rights will not result in unlawful discrimination.
You may complain to your local supervisory authority or the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, Austria; email: dsb@dsb.gv.at.
11. Providing data and updates
Providing enquiry and newsletter information is voluntary. Without the details needed to respond, deliver an order or administer a requested service, Laurin may be unable to provide it. Optional marketing choices are separate from the information needed for a purchase.
This policy is updated when the website or its data-processing practices change. The date above identifies the current version.