Privacy policy

Last updated: August 2026. This policy explains how plens.de processes personal data — including the role of creators on the platform.

1. What is plens?

plens.de is a platform for a collective of freelance photographers and videographers (“creators”). Creators publish shoots via a shooting ID, may show media in a public gallery, receive messages, and optionally accept purchases and tips via Stripe Connect.

plens provides the technical infrastructure (website, storage, panel, payment routing). Responsibility for uploaded media, profile statements, fulfilment of individual shoots, and tax/copyright duties lies with each creator for their own share. plens is not generally liable for third-party creator content or for a creator’s individual performance toward recipients; see also the imprint.

2. Controller (platform)

M. Eren
c/o plens.de, P.O. Box 80 03, 38130 Braunschweig, Germany
Email: web@plens.de
Phone: +49 5306 5568933

This controller operates plens.de and determines purposes and means of processing for platform operations (hosting, accounts, technical delivery, Stripe Connect payment routing, operational data storage).

3. Creators as controllers for their share

Each creator acts for their own share regarding shoots, media, profile content and the relationship with recipients (e.g. purchase, editing, delivery, tip purpose). This includes in particular:

  • lawfulness of uploaded photos/videos (copyright, personality, trademark and other third-party rights),
  • accuracy and permissibility of profile texts, links and details,
  • fulfilment and quality of their own service,
  • their own tax and accounting duties arising from income (sales, tips),
  • handling of personal data the creator collects or receives beyond the platform.

Where creators receive recipient data (name, email, messages, order details), they process it under their own responsibility to deliver their service. plens provides the tools and transfers data to the relevant creator for that purpose. For privacy questions about a specific shoot or creator service, contact the creator; for the platform itself, contact web@plens.de. We help assign requests and may forward them.

4. Principles

We process personal data only as needed to run plens.de and as permitted by the GDPR. No tracking, advertising or analytics tools are embedded. No Google Fonts, external CDNs or third-party trackers are used.

5. Hosting and server logs

Visits generate technical server logs (IP address, date/time, requested URL/file, HTTP status, referrer if provided, user agent). Legal basis: Art. 6(1)(f) GDPR. Logs are kept only as long as needed and then deleted or anonymised.

6. Cookies, session and language

We use a necessary session cookie for CSRF protection, language preference (DE/EN), votes, cart and creator-panel authentication. Legal basis: Art. 6(1)(f) GDPR / applicable ePrivacy rules. No cookie banner, because no non-essential cookies are set.

7. Shooting IDs and media

Creators upload photos and videos to a shooting ID. Recipients can open media via the ID, view/download (if allowed), vote, message or start purchases/tips. Media and metadata are linked to the respective creator.

For paid media, server-side watermarked previews are generated; originals stay locked until release/purchase handling. EXIF may be shown; GPS is not displayed. Retention is typically up to 60 days, earlier on request (usually 7 days). Legal basis: Art. 6(1)(b) or (f) GDPR.

8. Public gallery and creator profiles

Creators may publish selected gallery images and profile details (name, DE/EN texts, optional image, links). The creator decides what to publish and remains responsible for lawfulness and rights clearance. Legal basis: Art. 6(1)(f) and/or (b) GDPR.

9. Likes and dislikes

Votes are stored pseudonymously via a session key. Counts are not shown to visitors; creators see them in the panel. Legal basis: Art. 6(1)(f) GDPR.

10. Messages

If you message a creator, we process name, email, message body and related context (shooting ID, media, bid amount if any). Messages are emailed and stored in the creator panel. Recipient: the addressed creator. Legal basis: Art. 6(1)(b) or (f) GDPR.

11. Cart, orders, tips and payments (Stripe)

For paid-media orders we process name, email and optionally phone, address and notes. For tips we process payment metadata (amount, status, references); plens does not store card data.

Without the creator’s Stripe connection: purchase request only; no online payment on plens.de. Order data goes to the creator panel and email; payment/delivery is arranged by the creator.

With Stripe Connect: payment via Stripe Checkout. We store e.g. creator Stripe account ID, checkout session ID, payment intent reference, amount, status, timestamps and order/tip metadata. Image sales: 15% platform fee to plens; tips: 100% to the creator. Recipients: Stripe and the creator. Legal basis: Art. 6(1)(b) GDPR. Stripe privacy: stripe.com/privacy.

The agreement for the photo/video service or tip is generally between recipient and creator. plens provides the platform and — with Stripe — payment routing, and may receive the platform fee.

12. Creator accounts (panel)

We store login credentials (username, password hash), contact details, profile texts/images and operational data (IDs, media, messages, orders, stats). With Stripe Connect we store account ID and connection status — never creator secret API keys. Legal basis: Art. 6(1)(b) GDPR.

13. Applying as a creator / contact

If you contact us via join/contact channels, we process the details you provide for review and communication. Legal basis: Art. 6(1)(b) or (f) GDPR.

14. Email delivery

Transactional emails are sent via server mail (sendmail). No external marketing newsletter service is used.

15. Recipients and transfers

Data is generally processed on our systems in Germany/EU. Sharing happens only as needed for fulfilment (relevant creator, Stripe) or where legally required. Stripe may process data in the US under appropriate safeguards (e.g. SCCs). No transfers for tracking or advertising.

16. Retention

  • Shootings/media: typically up to 60 days, earlier on request (usually 7 days).
  • Messages and orders: as long as needed for processing and evidence.
  • Payment metadata: as long as needed for fulfilment, accounting and evidence.
  • Creator accounts: for the duration of use and legal retention duties.
  • Server logs: short-term, purpose-bound.
  • Session data: until session end/expiry.

17. Your rights

Under the GDPR you have rights of access, rectification, erasure, restriction, portability and objection (Art. 15–21). Contact web@plens.de. If a request concerns data a creator processes under their own responsibility, we will inform you and/or forward the request. You may also lodge a complaint with a supervisory authority, e.g. the Lower Saxony DPA (www.lfd.niedersachsen.de).

18. Security

We apply appropriate technical and organisational measures (e.g. panel access protection, CSRF protection, no card data on plens). Absolute security cannot be guaranteed.

19. No automated decision-making

No automated decision-making including profiling within the meaning of Art. 22 GDPR takes place.

20. Liability and content (short note)

Each creator is liable for their share: their media, profile content, service promises and compliance with applicable law. plens as platform operator is responsible for its own content and technical operations under applicable law; for third-party creator content, statutory hosting limits apply (see imprint). Unlawful content may be blocked or removed.

21. Changes

We may update this policy when the law, services or processing change. The version published on this page applies.