Legal & Privacy

01 / Privacy

Controller

Ihor Kostash / Impossible Pleasure
Email: business@impossiblepleasure.com

Website Hosting

This website is delivered through Cloudflare infrastructure. When you access the website, technically necessary connection and traffic data may be processed in order to deliver, secure and operate the website. Depending on the services enabled, this can include information such as IP addresses, request URLs, timestamps, browser or device information and security-related traffic metadata. The legal basis is Article 6(1)(f) GDPR. The legitimate interests are the secure, reliable and efficient delivery of the website and protection against misuse and attacks.

Cloudflare may process data in countries outside the European Economic Area. Cloudflare states that relevant international transfers are covered, as applicable, by the EU–US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses. Further information is available in Cloudflare's Privacy Policy and GDPR information.

Contact by Email, Contact Form and Booking Form

If you contact me by email, through the contact form or through the booking form, the information you provide is processed for the purpose of handling and responding to your inquiry. Where your inquiry concerns a potential booking, collaboration or contract, processing may be necessary to take steps at your request before entering into a contract; the legal basis is Article 6(1)(b) GDPR. For other inquiries, the legal basis is Article 6(1)(f) GDPR, based on the legitimate interest in receiving and responding to communications concerning this website and the presented work.

The contact and booking forms use FormSubmit (formsubmit.co), a third-party form delivery service. Contact-form submissions can include your name, email address, selected subject and message. Booking-form submissions can include your name, email address, booking type, company or organization, event or project date, location, budget and project details, depending on the information you choose to provide. This information is transmitted to FormSubmit so that the inquiry can be delivered to business@impossiblepleasure.com. FormSubmit states that form submissions are retained for 30 days. The FormSubmit reCAPTCHA option is explicitly disabled on this website; the forms use a non-interactive honeypot field as a basic anti-spam measure.

Providing the requested form fields is voluntary. Without the required name, email address and message or project information, the inquiry cannot be sent or answered through the form. Further information is available in FormSubmit's Privacy Policy.

External Links

This website contains links to external platforms and social networks. No social-media plugins are embedded. A connection to an external service is established only when you actively follow the corresponding link. Subsequent processing of personal data is governed by the respective external provider.

Event Photography

The Events section contains photographs taken at publicly accessible conventions, festivals and similar events. Identifiable attendees may appear as part of the documented event or in posed photographs. Where a person has expressly agreed to the taking and publication of a photograph, the processing is based on Article 6(1)(a) GDPR. For documentary photographs of publicly accessible events where processing is permissible following a balancing of interests, the legal basis is Article 6(1)(f) GDPR. The legitimate interest is to document professional appearances, encounters and activities connected with Impossible Pleasure and the respective event. Applicable German rules on the publication of images, including Sections 22 and 23 of the German Art Copyright Act (KunstUrhG), are observed.

Event photographs may remain in the website archive for as long as they are relevant to that documentation, subject to applicable legal rights. If you are identifiable in an image on this website and have questions or concerns about its publication, wish to object where applicable, or wish to withdraw consent for future use where consent is the legal basis, please contact business@impossiblepleasure.com.

Media Likes and Local Storage

Merely visiting the website does not create a media-like identifier in the visitor's browser. The like feature accesses browser local storage only when the visitor actively uses a Like control. At that point, an existing random identifier is read or, if none exists, a new random identifier is generated and stored. The identifier and the relevant portfolio or media item number are then used to remember the like state for that browser and to limit repeated likes from the same browser identifier. Storage in and access to the visitor's device for this purpose are limited to providing the Like function expressly requested by the visitor; Section 25(2) no. 2 TDDDG is relied upon for this device-side operation.

When a like is added or removed, the random identifier and the relevant item number are sent to a Cloudflare Worker and stored in a Cloudflare D1 database. The like records do not contain the visitor's name or email address, and public like counts are not displayed. To the extent the identifier constitutes personal data, the legal basis for this processing is Article 6(1)(f) GDPR. The legitimate interest is to provide the requested interaction feature and limit repeated likes from the same browser identifier.

A like record remains in the database until the like is removed using the same browser identifier or the record is deleted during database maintenance. Clearing browser site data removes the local identifier. A new identifier is created only if the visitor later uses a Like control again.

Cookies, Tracking and Analytics

The website itself does not include advertising trackers, third-party analytics scripts, external web fonts or marketing cookies. Local storage is used only for the media-like feature described above and is not written merely because a visitor opens the website. If analytics, embedded services, advertising technologies or other third-party tools are introduced later, this privacy information will be updated before those services are enabled.

Retention

FormSubmit states that contact-form and booking-form submissions are retained by its service for 30 days. Email correspondence received from form or direct-email inquiries is kept only for as long as needed to handle the inquiry and any resulting relationship, subject to applicable statutory retention obligations.

Your Rights

Subject to the applicable legal requirements, you may have rights including access to your personal data, rectification, erasure, restriction of processing, data portability and objection, as well as the right to lodge a complaint with a competent data protection supervisory authority.

Automated Decision-Making

No automated decision-making or profiling within the meaning of Article 22 GDPR takes place on this website.

Last Updated

August 2026