Privacy
Controller
The controller for the processing of personal data on this website is the provider of ksandar. Name and address are given in the imprint.
Please send questions about data protection and requests concerning your data to ale@ksandar.com.
In short
This website sets no cookies, uses no tracking and no analytics tools, and loads nothing from third-party services. Fonts and all other files come from this server.
Hosting and server log files
The website runs on a server in Switzerland. On every request, the web server stores technically necessary data in log files: IP address, date and time, requested address, status code, amount of data transferred, previously visited page, browser and operating system.
This data serves the operation and security of the website. It is not combined with other data and is deleted automatically after 14 days.
Light or dark appearance
If you switch the appearance, your browser remembers the choice in local storage (localStorage). It stays on your device and is not transmitted.
Enquiry form
When you send the form, the website sends your details – name, email, phone (if given), category, preferred date, message, for boudoir the confirmation that you are at least 18 years old, and the page language – as an email to ale@ksandar.com. It is delivered via the mail server of Infomaniak Network SA in Switzerland, where the mailbox is also located. The website itself does not store the details.
Against spam, the website keeps a check value (hash) of your IP address for at most one hour to prevent too many enquiries in a short time – not the IP address itself. After that it is deleted.
I use your details only to answer your enquiry and to plan a shoot. If no booking results, I delete the email after 12 months. If a booking results, I keep the details as long as the booking requires and the law demands.
Applying for a TFP shoot
With the form on the “TFP shoot” page (linked in the footer) you can apply for a TFP shoot. I process the details you give: first and last name or artist name, email, phone and Instagram or portfolio link (if given), place of residence or region, year of birth and the confirmation that you are at least 18 years old, voluntarily your gender or pronouns, height, clothing size, hair and eye colour, tattoos and piercings, your experience, idea, preferred types of shoot, limits and availability, plus the page language and the wording and time of your consent. In addition, the pictures you upload: 2–3 polas and, if you like, pictures or links from previous shoots.
I use this data only to review your application, to reply to you and to plan a possible shoot. It is not published and not passed on.
Details and pictures are stored in my own system (northOS) on the server in Switzerland: the details in a database, the pictures in a private, non-public file storage. Only I (ksandar) have access, after signing in. Details and pictures are not sent to me by email.
Before uploading, your browser recalculates the pictures and reduces them to at most 3000 pixels on the longest side; this removes metadata such as the location (GPS) and camera data. On the server, the pictures are cleaned of metadata once more, as far as technically possible.
After sending, you receive a confirmation of receipt by email; I receive a short notice with the number of the application, without your details. These emails are delivered via the mail server of Infomaniak Network SA in Switzerland.
Applications are deleted automatically 90 days after they arrive, with all pictures; in the daily backups on the same server they remain for at most 14 more days. If I decline, I delete the application sooner. If a shoot takes place, the application stays until 30 days after the shoot, even if the 90 days would run out earlier; I keep the TFP agreement separately (see below). The sections “Bookings and pictures” and “Pictures in the portfolio” apply to the pictures from the shoot.
You can withdraw your application and your consent at any time by email to ale@ksandar.com; I will then delete your details and pictures. Against spam, the system stores with the application a check value (hash) of your IP address and the day – not the IP address itself; it is deleted together with the application.
Confirmation, check-in and TFP agreement
If I confirm a shoot with you, you receive a personal link by e-mail with the date, place, my idea, a QR code and a short code. On this page you can accept, decline or suggest another date (with a short text, at most 500 characters); this answer and its time are stored with the application. When we meet, I scan the code (check-in), and at the end I check out. The two times are stored. I store the location of my device only if I have explicitly switched this function on – then once at check-in, roughly rounded, as a safety record for both of us, and it is deleted 30 days after the shoot. By default it is off.
Through the same link we sign a TFP agreement. You can read its text in advance; it is signed when we meet, on your phone, with a drawing and your typed name, and you explicitly confirm that you have read the text. I only look at your ID when we meet (name and age) and note: type of document, date, and that name and age have been checked. I do not store a picture or copy of the ID. I enter the name from the ID into the agreement. When you sign you take a selfie: it becomes part of the agreement and appears in the PDF next to your signature so the signature can be assigned to you. You confirm this with a separate tick box. Only I can see the selfie after signing in (every access is logged); it stays as long as the agreement and is deleted with it.
Stored with the agreement are the contract text with the details in it, a checksum (hash) of the text, both signatures (as an image, with name and time), your time zone and language, a check value of your browser (no plain text, no IP address) and the PDF created from it, which you receive by e-mail. If you have chosen boudoir pictures, you explicitly consent to taking and storing these particularly personal pictures with a separate tick box.
I keep the agreement itself as long as rights may arise from it, usually up to 10 years after it ends, and delete it afterwards. Deleted data remains for at most 14 more days in the daily backups on the same server and for at most 30 days in backup copies outside the server.
If you write to me directly, I use your address and your message only to reply to you. The same periods apply as for enquiries via the form.
Bookings and pictures
For a shoot, I process the necessary details – contact, date, location and billing address – as well as the pictures showing you. I treat pictures from boudoir shoots as particularly sensitive: they are not passed on and only shown with your written consent.
I delete pictures that were not selected after delivery. I keep invoices and accounting records for ten years, as required by law (Art. 958f Swiss Code of Obligations).
Online gallery and invoice
You receive your pictures through a personal link to your online gallery – without an account or password. There you see the pictures, mark your selection, add a note to each picture and later download the finished pictures. For discreet shoots (e.g. boudoir) a PIN is also required, which you receive from me separately.
Stored are your selection and your notes, plus for each link a checksum (hash) of the key – never the key itself –, how long it is valid, when it was last opened and how often, and for a PIN only its hash and the number of failed attempts. To prevent abuse the server counts requests per sender using a hash of the IP address and the day, not the IP address itself. The page sets no cookies; it keeps a PIN only in the open tab. The pictures are kept in a private storage on my server in Switzerland.
Anyone with the link can see the gallery – so please do not pass it on. I can revoke a link at any time and send you a new one. Gallery, links and selection are deleted automatically 90 days after delivery.
I send you the invoice as a PDF (QR bill) by e-mail, together with the link to the finished pictures, delivered through the mail server of Infomaniak Network SA in Switzerland. Keeping the invoice is covered in the section “Bookings and pictures”.
Form, appointments, quotes and payments
Online form: If you send an enquiry through the form at /formular/, I store your details (name, email, optional phone, topic, preferred date, message) as an enquiry in my system on the server in Switzerland, together with the wording and time of your consent. You receive a confirmation, I receive an email with your details. To prevent spam the server counts requests using a hash of the IP address and the day, not the IP address itself. Enquiries are deleted after 12 months.
Appointments online: If you book an appointment at /termine/, I store your name, email, optional phone, your details for the appointment and its date and time. You receive a confirmation and a reminder by email with a calendar file and a personal link to reschedule or cancel (only a checksum of the key is stored). A request I do not confirm within 48 hours expires automatically. After 12 months the appointment details are anonymised.
Quotes: I send you a quote as a PDF by email, together with a personal link without an account through which you can accept or decline it. Stored are your answer, your confirmed name, the time and a checksum (hash) of the accepted content. Accepted quotes are part of my business records.
Payments: To match payments to invoices, I import my bank statements. For your payment I store date, amount, reference, message and name, your IBAN only shortened. If an invoice stays unpaid, you receive a reminder by email with a PDF. Accounting records are kept for ten years (Art. 958f CO).
Work report: If you sign a work report on screen or through a link, I store your name, the signature as an image and the time together with the report.
Pictures in the portfolio
I show pictures of people on my website and my own social media profiles only with their explicit consent, for boudoir only with your release of each single picture (an e-mail or message is enough). You can withdraw your consent at any time; the picture is then removed from my website and profiles within 14 days. I cannot take back what third parties or the platforms have already copied, but I report it to the platform.
Disclosure
I do not sell data and do not pass it on for advertising. Infomaniak Network SA operates storage and email in Switzerland as a processor. Your data and pictures are on servers in Switzerland. If I publish a picture of you with your consent on a platform such as Instagram, it thereby reaches other countries (for example the USA); the platform's terms apply there and I have no influence on them. I never pass on pictures from boudoir shoots to third parties.
Your rights
Under data protection law you have in particular these rights:
- Access to the data processed about you
- Correction of inaccurate data
- Deletion of your data, unless a legal retention obligation applies
- Objection to processing and withdrawal of consent
- Release of your data in a common electronic format
To exercise them, write to ale@ksandar.com; I reply within 30 days. You can also ask me to restrict processing. You can also lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC).
Changes
I update this policy when the website or the processing changes. The version published here applies. Last updated: 30 September 2026.