©2022 Lena Baloch, all rights reserved. All photos on this website are intellectual property of Lena Baloch and may not be used, reproduced or published for commercial purposes in any way without prior written permission of Lena Baloch. Downloads and copies of this page are only permitted for private, non-commercial use. If you have any questions feel free to contact Lena Baloch:
Lena Baloch, independent photographer Griesgasse 26 A-8020 Graz +43 664 3549981
The design on this site is also protected by copyright and neither the whole nor any part of it may be reproduced or distributed without written consent by Lena Baloch. All rights to texts, pictures, animations and videos as well as their arrangement on the website are owned by the copyright holder. Note that the copyright to some texts is owned by third-parties, in this case the copyrights of third-parties are respected. Third-party content is identified as such. Should you nevertheless become aware of a copyright infringement, please inform me accordingly.


Links to external third-party websites do not constitute an endorsement of their content by Lena Baloch. The operators of the linked sites are solely responsible for their availability and content.

How I handle your personal data (summary)

The use of my website is generally possible without providing personal data. As far as personal data (e.g. name, address or email address) is collected, this is always done on a voluntary basis - this data will not be passed on to third parties without your explicit consent. Protecting your personal data is of considerable importance to me, Lena Baloch. I shall therefore handle your data on the exclusive basis of the legal regulations (GDPR [General Data Protection Regulation] or in german DSGVO [Datenschutz-Grundverordnung]). In this data protection declaration, I inform you about the most important factors regarding data processing within the scope of my website. If you contact me via email or phone, your data provided will be saved by me for the purpose of processing your enquiry and for the case of subsequent enquiries. I will not forward any such data to anyone else without your permission. ➝ I need to know your email address, to answer the email you have sent me. Data regarding your name, address, purchased goods and date of purchase will also be saved until the purchase and shipment is complete. ➝ I need to know your address, in order for me to sent your order to your address. You can request the deletion of your data at any time. Here‘s the full legal gibble gabble:

Privacy Policy

Personal data (usually referred to just as „data“ below) will only be processed by me to the extent necessary and for the purpose of providing a functional and user-friendly website, including its contents, and the services offered there. Per Art. 4 No. 1 of Regulation (EU) 2016/679, i.e. the General Data Protection Regulation (hereinafter referred to as the „GDPR“), „processing“ refers to any operation or set of operations such as collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment, or combination, restriction, erasure, or destruction performed on personal data, whether by automated means or not. The following privacy policy is intended to inform you in particular about the type, scope, purpose, duration, and legal basis for the processing of such data either under my own control or in conjunction with others. I also inform you below about the third-party components I use to optimize my website and improve the user experience which may result in said third parties also processing data they collect and control.
My privacy policy is structured as follows: I. Information about me as controller of your data II. The rights of users and data subjects III. Information about the data processing

I. Information about me as controller of your data

The party responsible for this website (the „controller“) for purposes of data protection law & the controller’s data protection officer is:
Lena Baloch Griesgasse 26 A-8020 Graz +43 664 3549981

II. The rights of users and data subjects

With regard to the data processing to be described in more detail below, users and data subjects have the right to...
  • confirmation of whether data concerning them is being processed, information about the data being processed, further information about the nature of the data processing, and copies of the data (cf. also Art. 15 GDPR);
  • correct or complete incorrect or incomplete data (cf. also Art. 16 GDPR);
  • the immediate deletion of data concerning them (cf. also Art. 17 DSGVO), or, alternatively, if further processing is necessary as stipulated in Art. 17 Para. 3 GDPR, to restrict said processing per Art. 18 GDPR;
  • receive copies of the data concerning them and/or provided by them and to have the same transmitted to other providers/controllers (cf. also Art. 20 GDPR);
  • file complaints with the supervisory authority if they believe that data concerning them is being processed by the controller in breach of data protection provisions (see also Art. 77 GDPR).In addition, the controller is obliged to inform all recipients to whom it discloses data of any such corrections, deletions, or restrictions placed on processing the same per Art. 16, 17 Para. 1, 18 GDPR. However, this obligation does not apply if such notification is impossible or involves a disproportionate effort. Nevertheless, users have a right to information about these recipients.
Likewise, under Art. 21 GDPR, users and data subjects have the right to object to the controller’s future processing of their data pursuant to Art. 6 Para. 1 lit. f) GDPR. In particular, an objection to data processing for the purpose of direct advertising is permissible.

III. Information about the data processing

Your data processed when using my website will be deleted or blocked as soon as the purpose for its storage ceases to apply, provided the deletion of the same is not in breach of any statutory storage obligations or unless otherwise stipulated below.

Server data

For technical reasons, the following data sent by your internet browser to me or to my server provider will be collected, especially to ensure a secure and stable website: These server log files record the type and version of your browser, operating system, the website from which you came (referrer URL), the webpages on my site visited, the date and time of your visit, as well as the IP address from which you visited my site. The data thus collected will be temporarily stored, but not in association with any other of your data. The basis for this storage is Art. 6 Para. 1 lit. f) GDPR. My legitimate interest lies in the improvement, stability, functionality, and security of my website. The data will be deleted within no more than seven days, unless continued storage is required for evidentiary purposes. In which case, all or part of the data will be excluded from deletion until the investigation of the relevant incident is finally resolved.

Order processing

The data you submit when ordering goods and/or services from me will have to be processed in order to fulfill your order. Please note that orders cannot be processed without providing this data. The legal basis for this processing is Art. 6 Para. 1 lit. b) GDPR. After your order has been completed, your personal data will be deleted, but only after the retention periods required by tax and commercial law. In order to process your order, I will share your data with the shipping company responsible for delivery to the extent required to deliver your order and/or with the payment service provider to the extent required to process your payment. The legal basis for the transfer of this data is Art. 6 Para. 1 lit. b) GDPR.


If you contact me via email, the data you provide will be used for the purpose of processing your request. I must have this data in order to process and answer your inquiry; otherwise I will not be able to answer it in full or at all. The legal basis for this data processing is Art. 6 Para. 1 lit. b) GDPR. Your data will be deleted once I have fully answered your inquiry and there is no further legal obligation to store your data, such as if an order or contract resulted therefrom.

General linking to third-party profiles

I use links on my website to the social networks listed below. The legal basis for this is Art. 6 para. 1 lit. f GDPR. The integration of the plugins takes place via a linked text. You will only be redirected to the service of the respective social network by clicking on the corresponding text. After the forwarding, information about you is collected by the respective social network. This is initially data such as IP address, date, time and page visited. If you are logged into your user account of the respective net- work during this time, the network operator may be able to assign the collected information of your specific visit to your personal account. If you interact via a „Share“ button of the respective network, this information can be stored in your personal user account and possibly published. If you want to prevent the collected information from being directly assigned to your user account, you must log out before clicking on the font. You also have the option of configuring your user account accordingly. The following social networks are linked by me:
  • Instagram
  • YouTube
To advertise my art as well as to communicate with interested parties or customers, I have a presence on the platform Instagram. On this social media platform, I am jointly responsible with Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. The data protection officer of Instagram can be reached via this contact form:
We have defined the joint responsibility in an agreement regarding the respective obligations within the mea- ning of the GDPR. This agreement, which sets out the reciprocal obligations, is available at the following link:
The legal basis for the processing of the resulting and subsequently disclosed personal data is Art. 6 para. 1 lit. f GDPR. The legal basis may also be your consent per Art. 6 para. 1 lit. a GDPR granted to the platform operator. Per Art. 7 para. 3 GDPR, you may revoke this consent with the platform operator at any time with future effect. When accessing my online presence on Instagram, Facebook Ireland Ltd. as the operator of the platform in the EU will process your data (e.g. personal information, IP address, etc.). Facebook Ireland Ltd. uses this data for market research and advertising purposes as well as for the creation of user profiles. Based on these profiles, Facebook Ireland Ltd. can provide advertising both within and outside of Instagram based on your interests. If you are logged into Instagram at the time you access my site, Facebook Ireland Ltd. will also link this data to your user account. If you contact me via Instagram, the personal data you provide at that time will be used to process the request. I will delete this data once I have completely responded to your query, unless there are legal obligations to retain the data, such as for subsequent fulfillment of contracts. Facebook Ireland Ltd. might also set cookies when processing your data. If you do not agree to this processing, you have the option of preventing the installation of cookies by making the appropriate settings in your browser. Cookies that have already been saved can be deleted at any time. The instructions to do this depend on the browser and system being used. For Flash cookies, the processing cannot be prevented by the settings in your browser, but instead by making the appropriate settings in your Flash player. If you prevent or restrict the installation of cookies, not all of the functions of Instagram may be fully usable.
Details on the processing activities, their suppression, and the deletion of the data processed by Instagram can be found in its privacy policy:
It cannot be excluded that the processing by Facebook Ireland Ltd. will also take place in the United States by Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025.
Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, a subsidiary of Facebook Inc., 1601 S. California Ave., Palo Alto, CA 94304, USA.
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA.