Privacy Notice

Information about how Rangefinder processes personal data when you visit rangefinder.dk or purchase a print.

Last updated: 27 September 2026

About Rangefinder

Rangefinder is a photography print shop operated by Tim Clements as a sole proprietorship registered in Denmark (CVR number: 18895692). Tim Clements is the data controller for personal data processed via this website.

Contact: tc@purposeandmeans.io
Copenhagen, Denmark

Approach to data protection

Rangefinder is based in Denmark and is subject to the General Data Protection Regulation (GDPR) and the ePrivacy Directive. Rangefinder sees data protection as a fundamental part of doing business and applies the principles of lawfulness, fairness and transparency, data minimisation, and purpose limitation.

Data collection

Active data collection

Active data collection occurs when you knowingly provide personal data. This happens when you:

Complete a purchase (handled via Paddle — see below)
Contact Rangefinder by email

Passive data collection (website technical data)

When you visit the website, certain technical data is processed automatically to deliver the website to your device and keep it secure. This can include:

Your IP address
The date and time of your visit and requests
The pages and files you request
Device and browser information (user agent, language, approximate device type)
Diagnostic and security information

Website infrastructure

rangefinder.dk is a static site hosted on a Virtual Private Server (VPS) managed by Hetzner Online GmbH in Germany. No third-party content delivery networks, advertising trackers, or cookie consent tools are used. When you visit the website, your browser connects only to the Rangefinder server.

The only exception is payment processing. See the Paddle section below.

Cookies

The website uses no cookies. Zero cookies are set when you visit rangefinder.dk.

Payment processing (Paddle)

Purchases through rangefinder.dk are processed by Paddle.com Market Ltd (Paddle), acting as Merchant of Record and as an independent data controller for payment and billing data. When you initiate a purchase, your browser connects to Paddle’s servers on Paddle’s domain. Paddle processes your payment information under their own privacy policy.

No Paddle scripts run on rangefinder.dk until you initiate a purchase. Rangefinder does not receive or store your payment card details. Rangefinder receives only the information necessary to fulfil your order (name, email address, and shipping address).

Lawful bases for processing

Performance of a contract — processing your order, arranging shipping, and communicating with you about your purchase
Legitimate interests — security and anti-fraud activities; responding to enquiries
Legal obligation — complying with Danish financial and tax laws

What data is collected

From customers

Name and email address (for order confirmation and download access)
Purchase history

Website technical data

IP address
Device and browser information (user agent)
Request metadata (pages and files requested, timestamps)

Data retention

Order records Order information (name, email address, and purchase details) is retained for 5 years to comply with Danish financial and tax laws.

Email Rangefinder uses mailbox.org (part of Heinlein Hosting GmbH, Germany) for email. Personal data received by email is retained for 3 years unless there is a specific purpose requiring longer retention.

Website and server logs Technical logs are retained for 30 days for security, troubleshooting, and performance purposes, then deleted or anonymised.

Data transfers

Website hosting rangefinder.dk is hosted on a VPS with Hetzner Online GmbH in Germany (EU). All website files are served from this server. No CDN or third-party delivery network is used.

Email Rangefinder uses mailbox.org, part of Heinlein Hosting GmbH (Germany), for email processing.

Payment processing When you make a purchase, Paddle processes payment data as an independent data controller under their own privacy policy. Paddle may process data outside the EU/EEA in accordance with their transfer mechanisms.

Your rights

You have the following rights under the GDPR:

Right to access — request confirmation that Rangefinder is processing your data and request a copy
Right to rectification — request correction of inaccurate or incomplete data
Right to erasure — request deletion of your data where there is no longer a lawful basis for retention
Right to restrict processing — request that Rangefinder limits use of your data
Right to data portability — applies where the lawful basis is consent or performance of a contract
Right to object — applies to processing conducted under legitimate interests
Right to lodge a complaint — as Rangefinder is a Danish business, complaints should be directed to Datatilsynet (the Danish data protection authority), though they recommend first contacting the data controller

To exercise any of these rights, email tc@purposeandmeans.io with the subject line ‘Data Subject Request.’ Proof of identity may be requested.

Information security

rangefinder.dk is a static HTML site with no database, no login page, and no user accounts. HTTPS is enforced across all connections. Security headers including HSTS, Content Security Policy, X-Frame-Options, X-Content-Type-Options, and Referrer Policy are implemented. Zero cookies are set by default.

Residual risks

Payment processing When you initiate a purchase, your browser connects to Paddle’s servers. Paddle processes your payment data as an independent data controller. Paddle may operate infrastructure outside the EU/EEA. Possible impact: your payment and billing data is subject to Paddle’s own privacy practices. Rangefinder does not control Paddle’s processing.

Website technical data Your IP address and browser information are processed by the Hetzner VPS on every visit. Possible impact: limited. The server is operated and controlled entirely by Rangefinder and is subject to appropriate security measures.

Contact

Rangefinder
Copenhagen, Denmark
tc@purposeandmeans.io