On a company website, images decide within a fraction of a second whether a business feels tangible or interchangeable. Two questions meet at exactly this point, and they are rarely asked together: which images am I allowed to use at all, and which images actually work? The legal side ranges from licence terms to the right to one's own image, and on to third-party trademarks, buildings and artworks that end up in the frame. The answer on the effectiveness side is clear in practice: your own shots from the business beat interchangeable stock motifs, because customers want to recognise rooms, faces and finished work. This article explains licence types in plain language, covers consent and withdrawal for people in photos, shows where generated motifs make sense and where real photographs remain indispensable, and closes with a guide to producing usable business photos with a smartphone in one hour.
Why your own photos outperform stock images
The first impression of a page is usually an image. In 68 percent (HTTP Archive Web Almanac) of cases the largest visible element on a page is a graphic or a photograph — precisely the element that determines what is noticed first and when a page feels finished. Competition for that moment is dense, because 89 percent (German Federal Statistical Office) of companies with internet access run their own website. Anyone showing the same visual world as twenty other businesses nearby gives away the one advantage a small provider has over a large one: it is genuinely on site, with real rooms, real people and demonstrable results. A smiling model in an office that exists nowhere creates distance rather than closeness — and visitors notice faster than many assume. Which pages a business needs in the first place, and where images do their work there, is covered in detail in the article on the pages every business website needs.
Recognition is the practical core of this. Someone looking for a workshop wants to see the gate they will later drive through. Someone booking an appointment at a practice wants to recognise the reception desk. Someone requesting a quote for a terrace wants to see finished terraces this business has actually built, not paving slabs from a catalogue. The same logic applies to people: a team shown with names and roles noticeably lowers the barrier to a first phone call, and it works internally as well. How much real faces matter in recruiting is described in the article on a careers page that attracts skilled staff. For businesses with walk-in customers the local effect adds to this, as set out in the article on local visibility for local businesses: showing rooms means being recognised on the way there.
- Recognition: visitors immediately match entrance, vehicle or shopfront when they arrive
- Evidence instead of assertion: a photo of your own work supports a claim better than any wording
- Distinctiveness: stock motifs turn up repeatedly in the same town and the same trade
- Trust: names and faces lower the barrier before the first contact
- Legal clarity: with your own shots the origin is known without any research
- Reuse: your own material can serve quotes, notices and job adverts as well
The cover-up test
Understanding licences: free is not rights-free
A photograph is protected from the moment it is taken — no registration, no notice, no fee. Copyright expires 70 years (German Federal Ministry of Justice, Section 64 UrhG) after the death of the author. For simple photographs without creative character a shorter term of 50 years (German Federal Ministry of Justice, Section 72 UrhG) applies, counted from publication or the first authorised public communication. In practice this means that virtually every image findable online belongs to someone. Whoever uses it acquires no ownership of the image, even after payment, but a right of use with a clearly defined scope. This distinction explains most misunderstandings: an image may be licensed for the website and still require a separate scope for a printed flyer or an advertisement. Alongside this, the author retains the right to be recognised as the author and may determine whether and under which name they are credited (German Federal Ministry of Justice, Section 13 UrhG). A missing credit is therefore a separate breach, even when the licence itself is in place.
| Origin | What is usually permitted | Typical pitfall | What to file |
|---|---|---|---|
| Your own shot | Broad use within your own business | People in the frame without consent | Date, location, consent records |
| Commissioned photography | The purpose named in the contract | Adverts or print not agreed | Contract with scope and term |
| Standard stock licence | Use on your own website | Passing files to third parties, print limits | Invoice, licence text, asset ID |
| Extended licence | Print, packaging, resale in addition | Rarely bought, often needed | Proof of the extended tier |
| Free licence with attribution | Use with correct attribution | Credit missing or in the wrong place | Licence version, author, source, date |
| Image of unknown origin | No reliable scope of use | A screenshot or search result as the source | Obtain a replacement instead of a proof |
Free means limited
Even a no-fee image comes with conditions: crediting the author, prohibiting certain uses, requiring the licence version to be stated. Anyone who does not read the terms is not acquiring the use but infringing it.
Editing is its own question
Cropping, recolouring, adding text or cutting out a subject may be prohibited. Some licences permit changes expressly, others exclude them or require a note that the image has been modified.
Passing on needs consent
A holder of an exclusive right of use may grant further rights of use only with the author's consent (German Federal Ministry of Justice, Section 35 UrhG). That also covers images handed to an advertising agency or to a portal operator.
In case of doubt, the narrower scope applies
Document proof instead of hoping
A dispute rarely starts with a lawsuit; it starts with a formal warning letter. Such a letter has to name the injured position, describe the infringement precisely and break down any payments claimed into damages and cost reimbursement (German Federal Ministry of Justice, Section 97a UrhG). Whoever receives one has to show where the image came from and what scope of use was granted — the evidentiary burden sits with whoever published it. The well-known cap on recoverable legal fees at a value in dispute of 1,000 euros (German Federal Ministry of Justice, Section 97a UrhG) helps only to a limited degree: it applies to natural persons who do not use protected works for commercial or self-employed activity. On a company website it therefore regularly does not apply. That is exactly why documentation is not bureaucratic overhead but the cheapest part of the whole topic. How mandatory disclosures and records can be arranged cleanly is shown in the article on imprint and privacy policy pages.
- Note the file name and the provider's asset ID so the match survives a relaunch
- Record the origin: own shot, commissioned photography, stock library or free licence
- Save the licence text verbatim, not just a link to the provider's terms
- File the invoice or order confirmation as proof and link it to the image
- Note the permitted uses: website, print, adverts, social channels, passing on
- Enter the term and any end date of the licence and set a reminder
- Record any attribution requirement together with the exact credit line
- Attach consent records of the people shown, with date and scope
- For generated motifs, note the method used and the creation date
Changing service providers is the critical moment
People in photos: the right to one's own image
As soon as a person is identifiable, a second legal layer applies that is entirely separate from the question of authorship. As a rule, portraits may be distributed or publicly displayed only with the consent of the person shown (German Federal Ministry of Justice, Section 22 KunstUrhG). Consent is presumed in case of doubt where the person received payment for the shot. After death, distribution requires the consent of relatives for ten years (German Federal Ministry of Justice, Section 22 KunstUrhG), meaning the surviving spouse or civil partner and the children, or failing those the parents. Infringement risks more than civil claims: the law provides for imprisonment of up to one year (German Federal Ministry of Justice, Section 33 KunstUrhG) or a fine, prosecuted upon complaint. This provision is more than a century old and remains the practical yardstick for team photos, customer shots and event pictures.
Portraits may be distributed or publicly displayed only with the consent of the person depicted.
The law knows four exceptions that work without consent — although they are narrower than everyday understanding suggests (German Federal Ministry of Justice, Section 23 KunstUrhG). They also fall away where a legitimate interest of the person shown stands against the use. For a company website that means no business should plan around any of these exceptions. A photo of your own workforce is not a portrait from the sphere of contemporary history, a customer at the counter is rarely mere incidental detail, and a company party is not an assembly within the meaning of the provision. The exceptions exist for cases in which obtaining consent is practically impossible, not for cases in which it would merely be inconvenient.
- Portraits from the sphere of contemporary history — meaning events of public interest, not your everyday operations
- Images in which people appear only as incidental detail alongside a landscape or location
- Images of assemblies, processions and similar events in which the people shown took part
- Portraits not made to order that serve a higher artistic interest
- Counter-exception: all four fall away where a legitimate interest of the person shown is infringed
Two layers, one decision
Consent, withdrawal, children and events
Consent only counts as consent when it is freely given. The European Data Protection Board stresses that an imbalance of power between the data subject and the controller calls freedom of choice into question, and names the employment relationship expressly as a critical case (European Data Protection Board, Guidelines 05/2020, paragraphs 21 to 24). Anyone photographing staff should therefore make it visible that refusal is possible without disadvantage. The controller must also be able to demonstrate that valid consent exists (European Data Protection Board, Guidelines 05/2020, paragraph 11) — a verbal yes in the kitchen hardly meets that. The rule on stepping back is equally clear: withdrawal must be as easy as giving consent (European Data Protection Board, Guidelines 05/2020, paragraphs 113 to 117). For children, data protection law sets the age threshold at sixteen years (Regulation (EU) 2016/679, Article 8) for information society services; below that, consent from the holder of parental responsibility is required. For photos of children on a company website, the safe practice is written consent from the guardians plus the child's own agreement once old enough to understand.
| Situation | What needs clarifying | Proven practice |
|---|---|---|
| Staff in the team section | Freedom of choice despite dependency | Written consent, refusal possible without giving reasons |
| Former staff members | Continued effect after leaving | Raise it in the exit conversation and replace images promptly |
| Customers in the shop | Identifiability of individuals | Ask beforehand or choose an angle without faces |
| Children and young people | Consent of the legal guardians | In writing, with the child's agreement once old enough |
| Events and open days | Announcement and a way to opt out | Signage, a photo-free zone, a contact person on site |
| Shots at a customer's site | House rules and trade secrets | Get written clearance in advance, anonymise the object |
In writing and itemised
Good consent names the specific channels, the purpose, the duration and the route for withdrawal. Blanket wording covering every conceivable use is vulnerable, because it leaves the purpose undefined.
Prepare for withdrawal
Define who receives a withdrawal, within what period images are swapped and which replacement motif is ready. A prepared routine turns an awkward phone call into a ten-minute task.
A date for the review
Once a year, go through who is still with the business, which consent records exist and which motifs are outdated. The appointment costs an hour and prevents former staff from staying on the home page for years.
Third-party trademarks, buildings and artworks in frame
Not every third-party sign in the background is a problem. Trademark law allows third parties to use a mark in the course of trade where this is necessary to indicate the intended purpose of a product, for instance as an accessory or spare part, or where descriptive indications are involved — provided the use accords with honest practices in industrial or commercial matters (German Federal Ministry of Justice, Section 23 MarkenG). A workshop photo showing a vehicle badge is therefore usually unproblematic. It becomes critical where the impression of a business connection arises: a third-party word mark large in the hero image, a manufacturer logo next to your own company name, an arrangement that looks like a partnership. That line does not run along the size of the logo but along the question of whether viewers might infer a collaboration. Anyone wanting to show awards or partnerships should be able to substantiate them — the same care that applies to customer reviews on the website.
For buildings and artworks, freedom of panorama helps, though within clear limits. It is permitted to photograph works that are permanently located on public ways, streets or squares; for buildings the permission extends only to the exterior view (German Federal Ministry of Justice, Section 59 UrhG). Three restrictions are regularly overlooked. First, the rule covers permanent works — a temporary installation or a wrapped facade does not fall under it. Second, it stops at the facade: interior shots of third-party buildings, stairwells and foyers are not covered. Third, it presupposes the public way, which is why shots from the air or from private land are legally contested. For artworks indoors, for murals in rented premises and for graphics on the wall behind reception the rule is therefore: either obtain the author's permission or choose a crop in which the work is not a defining element.
- Keep third-party logos small and incidental so that no business connection is suggested
- Photograph third-party facades from public space, not from a neighbouring plot or from the air
- Photograph interiors of third-party buildings only with permission from the holder of house rules
- Deliberately crop out artworks, murals and graphics in the background
- For customer projects, obtain written clearance for publication, including exterior shots
- Check personal details such as number plates, name badges or screen contents before release
House rules beat the desired motif
AI-generated images: sensible uses and hard limits
Generated motifs have long been part of everyday practice, and the legal framework for them is now in place. The European regulation on artificial intelligence entered into force on 1 August 2024 (Verbraucherzentrale); the transparency obligations for generated content apply from 2 August 2026 (European Commission). Providers must ensure that generated content is identifiable and marked in a machine-readable way, and certain content additionally has to be disclosed visibly (European Commission, Article 50 of Regulation (EU) 2024/1689). The German consumer advice organisation sums up the practical yardstick as follows: labelling is required where consumers cannot tell that content originates from an artificial intelligence, and expressly also where image, audio or video content has been artificially created or manipulated so that it appears genuine (Verbraucherzentrale). For a company website that means a generated background pattern is uncritical, while a generated motif that looks like a photograph of your own premises is not.
Two further points tend to cause more friction in daily work than the labelling itself. First, copyright protection presupposes a personal intellectual creation; for purely machine-generated motifs protection is therefore doubtful, which also means similar motifs may show up elsewhere. Second, generated images regularly contain elements nobody put there deliberately: confusingly similar faces, trademark-like signs on clothing, recognisable buildings. A generated image is therefore not automatically free of legal issues but calls for the same visual check as any other motif. How generated content fits into a website overall, and where the limits sit, is set out in the article on what building a website with AI makes possible.
| Use case | Generated motif | Reasoning |
|---|---|---|
| Background surfaces and textures | Well suited | No factual content, no confusion with a real photograph |
| Abstract illustrations for technical topics | Well suited | Replaces no photo but explains a matter |
| Symbolic images in blog posts | Suited with care | Defensible for general topics, labelled and without invented business scenes |
| Team and contact persons | Unsuitable | Invented faces undermine trust and are misleading |
| References and finished work | Unsuitable | Would be a statement about work that was not carried out this way |
| Rooms, shopfront, vehicle fleet | Unsuitable | The on-site recognition value is lost |
The dividing line is the factual claim
Usable business photos in one hour
The equipment is already there: roughly nine in ten (Bitkom) people in Germany use a smartphone, and its camera delivers more than enough resolution for web images. What makes the difference is neither the camera nor the retouching but light, order in the frame and a list agreed beforehand. One hour is enough for ten to twelve usable motifs, provided nobody is still working out during the shoot what is actually needed. Plan the round for a day with bright but overcast skies and start outside: entrance, signage, vehicle. Then move inside, and photograph people last — that is when tension is lowest and the routine is established. How the images are then delivered cleanly in technical terms, meaning formats, sizes and alt text, is covered in the article on image formats and alt text.
- Write a list of ten to twelve motifs beforehand and note in one sentence what each is meant to prove
- Tidy up before shooting: take cables, boxes, private items and full bins out of the frame
- Use daylight and turn the subject towards the window instead of shooting against it
- Switch off ceiling lights where they create colour-cast mixed lighting
- Clean the lens with a glasses cloth — the most common reason for flat-looking shots
- Hold the camera at chest height and keep it level instead of tilting up from the hip
- Take five frames of every motif and only then choose on a larger screen
- Shoot both landscape and portrait so hero areas and narrow columns are both covered
- Turn people slightly sideways, have them look into the camera and take three variants each
- Collect the consent records the same day, while everyone involved is present
Light beats hardware
Soft daylight from the side makes rooms look larger and faces friendlier. Direct midday sun creates hard shadows, the built-in flash creates flat, cold images. An overcast sky is the most forgiving condition for exterior shots.
Order in the frame
A tidy background looks more professional than any retouching. Two minutes of tidying save twenty minutes of editing and prevent a stray screen content or name badge from becoming an issue later.
Perspective at eye level
Taken at chest height and kept level, rooms look calm and lines stay straight. Shots from above make people look smaller, shots from below make rooms tip over. A step backwards often replaces the zoom.
The twelve-motif list
Manage images centrally instead of hunting through folders
An image library rarely fails because of individual decisions; it fails because the knowledge is scattered: the invoice in a mailbox, the consent record in a filing cabinet, the original on a computer that has since been replaced. In XICflow, images therefore sit centrally in a media library where origin, licence details, proof, credit line and consent note are attached to the image itself and survive a file swap. Your own shots can be combined there with generated motifs, so that real photographs carry the statements and generated motifs fill the gaps for which no photo exists. What else belongs to the build is summarised in the overview of XICflow features; how editing works day to day is shown on the page about how XICflow works. A look at the demo sites also makes visible how differently image areas turn out from block to block and from trade to trade.
Metadata on the image
Origin, licence type, proof, credit line and expiry date sit with the file rather than in a separate list that nobody maintains after the next handover.
Consent documented
For images with identifiable people you can record who consented, to what and since when. A withdrawal then becomes a traceable process instead of a search.
Swap without breakage
When a motif is replaced, placements and metadata stay intact. A departing team member disappears in one step from every page where the image was used.
Generated motifs in the same library
Generated images are stored with the method and creation date, so their origin remains traceable later and labels can be applied where they belong.
Finding instead of searching
A searchable library prevents another stock image being bought for every new page while a fitting photo of your own has long been available.
A calculable framework
How many images and generated motifs a plan includes can be read in the pricing overview — with no surprise when the site is extended next time.
A sequence for your own image library
The best entry point is a stocktake, not a new production. Experience shows the critical cases sit with a small number of images, while the rest is unproblematic and merely needs documenting. The following sequence sorts by risk and effort — it can be started in a morning and finished over two to three weeks. How images are then embedded into the text so that statement and motif match is described in the article on writing clear website copy. And if you want to compare which route carries your own business, the comparison of the options helps.
- List every image on the website and record the origin of each one as far as it is known
- Flag images of unknown origin and replace them first rather than reconstructing proof
- For every stock image, file the receipt, licence text and attribution duty, and check the credit
- Collect all images with identifiable people and match them against the consent records you hold
- Obtain missing consent in writing or swap the images concerned
- Review third-party trademarks, interior shots and artworks in the background deliberately
- Label generated motifs and replace them wherever they make a statement about the business
- Work through the twelve-motif list and file the results with a date in the media library
- Set an annual review date and put responsibility and the withdrawal route in writing
Sources and studies