Privacy

1. Data controller

The controller is STUDIO ANDRA S.P., Brilejeva ulica 9, 1000 Ljubljana, Slovenia (tax number 79033423, registration number 9968814000), trading as Foto Studio Andra.

2. What is collected

Through the contact form on this site I collect only what you type into it:

• your name
• your email address
• your phone number
• the date of the event
• the place of the event
• the type of event
• the content of your message

3. What it is used for

I use your details solely to reply to your enquiry, to agree a date and a price, and to carry out the work if you go ahead.

I do not use them to send marketing, and I do not sell them or pass them to third parties for their own purposes.

4. Legal basis

Processing is based on taking steps at your request prior to entering into a contract, and on performing that contract (Article 6(1)(b) GDPR). Where you are simply asking a question, the basis is your consent, which you can withdraw at any time.

5. Who it is shared with

I use Brevo (Sendinblue) to deliver messages from the contact form; they act as a data processor on my behalf. The message arrives in my own email inbox.

The site is hosted by a hosting provider, which may keep standard server access logs as part of running the server.

I do not share your data with anyone else unless the law requires it.

6. Cookies and tracking

This site sets no cookies for analytics, advertising or profiling. I do not use Google Analytics or similar tracking tools, and I do not store data in your browser.

The contact page embeds a Google Maps map. When it loads, your browser connects to Google servers, which may process your IP address and set their own cookies. That is outside my control and Google's privacy policy applies to it.

7. How long it is kept

I keep enquiries for as long as I need to answer them, and where you go ahead, for the duration of the work plus the period tax law requires business records to be retained.

If a booking does not go ahead and I no longer need your details, I delete them. You can ask me to delete them sooner.

8. Gallery photographs and the right to your own image

Photographs of your event are personal data. Publishing a client's photographs in a portfolio or on social media is agreed separately, and you can withdraw that permission at any time.

The photographs published in the gallery on this website form part of my portfolio and show past events carried out in the course of my business. They are published solely to present completed work and to promote the services offered.

Personal data is processed in accordance with applicable data protection law, including the General Data Protection Regulation (GDPR). Anyone who is identifiable in a published photograph has the right to request access to, correction of, or removal of their image from this website.

If you recognise yourself in a photograph and do not wish to be shown, you may request its removal at any time. I will deal with your request without delay and remove the photograph from every publicly accessible place on this website as quickly as possible.

To exercise these rights, or for any other question about the processing of personal data, contact me at the e-mail address given below.

9. Your rights

In relation to your personal data you may ask for:

• access to the data I hold
• correction of anything inaccurate
• erasure of the data
• restriction of processing
• transfer of the data in a machine-readable form
• objection to the processing
• withdrawal of consent where processing relies on it

10. Complaints

If you believe I am handling your data unlawfully, you can complain to the Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec, Dunajska cesta 22, 1000 Ljubljana, [email protected]), the supervisory authority for this controller.

QUESTIONS ABOUT PRIVACY

To exercise any of these rights, or to ask anything about your personal data, contact me:

+386 69 775 171 +381 64 588 65 66 (Viber, WhatsApp) [email protected]