Privacy Policy

1. Data controller

The controller of your personal data is Sofiia Martyniuk, a photographer based in Poznań, Poland. For anything related to your data, contact me at [email protected].

2. What data I process

Contact details and the content of your message (name, e-mail address, phone number) when you reach out by e-mail, phone or social media.

Booking details for a photo session: preferred date, type of session and related arrangements.

Photographs taken during your session. Selected photos are published in my portfolio or on social media only with your separate consent.

3. Purposes and legal bases

Answering enquiries - my legitimate interest (Art. 6(1)(f) GDPR).

Arranging and providing a photography service - actions taken at your request when booking a session and delivering it (Art. 6(1)(b) GDPR).

Publishing selected photos in the portfolio - your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

Website usage statistics (Google Analytics) - your consent given in the cookie banner (Art. 6(1)(a) GDPR).

4. Cookies and analytics

This website does not set any cookies on its own. Google Analytics is enabled only after you accept it in the cookie banner. It then sets cookies and collects statistics about how the site is used: pages visited, device and browser information, and an approximate location derived from your IP address.

Analytics data may be transferred to Google LLC servers in the United States on the basis of the EU–US Data Privacy Framework.

You can change your decision at any time using the "Change cookie settings" button below - the banner will appear again. You can also delete cookies in your browser settings.

5. How long data is kept

Correspondence - up to 12 months after the matter is closed.

Data related to a booked session and the photographs - for as long as needed to deliver the photos and to handle possible claims (statutory limitation periods, including tax regulations).

Google Analytics statistics - up to 14 months.

6. Your rights

You have the right to access your data, rectify it, delete it, restrict its processing, receive it in a portable format, object to processing, and withdraw consent at any time (without affecting the lawfulness of processing carried out before the withdrawal).

You may also lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.

7. Data recipients

Data may be processed by providers whose services I use to run this website and my business: the hosting provider and Google (analytics, only with your consent). I do not sell personal data or share it for third-party marketing.

8. Providing data is voluntary

Providing your data is always voluntary, but without contact details I will not be able to reply to your message or arrange a session.

9. Server logs and automated decisions

Like almost every website, the hosting server keeps technical logs of requests (IP address, browser type, time of access). They are used solely to keep the site secure and running, and are not combined with any other data.

No decisions concerning you are made in an automated way and your data is not used for profiling.