Privacy Policy (GDPR)

Michaela Ďurišová Photography
Controller: Magaela s. r. o., Vyšehradská 3732/12, 851 06 Bratislava, Slovakia
Company ID: 55896731 | Tax ID: 2122126897 | VAT ID: SK2122126897
GDPR Contact: durisovaphotography@gmail.com
Effective date: 20.10.2025

1. Introduction

This Policy explains how we process personal data when providing photography services, running workshops, selling fine art prints and sending newsletters, in compliance with GDPR.

2. Data We Process

Identification & contact data; order details; billing data; photographs and video (personal data); marketing preferences; technical data and cookies.

3. Purposes & Legal Bases

Contract performance: managing bookings, communication, delivery of images.
Legal obligation: accounting/tax.
Legitimate interests: safety (e.g., security recording during workshops), protection of legal claims, essential analytics.
Consent: newsletter; disclosure/use of images for portfolio, marketing, competitions, exhibitions and print sales (especially for nude sessions, always with explicit written consent).

4. Photographs as Personal Data & Disclosure

We process and store images with respect to privacy. Any disclosure/use (portfolio, marketing, competitions, exhibitions, print sales) is based on Client consent. For nude/ art nude, every use is pre-discussed and requires written consent; Client’s privacy comes first. Consent may be withdrawn (no retroactive effect).

5. Newsletter

By subscribing you consent to receive emails; you can unsubscribe anytime via the link in each email.

6. Cookies & Online Analytics

We use cookies and similar tech for operation, measurement and marketing:
Google Analytics, Meta Pixel, Pinterest Tag. Manage cookies via the banner or your browser settings.

7. Recipients/Processors

Trusted processors may include hosting/Wix, email marketing tools, payment/accounting providers, delivery companies, analytics and ad platforms. Data Processing Agreements are in place.

8. International Transfers

Some providers may process data outside the EU. Appropriate safeguards (Standard Contractual Clauses) are applied.

9. Retention

Orders/contracts: term of the contract + typically 10 years (accounting).
Images: typically up to 5 years or until consent withdrawal/claims settled.
Newsletter: until unsubscribed.
Cookies: per type/provider policy.

10. Your Rights

Access, rectification, erasure, restriction, portability, objection, and withdrawal of consent.
You may lodge a complaint with the Slovak Data Protection Authority.
Contact: durisovaphotography@gmail.com.

11. Security & Confidentiality

We apply appropriate technical/organizational measures; access is limited to authorized personnel bound by confidentiality.

12. Changes

We may update this Policy; the current version will always be published here.