Privacy Policy.
Introduction
This Privacy Policy explains how Magic Art Photography by Kasia Derwinska (“we”, “us”, “our”) collects, uses, discloses, and protects personal data when you visit or interact with Magic Art Photography (the “Website”). We adhere to the European Union’s General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) and applicable ePrivacy requirements.
Controller of Your Personal Data
The data controller responsible for your personal data is:
Magic Art Photography by Kasia Derwinska
Person responsable: Kasia Derwinska
Email: info@magic-art-photography.eu
Website: Magic Art Photography
Personal Data We Collect
We collect personal data you provide voluntarily when contacting us or subscribing to updates, including:
• Name
• Email address
• Any information you include in messages or inquiries
We may also collect technical information automatically when you use the Website, such as IP address, browser type, and device information, where permitted by law and subject to consent (e.g., analytics cookies).
Legal Basis for Processing
We rely on the following legal grounds under GDPR:
• Consent – where you opt-in to newsletters or tracking cookies.
• Legitimate interests – to operate, manage, and secure the Website; respond to your inquiries; and improve our services.
• Contract performance – to fulfil requests or services you initiate.
If consent is required (e.g., for non-essential cookies or marketing communications), you can withdraw that consent at any time.
Use of Personal Data
We process your personal data for specific purposes, including:
• Responding to your contact requests.
• Sending newsletters or updates, if subscribed.
• Administering the Website.
• Complying with legal obligations.
Cookies and Tracking Technologies
We may use cookies and similar technologies to enhance your experience and gather analytics data. Where cookies involve tracking or profiling, we will request your consent in accordance with EU privacy and ePrivacy requirements before placing them. Users may manage or withdraw cookie consent via their browser settings or consent mechanisms.
Data Sharing and Third Parties
We do not sell your personal data. We may share personal data with third parties only to the extent necessary to provide services (e.g., hosting providers, email delivery services) and subject to appropriate data protection measures.
International Data Transfers
If data is transferred outside the European Economic Area (EEA), we will ensure an adequate level of protection via appropriate safeguards, such as standard contractual clauses.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected or to comply with legal obligations.
Your Rights Under GDPR
Under the GDPR you have the right to:
• Access your personal data.
• Correct inaccurate data.
• Delete personal data (right to be forgotten).
• Restrict or object to processing.
• Data portability.
• Withdraw consent at any time.
To exercise these rights, contact us at the email address above. You also have the right to lodge a complaint with a supervisory authority in the EU.
Security Measures
We implement reasonable technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction.
Changes to This Privacy Policy
We may update this Privacy Policy periodically. The date at the top will indicate when it was last revised, and substantive changes will be published on this page.
Contact Information
For any questions about this Privacy Policy or your personal data, please contact:
Magic Art Photography – info@magic-art-photography.eu