1. Introduction and Data Controller
Privacy Policy
This Privacy Policy explains how George Kostopoulos Fine Art Photographer (hereinafter referred to as "the Photographer," "we," "us," or "our"), with business operations based in Thessaloniki, Greece, collects, uses, processes, and protects the personal data of our clients and website visitors. The Photographer acts as the Data Controller responsible for the processing of your personal data under the General Data Protection Regulation (GDPR - EU 2016/679).
Contact Details for Data Protection Enquiries:
2. Data We Collect and Why (Legal Basis)
We collect personal data based on specific legal bases, depending on the purpose of the collection:
Booking & Contract Fulfillment George Kostopoulos
Full Name, Phone Number, Email Address, Event Details, Billing Address, Payment Records.
Contractual Necessity (Art. 6(1)(b))
Client Communication & Enquiries
Name, Email, Phone, Details of the Enquiry/Service requested.
Legitimate Interest (Art. 6(1)(f))
Image Use & Portfolio
Photographs (containing identifiable images of individuals).
Legitimate Interest (for portfolio/promotion) or Consent (if agreed upon in the contract).
3. Processing of Photographic Images and Consent Mechanism
Image Consent: Photographs of individuals are considered personal data. We process these images primarily to fulfill the photography contract.
Portfolio Usage: We seek your express consent for the use of your identifiable images in our public portfolio, website, and social media channels. This consent is obtained via the booking form where you enter your data. This consent remains valid for as long as the website is live, or until you explicitly withdraw it.
Withdrawal of Consent: You retain the right to withdraw your consent for portfolio use at any time by contacting us at info@georgekostopoulos.gr.
4. Data Recipients and Third-Party Processors
We share your personal data only as necessary with the following trusted third parties who act as Data Processors on our behalf, ensuring they are GDPR compliant:
Gallery Delivery: Pixieset (for securely delivering proofs and final images).
Cloud Storage: Dropbox and Google Drive (for securely storing and backing up image files).
Booking/Invoicing: Studio Manager (for managing contracts, bookings, and billing).
Email Marketing: Mailchimp (for sending newsletters, only to users who have provided explicit consent).
Print Labs/Album Makers: To fulfill physical product orders (Name, Shipping Address, Image Files).
Accounting/Tax Authorities: To fulfill our legal financial obligations.
5. Data Retention Period
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy:
Digital Image Files: Retained for three (3) years after the project delivery, to facilitate re-orders or recovery due to data loss.
Contract and Billing Data: Retained for a minimum of ten (10) years after the fulfillment of the contract, in compliance with Greek tax and legal requirements.
Enquiry Data (Non-Clients): Data collected from individuals who enquire but do not proceed with a booking is retained for six (6) months to one (1) year, based on our legitimate interest to follow up on potential business.
6. Your Rights (Data Subject Rights)
Under the GDPR, you have the right to access, rectify, erase, restrict processing, and object to the processing of your personal data. (See comprehensive rights list in previous output.)
8. Cookies Policy
Our website uses cookies. Please refer to our separate [Link to Your Cookies Policy Page] for detailed information.