Protecting your personal data matters to us. This policy explains what data we process, why, and what rights you have under the EU General Data Protection Regulation 2016/679 ("GDPR") and Greek Law 4624/2019.
This is a translation of the Greek original. In case of any discrepancy, the Greek version prevails.
1. Who we are
| Data controller | Dimitra Papageorgiou |
|---|---|
| Trade name | DiV Photography & Filmography |
| [email protected] | |
| Address | 20 Ymittou St., Plateia Dimokratias, 155 61 Cholargos, Athens, Greece |
| Phone | +30 698 347 4673 |
| VAT / Tax ID (ΑΦΜ) | 135485407 — Tax office KEFODE Attica |
2. What data we collect
a. When you contact us
When you e-mail us (directly or through the contact form, which simply prepares an e-mail in your own mail app), we process the details you give us: your name, e-mail address, phone number, the date and location of your event and the content of your message. The form does not store any data on a server of this website.
b. When you book a shoot
To carry out our agreement we process contact and invoicing details, information about the schedule of your event and, of course, the photographs and videos we create.
c. While browsing
Our hosting provider (Cloudflare) processes technical connection data (e.g. IP address, browser type, time of request) solely to deliver the website securely and protect it from malicious traffic. We do not use advertising tools, social media pixels or tracking tools.
3. Purposes and legal basis
| Purpose | Legal basis (Art. 6 GDPR) |
|---|---|
| Replying to enquiries and sending quotes | Steps taken at your request prior to entering into a contract (6.1.b) and consent (6.1.a) |
| Carrying out the photo / film coverage and delivering the material | Performance of a contract (6.1.b) |
| Invoicing and tax obligations | Compliance with a legal obligation (6.1.c) |
| Publishing selected photos / videos in our portfolio and on social media | Explicit consent of the people pictured or, for minors, of the holders of parental responsibility (6.1.a) |
| Security and proper operation of the website | Legitimate interest (6.1.f) |
4. Photos in the portfolio
The photos and videos shown on this website are published only with the consent of our clients. Where children are pictured, consent is given by their parents or guardians. We remove location metadata (GPS) from the image files on the website. If you appear in a photo and would like it removed, write to us at [email protected] and we will remove it without delay.
5. Recipients
We do not sell or share your data for advertising purposes. Access may be given, only to the extent necessary, to: our website hosting provider (Cloudflare, Inc.), our e-mail service provider, our accountant for tax purposes, and public authorities where required by law.
6. Transfers outside the EEA
Some providers (e.g. Cloudflare) may process data outside the European Economic Area. In such cases transfers are based on the EU–US Data Privacy Framework or on the European Commission's Standard Contractual Clauses.
7. Retention
- Correspondence about enquiries that did not lead to a booking: up to 12 months.
- Contract and invoicing details: for as long as required by tax law.
- Client photos / videos: for the duration of the collaboration and the archiving period agreed. Portfolio material: until consent is withdrawn.
8. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before. To exercise your rights, write to us at [email protected]; we will reply within one month.
You also have the right to lodge a complaint with the Greek Hellenic Data Protection Authority (1-3 Kifisias Ave., 115 23 Athens, www.dpa.gr).
9. Security
The website is served exclusively over an encrypted connection (HTTPS) and we take reasonable technical and organisational measures to protect your data.
10. Minors
This website is not directed at children under 15 and we do not knowingly collect their data through it.
11. Changes
We may update this policy from time to time. The date of the latest update is shown at the top of this page.