Legal
Privacy Policy
1. Data controller
The entity responsible for processing personal data collected via this website is:
- Trade name
- Couple Photographers
- Person in charge
- Srdana Munitic Muslu
- Location
- Madrid, Spain
- info@couplephotographers.com
- Website
- https://couplephotographers.com
2. Personal data we collect and why
Contact form. When you write to us through the contact page we collect your name, email address, the service and date you select, and the content of your message. We use it for one purpose, to answer that enquiry and to quote for the work. The legal basis is your consent, given with the checkbox on the form, together with our legitimate interest in responding to people who ask about our services. We do not use it for marketing. Form submissions reach us through Netlify, our hosting provider, listed in section 3.
Email, telephone and WhatsApp. If you contact us on any of these channels we hold whatever you send us, for the same purpose and for the same reason.
Cookies. Nothing is stored on or read from your device until you choose. On your first visit a banner offers two buttons, Reject and Allow analytics, and nothing analytical loads until you press one. Silence is not consent. Your choice is kept in one local storage entry called tkm-consent-v2, which exists only to honour that choice and never leaves your browser. The footer of every page carries a Cookie settings button that clears the choice and asks again. The cookie policy names each cookie and what it does.
Analytics, only with your consent. If you allow analytics, Google Analytics 4 loads and sets two cookies, _ga and _ga_4BJK6GZ4NY. We use it to see which pages get read, how visits arrive, and whether the contact form is being used. The legal basis is your consent under article 6(1)(a) GDPR, and you can withdraw it at any time with the Cookie settings button. Google LLC acts as our processor for this and may transfer data outside the EEA under the EU-US Data Privacy Framework and standard contractual clauses. Advertising storage and advertising personalisation stay switched off whichever button you press, and this site runs no advertising tag, no remarketing tag and no tag manager container. If you reject, none of this loads at all.
Audience measurement without cookies. Separately, and whatever you choose, we use Cloudflare Web Analytics to see how many people read which pages. It sets no cookie, writes nothing to your browser and does not follow you to other websites. It records the page you viewed, the referring site, and a country and device type derived from your IP address, which Cloudflare does not retain. We cannot identify you from it and we do not try to. Because it stores and reads nothing on your device it needs no consent, and the legal basis is our legitimate interest in knowing whether the site works.
Server logs. Our hosting provider records standard technical request data, including IP address, in order to serve the site and protect it from abuse. We do not use those logs to build a profile of you.
Fonts. Page fonts are served from this domain. Your browser does not connect to Google Fonts and your IP address is not disclosed to Google when a page loads.
Embedded content. This site embeds no video, no maps and no social media widgets.
3. Who we share your data with
We do not sell or rent your personal data. It is shared only with the providers needed to run the site, or where the law requires it. Our data processors are:
- Netlify, for hosting the website and for receiving and storing contact form submissions.
- Cloudflare, for cookieless audience measurement.
- Google, for Google Analytics 4, and only for visitors who allow analytics. If you reject, nothing is sent to Google at all.
4. How long we retain your data
Contact form data is retained for a reasonable period, around two years, to manage enquiries, unless a legal requirement such as invoicing means it must be kept longer. Google Analytics event and user data are both set to expire after 14 months, and the two analytics cookies expire two years after they are set. Cloudflare's cookieless measurement is aggregate and holds nothing that points back to you.
5. Your rights under GDPR
- Access. To request access to the data we hold about you.
- Rectification. To correct incomplete or inaccurate data.
- Erasure. To request deletion of your data when it is no longer necessary.
- Object. To object to the processing of your data, particularly for marketing.
- Withdraw consent. To withdraw the consent you gave on the contact form at any time.
To exercise these rights, contact us at info@couplephotographers.com.