1. Controller
Fotoomatic
Ardalan and Karolina Akbari
info@fotoomatic

2. Collection and Storage of Personal Data, and Purpose of Use
As photographers, we collect personal data when you contact us or use our services. Personal data includes:

   •    Name, email address: This data is used for contract processing and communication.
   •    Photographs: The images we create constitute personal data if they depict you or other identifiable individuals.

Data processing is based on:

   •    Art. 6(1)(b) GDPR (contract performance)
   •    Art. 6(1)(a) GDPR (consent, e.g., for the publication of images)

3. Use of Social Media Platforms
We use social media platforms such as Facebook and Instagram to showcase our work and promote our services. This may include publishing photos of our clients, but only with your explicit consent.

   •    Legal Basis: Publication is based on your consent under Art. 6(1)(a) GDPR.
   •    You have the right to withdraw your consent at any time. This also applies to previously published images, which will be removed upon request.

Joint Responsibility:
Please note that social media platforms like Facebook and Instagram independently collect and process personal data. They act as independent controllers and have their own privacy policies. For data processing on these platforms, the operators share responsibility with us.

Privacy Policies of Platforms:

   •    Facebook
   •    Instagram

4. Data Sharing
Your personal data will only be shared with third parties when necessary for contract fulfillment or with your explicit consent. Possible recipients include:

   •    Printing services for producing photo products
   •    Web hosting providers for publishing photos on our website or social media

No data is transferred to countries outside the EU, unless explicitly agreed upon.

5. Data Retention
We store your personal data only as long as necessary for contract fulfillment or due to legal retention obligations. After the contract is fulfilled or upon your request, your data will be deleted unless legal retention obligations prevent this.

6. Your Rights
Under the GDPR, you have the following rights:

   •    Access to your stored data (Art. 15 GDPR)
   •    Correction of inaccurate data (Art. 16 GDPR)
   •    Deletion of your data (Art. 17 GDPR), provided no legal retention obligations exist
   •    Restriction of processing (Art. 18 GDPR)
   •    Objection to processing (Art. 21 GDPR)
   •    Data portability (Art. 20 GDPR)

If you believe that the processing of your data violates data protection regulations, you can file a complaint with a supervisory authority (Art. 77 GDPR).

7. Consent for Image Publication
If you give us permission to publish images, this is done voluntarily. You may withdraw your consent at any time, and previously published photos will be removed upon request.

8. Cookies and Tracking on Social Media Pages
When using our social media pages, platform operators may store cookies on your device. These cookies analyze your usage behavior and display personalized advertising. For more information, please refer to the privacy policies of the respective platforms (see Section 3).

9. Updates to This Privacy Policy
We reserve the right to amend this privacy policy as necessary to comply with current legal requirements.