Privacy notice & image use
Short version: your enquiry is used to reply to you, and your photographs are not published unless you say so. The details are below.
Who is responsible for your data
The data controller is Adam Lankamer, NIE Z3789734Y, Calle Mezquita Alta 699, 18697 La Herradura (Granada), Spain.
For anything to do with your personal data, write to adam@bahiaphotographer.com or message +34 641 758 592.
What I collect
When you use the contact form: your name, email address, the date and kind of session you are asking about, and your message.
When you write by email or WhatsApp: your contact details and whatever you choose to send.
When you hold a date in the availability calendar: the service, date and time, your name, email address and, if you give them, your phone number, place and message.
When you book: the details needed for the booking and the invoice, such as your name, address and tax number.
At a session: photographs of you and of anyone else being photographed.
Why, and on what legal basis
To answer your enquiry and prepare a quote — steps taken at your request before a contract (Article 6(1)(b) GDPR).
To carry out your booking and deliver your photographs — performance of the contract (Article 6(1)(b) GDPR).
To issue invoices and keep accounts — a legal obligation (Article 6(1)(c) GDPR).
To show your photographs on this website or on social media — only with your consent (Article 6(1)(a) GDPR), which you can withdraw at any time.
How long it is kept
Enquiries that do not lead to a booking are deleted 12 months after our last contact.
Calendar holds that are not confirmed are deleted automatically after 72 hours.
Booking and invoice records are kept for as long as Spanish tax and commercial law requires.
Photographs from your session are kept for 2 years, so that lost copies can be replaced. Ask, and I will delete them sooner.
Who else handles it
Netlify, Inc. hosts this website and stores contact-form submissions. Netlify is based in the United States; transfers are covered by the safeguards in Netlify's data processing agreement, including the European Commission's Standard Contractual Clauses.
Calendar holds are stored with Netlify too. The public calendar shows only whether a date or time is free, on hold or booked — never who holds it.
My email is hosted by Namecheap, Inc..
If you pay by card, the payment is processed by Stripe Payments Europe, Ltd. (Ireland), which receives your card details directly — I never see them. Bizum and bank-transfer payments are processed by the banks involved.
If you contact me on WhatsApp, WhatsApp (Meta) processes that conversation under its own privacy policy.
I do not sell your data or use it for advertising.
Cookies
This website sets no advertising or analytics cookies. The only thing it stores in your browser is your language choice, so that pages stay in the language you picked.
Your rights
You can ask to see, correct or delete your data, to restrict or object to how it is used, to receive it in a portable format, and to withdraw consent at any time. Write to adam@bahiaphotographer.com.
If you believe your data has been mishandled, you can complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).
Your photographs
Photographs from your session are yours to use however you like. I publish none of them — on this site, on Instagram, or anywhere else — unless you have agreed to it. That agreement is separate from the booking and you can withdraw it later.
Children
Children are photographed only with the consent of a parent or guardian, and photographs of children are published only with that consent.
When, where — and how it should feel
Dates go early for May, June and September. Send the date, the place and the feel you have in mind — I reply as soon as possible, guaranteed.
Share your plans