Privacy Policy
This policy explains what personal data Kate Lang Production collects through this website and in the course of photography and video work, why, and what rights you have. It applies to the European Union’s General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and Greek data protection law (Law 4624/2019).
Who is responsible for your data
The data controller is Kate Lang, trading as Kate Lang Production, Athens, Greece.
Contact for anything related to your data: [email protected].
What data we collect
When you send a booking request or contact form: your name, email address and/or phone number, the service you are interested in, the date and location of the shoot, your message, and technical context that helps us answer and measure which pages bring enquiries: the page you sent the form from, the site language, the referring website, campaign tags in the link (UTM parameters) and the time of the request.
When you contact us via a messaging app (WhatsApp, Viber, Telegram, Instagram, SMS) or email: the data you choose to share there. These services are operated by third parties under their own privacy policies.
When you visit the website: the web server records standard technical logs (IP address, browser, date and time, requested page) for security and to keep the site running. We do not use advertising cookies. See the Cookie Policy.
During a shoot: images and video of people who appear in them. See “Photos and video of people” below.
Why we use it and on what legal basis
- To answer your enquiry and prepare a quote, on the basis of steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
- To carry out the booked shoot, deliver the images and invoice, on the basis of the contract (Art. 6(1)(b)) and legal obligations such as tax and accounting rules (Art. 6(1)(c)).
- To keep the website secure and understand which pages generate enquiries, on the basis of our legitimate interest (Art. 6(1)(f)). This uses only the page and source information sent with the form, not tracking cookies.
- Optional analytics, only if you accept them in the cookie banner, on the basis of your consent (Art. 6(1)(a)). You can withdraw consent at any time.
Who receives your data
- Telegram (Telegram Messenger Inc.): booking requests from the website form are delivered to us as a private message through a Telegram bot.
- Hosting provider: our hosting provider stores the website and its server logs.
- Messaging and email providers you choose to contact us through.
- Accountants and authorities where required by law (for example, invoices).
We never sell personal data. Some of these providers may process data outside the European Economic Area; where this happens, transfers rely on the safeguards provided by the GDPR, such as the European Commission’s standard contractual clauses or adequacy decisions.
How long we keep it
- Enquiries that do not lead to a booking: up to 24 months, then deleted.
- Client and invoicing records: as long as Greek tax law requires.
- Server logs: up to 90 days.
- Delivered images: kept in our archive so we can re-deliver files on request, unless you ask us to delete them and no legal reason requires keeping them.
Photos and video of people
When we photograph events, businesses or people, the client who books the shoot is responsible for informing guests and staff that photography takes place. We use images of identifiable people in our portfolio, on this website or on social media only with the client’s agreement and, where needed, the person’s consent. If you appear in an image on this website and want it removed, write to [email protected] and we will take it down promptly.
Your rights
You can ask to access your data, correct it, delete it, restrict or object to its use, receive it in a portable format, and withdraw consent you have given. Write to [email protected]; we reply within one month.
You also have the right to lodge a complaint with the Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα), Kifisias 1-3, 115 23 Athens, www.dpa.gr.
Security
The website is served over an encrypted connection (HTTPS). The Telegram bot token and other credentials are kept on the server, never in the browser. Access to enquiries is limited to Kate Lang.
Changes
We may update this policy when our services or the law change. The date of the last update is shown below the title.
Last updated: