Back to the site

Last updated: July 29, 2026

1. Data Controller

The Data Controller responsible for the processing of personal data collected through this website is:

Chantal Karisa Photography
Terni (TR), Italy
VAT No. 01575330558

Website: https://www.ckphotography.it

Email: info@ckphotography.it

2. Personal Data We Collect

When you browse or interact with our website, we may collect the following personal data.

Information You Provide Voluntarily

  • First and last name
  • Email address
  • Phone number
  • Information submitted through our contact forms
  • Details included in booking or quotation requests

Information Collected Automatically

  • IP address
  • Browser type
  • Operating system
  • Date and time of access
  • Pages visited
  • Time spent on the website
  • Referring website

3. Purpose of Processing

Your personal data is processed for the following purposes:

  • Responding to inquiries and contact requests
  • Providing quotations
  • Managing photography sessions and bookings
  • Performing contractual obligations
  • Complying with legal requirements
  • Improving the performance and security of the website
  • Preventing fraud or misuse
  • Sending marketing communications only where consent has been given

4. Legal Basis for Processing

We process your personal data based on one or more of the following legal grounds:

  • Your consent
  • Performance of a contract
  • Pre-contractual measures requested by you
  • Compliance with legal obligations
  • Legitimate interests pursued by the Data Controller

5. How We Process Your Data

Personal data is processed using electronic and digital systems designed to ensure:

  • Confidentiality
  • Integrity
  • Availability
  • Appropriate security

We implement suitable technical and organizational measures to protect your information.

6. Data Retention

Your personal data will be retained only for as long as necessary to fulfill the purposes described in this policy.

Generally:

  • Contact requests: up to 24 months
  • Contractual and invoicing data: as required by applicable tax and accounting laws
  • Marketing data: until consent is withdrawn or for a maximum of 24 months

7. Data Sharing

Your personal data may be shared with trusted third parties, including:

  • Accountants and tax advisors
  • IT service providers
  • Web hosting providers
  • Cloud service providers
  • Email communication platforms
  • Website maintenance providers
  • Public authorities where required by law

Your personal data will never be sold or publicly disclosed.

8. International Data Transfers

Some service providers may process data outside the European Economic Area (EEA).

Where this occurs, transfers are carried out in accordance with the GDPR using appropriate safeguards, including:

  • European Commission Adequacy Decisions
  • Standard Contractual Clauses (SCCs)
  • Other lawful transfer mechanisms

9. Cookies

Our website uses essential cookies necessary for its operation.

With your consent, we may also use:

  • Analytics cookies
  • Marketing cookies
  • Profiling cookies
  • Third-party cookies

Please refer to our Cookie Policy for detailed information.

10. Your Rights

Under the General Data Protection Regulation (GDPR), you have the right to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request deletion of your data
  • Restrict processing
  • Object to processing
  • Request data portability
  • Withdraw your consent at any time
  • Lodge a complaint with a supervisory authority

11. Supervisory Authority

If you believe your rights have been violated, you may lodge a complaint with your local Data Protection Authority.

For users in Italy:

Italian Data Protection Authority (Garante per la Protezione dei Dati Personali)

https://www.garanteprivacy.it

12. Data Security

We take appropriate technical and organizational measures to protect your personal data against:

  • Unauthorized access
  • Accidental loss
  • Destruction
  • Alteration
  • Disclosure
  • Misuse

13. Children’s Privacy

Our website is not intended for children under the age of 16.

Where photography services involve minors (such as family sessions, baptisms, communions, or weddings), personal data and images will only be processed with the consent of a parent or legal guardian.

14. Photography and Image Rights

During photography sessions, photographs and videos may be created and processed.

The use of images for:

  • Portfolio
  • Website
  • Social media
  • Advertising
  • Promotional materials
  • Printed publications

will only take place after the client has signed a separate Model Release Agreement.

Without a signed release, photographs will be used solely for the purpose of delivering the contracted photography services.

15. Changes to this Privacy Policy

We reserve the right to update this Privacy Policy at any time to reflect legal, technical, or business changes.

The updated version will always be published on this page with the latest revision date.

Acceptance

By using this website and submitting your personal information through our contact forms, you acknowledge that you have read and understood this Privacy Policy and, where required, consent to the processing of your personal data in accordance with the General Data Protection Regulation (GDPR).

This site uses cookies for site functionality and traffic analysis. Privacy policy