Legal

What we keep, why, and for how long.

How Frame Studio O.E. collects, uses and protects personal data under Regulation (EU) 2016/679 and Greek Law 4624/2019. We are the data controller.

The document

Who we are

Frame Studio O.E., Pelopos 14, Petralona, 11852 Athens, Greece. AFM (VAT) EL 802 357 491. GEMI 162 487 5210 00.

Email [email protected], telephone +30 210 345 6712. Privacy contact: [email protected].

What we collect

Identity data (your name, your partner’s name); contact data (email, telephone, postal address); booking data (date, location, party size, and any access or dietary notes you choose to share); commercial data (invoices, deposits, payment dates); photographic data (the photographs and films made for you under contract); marketing data (newsletter subscription status).

Technical data — IP address, browser, device, referrer, pages visited — through Google Analytics 4 with IP anonymisation enabled.

Legal basis

Performance of a contract for photography services, Article 6(1)(b). Compliance with a legal obligation, including invoicing under Greek tax law, Article 6(1)(c). Your consent for the newsletter, for optional analytics, and for publishing your photographs in our portfolio or journal, Article 6(1)(a). Our legitimate interest in maintaining the studio archive and answering enquiries, Article 6(1)(f).

How we use it

To answer enquiries; to deliver photography and film services under contract; to issue tax invoices; to deliver your photographs and host your private gallery; to send the seasonal newsletter if you subscribed; to keep the portfolio and journal where you have signed a model release; and to meet our legal and accounting obligations.

Who processes it

Google LLC (Analytics 4, IP anonymised, EU servers); Pixieset (private gallery hosting, EU data residency); Mailerlite (newsletter, EU data residency); Stripe (card payments under PCI-DSS); our Greek-licensed accountants for invoices; and our host, Fixit E.E., on servers in Frankfurt.

Every processor is bound by a data processing agreement.

Transfers outside the EEA

Where a processor transfers data outside the European Economic Area we rely on the European Commission’s Standard Contractual Clauses, Decision 2021/914, or on an adequacy decision.

How long we keep it

Enquiries, 12 months. Booking and contract data, 10 years from the date of the wedding, as Greek tax law requires. Photographic deliverables are kept in the studio archive indefinitely unless you ask us to delete them. Newsletter data until you unsubscribe. Analytics data, 14 months.

Your rights

Under Articles 15 to 22 you may access your data, have it corrected, ask for it to be erased (subject to the retention periods tax law imposes on us), restrict or object to processing, receive it in a portable form, and withdraw consent at any time — which does not affect processing carried out before you withdrew it.

You may complain to the Hellenic Data Protection Authority at www.dpa.gr.

Making a request

Write to [email protected]. We answer within 30 days, and usually within a week.

Data requests

WherePelopos 14, Petralona, 11852 Athens
Telephone+30 210 345 6712
OpenMon–Fri 10:00–18:00, one Saturday a month

Anything about your own data goes to [email protected] and is handled by Eirini. Anything about a booking goes to the studio address below.