Privacy Policy
This Privacy Policy explains how Svetlina Studio ("we", "us", or "our") collects, uses, discloses, and protects your personal data when you visit and use our online platform, which includes our site and any associated services we provide. We are committed to protecting your privacy and handling your data in an open and transparent manner, in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR).
1. Who is Responsible for Your Personal Data?
Svetlina Studio is the data controller responsible for the processing of your personal data collected through our site and services.
Our contact address for data protection matters is:
Svetlina Studio
55 Graf Ignatiev Street, Floor 3
Sofia, Sofia Capital, 1000
Bulgaria
2. Personal Data We Collect
We may collect and process various types of personal data from you when you interact with our online platform, depending on how you use our services. This may include:
Contact Information: Such as your name, email address, phone number, and postal address when you contact us, request a quote, book a session, or subscribe to a newsletter.
Service Information: Details about the services you are interested in or book with us, including dates, times, specific requirements, and potentially photos you share with us for editing or printing services.
Payment Information: While we don't store full payment card details on our servers, we may collect transaction details related to purchases you make. Payment processing is handled by secure third-party providers.
Communication Data: The content of your communications with us, such as emails, messages, or other correspondence.
Technical and Usage Data: Information about how you access and use our site, including your IP address, browser type, operating system, pages visited, time spent on pages, referral sources, and device identifiers. This is often collected through cookies and similar technologies.
Marketing and Communication Preferences: Your preferences regarding receiving marketing communications from us.
We collect personal data when you provide it directly to us (e.g., through forms or emails) and automatically as you navigate through our site (e.g., through cookies).
3. Legal Basis for Processing Your Personal Data
We process your personal data based on the following legal grounds:
Performance of a Contract: When processing is necessary to provide the services you have requested or to take steps at your request before entering into a contract (e.g., processing your booking or quote request).
Legitimate Interests: When processing is necessary for our legitimate interests, provided these interests do not override your fundamental rights and freedoms (e.g., improving our services, site security, marketing to existing customers or those who have shown interest).
Consent: When you have given explicit consent for a specific purpose, such as subscribing to our newsletter or agreeing to the use of certain types of cookies. You have the right to withdraw your consent at any time.
Legal Obligation: When processing is necessary to comply with a legal obligation to which we are subject (e.g., accounting, tax, or other regulatory requirements).
4. How We Use Your Personal Data
We use your personal data for various purposes related to providing and improving our services, including:
To provide, operate, and maintain our site and services.
To process and fulfill your bookings, orders, and service requests (e.g., portrait session, event photography, printing).
To communicate with you about your bookings, inquiries, and provide customer support.
To send you information, updates, and service-related communications.
To send you marketing communications (where you have consented or based on legitimate interests, allowing you to opt-out).
To personalize your experience on our site.
To monitor and analyze usage and trends to improve our site and services.
To detect, prevent, and address technical issues and security incidents.
To comply with legal obligations and enforce our terms and conditions.
5. Sharing Your Personal Data
We do not sell your personal data to third parties. We may share your personal data with third parties only in the following circumstances:
Service Providers: We may share data with trusted third-party service providers who perform services on our behalf, such as payment processors, hosting providers, analytics providers, marketing service providers, and professional advisers (e.g., lawyers, accountants). These providers are obligated to protect your data and use it only for the purposes for which they were engaged.
Legal Requirements: We may disclose your personal data if required to do so by law or in response to valid requests by public authorities (e.g., a court order or government agency request).
Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal data.
With Your Consent: We may share your data with third parties when we have your explicit consent to do so.
When sharing data with third parties, we ensure appropriate safeguards are in place to protect your personal data.
6. International Data Transfers
Your personal data may be transferred to, and stored at, a destination outside the European Economic Area (EEA). It may also be processed by staff operating outside the EEA who work for us or for one of our service providers. When your data is transferred outside the EEA, we ensure it receives a similar level of protection by implementing appropriate safeguards, such as relying on Adequacy Decisions by the European Commission or using Standard Contractual Clauses approved by the European Commission.
7. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. However, please note that no method of transmission over the internet or method of electronic storage is completely secure.
8. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. The retention period varies depending on the type of data and the purpose of processing. When your personal data is no longer required, we will securely delete or anonymize it.
9. Your Data Protection Rights
Under GDPR, you have certain rights regarding your personal data:
Right of Access: You have the right to request a copy of the personal data we hold about you.
Right to Rectification: You have the right to request that we correct any personal data about you that is inaccurate or incomplete.
Right to Erasure ("Right to be Forgotten"): You have the right to request the deletion of your personal data in certain circumstances.
Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances.
Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
Right to Object: You have the right to object to the processing of your personal data in certain circumstances, particularly where processing is based on legitimate interests or for direct marketing purposes.
Rights related to Automated Decision-Making: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, except in certain cases.
Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw your consent at any time.
To exercise any of these rights, please contact us using the contact details provided in Section 1 of this policy. We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it.
You also have the right to lodge a complaint with a supervisory authority, particularly in the Member State of your habitual residence, place of work, or where an alleged infringement of the GDPR has occurred. In Bulgaria, the supervisory authority is the Commission for Personal Data Protection (CPDP).
10. Cookies and Similar Technologies
Our site may use cookies and similar technologies to collect technical and usage data. Cookies are small text files placed on your device. We use cookies to operate and improve our site, remember your preferences, analyze usage, and provide relevant content. You can manage your cookie preferences through your browser settings. Please refer to our separate Cookie Policy (if available) for more detailed information.
11. Children's Privacy
Our site and services are not intended for individuals under the age of 16. We do not knowingly collect personal data from children under 16 without parental consent. If you are a parent or guardian and believe that your child has provided us with personal data, please contact us using the details in Section 1, and we will take steps to remove that information.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. Any changes will be posted on this page, and the updated policy will supersede any previous versions. We encourage you to review this Privacy Policy periodically.
13. Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us in writing at:
Svetlina Studio
55 Graf Ignatiev Street, Floor 3
Sofia, Sofia Capital, 1000
Bulgaria
