Privacy & Data Protection Policy
Winter Park Photography Inc.
Effective Date: 15th April 2025
⸻
1. Introduction
Winter Park Photography Inc. (“we,” “our,” “us”) respects your privacy and is committed to protecting your personal data. This Privacy & Data Protection Policy explains how we collect, use, store, and protect your information — whether you’re visiting our website, contacting us about a shoot, or receiving files from us.
This policy is written to comply with:
• The General Data Protection Regulation (GDPR) for users in the European Economic Area (EEA)
• Relevant privacy expectations and best practices in the United States, including state-level guidance (e.g., CCPA)
By using our website or services, you agree to the terms of this policy.
⸻
2. Who We Are
Winter Park Photography Inc. We provide high-end hotel and commercial photography services across the U.S., Europe, the Caribbean, and the Middle East.
Website: www.winterparkphotography.com
Email: [email protected]
Business Locations: Salzburg, Austria & Orlando, Florida, USA
⸻
3. What Personal Data We Collect
We may collect and process the following types of personal data:
Information you provide directly:
• Name, email address, phone number
• Company or hotel name, job title
• Details about your photography needs
• Feedback or testimonials
Information we collect automatically:
• IP address and browser data
• Pages visited and time on site (via Google Analytics or similar tools)
• Device information and location (approximate)
We do not collect sensitive data (like race, religion, biometric data) and we do not knowingly collect data from children under 16.⸻
4. How We Use Your Data
We use your data to:
• Respond to inquiries and provide quotes
• Deliver contracted photography services
• Send project updates and final files
• Provide support or follow-up service
• Send occasional marketing emails (only if you opt in)
• Improve our website and services using analytics
⸻
5. Lawful Bases for Processing (for EU/EEA residents)
We process personal data under one or more of the following lawful bases:
• Consent (for marketing emails or optional forms)
• Contract (to provide photography services or respond to inquiries)
• Legitimate interest (to improve services or follow up on a shoot)
• Legal obligation (e.g., tax and invoicing records)
⸻
6. Data Storage and Retention
We store personal data securely using trusted tools and services:
• Encrypted email and cloud storage
• Dropbox, SmugMug, and Google Workspace
• MailerLite (email marketing)
We retain data only as long as necessary to fulfill our services, legal obligations, or legitimate business purposes. You can request deletion at any time (see Section 9).
⸻
7. Sharing Your Data
We only share your data with third parties essential to our services, such as:
• Email hosting and cloud storage providers
• File delivery platforms (e.g. Dropbox, SmugMug)
• Analytics services (e.g. Google Analytics)
• Email newsletter tools (e.g. MailerLite)
We never sell your personal information. All service providers are contractually bound to safeguard your data.
⸻
8. International Transfers As we operate internationally, your data may be transferred outside your home country (e.g., between the EU and the U.S.). We ensure that appropriate safeguards (like Standard Contractual Clauses under GDPR) are in place to protect your data across borders.
⸻
9. Your Rights (Especially under GDPR)
You have the right to:
• Access the personal data we hold about you
• Request correction of inaccurate data
• Request erasure of your data (“right to be forgotten”)
• Restrict or object to processing
• Withdraw consent at any time (for example, to marketing emails)
• Data portability (in some cases)
To exercise these rights, email us at [email protected].
⸻
10. Cookies & Tracking
Our website uses cookies for:
• Site functionality and performance
• Visitor analytics (e.g. Google Analytics)
• Marketing and ad tracking (if applicable)
You can disable cookies via your browser settings. You can also opt out of tracking using tools like Google’s Ads Settings.
⸻
11. U.S. Privacy Note (Including CCPA Reference)
Although Winter Park Photography Inc. is not currently required to comply with CCPA or other U.S. state privacy laws, we support the principles of transparency and user choice. We will never sell your data and you may always request to review or delete your data.
⸻
12. Security
We take appropriate technical and organizational security measures to protect your data from unauthorized access, disclosure, alteration, or destruction. However, no system is 100% secure, and we recommend you take precautions when submitting information online.
⸻
13. Third-Party Links
Our website and portfolio pages may contain links to third-party websites. We are not responsible for their content, data practices, or privacy policies.⸻
14. Changes to This Policy
We may update this policy occasionally to reflect legal, technical, or business changes. The revised version will always be available on this page, with a revised “Effective Date” at the top.
⸻
15. Contact Us
If you have any questions, concerns, or requests related to this Privacy & Data Protection
Policy:
Winter Park Photography Inc.
Based in Salzburg, Austria & Orlando, Florida
[email protected]
📞 +1 407-529-4804
www.winterparkphotography.com