Privacy Policy

This policy explains how Marija Ivanova (“Marija Photo”, “we”) processes personal data when you visit mariaphoto.lv, contact us, or use photography services. We comply with the EU General Data Protection Regulation (GDPR) and Latvian law.

Last updated: 2026-06-01

1. Data controller & contact

Controller: Marija Ivanova — professional photographer, Riga, Latvia.

Email: [email protected]
Phone: +371 26042337
Website: mariaphoto.lv

2. Cookies & local storage

No cookie consent banner is required for this website. We do not use marketing or cross-site tracking cookies (e.g. Google Analytics, Meta Pixel).

We may use browser localStorage and sessionStorage only to remember your choices — dark/light theme, language, and whether you dismissed the promo strip. This stays on your device and is not used for profiling.

The site is hosted on Cloudflare Pages. Cloudflare processes technical data (including IP addresses) for security and content delivery. See the Cloudflare Privacy Policy.

3. Personal data we process

  • Contact details you provide when booking: name, phone, email, message content (WhatsApp, email, Instagram, etc.).
  • Photographs and session-related information.
  • Technical data when visiting the site (IP, browser) via our host/CDN.
  • On client galleries (gallery.mariaphoto.lv): access password (if set), access logs on the hosting side.

4. Purpose & legal basis

  • Contract performance — to schedule, shoot, and deliver photos (GDPR Art. 6(1)(b)).
  • Consent — to publish your images in portfolio or social media (GDPR Art. 6(1)(a)). Consent is requested separately and explicitly — never assumed.
  • Legitimate interests — site security and basic operation (GDPR Art. 6(1)(f)).
  • Legal obligation — accounting and tax records where applicable.

5. Processors & third parties

  • Cloudflare, Inc. — hosting for mariaphoto.lv.
  • Hetzner / object storage — client gallery files at gallery.mariaphoto.lv.
  • Meta (Instagram) — only on Backstage when Instagram embeds load.
  • WhatsApp / email — when you contact us.

6. Client galleries

Private photo galleries are served at gallery.mariaphoto.lv. Links and passwords are for you and your chosen recipients only. Private galleries are not indexed by search engines.

7. Portfolio & publishing photos

Your likeness and photographs are personal data. We do not publish client photos in portfolio, Instagram, or elsewhere without prior, clear, voluntary consent (e.g. by email or contract).

If you want full confidentiality, please say so when booking — we will respect that.

8. Retention

  • Booking correspondence — up to 2 years after last contact unless another legal basis applies.
  • Photos and galleries — for service delivery and thereafter as agreed or required by law; you may request deletion where applicable.
  • Accounting records — as required under Latvian law (typically up to 5 years).

9. Your rights

  • access, rectification, erasure, restriction, objection, data portability;
  • withdraw consent at any time (without affecting lawful processing before withdrawal);
  • complain to the Latvian Data State Inspectorate (DVI): www.dvi.gov.lv, [email protected].

10. Changes

We may update this policy. The current version is always published on this page with the update date below.