Privacy Policy
We are committed to protecting your personal data and respecting your privacy. The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data includes any information that can be used to personally identify you. For detailed information about data protection, please refer to our privacy policy below. This privacy policy explains how we collect, use, and protect your personal data in accordance with the General Data Protection Regulation (GDPR).
1. Name and Contact Information of the Data Controller
Zahra Bonakdar
Isenbergstraße 51
45130 Essen, Germany
Email: yasicaptures@gmail.com
Phone: 015258461759
2. Data Collection and Processing
We collect and process data when you interact with our website or services hosted on Squarespace. Specifically:
a. Website Access
Squarespace automatically collects technical information to provide hosting services, improve functionality, and ensure security:
IP address
Browser type and version
Operating system
Device type
Referrer URL
Date and time of access
This data is stored temporarily and processed for legitimate interests such as security and analytics.
b. Contact Forms
If you contact us via a form or email, we collect the following information:
Name
Email address
Phone number
Any information you include in your message
c. Request by e-mail, telephone, or fax
If you contact us by e-mail, telephone, or fax, we will store and process your inquiry, including all personal data (name, inquiry), for the purpose of processing your request. We will not pass on this data without your consent.
This data is processed on the basis of Art. 6 para. 1 lit. b GDPR if your request is related to the fulfillment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the inquiries addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR) if this has been requested; consent can be revoked at any time.
The data you send to us via contact requests will remain with us until you ask us to delete it, revoke your consent to storage, or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory statutory provisions - in particular statutory retention periods - remain unaffected.
The data is used exclusively to process your inquiry. We will retain the data you provide on the contact form until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer pertains (e.g. after fulfilling your request).
d. Instagram Integration
Our website integrates content from Instagram (e.g., feeds, photos, or videos). When you interact with this content, Instagram may collect data such as:
Your IP address
Browser type and version
Information about your interactions (e.g., likes, comments, or views)
Data collected through Instagram is subject to Instagram’s Privacy Policy.
e. File Delivery with WeTransfer
To deliver your photos, we use the file-sharing service WeTransfer, operated by WeTransfer B.V., based in the Netherlands. Files are temporarily stored on their servers and encrypted during transfer. By using our services, you agree to the use of WeTransfer for the delivery of your photos.
We recommend downloading your files promptly and securely storing them on your personal device. WeTransfer automatically deletes files after 7 days, and we have no control over their storage or security measures beyond this period.
For more information, please refer to WeTransfer’s Privacy Policy.
If you prefer an alternative delivery method (e.g., USB stick), please contact us prior to delivery.
f. Payment Processing with PayPal
If you receive an invoice from us and pay via PayPal, the following data is processed by PayPal:
Your contact details (e.g., name and email)
Payment information (e.g., credit card or bank account details)
PayPal processes your data as an independent data controller. For details, refer to PayPal’s Privacy Policy.
We do not store your payment details. PayPal provides us with confirmation of the transaction, including the payer's name, email, and amount paid, for invoicing purposes.
We use tools provided by companies based in the USA or other countries that do not offer the same level of data protection as the EU. When these tools are active, your personal data may be transferred to and processed in these countries. Please note that these countries, including the USA, may not guarantee data protection standards equivalent to those in the EU. For instance, U.S. companies are required to provide personal data to security authorities, and as an affected individual, you may not have legal recourse to challenge this. Consequently, it is possible that U.S. authorities (e.g., intelligence agencies) could access, analyze, and store your data stored on U.S. servers for surveillance purposes. We have no control over these processing activities.
3. Cookies and Tracking Technologies
We use cookies and similar technologies to enhance website functionality and analyze traffic. Additionally, third-party providers such as Squarespace and Instagram may use cookies as part of their services.
Types of Cookies Used
Essential Cookies: Necessary for core website functions and security.
Analytics Cookies: Help us understand website traffic and user behavior to improve our services.
Squarespace Analytics
Squarespace collects anonymized analytics data, including:
Page views
Traffic sources
Visitor interactions and behavior
Managing Cookies
You can manage your cookie preferences through your browser settings or our cookie consent tool, where applicable. Please note that disabling certain cookies may affect website functionality. Squarespace and Instagram use cookies and similar technologies to enhance functionality and analyze traffic.
4. Third-Party Services
Your data may be processed by the following third-party providers:
a. Instagram
When interacting with embedded Instagram content on our website, data may be transferred to Instagram’s servers, which may be located outside the EU. For more details, please refer to Instagram’s Privacy Policy.
b. PayPal
We use PayPal for invoicing and payment processing. PayPal may collect and process personal data such as billing details and transaction information. For more details, refer to PayPal’s Privacy Policy.
c. Squarespace (Hosting & Analytics)
Our website is hosted on Squarespace, which also collects anonymized analytics data, including visitor behavior, traffic sources, and page views. For more information, see Squarespace’s Privacy Policy.
d. WeTransfer
We use WeTransfer to deliver final images via a secure download link. WeTransfer may process personal data, including email addresses and uploaded files, to facilitate file transfers. Files are stored temporarily and automatically deleted after the retention period set by WeTransfer. By using this service, clients acknowledge that their data may be processed in accordance with WeTransfer’s Privacy Policy
5. Legal Basis for Data Processing
We process personal data in accordance with the General Data Protection Regulation (GDPR) based on the following legal grounds:
Art. 6(1)(a) GDPR – Consent: When you provide explicit consent for specific processing activities, such as the use of analytics cookies or marketing communications.
Art. 6(1)(b) GDPR – Contractual Necessity: When processing is necessary to fulfill a contract or take pre-contractual steps at your request, such as responding to inquiries, processing payments, or delivering purchased services.
Art. 6(1)(f) GDPR – Legitimate Interests: When processing is required to pursue our legitimate interests, provided they do not override your rights. This includes improving website functionality, ensuring security, and preventing fraud.
6. Data Retention
We retain your data only as long as necessary for the purposes outlined or as required by law. Data processed by third-party providers (e.g., PayPal, Instagram, WeTransfer) is retained according to their policies.
7. Your Rights
Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:
Right to Access: You can request a copy of the personal data we hold about you.
Right to Rectification: You have the right to correct inaccurate or incomplete personal data.
Right to Deletion ("Right to Be Forgotten"): You can request the deletion of your personal data. If you exercise this right or withdraw your consent for data processing, we will delete your data, unless we have legal obligations to retain it (e.g., for tax or commercial law purposes). In this case, your data will be deleted once those retention periods no longer apply.
Right to Restrict Processing: Upon request we limit the processing of your personal data in certain circumstances.
Right to Object: You have the right to object to the processing of your data based on legitimate interests. If your data is processed for direct marketing purposes, you can object at any time, including profiling related to direct marketing. Once you object, we will cease processing your data for these purposes, as outlined in Art. 21(2) GDPR.
Right to Data Portability: You can request your personal data in a structured, commonly used, and machine-readable format. You also have the right to request that we transfer this data to another controller, where technically feasible.
To exercise any of these rights, please contact us at yasicaptures@gmail.com.
8. Use of Images & Rights of the Photographer
As part of our photography services, we may store and process client images for portfolio, website, social media, and marketing purposes. Clients wishing to restrict the use of their images for these purposes must notify us in writing before the project is completed. Clients have the option to purchase exclusive rights to their images. If exclusive rights are purchased, the photographer will not use the images for promotional or portfolio purposes, and the client has full control over the use of the images. The fee for exclusive rights is determined based on the scope of the project and must be agreed upon before the shoot. If no agreement for exclusive rights is made, the photographer retains the right to use the images for promotional purposes while ensuring compliance with GDPR. Clients may request the deletion of their images at any time. However, deletion will not be possible if legal retention requirements or contractual obligations require the photographer to keep the images.
9. Contact and Complaints
If you have questions about data protection, contact us at yasicaptures@gmail.com.
You also have the right to file a complaint with the relevant supervisory authority:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Kavalleriestraße 2-4
40213 Düsseldorf, Germany
If you have any questions about data protection or wish to exercise your rights, please contact us at:
yasicaptures@gmail.com
10. Changes to This Privacy Policy
This Privacy Policy may be updated to reflect changes in legal requirements, our services, or our practices. We recommend reviewing this page periodically to stay informed about any updates. The latest version will always be available on our website.