Privacy Policy

At Anna Riva Photography, we respect and protect your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal data in accordance with the EU General Data Protection Regulation (GDPR).

1. Who we are

Data Controller: Anna Riva Photography
Business address: [Insert address, Sofia/Bulgaria]
Contact: [Insert email], [Insert phone]

2. What data we collect

• Name, email, phone number (when you contact us or book a session)
• Session details (location, preferences, agreements)
• Photographs taken during the session (with your consent)
• Technical data: IP address, cookies (see Cookie Policy)

3. Why we collect your data

• To provide and deliver photography services (contract)
• To communicate with you regarding bookings (legitimate interest)
• To use photographs for portfolio, website, or social media (only with your explicit consent)
• To comply with legal obligations (invoices, taxes)

4. Data sharing

We share your data only with trusted service providers (website hosting, email, payment processors). We never sell your data.

5. Data retention

• Booking/contact data: kept for up to 5 years (for tax and legal compliance)
• Photographs: stored until you withdraw consent or for a maximum of 10 years (portfolio/archive)

6. Your rights

You have the right to:

• Access your personal data
• Request correction or deletion
• Withdraw consent at any time (for photo portfolio use)
• Object to processing
• File a complaint with the Bulgarian Commission for Personal Data Protection (https://www.cpdp.bg)

7. Contact

For any privacy-related questions or requests, contact us at: [Insert email].