Privacy Policy

WELO MEDIA STUDIOS S.R.L.

C.A. Rosetti Straße, Nr. 20 / P9 / 05

Corabia, 235300, Rumänien

E-mail: info@aktfotograf-wien.at

Website: aktfotograf-wien.at / welo-media.com

Cross-border services pursuant to the EU Services Directive 2006/123/EC.

In the course of our activity we process the following personal data:

• Data you provide to us voluntarily via contact forms, e-mail or telephone (name, e-mail address, telephone number, message)
• Server log files that are recorded automatically when you visit our website
• Data collected in the course of photo shoots for the performance of the contract
• Technically necessary cookies

No data is collected beyond the respective purpose. Data is disclosed to third parties exclusively within the limits permitted by law.

Your personal data is processed on the basis of the following legal bases:

• Art. 6(1)(a) GDPR — consent (e.g. for cookies, newsletter)
• Art. 6(1)(b) GDPR — performance of a contract (e.g. photo shoot booking)
• Art. 6(1)(c) GDPR — legal obligation (e.g. retention obligations)
• Art. 6(1)(f) GDPR — legitimate interest (e.g. website security)

If you contact us via the contact form, by e-mail or by telephone, the information you provide (name, e-mail address, telephone number, requested service and message) is stored in order to process your enquiry.

Retention period: Your contact details are deleted six (6) months after your enquiry has been concluded, unless statutory retention obligations apply.

Demonstration of consent: In order to demonstrate your consent under data protection law, the time of submission and the IP address used at that time are recorded in the enquiry e-mail together with your enquiry. The legal basis is Art. 6(1)(c) in conjunction with Art. 7(1) GDPR (accountability). This information is deleted together with the enquiry.

Dispatch: We use a processor to send the enquiry e-mail and the confirmation of receipt (see section 05a). In doing so, the data you have provided as well as the information referred to above is transmitted.

Disclosure: Any disclosure of your data to third parties going beyond this takes place only with your express consent or on the basis of a legal obligation.

In order to provide this website and to process your enquiries, we use the following service providers as processors within the meaning of Art. 28 GDPR. Corresponding data processing agreements are in place with all of them.

• Vercel Inc. (340 S Lemon Ave #4133, Walnut, CA 91789, USA) — hosting and delivery of the website. Data processed: server log files including IP address (see section 05).
• Resend (Plus Five Five, Inc.), USA — sending the enquiry and confirmation e-mails. Data processed: name, e-mail address, telephone number, message content as well as the time and IP address of the consent.
• Upstash, Inc., USA — technical storage of website configuration and protection against misuse (limiting the number of requests per IP address). Data processed: truncated technical identifiers, no content data.
• Dropbox International Unlimited Company (One Park Place, Hatch Street Upper, Dublin 2, Irland; parent company Dropbox, Inc., USA) — provision of the image files for download via a link that is not publicly discoverable. Data processed: the image files themselves as well as technical access data.
• WeTransfer B.V. (Oostelijke Handelskade 751, 1019 BW Amsterdam, Niederlande) — alternative transmission of the image files. Processing takes place within the EU. Transferred files are deleted automatically by the provider once the validity of the link expires.

Transfer to the USA: The service providers named also process data in the United States. The transfer takes place on the basis of the standard contractual clauses of the European Commission pursuant to Art. 46(2)(c) GDPR and — insofar as the providers are certified — on the basis of the EU-US Data Privacy Framework pursuant to Art. 45 GDPR. We point out that a level of data protection equivalent to European law cannot be guaranteed in the USA and that, in particular, access by US authorities cannot be entirely ruled out.

Image files: Your photographs are made available via Dropbox or WeTransfer exclusively for the purpose of delivery to you. No image files are transmitted to Vercel, Resend or Upstash. The working copies remain on the photographer’s encrypted storage media (see section 09). After downloading, we recommend that you let the link expire or delete the files at the provider — we will comply with a corresponding request at any time.

Our hosting provider Vercel Inc. (see section 05a) automatically collects the following data in server log files:

• IP address of the accessing computer
• Date and time of access
• Name and URL of the page retrieved
• Browser and operating system used
• Referrer URL (the previously visited page)
• Volume of data transferred

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the technical provision and security of the website).

IP addresses are anonymised after 30 days. Log files are deleted automatically within a maximum of 30 days.

Our website uses cookies. These are small text files that are stored on your device. We distinguish three categories:

Technically necessary cookies: These are required for the website to function and cannot be deactivated. No consent is required for them.

Analytics cookies: With your consent, we use Google Analytics 4 (GA4) to analyse the use of the website.

Marketing cookies: With your consent, marketing cookies may be set in order to deliver personalised advertising.

You can deactivate cookies at any time via your browser settings or manage them via our cookie settings. You may withdraw your consent at any time.

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited („Google“). It is used on the basis of your consent (Art. 6(1)(a) GDPR) and is only activated once you have given your consent via our cookie banner.

Google Analytics uses Consent Mode v2 technology. Without your consent, no personal data is transmitted to Google. Where IP anonymisation is activated, your IP address is truncated within the EU/EEA.

Data may be transferred to servers in the USA. The transfer takes place on the basis of standard contractual clauses (SCCs). The retention period is 14 months.

You can prevent collection by Google Analytics by installing the browser add-on for deactivating Google Analytics. Further information can be found in Google’s privacy policy.

All photographs created in the course of commissions remain the exclusive property of WELO MEDIA STUDIOS S.R.L. and Alexandru-Sebastian Bogdan. The company and the photographer retain unrestricted copyright and all rights of use.

The delivery of photographs does not constitute a transfer of copyright. Upon delivery, clients receive exclusively limited, non-exclusive rights of use to the extent agreed in the contract. Copyright is transferred only by express written agreement.

Any use by the photographer for reference purposes — portfolio, website, social media, exhibitions — requires in every case a signed declaration of consent (model release) and remains limited to the scope declared therein. Stock licensing, resale or disclosure to third parties does not take place.

In the context of boudoir and nude photography, image data is handled with particular care and in the strictest confidence. Photos are published on our website or on social media exclusively after express written consent (model release) has been given. No identifiable images are published without your consent.

Right to erasure: You may request the erasure of your personal data in accordance with Art. 17 GDPR. We will comply with a justified erasure request within the statutory period. This does not apply to data whose further retention is necessary for compliance with legal retention obligations or for the establishment, exercise or defence of legal claims (Art. 17(3)(b) and (e) GDPR). Please address your request to info@aktfotograf-wien.at.

In the course of photo shoots, personal data (name, contact details, image data) is processed for the performance of the contract (Art. 6(1)(b) GDPR).

Retention period: Invoicing and accounting data is retained for seven years in accordance with statutory retention obligations. Contact and organisational data relating to the shoot is deleted six months after completion.

Image data: Recordings are retained for as long as is necessary for delivery, a possible re-order, the agreed reference use (where a model release is in place) and for the duration of possible warranty and liability claims. The legal basis is Art. 6(1)(b) and (f) GDPR. For your rights, see section 08 and section 12.

Recordings are stored on encrypted storage media. Storage in publicly accessible cloud folders does not take place. Where third parties are engaged for the performance of the commission (e.g. make-up artistry, assistance), this takes place on the basis of a confidentiality undertaking.

WELO MEDIA STUDIOS S.R.L. accepts no liability for the accuracy, completeness or currency of the information provided, for technical faults or outages, for loss of data after delivery, for the content of linked external websites, for malware or viruses, or for indirect damage or lost profit.

Excepted from this are cases of intent and gross negligence as well as claims arising from personal injury.

This website uses SSL/TLS encryption for secure data transmission. We employ technical and organisational security measures in order to protect your data against manipulation, loss, destruction or unauthorised access. Our security measures are continuously improved.

Complete security in the transmission of data over the internet cannot be guaranteed.

Under the GDPR you have the following rights:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to withdraw consent (Art. 7(3) GDPR)

No automated decision-making: Automated decision-making, including profiling, within the meaning of Art. 22 GDPR does not take place.

To exercise your rights, please contact: info@aktfotograf-wien.at

Where requests are manifestly unfounded or excessive, a reasonable fee may be charged.

You have the right to lodge a complaint with the competent data protection authority: