Privacy & cookie policy

This policy explains how the personal data of visitors to this website are processed, under Article 13 of Regulation (EU) 2016/679 (the General Data Protection Regulation, “GDPR”) and Italian Legislative Decree 196/2003 (the Italian Privacy Code).

1. Data controller

The data controller is the photographer who runs this website, a sole trader based in Italy:

Goran Kriznjak Via Piero Gobetti 11 70015 Noci (BA), Italy VAT 08168180720 info@gorankris.it

2. What data is processed, and why

Browsing data

This website is hosted by bunny.net (BunnyWay d.o.o., Ljubljana, Slovenia), which receives the technical data of every request in order to deliver the pages: IP address, date and time, requested page, browser type. In the service’s logs the IP address is anonymized, and logs are kept for 3 days. This data is used only to run the website and keep it secure (legal basis: legitimate interest, Art. 6(1)(f) GDPR) and is never used to identify visitors.

Visit statistics

To understand how the website is used, it counts visits with Umami, a privacy-friendly analytics service. When a page is opened, your browser sends Umami the page visited, the referring website, browser, operating system, device type, screen size and language; from the IP address Umami derives only an approximate location (country, region, city), and doesn’t store the address itself. Umami sets no cookies and stores nothing in your browser: visits are grouped by an anonymous session identifier that doesn’t allow you to be identified, and the controller sees only aggregate statistics. The data is stored on servers in the European Union. It is used only to improve the website (legal basis: legitimate interest, Art. 6(1)(f) GDPR); you can object at any time by writing to the address given in section 1, or block the service with any content blocker.

Data sent through the contact form

If you fill in the form on the Contact page, your name, email address, wedding date, venue, hometown and message are collected. They are used to reply to your request and to prepare a quote (legal basis: steps taken at your request before entering into a contract, Art. 6(1)(b) GDPR). All fields are required: without them your request can’t be answered.

The same applies to the data in emails you send directly to the address given in section 1.

3. Who receives the data

Data is never sold or passed on to third parties for marketing. It is processed on the controller’s behalf, as data processors, only by the providers that make the service possible:

• bunny.net (BunnyWay d.o.o., Slovenia), which hosts the website;
• Umami (Umami Software, Inc., United States), which collects the visit statistics and stores them on servers in the European Union. See its privacy policy;
• Formspark (Trampoline Software SRL, Belgium), which receives the messages sent through the contact form, stores them on servers in Ireland and Germany and forwards them to the controller by email. See its privacy policy;
• One.com (One.com A/S, Denmark), which hosts the controller’s mailbox, where requests arrive, on servers in Copenhagen.

bunny.net, Formspark and One.com are based in the European Union. bunny.net’s network does, however, have servers worldwide, and each page is delivered from the server closest to the visitor. Umami is based in the United States, and some of its and One.com’s sub-processors are outside the European Union: transfers to them are covered by the European Commission’s standard contractual clauses.

4. How long data is kept

Visit statistics are kept in aggregate form. Data sent through the form or by email is kept as long as needed to handle the request. If it leads to a booking, the data needed is kept for the length of the engagement and then for as long as the law requires, in particular for tax purposes (10 years). Otherwise it is deleted within 12 months of the last contact.

5. Cookies and browser storage

This website uses no cookies, and no profiling or advertising tools. The only analytics tool, Umami (see section 2), uses no cookies and stores nothing in your browser. Fonts and images are served by the website itself, without contacting any third-party service.

The website stores a single technical value in your browser (in localStorage), gkIntroLastShown: the time the opening animation was last shown, so that it isn’t repeated if you come back within an hour. It doesn’t identify you, is never sent anywhere and, being strictly necessary for the website to work, needs no consent (Art. 122 of the Italian Privacy Code). You can delete it at any time from your browser settings.

The Instagram link leads to an external website, which processes data under Meta’s own privacy policy; no data is sent to Instagram until you open it.

6. Your rights

At any time you can ask the controller for access to your data, its rectification or erasure, restriction of processing and data portability, and you can object to processing based on legitimate interest (Arts. 15–21 GDPR). Just write to the email address given in section 1.

If you believe the processing breaches the GDPR, you can lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali, or with the authority of the EU country where you live.

No automated decision-making or profiling takes place.

7. Changes

This policy may be updated. The date of the last update is shown at the top of the page.