PRIVACY / TRANSPARENCY
Privacy Policy
A clear account of what information is collected through this photography website, why it is used, who may process it, and the choices available to you.
AT A GLANCE
Your information, handled with purpose.
Effective date
27 August 2026
Controller
Stavros Marmaras Photography
Location
Athens, Greece
Contact
[email protected]
PRIVACY IN PLAIN LANGUAGE
Respectful by design.
This website is designed to showcase photographic work and make it straightforward to enquire about a professional assignment. Only information that is reasonably needed to respond to an enquiry, provide photography services, operate and protect the website, or understand site performance with consent is processed.
Submitting a contact form does not subscribe you to a newsletter or promotional list. Optional analytics and third-party services should load only after you make the relevant privacy choice.
Four practical commitments
No sale of personal data.
Your information is not sold to data brokers or advertisers.
No automatic marketing enrolment.
An enquiry is used to answer your message, not to add you to a mailing list.
Choice over optional services.
You can accept, reject, or later update non-essential cookie choices.
Human communication.
No solely automated decision is used to determine whether a photography enquiry is accepted.
PAGE GUIDE
Find what you need.
Use these links to move directly to a section of this policy.
CONTROLLER AND CONTACT
Who is responsible for your information?
For the purposes of this policy, Stavros Marmaras Photography is the data controller. This means it determines why and how personal information is processed through this website and in connection with photography enquiries and assignments.
Questions, requests, or concerns about this policy can be sent directly by email. Privacy requests are handled without requiring you to use a separate platform.
Controller details
Stavros Marmaras Photography
Athens, Greece
Email
[email protected]
Telephone
+30 6972 607 716
Website
stavrosmarmaras.com
01 / INFORMATION COLLECTED
Information connected to a visit or enquiry.
The categories below describe information that may be processed. The exact information depends on how you use the website, what you choose to submit, and which optional services you permit.
Information you provide
This can include your name, email address, telephone number, company or organisation, project location, property or assignment type, preferred timing, message, project brief, files you choose to share, and the consent record attached to a form submission.
Communication and client records
If an enquiry develops, correspondence may include requirements, estimates, proposals, scheduling, contracts, licensing information, invoices, delivery details, and records needed to manage the professional relationship.
Technical and consent information
Depending on your choices, the site and its providers may process an IP address, browser and device details, pages viewed, referring page, approximate region, cookie or consent identifiers, interaction events, security logs, and privacy preferences.
02 / PURPOSES AND LEGAL BASES
Why information is used.
Personal information is used only where there is an appropriate purpose and legal basis. More than one basis may apply when the circumstances change, for example when an initial enquiry becomes a commissioned assignment.
Enquiries and assignments
To answer a message, understand a brief, prepare an estimate, schedule work, perform an agreed service, deliver photographs, and administer a client relationship. The basis is normally steps taken at your request before a contract or performance of a contract.
Operation and security
To maintain the website, prevent misuse, diagnose faults, protect forms and systems, and keep reliable business records. The basis is legitimate interests in operating a secure professional website, subject to your rights.
Optional analytics and services
To understand how permitted visitors use the website and to load optional third-party features. The basis is consent, which can be withheld or withdrawn through the privacy controls without affecting core website access.
Legal and administrative needs
To meet tax, accounting, contractual, insurance, dispute-resolution, or other legal requirements. The basis may be a legal obligation or a legitimate interest in establishing, exercising, or defending legal claims.
03 / FORMS AND EMAIL
What happens when you get in touch.
The contact page uses Avada Forms and includes a required privacy consent checkbox. A submitted message is used to respond to your enquiry and, where relevant, discuss or prepare a photography assignment.
The form does not automatically subscribe you to marketing. If marketing communication is introduced in the future, it will require a separate and clear choice.
Email delivery and correspondence
Website email is routed using FluentSMTP through the Apple iCloud Mail service connected to the custom domain. The information in your message and the related delivery data are processed to deliver the enquiry and any acknowledgement or reply.
Email is not an appropriate channel for highly sensitive information. Please avoid sending special-category personal data or confidential identification documents unless they are specifically required and a secure method has been agreed.
04 / COOKIES AND ANALYTICS
Control over optional technologies.
Cookies and similar technologies can remember privacy preferences, support essential security, measure site use, or enable content supplied by another platform. Non-essential categories should remain inactive until the relevant consent is given.
Necessary
These support core functions such as security, form operation, session continuity, and storage of your consent choices. They cannot generally be disabled through the consent tool because the website may not function correctly without them.
Functional, statistics, and marketing
Optional categories can include third-party embeds, maps, social content, and Google Analytics. When statistics consent is granted, interaction events may be measured to understand page and gallery use. Form content and private messages are not included in those analytics events.
MANAGE YOUR PRIVACY CHOICES
Review or update consent.
The controls below are supplied by Avada and reflect the consent services configured for this website. You can change optional choices at any time.
05 / PROVIDERS AND TRANSFERS
Services that help operate the website.
Selected providers may process limited information on behalf of the website or as independent controllers for their own services. Access is limited to what is reasonably required for hosting, delivery, security, analytics, or an optional feature.
Hostinger
Website hosting, server infrastructure, backups, and related technical operation.
Cloudflare
DNS, content delivery, availability, and protection against malicious traffic or misuse.
Apple iCloud Mail
Delivery and storage of messages sent to and from the website custom-domain email account.
Google Analytics
Optional website measurement when statistics consent has been granted.
Akismet / Automattic
Anti-spam and abuse prevention where the relevant protection is enabled.
External platforms
Optional social networks, maps, messaging services, or linked platforms may process data under their own privacy terms when you choose to use them.
International processing
Some providers may process information outside Greece or the European Economic Area. Where applicable, transfers are handled using a permitted mechanism such as an adequacy decision, contractual safeguards, or another protection recognised by data-protection law. Provider privacy notices explain their own locations and safeguards in more detail.
06 / RETENTION
Kept only as long as there is a reason.
Retention depends on the nature of the information and why it is held. Enquiries are retained while they are being answered and for a reasonable follow-up period. If an enquiry becomes an assignment, contractual, licensing, delivery, invoice, and accounting records may be kept for the periods required by professional, tax, legal, or dispute-resolution needs.
Analytics information follows the retention settings of the relevant service. Consent and security records may be retained where reasonably necessary to demonstrate choices, investigate misuse, or protect legal rights. When information is no longer needed, it is deleted or anonymised, subject to normal backup expiration cycles.
SECURITY
Proportionate safeguards.
Reasonable technical and organisational measures are used to reduce unauthorised access, loss, misuse, or disclosure. These include encrypted website connections, controlled administrative access, maintained WordPress and Avada components, hosting and network safeguards, backups, and anti-spam or security controls.
No online transmission or storage system can be guaranteed completely secure. If you believe information connected with this website has been compromised, please contact the controller promptly.
07 / YOUR RIGHTS
Access, choice, and control.
Subject to the conditions and limits in applicable law, you may ask to access personal data, correct inaccurate information, erase information, restrict processing, receive portable data, or object to processing based on legitimate interests.
Where processing relies on consent, you may withdraw that consent at any time. Withdrawal does not affect processing that was lawful before it was withdrawn.
How to exercise a right
- Email [email protected] and describe your request.
- Provide enough information to identify the relevant communication or record.
- Identity may be verified before information is disclosed or changed.
- A response will be provided within the applicable legal timeframe.
You also have the right to complain to the Hellenic Data Protection Authority or another competent supervisory authority.
08 / OTHER INFORMATION
Context and updates.
Children
This professional photography website is not directed to children under 16, and personal information from children is not knowingly requested. If you believe a child has submitted personal information, please make contact so it can be reviewed and removed where appropriate.
External websites
Links may lead to client websites, social platforms, maps, publications, or other services. Their privacy practices are controlled by those organisations, not by this website. Review their notices before providing information directly to them.
Policy changes
This notice may be updated when website functions, providers, or legal requirements change. The effective date at the top of the page identifies the current version. Material changes will be presented clearly where an additional notice is appropriate.
PRIVACY CONTACT
A direct line for privacy questions.
If anything in this policy is unclear, or if you want to exercise a data-protection right, send a direct email. Your request will be reviewed by a person.
