PRIVACY POLICY

Last updated: 25.06.2026

This Privacy Policy explains how personal data is collected, used, stored, and protected through the website tsukanovphoto.com and in connection with photography services provided by Aleksandr Tsukanov.

Data controller

The data controller is:

Name: Aleksandr Tsukanov
Professional activity: Photographer / Photography services
NIF/NIE: Z4479505F
Registered / professional address: Madrid, Plaza de Jose Villareal 5
Email: tsukanovphoto.com

What personal data may be collected

Depending on how you use this website or communicate with the photographer, the following personal data may be collected:

— name and surname;
— email address;
— phone number or messaging contact;
— event date, location, and details;
— information you voluntarily provide through contact forms, email, social media, or messages;
— billing and payment information required for invoices and accounting;
— photographs and visual materials created during a photography session or event;
— technical information such as IP address, browser type, device information, and cookies, where applicable.

Purpose of processing

Personal data may be processed for the following purposes:

— to respond to enquiries and messages;
— to prepare proposals, quotes, contracts, and invoices;
— to manage bookings and provide photography services;
— to communicate with clients before, during, and after a shoot or event;
— to deliver photographs and online galleries;
— to comply with legal, tax, accounting, and administrative obligations;
— to protect the rights and legitimate interests of the photographer;
— to improve the website and user experience;
— to display portfolio images, only where legally permitted or agreed with the client.

Legal basis for processing

The legal basis for processing personal data may include:

— the user’s consent when submitting a contact form, sending an enquiry, accepting cookies, or voluntarily providing information;
— the performance of a contract or pre-contractual steps when the user requests a quote, books a service, signs an agreement, or becomes a client;
— compliance with legal obligations, including tax and accounting requirements;
— legitimate interest in managing professional communications, protecting rights, maintaining the website, and presenting the photographer’s work, where this does not override the rights and freedoms of the individuals concerned.

Photography and image rights

Photographs may contain personal data because individuals can be identified in images.

Images from private sessions, weddings, events, or commercial projects may be processed for the purpose of providing the agreed photography service, editing and delivering the final images, maintaining professional archives, and, where applicable, displaying selected work in the photographer’s portfolio.

For private events and weddings, the photographer respects the privacy of clients and guests. Any restrictions regarding publication, confidentiality, or portfolio use should be communicated and agreed in writing before the shoot.

Data retention

Personal data will be kept only for as long as necessary for the purposes described in this Privacy Policy.

Enquiry data may be kept for the time necessary to respond and follow up on the request.

Client, contract, invoice, and accounting data may be kept for the period required by applicable legal, tax, and accounting obligations.

Photographs and project archives may be kept for professional, contractual, artistic, portfolio, backup, and legal purposes, unless deletion is requested and no legal or contractual reason requires continued storage.

Recipients and third-party services

Personal data may be shared with third-party service providers only when necessary for the operation of the website, communication, booking management, invoicing, accounting, payment processing, gallery delivery, cloud storage, hosting, analytics, or other professional services.

These providers may include website hosting platforms, email providers, cloud storage services, online gallery platforms, payment processors, accounting tools, contract-signing tools, and professional advisers.

Personal data will not be sold to third parties.

International data transfers

Some third-party service providers may process data outside the European Economic Area. Where this happens, appropriate safeguards will be used where required by applicable data protection law.

User rights

Users may exercise their rights under applicable data protection law, including:

— the right of access;
— the right to rectification;
— the right to erasure;
— the right to restriction of processing;
— the right to object;
— the right to data portability;
— the right to withdraw consent where processing is based on consent.

To exercise these rights, users may contact: [your email].

Users also have the right to lodge a complaint with the Spanish Data Protection Agency, Agencia Española de Protección de Datos, if they believe their data protection rights have been violated.

Cookies

This website may use cookies or similar technologies for technical, analytical, or functional purposes.

Where required by law, non-essential cookies will only be used with the user’s consent. Users can accept, reject, or configure cookies through the cookie banner or their browser settings.

For more information, please refer to the Cookie Policy or cookie settings available on this website.

Security

The data controller applies reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure.

However, no online system can be guaranteed to be completely secure.

Changes to this Privacy Policy

This Privacy Policy may be updated from time to time to reflect legal, technical, or business changes. The latest version will always be available on this website.