Privacy Policy

Privacy Policy

Stones of Islay Photography

Last Updated: January 2026

1. Introduction

This Privacy Policy explains how personal data is collected, used, and protected when you visit www.stonesofislay.com. I am committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR) and applicable German data protection laws.

Data Controller:

Alexandru Boicu

Frankfurt am Main, Germany

2. Website Hosting

This website is hosted by Pixieset Media Inc. (Canada). Pixieset processes data on my behalf as a data processor. For details on Pixieset's data handling practices, please refer to their Privacy Policy at https://pixieset.com/privacy/.

3. Data We Collect

3.1 Automatically Collected Data

When you visit this website, certain information may be collected automatically:

- IP address

- Browser type and version

- Device type

- Date and time of access

- Pages viewed

- Referring website

This data is collected through Pixieset's hosting infrastructure for website functionality, security, and analytics purposes.

3.2 Information You Provide

If you contact me through the website, I may collect:

- Name

- Email address

- Any information you include in your message

4. Legal Basis for Processing (GDPR Article 6)

- Legitimate interests: Website functionality, security, and analytics

- Consent: When you voluntarily submit contact information

- Contract performance: If you engage my photography services

5. How We Use Your Data

Personal data may be used to:

- Respond to your inquiries

- Improve website functionality

- Ensure website security

- Comply with legal obligations

6. Data Sharing

Your personal data may be shared with:

- Pixieset Media Inc.: As the website hosting provider

- Legal authorities: If required by law

I do not sell or rent your personal data to third parties.

7. International Data Transfers

As Pixieset is based in Canada, your data may be transferred outside the European Economic Area (EEA). Canada has been recognized by the European Commission as providing adequate data protection. Pixieset also complies with GDPR requirements as outlined in their Data Processing Addendum.

8. Data Retention

- Contact form data: Retained only as long as necessary to respond to your inquiry, unless a longer retention period is required by law

- Server logs: Retained according to Pixieset's data retention policies

9. Your Rights (GDPR)

Under GDPR, you have the right to:

- Access your personal data

- Rectification of inaccurate data

- Erasure ("right to be forgotten")

- Restriction of processing

- Data portability

- Object to processing

- Withdraw consent at any time

To exercise these rights, please contact me using the details above.

10. Cookies

This website may use cookies for functionality and analytics purposes through Pixieset's platform. Cookies are small text files stored on your device. You can control cookie settings through your browser preferences.

11. Security

I take reasonable measures to protect your personal data. However, no internet transmission is completely secure, and I cannot guarantee absolute security.

12. Children's Privacy

This website is not directed at individuals under 16 years of age. I do not knowingly collect personal data from children.

13. Changes to This Policy

I may update this Privacy Policy periodically. Changes will be posted on this page with an updated revision date.

14. Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. In Germany, you may contact:

Hessischer Beauftragter für Datenschutz und Informationsfreiheit

Postfach 3163

65021 Wiesbaden

Germany

15. Contact

For questions regarding these terms or licensing inquiries, please contact me through the website contact form.