Privacy policy

Dgraphy (“Dgraphy”, “we”, “us”) is the photography studio of Dimitra Papademetriou in Limassol, Cyprus. We are the controller of the personal data described in this policy, which explains what we collect through www.dgraphy.com, why we collect it, and the rights you have under the EU General Data Protection Regulation (GDPR) and Cyprus Law 125(I)/2018.

You can contact us about anything in this policy at [email protected].

When you send the contact form: your name, email address, the service you are interested in, your message, the language you used and the page you sent it from.

When you email us directly: whatever you choose to include.

When you browse the website: our hosting provider processes the technical data needed to deliver it securely, such as your IP address, browser type and the pages requested.

We do not ask for, and ask you not to send us, sensitive personal data.

To reply to your enquiry and, if we work together, to prepare a quote and provide our services — steps taken at your request before entering into a contract (Article 6(1)(b) GDPR).

To protect the contact form and the website from spam, abuse and attacks — our legitimate interest (Article 6(1)(f) GDPR).

To keep records the law requires, such as invoices (Article 6(1)(c) GDPR).

We never use your data for advertising, we never sell it, and we do not make automated decisions about you.

The website does not use analytics, advertising or social-media tracking cookies, which is why there is no cookie banner.

When you start filling in the contact form, Google reCAPTCHA loads to tell people from bots. It may set cookies and read information about your device and browser (see below).

Your browser also remembers your preferred gallery view (Exhibition or Index) in local storage on your own device. This preference never leaves your device.

reCAPTCHA is provided by Google Ireland Limited and Google LLC. It collects hardware and software information, such as device and application data, and sends it to Google for analysis. Google’s Privacy Policy (policies.google.com/privacy) and Terms of Service (policies.google.com/terms) apply.

If you prefer not to use reCAPTCHA, simply email us at [email protected] instead of using the form.

We use a small number of service providers that process data on our behalf, under data-processing terms:

DigitalOcean — hosting of the website and of the server function that receives the contact form, on servers in Frankfurt, Germany.

Resend — delivery of the contact-form emails.

Google — reCAPTCHA spam protection.

Our email hosting provider — storage of the messages we receive.

We may also disclose data where the law requires it.

Some of these providers are based in, or may access data from, the United States. Where personal data is transferred outside the European Economic Area, it is protected by the EU–US Data Privacy Framework or by the European Commission’s Standard Contractual Clauses.

Enquiries are kept for as long as needed to answer them and to handle any resulting work, and for no longer than three years after our last contact, unless the law requires us to keep them for longer — for example, invoices are kept for the period required by Cyprus tax law.

Technical server logs are kept by our hosting provider for a short period, for security purposes.

You can ask us to access, correct or delete your personal data, to restrict or object to its processing, and to receive it in a portable format. Where processing is based on your consent, you can withdraw it at any time.

To exercise any of these rights, write to [email protected]. We will reply within one month.

You also have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection in Cyprus (dataprotection.gov.cy).

The website is served only over encrypted connections (HTTPS), the contact form accepts requests only from our own website, and access to enquiries is limited to Dgraphy.

The website is not directed at children under 14, and we do not knowingly collect their personal data.

We may update this policy when the website or the law changes. The date at the top of this page shows the latest version.