Privacy and cookie policy

Who processes your data

The data controller is Photo Studio Nana, at ul. Sv. Sveti Kiril i Metodiy 111, Sofia 1303, Bulgaria. For any question about this policy write to info@photostudionana.com or call (+359) 88 788 2161.

The studio has not appointed a data protection officer, as the volume and nature of the data processed do not require one.

What we collect and why

The booking form collects a name, an email address, a phone number and a preferred date for the session. This data serves only to contact you, agree on a time and run the session. The legal basis is performance of a contract under Article 6(1)(b) GDPR — without it a booking cannot be made.

If you have consented to cookies, Google Analytics collects anonymised visit statistics: pages viewed, approximate location from a truncated IP address, device type and referral source. The legal basis is your consent under Article 6(1)(a) and you may withdraw it at any time.

The site requires no registration, creates no user accounts and does not process children's data separately from the request submitted by their parent or guardian.

Who receives it

Form submissions arrive in a Google (Gmail) mailbox, which means Google is a recipient of the name, phone, email and date you entered. Google Analytics receives the statistical data described above — only if you have given consent.

The site is hosted on Cloudflare infrastructure, which processes the technical data of every request (IP address, request headers) as part of delivering the pages and protecting against abuse.

The Home and Contacts pages load Google Maps to display the studio location, and the search page uses Google Programmable Search. Both load from Google servers and Google may receive your IP address in the process.

Data is never sold, never shared with advertising networks and never used for profiling or automated decision-making.

How long it is kept

Correspondence about a booking is kept for as long as needed to run the session and meet the obligations that follow it, including statutory accounting periods where a payment document has been issued.

Finished photographs are kept for up to one month after the session, as stated on the pricing pages. Delivery of the files is not guaranteed beyond that period.

Cookies and local storage entries have the retention periods listed in the table below.

Your rights

You have the right to access your data, to have it corrected or erased, to restrict processing, to data portability, and to object — Articles 15 to 22 GDPR. To exercise any of these, write to the email address above.

If you believe the processing infringes your rights, you may lodge a complaint with the Bulgarian Commission for Personal Data Protection — 2 Prof. Tsvetan Lazarov Blvd, Sofia, kzld.bg.

Changes to this policy

If the way data is processed changes, this text is updated along with it. Last revised: 4 September 2026

Cookies and local storage

Your cookie choice