Effective Date: 2 November 2026
First published: 24 March 2023

Who we are

Our website address is https://damianpristov.com/en.

The controller of your personal data is Damian Pristov Photography.

Introduction

Damian Pristov Photography (“we,” “us,” or “our”) is committed to protecting the privacy, confidentiality, and security of the personal data of our clients and visitors to our website.

When you visit our website, contact us, or use our services as a wedding and elopement photographer, we may collect and process personal information about you as described in this Privacy Policy.

Personal Information We Collect

When you contact us by email or complete a contact form, questionnaire, or quiz on our website, we receive the personal data that you voluntarily provide.

This may include your name, email address, phone number, event or wedding date, location, your message, and any other information you choose to share with us.

If you give us your consent, we also collect information about how you use our website, such as pages visited, clicks, scrolling, device and browser information, and other technical information. We use this information to understand how visitors use the website, identify and correct usability problems, and evaluate the effectiveness of the website and our marketing.

More information is provided in the “Cookies, Analytics and Session Recording” section below.

Cookies, Analytics and Session Recording

When you first visit our website, we ask whether you accept analytics. None of the analytics or session-recording tools listed below is loaded or records data until you click “Accept”. If you decline, or do not make a choice, these tools do not run.

If you accept, we use the following services:

Fullstory

Fullstory (session recording) records how you interact with our website, including pages visited, clicks, scrolling, mouse movements, and information about your device and browser.

We use this information to identify and fix usability problems and to improve the website.

Information entered into form fields, such as your name, email address, phone number, message, or event dates, is masked and is not recorded.

Provider: Fullstory, Inc. (USA), acting as our data processor.

On our current FullstoryFree plan, session replay and product analytics data are retained for up to 12 months.

Google Analytics 4

Google Analytics 4 helps us understand how visitors use our website, including visits, pages viewed, traffic sources, approximate location, and device and browser information.

IP addresses may be used for purposes such as determining approximate geographic location but are not logged or stored by Google Analytics.

Provider: Google.

We have configured the retention period for user-level and event-level data to 14 months. Aggregated reporting data may remain available for longer periods.

Ahrefs Web Analytics

Ahrefs Web Analytics provides aggregated statistics about visits to our website.

Ahrefs Web Analytics does not use cookies or persistent identifiers to track individual visitors across different days, devices, websites, or applications.

Ahrefs may process information including the page URL and referrer, device and browser information, language, screen size, approximate location, page views, link clicks, and form-submission events.

A visitor's IP address may be processed temporarily to determine approximate location and to generate a daily pseudonymous visitor identifier, but the raw IP address is not stored. The identifier changes daily and is not intended to track a visitor across different days.

Provider: Ahrefs.

Ahrefs does not publish a fixed retention period for Web Analytics data. Data is retained in accordance with Ahrefs' applicable retention policy and deleted when it is no longer necessary for the purposes for which it was collected.

We also store one small cookie named “cookieconsentv2” for up to 12 months to remember your privacy choice.

This cookie is necessary to respect your decision and does not track you for advertising or analytics purposes.

Legal Basis

The legal basis for analytics and session recording is your consent, in accordance with Article 6(1)(a) of the General Data Protection Regulation (GDPR) and applicable ePrivacy rules.

You can change or withdraw your consent at any time using the “Cookie settings” link at the bottom of every page.

Withdrawing consent stops future analytics and session recording and removes any related analytics cookies stored in your browser. It does not delete analytics data that was lawfully collected before consent was withdrawn. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

Use of Personal Information

We use personal information submitted through our website or by email to respond to your inquiries, communicate with you about our photography services, prepare offers and arrangements, provide the services you have requested, and provide information relevant to your inquiry or booking.

Where necessary, personal information may also be processed in order to take steps at your request before entering into a contract or to perform a contract with you.

We may send you marketing communications where you have given us permission to do so or where another lawful basis permits this. You can unsubscribe from marketing communications at any time.

We do not sell your personal information.

We do not disclose your personal information to third parties except where this is necessary to provide our services, operate our website and business infrastructure, comply with legal obligations, or where you have otherwise agreed to the disclosure.

We use service providers that may process information on our behalf and under our instructions. These include the analytics providers identified above, as well as providers used to host and operate our website and handle our email and other business communications.

Our relevant service providers include:

—Vercel for website hosting and delivery;
—Google Workspace for business email;
—Fullstory for session recording and website usability analysis, when you consent;
—Google Analytics for website analytics, when you consent;
—Ahrefs for website analytics and SEO-related analysis, when you consent.

Some service providers may process data outside the European Economic Area (EEA), including in the United States.

Where personal data is transferred outside the EEA, appropriate safeguards are used as required by applicable data-protection law. Depending on the provider and the circumstances of the transfer, these may include an applicable adequacy decision, participation in the EU–US Data Privacy Framework, or the European Commission's Standard Contractual Clauses (SCCs).

Protection of Personal Information

We take appropriate technical and organisational measures to protect personal information against unauthorised or unlawful access, use, alteration, disclosure, destruction, or accidental loss.

Our website uses encrypted HTTPS connections to protect information transmitted between your browser and our website.

We also restrict access to personal information to persons, contractors, and service providers who require access in order to perform their responsibilities or provide services on our behalf.

However, no method of transmission or electronic storage can guarantee absolute security.

Your Rights

Under the General Data Protection Regulation (GDPR), you may have the right to:

—obtain confirmation about whether we process your personal data and request access to it;
—request correction of inaccurate or incomplete personal data;
—request deletion of your personal data where the applicable legal conditions are met;
—request restriction of processing;
—object to processing where applicable;
—receive personal data you have provided to us in a structured, commonly used, machine-readable format where the right to data portability applies;
—withdraw your consent at any time where processing is based on consent; and
—lodge a complaint with the competent supervisory authority.

Withdrawal of consent does not affect the lawfulness of processing carried out before your consent was withdrawn.

To exercise your rights, please contact us at info@damianpristov.com.

If you believe that your personal data has been processed unlawfully, you also have the right to lodge a complaint with a supervisory authority.

In Slovenia, the competent supervisory authority is:

Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec)
https://www.ip-rs.si/

Data Retention

We retain personal information only for as long as necessary for the purposes for which it was collected, to provide our services, to manage our contractual relationships, and to comply with applicable legal and regulatory requirements.

Personal information connected with inquiries, bookings, contracts, invoices, and photography services may therefore have different retention periods depending on the purpose of processing and applicable legal obligations.

Retention periods for analytics and session-recording data also vary by provider.

Fullstory session replay and product analytics data is currently retained for up to 12 months.

User-level and event-level data in Google Analytics is configured to be retained for 14 months.

Ahrefs Web Analytics does not publish a fixed retention period; its data is retained in accordance with Ahrefs' applicable retention policy.

The cookie recording your analytics consent choice is retained for up to 12 months.

We may retain certain information for longer where this is necessary to comply with legal obligations, establish or defend legal claims, resolve disputes, or enforce agreements.

Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our website, services, legal requirements, or the way we process personal information.

When we make changes, we will update the effective date at the top of this Privacy Policy. Where required by law or where changes materially affect your privacy rights, we will provide an appropriate additional notice.

Contact Us

If you have questions about this Privacy Policy, the way we process your personal data, or if you wish to exercise any of your rights under the GDPR, please contact:

Damian Pristov Photography

Email: info@damianpristov.com

Privacy Policy for Damian Pristov Photography