Privacy Policy

1. Who We Are

Giannopoulos Photography is a professional photography business operated by John Giannopoulos, based at Korinthou 365, Patras 26222, Greece.

For any privacy-related questions, you can contact us at: john.yianno@gmail.com

2. What Data We Collect

Website Analytics

With your consent, we use Google Analytics (GA4) to collect anonymous usage data including:

• Pages visited and time spent on each page
• Referring website or source
• Browser type and device information
• Approximate geographic location (country/city level, IP is anonymized)

We have configured Google Analytics with the following privacy settings:

• IP anonymization enabled
• Advertising features disabled
• Ad personalization signals disabled
• No data sharing with Google for advertising purposes

Contact Form

When you use our contact form to inquire about our services, we collect:

• Your name
• Email address
• Wedding/event date
• Event location
• Any additional message you choose to share

This information is used solely to respond to your inquiry and discuss our photography services.

3. Cookies

This website uses the following cookies:

Analytics cookies are only set after you explicitly consent via the cookie banner. No cookies are set if you decline. You can change your cookie preferences at any time using the "Cookie Settings" link in the footer of every page.

We also use localStorage (not a cookie) to remember your consent choice so we don't ask you again on every visit.

4. Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your data based on:

• Consent — for analytics cookies (Article 6(1)(a)). You can withdraw consent at any time via the "Cookie Settings" link in the footer.
• Pre-contractual steps — for responding to contact form inquiries about our photography services (Article 6(1)(b)).

5. Data Sharing

We do not sell, trade, or share your personal data with third parties for marketing purposes. Analytics data is processed by Google under their Privacy Policy. Google acts as a data processor on our behalf.

Google Analytics data may be transferred to and processed in countries outside the European Economic Area, including the United States. Google relies on Standard Contractual Clauses (SCCs) approved by the European Commission to ensure adequate protection of your data during international transfers. For more information, see Google's data processing terms.

6. Data Retention

• Analytics data: Retained in Google Analytics for 14 months, then automatically deleted.
• Contact form data: Retained for as long as necessary to respond to your inquiry, typically no longer than 12 months after last contact.

7. Your Rights

Under the GDPR, you have the right to:

• Access your personal data we hold
• Rectify inaccurate personal data
• Erase your personal data ("right to be forgotten")
• Restrict processing of your personal data
• Object to processing of your personal data
• Data portability — receive your data in a structured format
• Withdraw consent at any time for cookie-based processing

To exercise any of these rights, contact us at john.yianno@gmail.com. We will respond without undue delay and within one calendar month. If your request is complex, we may extend this by a further two months, but we will inform you within the first month.

You also have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA): www.dpa.gr

8. Data Security

This website is served over HTTPS. We take reasonable measures to protect your personal data from unauthorized access, alteration, or destruction.

9. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date. Where changes materially affect how we process your personal data, we will take appropriate steps to inform you and, where required, seek your consent.