Privacy Policy

This policy explains how your personal data is handled when you use iringosimon.com or contact me, in line with the EU General Data Protection Regulation (GDPR/RGPD) and the Spanish Organic Law 3/2018 (LOPDGDD).

1. Who is responsible

• Controller: Iringó Simon (Autónoma (self-employed))
• NIE: Z2645054J
• Address: Paseo Las Américas, 29, 38430 San Marcos, Santa Cruz de Tenerife, Spain
• E-mail: iringo@iringosimon.com

2. What data I collect

Contact form. Name, e-mail address, an optional WhatsApp number, type of session, package, preferred dates, accommodation area, group size and your message. The form also tells me which page of this site you came from and, if the link you followed carried campaign tags, those tags.

WhatsApp or e-mail. If you write to me directly, I receive the details you choose to send, such as your name, phone number or e-mail address and the content of your messages.

Booked sessions. If you book, I also keep the information needed to deliver the service and to issue invoices.

3. Why and on what legal basis

• Answering your enquiry and preparing a booking: taking steps at your request before a contract (Art. 6.1(b) GDPR).
• Providing the photography service you book, delivery of photos and invoicing: performance of a contract and compliance with legal obligations (Art. 6.1(b) and (c)).
• Publishing photos of you in my portfolio or on social media: only with your consent (Art. 6.1(a)), which you can withdraw at any time.

I do not use your data for automated decisions or profiling, and I do not send marketing e-mails unless you ask for them.

4. How long I keep it

• Enquiries that do not lead to a booking: up to 12 months, then deleted.
• Client data and invoices: for the periods required by Spanish tax and accounting law.
• Photos used in my portfolio: until you withdraw your consent.

5. Who receives your data

I do not sell your data. I use the following service providers, who process it on my behalf:

• Hosting provider (Plesk server in the European Union): hosts this website and its contact form.
• Google Workspace (Google): e-mail and related tools.
• WhatsApp (Meta): only if you choose to contact me through WhatsApp.
• Pixpa: hosts private client galleries where photos are delivered.

I may also share data with public authorities where the law requires it.

6. International transfers

Google and Meta may process data outside the European Economic Area, including in the United States. Such transfers rely on the EU-US Data Privacy Framework where the provider is certified, or on the Standard Contractual Clauses approved by the European Commission.

7. Cookies and analytics

This website sets no cookies. For anonymous statistics I use Cloudflare Web Analytics, which is cookieless, does not track you across sites and does not build personal profiles.

8. Your rights

You have the right to access, rectify and erase your data, to object to or restrict its processing, and to data portability. Where processing is based on consent, you can withdraw it at any time without affecting earlier processing.

To exercise your rights, e-mail iringo@iringosimon.com. I may ask you to confirm your identity. I will reply within one month.

If you think your data is not handled properly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es.

9. Photos of clients

I only show photos of you in my portfolio, website or social media with your consent. Tell me at any time if you would prefer a photo not to be used.

10. Changes

I may update this policy, for example if the services I use change. The date at the top shows the latest version.