Privacy

Controller

elegantfoto, Mehdi Norozi, Hauptstraße 55, 4040 Linz, Austria, is the controller for the personal data processed through this website. Telephone: +43 676 529 44 56.

Booking

When you book a session or send an enquiry we process your name, email address, telephone number, the chosen service, date, place, number of people, occasion, message and, where you upload files, those files. The legal basis is steps prior to a contract and performance of a contract (Art. 6 (1) (b) GDPR), and our legitimate interest in organising the studio (Art. 6 (1) (f) GDPR).

Bookings are stored in a MySQL database hosted by Bluehost. Uploaded files are stored with Vercel Blob, or on the server filesystem when Blob is not configured. We send confirmation, reminder and studio notification emails through the studio mailbox via Bluehost SMTP.

Contact form

Messages sent through the contact form are stored so we can reply, and a notification is emailed to the studio. The legal basis is your request (Art. 6 (1) (b) GDPR).

AI assistant

If you use the chat assistant, your messages are sent to OpenAI through our server so that a reply can be generated. The API key never reaches your browser. We store the conversation in our database without your IP address and delete it after 90 days. The legal basis is your request and our legitimate interest in answering questions about the studio (Art. 6 (1) (b) and (f) GDPR). Do not send sensitive data in the chat. Binding information is given by telephone or WhatsApp.

Hosting and processors

The website is hosted on Vercel. The database and email are hosted on Bluehost. File storage may use Vercel Blob. OpenAI processes chat messages. Google maps are loaded only after you choose to display the map. These providers process data on our instructions where they act as processors.

Cookies

Necessary storage remembers your cookie choice. Optional analytics run only after you consent, and only if an analytics identifier is configured. You can change your choice at any time under Cookie settings.

Retention and your rights

Booking and enquiry records are kept for as long as needed for the appointment, invoicing and statutory retention. Chat logs are deleted after 90 days. You may request access, rectification, erasure, restriction, portability and objection, and you may lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde).