Updated 3 October 2026.
Controller and contact
Boiarina Photography
Yuliia Boiarina
3623658-4
photo@juliaboiarina.com
Data and purpose
We receive your name, email, optional phone number, selected service, location, date/timing and description of your photography plans directly from you. They are used only to reply to enquiries, prepare quotations and manage agreed photography assignments, not newsletters or direct marketing. Name, email, service and description of your plans are required; the other fields are optional. You can also contact us by email. Please do not include sensitive information or unnecessary details about others.
Legal basis
Processing necessary to prepare or perform a contract with you is based on GDPR Article 6(1)(b). Business and customer contact enquiries and ordinary correspondence rely on our legitimate interest in responding to requests and managing customer relationships, Article 6(1)(f). Processing is limited to relevant enquiry information without profiling or marketing. Applicable statutory retention duties are based on Article 6(1)(c).
Recipients and international processing
Julia handles enquiries. Messages are not automatically forwarded to another email service or saved as submissions in WordPress. Hostinger provides hosting and email processing with necessary subprocessors, technical logs and service backups. Hostinger and its subprocessors may process data outside the EU/EEA. Its processing terms describe transfer safeguards, including EU standard contractual clauses where required. Details and the subprocessor list are available in the Hostinger Data Processing Addendum. You may request further information from the controller. We do not sell enquiry data; disclosure may be required by law.
Retention
Personal data is retained only for as long as necessary for its intended purpose or as required by a contract or applicable law. Retention periods depend on the purpose and circumstances of the processing. The form’s hashed-IP sending-limit identifier expires after ten minutes. This implementation does not write the submitted message or a separate form diagnostic log to WordPress. Email, hosting logs and provider backups follow this retention principle and applicable service arrangements.
Security and website technology
HTTPS protects transmission and administration access is restricted. Spam protection uses a hidden field, a signed timestamp, a WordPress form security token and a short-lived sending limit. Necessary WordPress, Elementor and Hostinger technology supports website operation and administration. The website currently loads Google Fonts and Hostinger-provided site technology; these providers may receive standard technical request data such as IP address and browser information under their applicable service arrangements. The enquiry-form implementation does not add analytics or advertising tracking. Enquiries are not used for automated decisions or profiling.
Your rights
You can contact the controller to request access, correction, erasure or restriction, as applicable. You may object to processing based on legitimate interests. Data portability applies where the legal conditions are met. Rights are not absolute; statutory retention duties may prevent immediate deletion. You may complain to Finland’s Office of the Data Protection Ombudsman. We may verify your identity as necessary to handle requests securely.