Privacy Policy

Last updated: 13 August 2026

This Privacy Policy explains how Dmitry Nevsky Photographer collects, uses and protects personal data when you visit nevskyphoto.com, contact us, or use a client gallery.

1. Data controller

The data controller is Dmitry Nevsky, an independent photographer based on the French Riviera, France.

For any privacy question or request, contact: nevskyphoto@gmail.com.

2. Personal data we collect

Enquiries: name, email address, phone or WhatsApp number, event date, guest count, venue or location, and the information you include in your message.
Client and booking information: contact details, correspondence, service details, contracts, invoices and payment records.
Client galleries: gallery access information and technical information required to provide secure viewing and downloads.
Technical data: IP address, browser and device information, pages visited, timestamps and security logs.
Analytics and cookies: audience measurement data only in accordance with your cookie choices and applicable law.

3. Why we use your data

To answer enquiries and prepare a quotation.
To take steps at your request before entering into a contract and to perform photography services.
To manage bookings, client galleries, image delivery, invoicing and customer support.
To protect the website, galleries and administrative systems against fraud, abuse and unauthorised access.
To understand website performance and improve the visitor experience where analytics consent is required and has been given.
To comply with legal, accounting and tax obligations.

4. Legal bases

Depending on the context, processing is based on steps taken at your request before a contract, performance of a contract, compliance with legal obligations, our legitimate interests in operating and securing the business, or your consent for non-essential cookies and similar technologies.

5. Who receives your data

Personal data is accessed only by Dmitry Nevsky and service providers necessary to operate the website and photography business, such as hosting, email, website forms, security, client gallery and analytics providers. These providers process data only for the relevant service and under their own contractual and legal obligations. We do not sell personal data.

The website is hosted by Hostinger. Google Analytics may be used for audience measurement where permitted by your cookie choices. Some providers may process data outside the European Economic Area using an adequacy decision or other safeguards recognised by applicable data protection law.

6. How long we keep data

Unsuccessful enquiries and prospective client data: up to three years from collection or your last contact.
Active client data: for the duration of the relationship and as needed to provide the agreed service.
Contracts, invoices and accounting records: for the periods required by French law, generally up to ten years for accounting documents.
Client galleries and delivery files: for the availability period communicated to the client, after which they may be deleted.
Security and technical logs: only for as long as reasonably necessary for security and troubleshooting, generally no longer than twelve months unless an incident requires longer retention.
Analytics data: according to the configured analytics retention period, normally no longer than fourteen months.

7. Cookies

Necessary cookies support security and essential website functions. Optional analytics or third-party cookies should be used only in accordance with your choices. You can accept or refuse optional cookies and change your choice using the cookie settings available on the site. A consent or refusal choice may be remembered for up to six months before the site asks again.

8. Your rights

Subject to the conditions of the GDPR and French data protection law, you may request access to your personal data, correction, deletion, restriction, portability, or object to certain processing. Where processing relies on consent, you may withdraw that consent at any time without affecting earlier lawful processing.

To exercise a right, email nevskyphoto@gmail.com. We may request reasonable information to verify your identity. If you believe your rights have not been respected after contacting us, you may lodge a complaint with the French data protection authority, the CNIL.

9. Security

Reasonable technical and organisational measures are used to protect personal data, including access controls, secure administrative authentication, encrypted connections, security monitoring and restricted gallery access. No internet service can guarantee absolute security.

10. Updates

This policy may be updated when services, legal requirements or data practices change. The latest version and its update date will always appear on this page.