Last updated: 9 August 2026. This page explains, in plain language, what personal data is collected on soulinframes.com and what happens to it.

1. Who is responsible for your data

Soul in Frames is run by Iryna Danylko, a photographer based in Santa Cruz de Tenerife, Spain (38007). For anything related to your personal data, write to photoby.iryna.d@gmail.com and you will get an answer from me personally.

2. What I collect, why, and on what legal basis

Enquiry form. Your name, email address, preferred date, type of session, location, number of people, phone number or messenger handle, and whatever you write in the message field. I use this only to reply to you and to prepare an offer for your photoshoot. Legal basis: steps taken at your request before entering into a contract (Art. 6.1.b GDPR).

Bookings. If we go ahead, I also keep the agreed date, location, price and payment records. Legal basis: performance of the contract (Art. 6.1.b) and my legal duty to keep accounting and tax records (Art. 6.1.c).

Messengers. If you contact me through Telegram, WhatsApp or Instagram, I see your profile name and the content of our conversation. Those platforms are separate controllers and their own privacy policies apply to the messages stored on their servers.

Website statistics. Before you make a choice in the cookie banner, visits are counted anonymously and nothing is stored on your device. If you allow analytics, Google Analytics 4 stores cookies and measures your visit in more detail. Full details are in the Cookie Policy. Legal basis: your consent (Art. 6.1.a GDPR and Art. 22.2 LSSI-CE).

Server logs. My hosting provider records technical data such as IP address, browser type and pages requested, in order to keep the site running and protect it from abuse. Legal basis: legitimate interest in the security of the service (Art. 6.1.f).

3. Photographs

The photographs taken during a session are personal data as well, and I treat them that way. Your edited gallery stays available for download for 12 months, after which it is deleted unless we agree otherwise. I only publish images in my portfolio, on social media or in advertising if you have given separate written consent, which you may withdraw at any time; withdrawal does not affect copies already printed or published before the withdrawal. Photographs in which children can be identified are only published with the consent of both parents or legal guardians.

4. Who else has access

Pixpa, the platform that hosts this website and processes the enquiry form. Google, for Analytics (only with your consent) and for the Gmail mailbox through which I correspond with you. GTranslate, which provides the Spanish and Ukrainian versions of these pages. Telegram, Meta (WhatsApp, Instagram) if you choose to write to me there. My accountant and the Spanish tax authorities, where the law requires it. Some of these providers process data outside the European Economic Area; in those cases the transfer relies on the European Commission adequacy decisions or on standard contractual clauses. I never sell your data and I never share it for someone else's marketing.

5. How long it is kept

Enquiries that do not lead to a booking: up to 12 months. Contracts, invoices and accounting records: as long as Spanish commercial and tax law requires, normally six years. Consent to analytics: 180 days, after which you are asked again. Session galleries: 12 months unless we agree on something different in writing.

6. Your rights

You can ask me for a copy of your data, correct it, delete it, restrict or object to its use, receive it in a portable format, and withdraw any consent you have given. Send your request to photoby.iryna.d@gmail.com and I will respond within one month. If you are not satisfied with my answer, you may complain to the Spanish data protection authority, Agencia Espanola de Proteccion de Datos (aepd.es).

7. Security

The site runs over HTTPS, access to the mailbox and to the photo archive is protected by strong passwords and two-factor authentication, and only I have access to client files. No system is perfectly secure, but I take these safeguards seriously.

8. Changes to this policy

If the way I handle data changes, this page is updated and the date at the top changes with it. For details about cookies and analytics, see the Cookie Policy.