Last updated 02/03/2026

1. Introduction

This Privacy Policy explains how Moana Ghiandoni Photography (“I”, “me”, “my”, “Photographer”) collects, uses, stores and protects personal data when you:

• Visit this website

• Submit a contact form

• Communicate via email or social media

• Book photography services

• Access or download images through online galleries

I am committed to protecting your personal data and complying with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable French data protection laws.

By using this website or providing personal information, you acknowledge that you have read and understood this Privacy Policy.

2. Identity of the Data Controller

Moana Ghiandoni Photography

Micro-entreprise registered in France
SIRET: 94871664200012
Address: Rue Marie Marvingt, 31650 St-Orens de Gameville, France
Email: info@moanaghiandoni.com

I act as the Data Controller for the personal data collected through this website and in the course of providing photography services.

3. What Personal Data Is Collected

A. Information You Voluntarily Provide

When you contact me or book services, I may collect:

• Full name

• Email address

• Phone number

• Postal address

• Wedding or session details

• Billing information

• Any information you choose to share

B. Client and Contract Data

If you book photography services, additional data may be collected and stored, including:

• Signed contracts

• Invoice details

• Payment confirmations

• Billing information

• Session preferences

• Communication records

Contracts and invoices may be managed and stored through Pixieset as part of my business operations.

C. Automatically Collected Information

When you browse this website, certain information may be collected automatically:

• IP address

• Browser type and version

• Device type

• Operating system

• Pages visited

• Time spent on pages

4. Purpose of Data Processing

Your data is processed for the following purposes:

• Responding to enquiries

• Preparing and sending quotes

• Drafting contracts

• Delivering photography services

• Delivering online galleries

• Processing payments

• Managing accounting obligations

• Improving website performance

• Ensuring security and fraud prevention

• Marketing portfolio work (where consent is granted)

I only collect data that is necessary for legitimate business purposes.

5. Legal Basis for Processing (GDPR)

Under GDPR, personal data is processed on one or more of the following legal bases:

• Consent – when you submit forms or agree to image use

• Contractual necessity – when you book services

• Legal obligation – accounting and tax compliance

• Legitimate interest – website optimisation and business improvement

6. Cookies and Consent Management

This website uses cookies and similar technologies to:

• Ensure proper website functionality

• Improve user experience

• Analyse website traffic

A cookie consent management system is implemented via CookieYes.

Non-essential cookies (including analytics cookies) are only activated after you provide explicit consent. You may accept, reject, or customise your preferences through the cookie banner.

You may withdraw or modify your consent at any time via the cookie settings link available on this website.

Essential cookies required for the operation of the website cannot be disabled.

.

7. Analytics

This website uses Google Analytics to analyse website traffic and improve performance.

Google Analytics cookies are activated only after consent is given via the cookie banner.

The information collected may include anonymised IP address, browsing behaviour, device information and interaction with website content. This data is used for statistical analysis only.

Google may process data on servers located outside the European Economic Area (EEA). Appropriate safeguards, such as Standard Contractual Clauses, apply where required.

You may withdraw consent to analytics tracking at any time.

8. Online Galleries, Contracts and Invoicing (Pixieset) 

I use Pixieset as a third-party platform to manage certain aspects of my photography business, including:

• Hosting and delivering online client galleries

• Managing contracts

• Issuing invoices

• Recording payments

• Storing client communication and session information

When you book services or access your gallery, Pixieset may process personal data such as:

• Name

• Email address

• Phone number

• Billing address

• Contract details

• Invoice information

• Payment records

• IP address

• Gallery access and download history

Pixieset acts as a data processor on my behalf. This means Pixieset processes personal data strictly for the purpose of providing its services to my business and in accordance with its own privacy policy and applicable data protection laws, including GDPR where applicable.

Pixieset may store or process data on servers located outside the European Economic Area (EEA). Where international transfers occur, appropriate safeguards are implemented in accordance with GDPR requirements.

You can review Pixieset’s privacy policy here:
https://pixieset.com/privacy-policy/

9. Payment Processing

Payments may be processed through third-party payment providers. These providers process payment information independently and in accordance with their own privacy policies. I do not store full credit card details.

10. Data Sharing

Personal data may be shared with:

• Website hosting providers

• Accounting software providers

• Gallery delivery platforms

• Payment processors

• Legal or tax authorities (when required by law)

I do not sell, rent or trade personal data.

11. International Data Transfers

Some of the third-party service providers I use (including analytics and gallery management platforms) may process data outside the European Economic Area (EEA).

Where such transfers occur, appropriate safeguards are implemented in accordance with GDPR requirements, including Standard Contractual Clauses or equivalent legal mechanisms.

12. Data Retention

Personal data is retained only as long as necessary:

• Enquiry emails: up to 2 years

• Contracts and invoices: 10 years (French legal requirement)

• Client galleries: according to platform retention policies

• Image archives: retained for professional and backup purposes

13. Your Rights Under GDPR

You have the right to:

• Access your personal data

• Correct inaccurate data

• Request deletion (“right to be forgotten”)

• Restrict processing

• Object to processing

• Withdraw consent at any time

• Receive a copy of your personal data in a structured, commonly used format (data portability)

• Lodge a complaint with CNIL (Commission Nationale de l’Informatique et des Libertés)

To exercise these rights, contact: info@moanaghiandoni.com

14. Data Security

Appropriate technical and organisational measures are implemented to protect personal data against unauthorised access, alteration, disclosure, or destruction.

However, no method of online transmission is completely secure.

15. Third-Party Links

This website may contain links to external websites. I am not responsible for the privacy practices or content of third-party websites.

16. Children’s Privacy

Services are not directed toward individuals under 16 years of age. I do not knowingly collect personal data from minors without parental consent.

17. Changes to This Privacy Policy

This Privacy Policy may be updated periodically. The updated version will be published on this page with a revised date.