Litanna Photography
Last updated: 20 October 2026
I believe that beautiful memories deserve to be treated with care — and so does your privacy.
Whether you are visiting my website, booking a photoshoot, receiving your photographs, or subscribing to updates about upcoming photo sessions, I am committed to handling your personal information responsibly and transparently.
This Privacy Policy explains how I collect, use, store, and protect your personal data in accordance with the EU General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG), and other applicable Austrian laws.
1. Data Controller
The person responsible for processing your personal data is:
Anna Yaroshenko | Litanna Photography
Vienna, Austria
Business address: Vienna 1110, Sedlitzkygasse
Email: litano4ka@gmail.com
Website: https://litannaphoto.com
If you have questions about this Privacy Policy or the processing of your personal data, please contact me using the email address above.
2. Personal Data I Collect
Depending on how you interact with my website and photography services, I may process the following personal information:
- Your name and contact details, including your email address and telephone number.
- Information you provide when enquiring about or booking a photoshoot.
- Information relevant to preparing and organising your photography session.
- Photographs and other visual content created during your session.
- Information necessary for invoicing, payments, and business administration.
- Your email address and subscription information if you subscribe to my newsletter.
- Technical information generated when you visit my website, such as your IP address, browser type, and access information.
I only collect personal information that is necessary for the purposes described in this Privacy Policy.
3. Contact Enquiries and Photography Bookings
When you contact me by email, through my website, or through other communication channels, I process the information you provide to respond to your enquiry.
This may include discussing photography packages, preparing individual offers, arranging appointments, communicating about your photoshoot, and delivering the agreed services.
The legal basis for this processing is Article 6(1)(b) GDPR, where processing is necessary to take steps before entering into a contract or to perform a contract.
Where applicable, personal data may also be processed to comply with legal obligations under Article 6(1)(c) GDPR or on the basis of legitimate interests under Article 6(1)(f) GDPR.
4. Newsletter and Photography Updates
You have the option to subscribe to occasional emails from Litanna Photography.
These emails may include information about:
- Upcoming mini photo sessions.
- Seasonal photography events and special photo days.
- Available booking dates and limited photography spots.
- Special offers and photography-related updates.
Newsletter subscriptions are managed using MailPoet, a newsletter service provided by Automattic.
When you subscribe, I process your email address and relevant subscription information for the purpose of sending you the updates you have requested.
The legal basis is your consent under Article 6(1)(a) GDPR, together with the applicable requirements for electronic marketing communications under Austrian law.
Where double opt-in is enabled, you will receive an email asking you to confirm your subscription. Confirmation details may be stored as evidence of your consent.
Your email address will not be sold to third parties.
You can unsubscribe at any time, free of charge, by clicking the unsubscribe link included in every newsletter or by contacting me directly.
Withdrawing your consent does not affect the lawfulness of processing carried out before the withdrawal.
After unsubscribing, your email address will no longer be used for marketing emails. Limited records may be retained where necessary to document consent, honour your unsubscribe request, or comply with legal obligations.
MailPoet may process subscription data on my behalf. Further information is available in MailPoet’s privacy notice:
Any newsletter tracking features, such as measuring email opens or link clicks, will be used only where legally permitted and with any consent required by applicable law.
5. Photography, Image Processing & Client Consent
Photography Services and Image Processing
As part of my photography services, I create, edit, store, and deliver photographs of my clients, including individuals, couples, families, and children.
Photographs and related personal information are processed primarily to fulfil the photography services agreed upon with my clients, in accordance with Article 6(1)(b) GDPR.
This includes preparing for photoshoots, taking photographs, editing images, providing private online galleries
I treat all photographs and personal information with care and respect for my clients’ privacy.
Photo Publication & Client Consent
Your photographs are part of your personal story, and sharing them publicly is always your choice.
No identifiable photographs from your session will be published on my website, social media, portfolio, or used for advertising or promotional purposes without your prior explicit consent.
You are completely free to decide whether your photographs may be shared publicly.
Choosing not to give consent will never affect the quality of my services, your photography experience, or the photographs you receive.
Where consent is the legal basis for publication, it is obtained separately from the photography booking, in accordance with Article 6(1)(a) GDPR.
Publication of photographs is also subject to applicable Austrian image protection laws, including Section 78 of the Austrian Copyright Act (Urheberrechtsgesetz).
Your Right to Change Your Mind
You can change your decision at any time.
If you have previously agreed to the publication of your photographs, you may withdraw your consent at any time by contacting me directly.
After receiving your request, I will stop using the relevant photographs for future promotional purposes and remove them from my own website and social media accounts without undue delay, where applicable.
Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
Please note that photographs already shared, saved, or reproduced by third parties may not always be fully removable.
Photographs of Children
I understand that photographs of children deserve particular care and sensitivity.
Photographs featuring identifiable children will not be published or used for promotional purposes without appropriate prior consent or authorisation from a parent or legal guardian, as required by applicable law.
Parents and legal guardians may contact me at any time to discuss or withdraw consent for the publication of their children’s photographs.
Private Galleries and Photo Delivery
Photographs are normally shared with clients through private online galleries or other agreed delivery methods.
These galleries are intended for clients and the people with whom they choose to share access.
I take appropriate technical and organisational measures to protect access to photographs and personal information.
The gallery service provider, applicable retention period, and any relevant data transfers are described in this Privacy Policy or in additional information provided to clients.
Online gallery provider: terra.pix
Gallery availability and photo retention: terra.pix
Questions About Your Photographs
If you have questions about the processing, storage, or publication of your photographs, or if you wish to withdraw previously given publication consent, please contact me using the contact details provided above.
Your trust, privacy, and comfort are important throughout the photography experience.
6. Website Hosting and Technical Data
My website is operated using WordPress.
When you visit my website, certain technical information may be automatically processed to ensure that the website functions correctly, securely, and reliably.
This may include:
- IP address.
- Browser type and version.
- Operating system.
- Date and time of access.
- Pages requested.
- Technical information necessary for website security and operation.
The legal basis is Article 6(1)(f) GDPR, based on my legitimate interest in maintaining a secure and functional website.
Hosting provider: WordPress
Server location: WordPress
Where the hosting provider processes personal data on my behalf, appropriate contractual arrangements are used as required by GDPR.
7. Cookies and Website Technologies
My website may use cookies and similar technologies to provide essential functionality and support certain website features.
Technically necessary cookies may be used without consent where permitted under applicable Austrian law.
Non-essential cookies and technologies, including those used for analytics, advertising, or certain third-party services, will only be activated after the legally required consent has been obtained.
Where applicable, you can change or withdraw your cookie preferences through the cookie settings available on my website.
The specific cookies and technologies used, their providers, purposes, and storage periods are described here or in the website’s cookie information.
Services requiring verification: [Insert all relevant WordPress plugins, analytics services, embedded content, and tracking technologies actually used.]
8. Third-Party Services
To operate my website and provide photography services, I may use external service providers.
These may include:
- WordPress and website hosting providers.
- MailPoet for newsletter management and delivery.
- Online photography gallery and file delivery services.
- Email and communication service providers.
- Technical services required for website security and maintenance.
- Accounting and payment-related service providers where necessary.
Personal information is shared with service providers only where there is an appropriate legal basis and where necessary for the relevant purpose.
Where required, I enter into data processing agreements with service providers.
If personal data is transferred outside the European Economic Area, appropriate safeguards will be applied as required by GDPR, such as an applicable adequacy decision or standard contractual clauses.
Details of the relevant providers, processing locations, and safeguards must be included where applicable.
9. Invoicing and Legal Obligations
When you book photography services, I may process your name, address, booking details, payment information, and other data necessary for invoicing and business administration.
This information is processed to fulfil our contractual relationship and comply with applicable tax, accounting, and record-keeping obligations.
The legal bases are Article 6(1)(b) and Article 6(1)(c) GDPR.
Accounting and business records are retained for the periods required by applicable Austrian law, generally seven years where the relevant statutory accounting retention rules apply, or longer where legally necessary.
10. Data Retention
I retain personal data only for as long as necessary for the purposes for which it was collected or for as long as required by law.
The applicable retention periods depend on the type of information and the purpose of processing.
- Newsletter subscriptions: For as long as you remain subscribed, subject to any necessary compliance records.
- Enquiries: For the period necessary to respond and manage related business matters, including any applicable legal limitation periods.
- Booking and accounting information: For the periods required by Austrian law.
- Photographs and online galleries: According to the applicable photography agreement and communicated retention arrangements.
- Technical website data: For the period necessary for website operation, security, and applicable legal requirements.
Where there is no longer a valid reason to retain personal data, it will be deleted or anonymised as appropriate.
11. Your Rights Under GDPR
Under applicable data protection law, you have the following rights, subject to the relevant legal requirements and exceptions:
- Right of access: You can request information about the personal data I process about you.
- Right to rectification: You can request correction of inaccurate or incomplete information.
- Right to erasure: You can request deletion of personal data where the legal requirements are met.
- Right to restriction: You can request that processing be restricted in certain circumstances.
- Right to data portability: You can request certain personal data in a structured, commonly used, machine-readable format where applicable.
- Right to object: You can object to processing based on legitimate interests and to processing for direct marketing purposes.
- Right to withdraw consent: Where processing is based on consent, you can withdraw it at any time without affecting previous lawful processing.
To exercise any of these rights, please contact me at:
litano4ka@gmail.com
You also have the right to lodge a complaint with the Austrian Data Protection Authority:
Österreichische Datenschutzbehörde
Website: https://www.dsb.gv.at/
12. Data Security
I take appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, misuse, alteration, or disclosure.
These measures may include access restrictions, secure account credentials, appropriate website security measures, and controlled access to client photographs and personal information.
Access to personal data is limited to what is necessary for providing my photography services and managing my business.
13. Changes to This Privacy Policy
I may update this Privacy Policy when legal requirements, website functionality, or the services I use change.
The latest version will be available on this website, together with the date of the most recent update.
14. Contact
If you have any questions about this Privacy Policy, your personal data, or the publication of your photographs, please contact me.
Anna Yaroshenko
Litanna Photography
Vienna, Austria
Email: [Insert business email address]
Website: https://litannaphoto.com
Thank you for trusting me with your memories and your privacy.