Last updated: 2 October 2026
Sapardanis Photography Studio (“we”, “us”, “our”) operates the website www.sapardanis.gr. This policy explains what personal data we collect through the website and through our work as wedding photographers, why we collect it, how long we keep it, and what rights you have over it.
We are the data controller for this information under the General Data Protection Regulation (EU) 2016/679 (GDPR) and Greek Law 4624/2019.
Contact details of the controller
Christos Kyriakos Sapardanis (ΣΑΠΑΡΔΑΝΗΣ ΧΡΗΣΤΟΣ ΚΥΡΙΑΚΟΣ)
Xino Nero 0, Amyntaio 53200, Greece
VAT number (ΑΦΜ): EL160603973
Email: info@sapardanis.gr
Phone: +30 698 459 0839
If you have any question about this policy or about your data, write to us at info@sapardanis.gr. We answer these messages ourselves.
1. What we collect and why
1.1 When you contact us through the website
When you complete the contact form, we receive your name, email address, country of residence, the type of event, its date and location, your budget range if you choose to give one, your Instagram handle if you provide it, and whatever you write in your message.
We use this only to answer you, to check whether we are available on your date, and to prepare a proposal. We do not use it for marketing and we do not sell or share it with anyone for their own purposes.
Legal basis: taking steps at your request before entering into a contract (Article 6(1)(b) GDPR), and our legitimate interest in responding to enquiries (Article 6(1)(f)).
1.2 When you book us
If you go ahead with a booking, we also process the information needed for the contract and the invoice: your full names, postal address, phone numbers, tax details where the law requires them, the venue and schedule of the day, and any practical notes you share with us about the event.
Legal basis: performance of the contract (Article 6(1)(b)) and compliance with our legal obligations under tax and accounting law (Article 6(1)(c)).
1.3 Photographs
Photographs of identifiable people are personal data. When we photograph your wedding we process images of you, your family, and your guests.
We use these images to deliver your gallery and album, to produce and back up the files, and — only where the contract with you permits it — to show a small selection of them in our portfolio, on this website, on social media, in printed samples, and in submissions to publications or blogs.
Legal basis: performance of the contract for delivering your photographs (Article 6(1)(b)), and your consent for any public use (Article 6(1)(a)).
You can withdraw consent for public use at any time by writing to us. We will remove the images from our own website and social media within a reasonable period. We cannot always remove images already published by third parties such as magazines or wedding blogs, or copies that others have already downloaded or reshared, and we will tell you honestly what is and is not possible in each case.
If a guest at your wedding asks us to remove a photograph of them, we will do so.
1.4 Website usage data
Like most websites, ours records technical information automatically: IP address, browser and device type, the pages you visit, and the date and duration of your visit. This is used to keep the site secure and working, and to understand in aggregate how it is used.
Legal basis: our legitimate interest in the security and proper operation of the website (Article 6(1)(f)).
2. Cookies and consent
Cookies are small files stored on your device. We use:
- Essential cookies, which are needed for the site to function, to remember your cookie choice, and to protect the contact form from automated abuse. These do not require your consent.
- Analytics cookies set by Google Analytics 4, which help us understand in aggregate how visitors find and use the site.
- Marketing cookies set by the Meta (Facebook and Instagram) pixel, which measure how our advertising performs and allow us to show relevant ads.
Analytics and marketing cookies are only set after you accept them. Until you do, Google Consent Mode v2 keeps the relevant tags in a restricted state, so no analytics or advertising identifiers are stored on your device and no personal data is sent for those purposes.
Consent is managed through our cookie banner (Cookie Admin), which appears on your first visit. You can change or withdraw your choice at any time by reopening the cookie settings from the banner link in the website footer, and you can also block or delete cookies in your browser settings — though parts of the site may then stop working properly.
Legal basis: your consent (Article 6(1)(a) GDPR and Article 4(5) of Greek Law 3471/2006) for analytics and marketing cookies; legitimate interest for essential cookies.
3. Who else sees your data
We use a small number of service providers who process data on our behalf, under contract and only on our instructions. These fall into the following categories:
- our website hosting provider
- our email provider
- the platform through which we deliver your online gallery
- our encrypted cloud backup service
- Google (Google Analytics 4) and Meta Platforms (the Meta pixel), where you have consented to those cookies
- the printing laboratories and album manufacturers that produce your physical products
- our accountant, for invoicing and tax compliance
Where a provider is based outside the European Economic Area — as is the case for Google and Meta — the transfer is covered by the European Commission’s Standard Contractual Clauses or by an adequacy decision, and we ask you to be aware that data protection standards in third countries may differ from those in the EU.
Beyond this, we disclose personal data only where the law obliges us to, or where it is necessary to establish or defend a legal claim.
If we photograph your wedding together with a second photographer or an assistant, they work under our instructions and are bound by the same confidentiality.
We never sell your personal data.
4. How long we keep it
Enquiries that do not lead to a booking are deleted twelve months after our last exchange. Contracts and client correspondence are kept for five years after the event, so that we can answer questions and deal with any claim. Invoices and accounting records are kept for ten years, as Greek tax law requires.
For your photographs, the arrangement is different, and deliberately so. How long your online gallery stays available and how long we keep the master files are agreed with you personally, because those needs vary from couple to couple — some want the gallery open for family abroad, others want everything closed quickly. Whatever we agree is set out in your contract, and we will remind you before anything is removed. Images that appear in our portfolio with your consent stay there until you tell us otherwise.
Website analytics data is retained for the period configured in Google Analytics, currently fourteen months.
5. Your rights
Under the GDPR you have the right to ask us for a copy of the data we hold about you, to have inaccurate data corrected, to have data erased, to restrict or object to how we use it, to receive it in a portable format, and to withdraw consent at any time where our processing is based on consent.
To exercise any of these rights, email info@sapardanis.gr. We reply within one month. We may need to confirm your identity first, so that we do not disclose someone else’s data by mistake.
If you believe we have handled your data unlawfully, you can complain to the Hellenic Data Protection Authority:
Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα)
Kifissias 1-3, 115 23 Athens, Greece
Tel: +30 210 6475600
www.dpa.gr
We would rather you came to us first, and we will always try to put things right.
6. Security
Image files and client information are stored on password-protected devices and encrypted backups, held in more than one location, so that a single failure or theft cannot cost you your photographs. The website is served over HTTPS. Client galleries can be protected by password on request. Physical products are produced by professional laboratories that receive only the files needed for your order.
No system is perfectly secure, and we do not claim otherwise. What we can promise is that we take reasonable, current measures, and that we will tell you promptly if a breach ever affects your data.
7. Children
The website is not directed at children and we do not knowingly collect data from anyone under 16 through it. Children who appear in wedding photographs are, of course, photographed with the knowledge of their parents or guardians, and any public use of those images follows the consent given in the contract.
8. Links to other websites
Our site links to other websites, including social media. We are not responsible for their content or their privacy practices. Please read their own policies before giving them your data.
9. Changes to this policy
We update this policy when our practices or the law change. The current version is always published on this page, with the date at the top. If a change materially affects how we handle your data, we will tell you directly.