Privacy Policy
At the dot. Creative Studio, we value the trust you place in us. Whether you're browsing our website, exploring our photography and films, or getting in touch to share your plans, we believe your personal information deserves to be treated with care and respect.
This Privacy Policy explains how we collect, use, store, and protect personal information when you visit our website or contact us about our services.
We process personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Greek data protection legislation.
1. Who We Are
The website www.thedotcreativestudio.com is operated by:
Sofia Moutafi – The dot. Creative Studio
Korinthias 18
Athens, 11526
Greece
Email: hello@thedotcreativestudio.com
Website: www.thedotcreativestudio.com
Sofia Moutafi is the data controller responsible for the processing of personal information described in this policy.
2. Information We Collect
We collect personal information when you voluntarily contact us through our website or communicate with us by email.
When you complete our contact form, we may collect:
Your full name
Your email address
Your telephone number
Your wedding or event date
Your wedding or event location
Any additional information you choose to include in your message
When you browse our website, certain technical information may also be processed, including your IP address, browser type, device information, pages visited, and interactions with our website.
We encourage you not to include sensitive personal information in your initial enquiry unless it is necessary.
3. How We Use Your Information
We use the information you provide to:
Respond to your enquiries and questions.
Communicate with you about our photography and filmmaking services.
Discuss availability, wedding or event details, and potential collaborations.
Prepare personalised proposals and provide information about our services.
Arrange consultations and follow up on enquiries.
Maintain the functionality, security, and performance of our website.
Understand how visitors use our website through optional analytics, where consent has been provided.
Comply with applicable legal obligations.
We do not sell your personal information or use your contact details for unrelated marketing purposes.
4. Legal Basis for Processing
Under the GDPR, we process personal data only when there is an appropriate legal basis.
Pre-contractual measures: When you contact us to enquire about our services, we process the information necessary to respond to your request and discuss a potential booking.
Legitimate interests: We may process limited information where necessary to operate and protect our website, maintain relevant business correspondence, and prevent misuse, provided these interests do not override your rights.
Consent: We rely on your consent for optional analytics cookies and other processing activities where consent is required.
Legal obligations: We may process or retain information where required by applicable law.
Where processing is based on consent, you may withdraw it at any time.
5. Contact Forms and Email Communication
When you submit a contact form through our website, the information you provide is sent to our business email address.
We use this information to respond to your enquiry, discuss your plans, and provide relevant information about our services.
Our website is hosted by Squarespace, which may process form submission information as part of providing its website services.
We may retain correspondence for reasonable business administration and follow-up purposes.
Submitting an enquiry does not automatically subscribe you to marketing emails or newsletters.
6. Website Hosting, Cookies and Analytics
Our website is built and hosted using Squarespace.
Squarespace may process technical information necessary for the website to function securely and correctly.
We also use Squarespace's built-in analytics, which help us understand website visits, traffic sources, and how visitors interact with our content.
Non-essential analytics cookies are used only where the required consent has been provided.
You can accept, decline, or manage optional cookies through the cookie preferences available on our website.
For further information, please refer to our Cookie Policy.
7. Third-Party Services
We use selected third-party services to support our work and communicate with clients.
These may include:
Squarespace: Website hosting, contact forms, and website analytics.
Google Drive: File storage and sharing of relevant documents or materials.
WeTransfer: Transfer of digital files where necessary.
Pixieset: Hosting and delivery of photographic galleries.
YouTube: Hosting and displaying video content.
These services may process personal information in accordance with their respective privacy policies and applicable data protection arrangements.
Some services may process or store information outside the European Economic Area.
We only share personal information with third-party providers where there is a relevant purpose and an appropriate legal basis.
8. Photographs, Films and Portfolio Content
Our website showcases selected photographs and films from our work.
Photographic and audiovisual material may include identifiable individuals, including couples, family members, and wedding guests.
The publication and use of client photographs and films are subject to applicable agreements, permissions, and legal requirements.
We take particular care when handling images of children and publish identifiable photographs or films of minors only with the appropriate permission from a parent or legal guardian.
This Privacy Policy primarily concerns visitors to our website and individuals who contact us through it. Additional information about the processing, storage, delivery, and use of photographs and films may be provided through our client agreements and related privacy information.
9. International Data Transfers
Some of the services used to operate our website and support our work may process personal data outside the European Economic Area.
Where international transfers occur, we seek to ensure that appropriate safeguards are in place, in accordance with applicable data protection legislation.
Depending on the circumstances, these may include European Commission adequacy decisions or approved contractual safeguards.
10. How Long We Keep Your Information
We retain personal information only for as long as necessary for the purposes for which it was collected.
Information submitted through our contact form and related email correspondence is retained for the time reasonably necessary to respond to enquiries, manage follow-up communication, and maintain appropriate business records.
Where an enquiry leads to a booking, relevant information may be retained for contractual, administrative, and legal purposes under the applicable client privacy arrangements.
We periodically review the personal information we hold and delete or anonymise information that is no longer necessary, unless a longer retention period is required by law.
11. How We Protect Your Information
We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration, or disclosure.
Access to personal information is limited to those who need it for legitimate business purposes.
Although we take care to protect the information entrusted to us, no method of electronic transmission or storage can be guaranteed to be completely secure.
12. Your Rights
Under the GDPR, you have certain rights regarding your personal information, subject to applicable conditions and exceptions.
These include:
Right of access: You may request information about the personal data we hold about you.
Right to rectification: You may request the correction of inaccurate or incomplete information.
Right to erasure: You may request the deletion of your personal information in certain circumstances.
Right to restriction: You may request that we restrict the processing of your personal data.
Right to object: You may object to certain processing activities, including processing based on legitimate interests.
Right to data portability: Where applicable, you may request to receive your personal data in a structured, commonly used format.
Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.
To exercise any of these rights, please contact us at hello@thedotcreativestudio.com.
We will respond to requests within the time limits required by applicable data protection legislation, generally within one month.
You also have the right to lodge a complaint with the Hellenic Data Protection Authority.
Hellenic Data Protection Authority
Website: https://www.dpa.gr
13. External Links and Embedded Content
Our website may contain links to external websites or embedded content, including videos hosted on YouTube.
When you interact with third-party websites or embedded content, those providers may collect or process personal information according to their own privacy policies.
We encourage you to review the privacy policies of any external services you choose to use.
Where embedded content involves non-essential tracking technologies, the relevant consent requirements apply.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our website, the services we use, or applicable legal requirements.
Any updates will be published on this page, together with the revised date.
15. Contact Us
If you have any questions about this Privacy Policy or how your personal information is handled, please feel free to get in touch.
Sofia Moutafi – The dot. Creative Studio
Korinthias 18
Athens, 11526
Greece
Email: hello@thedotcreativestudio.com
Website: www.thedotcreativestudio.com