Short version: your message is used to answer you, and your photographs are never published unless you say so in writing. The details are below.
The data controller is Adam Lankamer, NIE Z3789734Y, Calle Mezquita Alta 699, 18697 La Herradura (Granada), Spain. For anything to do with your personal data, write to fotostories@adamlankamer.com or message +34 641 758 592.
When you write by WhatsApp or email: your contact details, the kind of session you are asking about, and whatever you choose to send. When you book a session: the details needed to arrange it and, where a receipt or invoice is required, your billing details. At a session: photographs of you and of anyone else being photographed. If your session was gifted by a partner business, I am told only that a gift card was issued — the business does not receive your photographs or your contact details from me.
To answer your message and agree a date — steps taken at your request before a contract (Article 6(1)(b) GDPR). To carry out the session and deliver your photographs — performance of the contract (Article 6(1)(b) GDPR). To issue receipts and keep accounts — a legal obligation (Article 6(1)(c) GDPR). To show your photographs on this website, on Instagram or anywhere else — only with your consent (Article 6(1)(a) GDPR), which you can withdraw at any time.
Messages that do not lead to a session are deleted 12 months after our last contact. Records needed for receipts and accounts are kept for as long as Spanish tax and commercial law requires. Photographs from your session are kept for 2 years, so that lost copies can be replaced. Ask, and I will delete them sooner.
Netlify, Inc. hosts this website. Netlify is based in the United States; transfers are covered by the safeguards in Netlify's data processing agreement, including the European Commission's Standard Contractual Clauses. My email is hosted by Namecheap, Inc. If you contact me on WhatsApp, WhatsApp (Meta) processes that conversation under its own privacy policy. The typefaces on these pages are served from this website itself, so loading a page makes no request to Google or any other font provider. I do not sell your data and I do not use it for advertising.
This site sets no advertising or analytics cookies.
You can ask to see, correct or delete your data, to restrict or object to how it is used, to receive it in a portable format, and to withdraw consent at any time. Write to fotostories@adamlankamer.com. If you believe your data has been mishandled, you can complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).
Photographs from your session are yours to use however you like. I publish none of them — not on this site, not on Instagram, not anywhere else — unless you have agreed to it in writing. That agreement is separate from booking the session, it is never a condition of it, and you can withdraw it later: tell me and the photographs come down. This applies to every kind of session, and it matters most for the artistic nudity and boudoir sessions, where nothing is shown to anyone but you unless you have said otherwise in writing.
Children are photographed only with a parent or guardian present and with their agreement, and their photographs are published only if that parent or guardian has agreed in writing.
If this notice changes, the date at the top changes with it.