Section 1
Data controller
The data controller is Jasmina Lozar Povše, photographer.
Address: Hiša Zgodb, Ozeljan 49b, 5261 Šempas, Slovenia.
Contact: hello@jasmina-lozar.com · +386 40 438 297
For any questions about the processing of your personal data, please contact me directly via the channels above.
Section 2
What personal data is collected
Contact details — name and surname, address, e-mail, phone: to book a session, prepare an offer, deliver the service and communicate with you.
Session details — chosen package, location, date and any specific wishes.
Photographs — all photographs created during the session, including images of you and your children.
Billing data — information required to issue an invoice under tax law.
Web data — when you visit the site I may, only with your explicit consent, record anonymised traffic statistics (see section 6).
Section 3
Legal bases and purposes
Contract performance (Art. 6(1)(b) GDPR): processing contact and billing data and carrying out the session on the basis of a concluded contract.
Legal obligation (Art. 6(1)(c) GDPR): retention of accounting documents under tax law.
Consent (Art. 6(1)(a) GDPR): publication of photographs on the website, portfolio and social media; analytics cookies.
Legitimate interest (Art. 6(1)(f) GDPR): technical operation of the website and responding to enquiries where no contract has yet been concluded.
Section 4
Data retention
Invoices and accounting documents: 10 years under tax law.
Original (RAW) photographs: 3 months after the gallery is delivered; permanently deleted thereafter.
Client galleries: 3 months from delivery of the link, with the option to extend by agreement.
Contact correspondence: up to 12 months after the last contact, unless an active contract follows from it.
Publication consents: until consent is withdrawn; after withdrawal, photographs are removed from online media within a reasonable time.
Section 5
Recipients of personal data
I do not share your personal data with third parties, except in the following cases:
Daguerre App — booking system used to schedule your session.
Accounting service — to fulfil accounting obligations.
Print partners — to produce ordered prints (they receive only the data strictly necessary for production and delivery).
Google Ireland Limited (Google Analytics 4) — anonymised visitor statistics, only with your explicit consent.
Competent authorities where I am legally obliged to disclose data.
For transfers outside the EU/EEA I rely on appropriate safeguards under Art. 46 GDPR (standard contractual clauses).
Section 6
Cookies and web analytics
This site uses Google Analytics 4 to understand traffic and improve content.
Before any tracking, a cookie notice is shown with the choice to accept or decline. Nothing is tracked before your consent — we use Google Consent Mode v2 with all categories set to denied by default.
You can change your choice anytime via the “Cookie settings” link in the footer.
The default data retention in Google Analytics 4 is 14 months.
Section 7
Your rights
Under GDPR you always have the right to access your personal data, correct inaccurate or incomplete data, erasure ("right to be forgotten"), restriction of processing, data portability, object to processing and withdraw consent where it serves as the legal basis.
Requests can be sent to hello@jasmina-lozar.com. You'll receive a reply within 30 days.
You also have the right to lodge a complaint with the supervisory authority — the Information Commissioner of the Republic of Slovenia.
Section 8
Changes to this privacy policy
I reserve the right to amend this privacy policy. Any material change will be published on this page.
The current version is valid from the date stated at the top of this page.