Privacy Policy

Last updated: July 19, 2026

1. Who We Are

This website is operated by KSP, obrt za proizvodnju filmova i videofilmova, owned by Karla Sentić Bušić (“we”, “us”, “our”), registered in the Republic of Croatia.

  • Website: karlasenticphotography.com
  • Email: hello@karlasenticphotography.com

We are committed to protecting your privacy and handling your personal data transparently, in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable Croatian data protection legislation.

2. What Personal Data We Collect

We collect personal data only when you voluntarily provide it to us. Specifically:

2.1 Contact Form & Direct Communication

When you reach out to us through our contact form, email, or other communication channels, we may collect:

  • Your name
  • Your email address
  • Your phone number (if provided)
  • The content of your message
  • Any additional information you choose to share (e.g., event date, location preferences)

2.2 Analytics Data

We use Google Analytics 4 (GA4) to understand how visitors interact with our website. When you consent to analytics cookies, GA4 may collect:

  • Anonymised IP address
  • Pages visited and time spent on each page
  • Referring website or source
  • Browser type and device information
  • General geographic location (country/city level)
  • Session duration and engagement metrics

This data is collected through first-party cookies and does not directly identify you. For more details, please see our Cookie Policy.

3. How We Use Your Data

We use your personal data for the following purposes:

  • Responding to enquiries — to reply to your messages, provide information about our services, and communicate regarding potential bookings
  • Service delivery — to plan, coordinate, and deliver photography sessions you have booked
  • Website analytics — to understand website traffic patterns and improve user experience (only with your consent)

We do not use your data for automated decision-making, profiling, or direct marketing unless you have explicitly opted in.

4. Legal Basis for Processing

Under the GDPR, we process your personal data based on the following legal grounds:

  • Legitimate interest (Art. 6(1)(f) GDPR) — for responding to your enquiries and managing our business communications
  • Contract performance (Art. 6(1)(b) GDPR) — for processing data necessary to deliver photography services you have booked
  • Consent (Art. 6(1)(a) GDPR) — for setting analytics cookies on your device; you may withdraw your consent at any time

5. How Long We Keep Your Data

  • Contact form data — we retain your messages and contact details for up to 24 months after your last communication with us, unless a booking is made, in which case we retain the data for the duration required by Croatian tax and accounting regulations (currently 11 years for financial records)
  • Analytics data — Google Analytics data retention is set to 14 months; after this period, user-level data is automatically deleted

6. Who We Share Your Data With

We do not sell, rent, or trade your personal data. We may share your data with the following categories of recipients, solely for the purposes described in this policy:

  • Google LLC — as our analytics provider (Google Analytics 4). Google processes data under the EU-U.S. Data Privacy Framework. For more information, see Google’s Privacy Policy
  • Hosting provider — our website hosting provider may have access to server logs containing IP addresses as part of standard web hosting operations
  • Tax and legal advisors — if required by Croatian law for tax reporting or legal compliance

7. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access — request a copy of the personal data we hold about you
  • Right to rectification — request correction of inaccurate or incomplete data
  • Right to erasure — request deletion of your data where there is no compelling reason for continued processing
  • Right to restrict processing — request that we limit how we use your data
  • Right to data portability — request your data in a structured, machine-readable format
  • Right to object — object to processing based on legitimate interest
  • Right to withdraw consent — withdraw your consent for analytics cookies at any time through the cookie settings on our website

To exercise any of these rights, please contact us at hello@karlasenticphotography.com. We will respond to your request within 30 days.

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP):

  • Website: azop.hr
  • Email: azop@azop.hr

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encrypted data transmission (SSL/TLS), secure hosting infrastructure, and restricted access to personal data.

9. Third-Party Links

Our website may contain links to third-party websites (e.g., social media profiles). We are not responsible for the privacy practices of these websites. We encourage you to read their privacy policies before providing any personal data.

10. Children’s Privacy

Our services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately, and we will take steps to delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:

  • Email: hello@karlasenticphotography.com
  • Business: KSP, obrt za proizvodnju filmova i videofilmova, vl. Karla Sentić Bušić