PRIVACY POLICY

Last updated: 2 September 2026

This Privacy Policy explains how personal data is collected and processed when you visit this website or contact me.

1. Data controller

The controller responsible for processing your personal data is:

Vlad Dobre
Individual entrepreneur / micro-entrepreneur
27 Rue Morand
75011 Paris
France

Email: hi@vladdobre.com

2. Website hosting and Squarespace

This website is hosted by Squarespace.

When you visit the website, Squarespace may process technical information such as your IP address, browser type, device information, pages visited, referring website, and the date and time of your visit.

This information is processed to display the website, maintain its security and stability, prevent misuse, and provide website services.

The legal basis for this processing is my legitimate interest in operating a secure and functional website under Article 6(1)(f) of the General Data Protection Regulation (“GDPR”).

Further information about Squarespace’s processing of personal data is available in the Squarespace Privacy Policy.

Squarespace or its service providers may process data outside the European Economic Area. Where required, these transfers are protected by recognised legal safeguards, including European Commission Standard Contractual Clauses and applicable adequacy frameworks.

3. Cookies and website analytics

This website uses cookies and similar technologies.

Necessary cookies are always used because they allow Squarespace to securely operate and display the website.

Squarespace may also provide analytics and performance features that help me understand website traffic and activity. Where consent is legally required, optional analytics and performance cookies are only used after you have accepted them through the cookie banner.

The legal bases are:

  • Necessary cookies: my legitimate interest in operating a secure and functional website under Article 6(1)(f) GDPR

  • Optional analytics and performance cookies: your consent under Article 6(1)(a) GDPR

You can accept, reject or modify your cookie preferences using the cookie banner or the cookie settings link available on the website. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before its withdrawal.

I have not connected Google Analytics to this website.

4. Enquiries and correspondence

When you contact me by email, I process the information you provide, such as your name, email address and the content of your message, in order to respond to your enquiry and, where relevant, discuss or prepare a photography assignment.

Depending on the nature of the enquiry, the legal basis is:

  • Taking steps at your request before entering into a contract under Article 6(1)(b) GDPR

  • My legitimate interest in managing professional correspondence under Article 6(1)(f) GDPR

Enquiry data that does not lead to a contract will generally be retained for no longer than three years after our last contact, unless a longer period is necessary to establish, exercise or defend legal claims.

5. Recipients of personal data

Personal data is only disclosed where necessary to operate the website, communicate with you, comply with legal obligations or protect legal rights.

Recipients may include:

  • Squarespace, as the website-hosting provider

  • Professional advisers, such as accountants or legal advisers

  • Public authorities where disclosure is legally required

These recipients receive only the information reasonably necessary for their respective purposes.

6. International data transfers

Some service providers may process personal data outside the European Economic Area, including in the United States.

Where required, international transfers are protected using an adequacy decision, the European Commission’s Standard Contractual Clauses, the EU–US Data Privacy Framework where applicable, or another legally recognised safeguard.

7. Data retention

Personal data is not retained longer than necessary for the purpose for which it was collected.

In particular:

  • Enquiries that do not lead to a contract are generally retained for no longer than three years after the last contact

  • Technical, security and cookie data is retained according to the applicable cookie settings and the retention periods used by the relevant service provider

Data may be retained for a longer period where required by law or where necessary to establish, exercise or defend legal claims.

8. Your rights

Subject to the conditions of the GDPR, you may have the right to:

  • Access your personal data

  • Correct inaccurate or incomplete personal data

  • Request the deletion of your personal data

  • Restrict the processing of your personal data

  • Object to processing based on legitimate interests

  • Receive certain personal data in a portable format

  • Withdraw your consent at any time

  • Lodge a complaint with a supervisory authority

To exercise your rights, contact:

hi@vladdobre.com

I may request information reasonably necessary to verify your identity. Requests will normally be answered within one month.

If you believe that your data-protection rights have not been respected, you may lodge a complaint with:

Commission nationale de l’informatique et des libertés (CNIL)
3 Place de Fontenoy
75007 Paris
France

www.cnil.fr

9. Security

Reasonable technical and organisational measures are used to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

The website uses SSL/TLS encryption, which is indicated by “https” and the padlock symbol displayed by supported browsers.

10. Changes to this Privacy Policy

This Privacy Policy may be updated if the website, connected services, business activities or applicable legal requirements change.

The latest version and its update date will be published on this page.