top of page

Privacy Policy

Last updated: 15 May 2025

  1. WHO WE ARE
    This website (ak-studio.ch and sub-domains, “Site”) is owned and operated by Anastasia Karpenko Photography, CHE-444.227.930, Aspstrasse 7B, 8426 Lufingen, Canton Zurich, Switzerland (“AK Studio”, “we”, “our”, “us”).
    Contact for all privacy questions: i@anastasiakarpenko.com
     

  2. SCOPE OF THIS POLICY
    This policy explains which personal data we collect when you visit the Site, book a shoot, order a gift card or otherwise interact with us, why we process that data, how long we keep it, and which rights you have.
     

  3. WHAT DATA WE COLLECT AND WHY

  • Contact / enquiry form: name, e-mail, phone, venue address, message
    → Purpose: Respond to your enquiry & pre-contract steps
    → Legal basis: Contract (Art. 6 (1)(b) GDPR / Art. 31 (2)(a) revFADP)

  • Online booking via Wix scheduler: same as above plus chosen service, preferred date/time
    → Purpose: Schedule the shoot, enter the contract
    → Legal basis: Contract

  • Payment checkout: amount, currency, payment token, billing details. (Card numbers are handled only by Stripe / Wix Payments / TWINT.)
    → Purpose: Process payment & issue invoices
    → Legal basis: Contract & legal obligation

  • Digital image delivery (Google Drive, WeTransfer, Swiss Transfer): e-mail address, image files
    → Purpose: Fulfil the contract
    → Legal basis: Contract

  • Gift-card purchase: purchaser & recipient details, message
    → Purpose: Issue & deliver the electronic or physical gift card
    → Legal basis: Contract

  • Site analytics (Wix Analytics): IP address, device/browser, pages viewed, timestamps, cookies
    → Purpose: Improve site performance
    → Legal basis: Legitimate interest or consent (cookie banner)

  • Future marketing (optional): e-mail address, marketing-consent status
    → Purpose: Send newsletters only if you opt-in
    → Legal basis: Consent

    4. COOKIES & TRACKING
    The Site places essential cookies required for security and booking. Analytics cookies (Wix Site Analytics) run only after you click “Accept” on the cookie banner. We do not currently use Facebook/Instagram Pixel; if we add it later, the cookie banner will let you consent or refuse.

    5. THIRD-PARTY PROCESSORS
    We share data only with the following service providers under data-processing agreements or standard contractual clauses:

  • Wix.com Ltd. – Site hosting, scheduler, checkout, gift-card e-mails (EU / US / Israel)

  • Stripe Payments Europe – Credit-card processing (EU / US)

  • TWINT AG – Mobile payments (Switzerland)

  • Google Workspace & Drive – Business e-mail, calendar, image delivery (EU / US)

  • WeTransfer / SwissTransfer – Large-file delivery (EU / Switzerland)

  • Swiss Post – Delivery of physical gift-card vouchers (Switzerland)

    6. DATA RETENTION

  • Contact-form enquiries: 1 year after last interaction

  • RAW & final image files: 1 year after gallery delivery

  • Contracts & invoices: 10 years (Swiss law)

  • Gift-card purchaser data: Until the card expires + 1 year

  • Analytics data: 14 months (Wix default)

You may ask us to delete your data sooner where applicable (see section 9).
 

7. INTERNATIONAL TRANSFERS
Where data is transferred outside Switzerland or the EEA (e.g., to the US), we rely on:

  • Adequacy decisions (Switzerland ↔ EU/EEA and Israel)

  • Standard Contractual Clauses (SCCs) approved by the European Commission and recognised by the Swiss FDPI

    8. SECURITY MEASURES

  • SSL/TLS encryption for website traffic

  • Two-factor authentication for Google, Stripe, Wix accounts

  • Encrypted and access-controlled storage for devices and drives

  • Access to image and booking archives is limited to the owner and one assistant

    9. YOUR RIGHTS

  1. You have the right to:

  • Access the personal data we hold about you

  • Rectify inaccurate or incomplete data

  • Delete data no longer needed or based on consent

  • Restrict or object to processing

  • Receive your data in a machine-readable format (data portability)

  • Withdraw consent at any time (e.g., unsubscribe from future marketing)

To exercise your rights, email: i@anastasiakarpenko.com
You may also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or your local EU data authority if applicable.
 

10. CHILDREN
Bookings for minors must be made by a parent or legal guardian. We do not knowingly collect contact data from children under 16. Images of minors are published only with parental permission.
 

11. NO AUTOMATED DECISION-MAKING
We do not use automated decision-making or profiling as defined under the GDPR.

 

12. CHANGES TO THIS POLICY
We may update this Privacy Policy to reflect legal changes or service updates. The “last updated” date will change accordingly. Continued use of the Site after changes means you accept the updated policy.

bottom of page