Privacy Policy

This Privacy Policy explains what personal data is collected and processed when you use the site dubovaya.studio, for what purposes, and what rights you have.

Personal data means any information that relates, directly or indirectly, to a specific person: name, phone, messenger handle, email, the content of your message, technical browser data and the like.

The site belongs to photographer Olya Dubovaya (Dubovaya Studio) and is dedicated to photography services in Antalya and on the coast. By using the site and contacting me, you confirm that you have read this Policy.

The data controller is:

Olya Dubovaya (Dubovaya Studio)
photographer, Antalya, Türkiye
E-mail: [email protected]

For any questions about privacy or exercising your rights, use this address or any contact on the “Contacts” page.

1. Data you provide yourself:

• your name;
• messenger handle (WhatsApp, Instagram, Telegram, TikTok), phone or email;
• shoot preferences: format, date, location, who takes part;
• any other information you share voluntarily in correspondence.

2. Technical data:

• device type, browser, operating system, language;
• pages you viewed and the referral source;
• anonymised visit statistics and cookie data — only with your consent to analytics cookies.

3. Communication data: the history of messenger and email correspondence related to arranging a shoot.

I do not request special categories of data (health, beliefs, etc.). If you share them voluntarily, I use them only as far as needed to reply.

I use the data for the following purposes:

• replying to your enquiry;
• agreeing details and running the photo shoot;
• delivering the finished photos and handling the arrangements;
• anonymised traffic analysis and improving the site;
• protecting the site from spam and abuse;
• meeting legal requirements where applicable.

I process data on the following bases:

• your consent — when you voluntarily message me or accept cookies;
• necessity to reply to your request and prepare the shoot;
• performance of the agreed service;
• legitimate interest — business correspondence, protecting and improving the site;
• compliance with legal obligations where applicable.

Where EU data protection law (GDPR) applies to a particular processing, the relevant bases are used: consent, contract, legitimate interest and legal obligation.

When you reach out via messenger, email or otherwise, I use the data to clarify your wishes, suggest a location and format, and agree the date and price.

If the shoot needs helpers (e.g. a make-up artist or stylist), I share with them only the information objectively required to organise the shoot.

The photos taken during a shoot are delivered to you. Using frames in my portfolio, on the site or on social media is agreed separately.

Consent to publication can be withdrawn at any time — message me and I’ll remove the post (within a reasonable time and the platform’s technical limits).

The site uses cookies and similar technologies. Necessary cookies keep the site working and remember your choice. Analytics and marketing cookies are loaded only after your consent in the banner.

You can change or withdraw consent at any time via the “Cookie settings” link in the footer. See the cookie policy for details.

The following third-party services are involved in running the site and our communication:

• hosting and content delivery (Cloudflare);
• messengers (WhatsApp, Instagram, Telegram, TikTok);
• embedded social elements (e.g. an Instagram feed, video);
• analytics and advertising services — if connected and you have consented.

These services process data under their own privacy policies. I recommend reviewing them if you want the details.

I do not sell personal data. Sharing is possible only:

• with services that run the site and our communication (hosting, messengers, analytics);
• with helpers for a specific shoot — to the minimum needed;
• with public authorities — where required by law.

I am based in Antalya (Türkiye), and clients come from different countries. The services used (hosting, messengers, analytics) may process data on servers in other countries.

In such cases, only the information needed to run the site or provide the service is transferred, and reasonable measures are taken to protect it.

I keep correspondence and shoot materials for as long as needed to provide the service and for ordinary interaction. After that, data is deleted on request or when no longer needed, unless retention is required by law.

Cookie retention periods are in the cookie policy.

I take reasonable organisational and technical measures to protect data: limiting access, using secure communication channels and reliable service providers.

That said, no method of transmitting data over the internet is completely secure — please keep this in mind when sending information via messengers and email.

You have the right to:

• find out whether your data is processed and access it;
• have inaccurate data corrected;
• request deletion of your data;
• restrict processing or object to it;
• withdraw consent given earlier;
• lodge a complaint with a competent authority if you believe your rights are infringed.

To exercise these rights, write to [email protected]. I may ask you to confirm your identity to protect data from unauthorised access.

Where processing is based on consent, you can withdraw it at any time. Withdrawal does not affect the lawfulness of processing before withdrawal. Cookie consent is changed via the “Cookie settings” link in the footer.

I use your contacts to communicate at your request (reply, agree details, deliver photos) and do not send bulk marketing without a basis. If you do not want further messages, just let me know.

The site is not intended for independent use by children. I do not knowingly collect minors’ data via the site.

Children’s and family shoots are arranged on request and with the consent of parents or legal guardians. Publishing frames with children is agreed separately and can be withdrawn.

I may update this Policy from time to time. The current version is always published on this page with the update date at the top.

Services are provided in Antalya (Türkiye), and clients come from different countries. Therefore the law of Türkiye may apply to processing, and in some cases the law of your country, including the GDPR where it applies to a particular processing.

For questions about the processing of personal data, exercising your rights or this Policy:

E-mail: [email protected]
or any contact from the “Contacts” page (WhatsApp, Instagram, Telegram, TikTok).