Privacy Policy — Smart Studio Production
Last updated: 15 Oct 2025
1. Who we are
Smart Studio Production (United Kingdom) operates www.smrtstudio.ro and processes personal data in compliance with the GDPR/UK GDPR.
2. Data we collect
We may collect:
– Contact data: name, email address.
– Payment data: handled securely by Stripe; we do not store full card details.
– Technical data: IP address, device/browser info, pages viewed (security/analytics).
– Photo content: event photographs that may depict identifiable individuals.
3. Purposes of processing
We use data to: (a) process orders and deliver digital photos; (b) communicate and provide support; © comply with legal/financial obligations; (d) ensure platform security; (e) portfolio/promotion only with prior consent.
4. Legal bases
Consent (Art. 6(1) (a)), contract performance (Art. 6(1) (b)), legal obligation (Art. 6(1)©), and legitimate interests (Art. 6(1) (f)) such as security and fraud prevention.
5. Private galleries & photo retention
Photos are uploaded to password‑protected private galleries, accessible only to people with the access password. Images remain available for 6 months from publication and are then permanently deleted from our archive.
6. Retention periods
– Event photos: 6 months from publication.
– Transactional/accounting data: up to 5 years, as required by law.
– Email correspondence: up to 24 months or until a request is resolved.
7. Data sharing
We share data only with essential service providers: Stripe (payments), Wfolio (platform/hosting), email/hosting providers, and other tools strictly necessary to operate the service. These processors act under GDPR‑compliant agreements.
8. Your rights
Under GDPR/UK GDPR you have the rights of access, rectification, erasure, restriction, portability and objection. You can also lodge a complaint with a supervisory authority.
9. Image deletion requests
Individuals appearing in photos can request removal of images featuring them if they do not wish to be visible online. Email your request to rby87uk@gmail.com; we process it within 10 business days. Removal does not affect files already purchased by other users prior to the request.
10. Data security
We implement appropriate technical and organizational measures (encryption, limited access, backups) to protect data against unauthorized access or loss.
11. International transfers
Our providers may store data outside the UK/EEA. Where applicable, we rely on lawful transfer mechanisms (SCC/UK Addendum).
12. GDPR contact
For questions or to exercise your rights, contact: rby87uk@gmail.com.
13. Consent
By clicking the button (e.g., “Buy Now”, “Submit”, or “Agree”), you confirm you have read this Policy and agree to the processing of your personal data as described.
14. Changes
We may update this policy; the current version and last updated date are shown on this page.
© Smart Studio Production
• Generated on 15 Oct 2025 • Contact: rby87uk@gmail.com