1. Controller
The controller responsible for processing personal data on this website and in connection with my photography and video services is:
Erik Farid, Erik Farid Fotographie und Film Lange Gasse 43a, 8010 Graz, Austria Email: office@faridmedia.com Phone: +43 660 1269200
No data protection officer has been appointed, as this is not required under Art. 37 GDPR. If you have any questions about data protection, you can reach me at the email address above.
2. General Information
Protecting your data is important to me. I process personal data exclusively in accordance with the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and the Austrian Telecommunications Act (TKG). Personal data is only processed where necessary to provide the website, to perform contracts, to comply with legal obligations, or on the basis of your consent.
3. Visiting the Website
3.1 Server Log Files
When you visit the website, the hosting provider processes technically necessary data, in particular your IP address, the date and time of access, the page requested, browser type and operating system, and the previously visited page. This processing serves the secure and stable operation of the website.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure operation of the website). Retention period: Log files are deleted after a short time, usually within a few days to weeks, unless they are needed to investigate a security incident.
3.2 Hosting
This website is hosted by an external provider. A data processing agreement under Art. 28 GDPR is in place with the hosting provider. If data is transferred to countries outside the EU/EEA, this only takes place on the basis of appropriate safeguards (e.g. an adequacy decision or standard contractual clauses).
3.3 Cookies and Analytics Tools
This website only uses technically necessary cookies, unless further tools are in use. Technically necessary cookies do not require consent (Section 165(3) TKG). If analytics, marketing or social media tools are used, this will only happen with your prior consent via a cookie banner (Art. 6(1)(a) GDPR). You can withdraw your consent at any time with effect for the future.
4. Contacting Me
If you contact me by email, phone, contact form or social media, I process the data you provide (e.g. name, contact details, content of your inquiry) in order to respond to your request.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures or contract performance) or Art. 6(1)(f) GDPR (legitimate interest in answering inquiries). Retention period: Inquiries that do not lead to an assignment are deleted after 12 months at the latest.
5. Assignments and Client Data
To carry out assignments (e.g. portrait, wedding, event, business, fashion, product, architecture or video productions), I process the following data:
Master and contact data (name, address, email, phone number)
Assignment data (date, location, scope of services, fee)
Payment and invoicing data
Photo and video material created during the assignment, including images of people
Communication related to the assignment
Legal bases: Art. 6(1)(b) GDPR (contract performance), Art. 6(1)(c) GDPR (statutory retention obligations, in particular under the Federal Fiscal Code and the Austrian Commercial Code) and Art. 6(1)(f) GDPR (legitimate interest in legal defense and archiving).
Retention periods:
Invoices and accounting records: 7 years (statutory retention obligation)
Photos and videos: the image material is archived for up to 12 months after completion of the assignment to allow for reorders and follow-up questions. Longer archiving only takes place if agreed or if there is a legitimate interest.
Other assignment data: until the limitation periods for possible claims have expired (generally 3 years, in individual cases up to 30 years)
6. Publication of Photos and Videos
Use of recordings in which individuals are identifiable for my portfolio, website, social media or advertising purposes takes place only with your express consent (Art. 6(1)(a) GDPR, supplemented by the provisions of the Austrian Copyright Act on the protection of likeness, Section 78 UrhG). Consent is obtained separately in writing (e.g. via a model release or within the assignment contract) and is voluntary.
You can withdraw your consent at any time with effect for the future. After withdrawal, I will remove already published content from my channels within a reasonable period. I have no influence over content that has already been taken over by third parties.
At events (e.g. weddings, events, trade fairs), I inform attendees that photos are being taken. Anyone who does not wish to be photographed can tell me at any time.
7. Recipients of Data
I only pass on personal data where this is necessary to perform a contract, where a legal obligation exists, or where you have given your consent. Possible recipients are:
Tax advisors and accountants
Hosting providers and IT service providers
Providers of cloud storage and online galleries for delivering images
Payment service providers and banks
Email providers
Authorities, where a legal obligation exists
Print shops and labs, if you order products from me
Data processing agreements under Art. 28 GDPR are in place with all service providers who process data on my behalf.
8. Linked Services and Social Media
This website contains links to external services, in particular Instagram (@erikfarid.photography). When you click a link, you leave my website. The respective providers are themselves responsible for the data processing that takes place there. Please refer to their privacy policies. Merely visiting my website does not transmit any data to these services as long as no content is embedded directly.
9. Your Rights
Under the GDPR you have the following rights:
Access (Art. 15 GDPR)
Rectification of inaccurate data (Art. 16 GDPR)
Erasure (Art. 17 GDPR)
Restriction of processing (Art. 18 GDPR)
Data portability (Art. 20 GDPR)
Objection to processing based on legitimate interests (Art. 21 GDPR)
Withdrawal of consent with effect for the future (Art. 7(3) GDPR)
To exercise your rights, an informal message to office@faridmedia.com is sufficient. I will respond to requests within one month.
10. Right to Lodge a Complaint
If you believe that the processing of your data violates data protection law, you can lodge a complaint with the supervisory authority. In Austria, this is the:
Austrian Data Protection Authority (Österreichische Datenschutzbehörde) Barichgasse 40–42, 1030 Vienna Email: dsb@dsb.gv.at Website: www.dsb.gv.at
11. Data Security
I take appropriate technical and organizational measures to protect your data, e.g. encrypted data transmission (SSL/TLS), password-protected storage and regular backups.
12. Changes
I will update this privacy policy if the legal situation, the website or data processing activities change. The current version published on this website applies.