# PRIVACY POLICY

**Last updated: September 2026**

## 1. General Information

This Privacy Policy explains how personal data is collected, used and protected when you visit this website.

The website is operated by:

**Moritz Schaefer**
Photographer
Calle Madrid 4, Appt. 1012
29612 La Mairena
Spain

**NIE/NIF:** Z0234114W
**Email:** [hello@candidscenery.com](mailto:hello@candidscenery.com)

I take the protection of your personal data seriously and process personal data in accordance with the applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”).

## 2. Personal Data We Collect

You can generally visit this website without actively providing personal information.

Personal data may be processed when you:

* visit and browse the website;
* contact me by email;
* interact with embedded or linked social media content, such as Instagram; or
* use website functions that require cookies or similar technologies.

When you contact me by email, I may process the information you provide, such as your name, email address and the contents of your message.

## 3. Purpose of Processing

Personal data may be processed for the following purposes:

* responding to enquiries and communications;
* providing information about photography services;
* managing and improving the website;
* analysing website usage and performance, where analytics tools are enabled; and
* displaying or providing access to social media content, including Instagram.

Personal data will only be processed where there is a valid legal basis under the GDPR.

## 4. Legal Basis

Depending on the circumstances, processing may be based on:

* **Article 6(1)(a) GDPR** – your consent;
* **Article 6(1)(b) GDPR** – processing necessary to take steps at your request or perform a contract;
* **Article 6(1)(f) GDPR** – legitimate interests, such as operating, securing and improving the website; or
* **Article 6(1)(c) GDPR** – compliance with a legal obligation.

## 5. Website Hosting

This website is hosted by **Squarespace**.

When you visit the website, technical information may be processed by the hosting provider, including IP address, browser information, device information, date and time of access and information about the requested pages.

This processing is necessary for the secure and reliable operation of the website.

Squarespace may also process information through cookies and similar technologies depending on the website configuration.

## 6. Cookies and Similar Technologies

This website may use cookies and similar technologies.

Some cookies may be necessary for the technical operation, security and functionality of the website. Other cookies, such as analytics or third-party cookies, may be used to understand how visitors use the website.

Where legally required, non-essential cookies will only be activated after obtaining your consent.

You can manage or withdraw your cookie preferences through the cookie settings provided on the website.

## 7. Analytics

If analytics services are enabled on this website, information about your use of the website may be collected, such as pages visited, approximate location, device information and interactions with the website.

Analytics will be used to understand website performance and improve the website.

Where required by applicable law, analytics cookies will only be used with your consent.

## 8. Instagram

This website may contain links to or embedded content from **Instagram**.

When you interact with Instagram content or visit an Instagram page through an embedded element, Instagram/Meta may process personal data in accordance with its own privacy policy.

This may include information such as your IP address, browser information and interactions with the embedded content.

The processing of data by Instagram/Meta is governed by its own privacy policy and terms.

## 9. Email Communication

If you contact me by email, the personal information contained in your message will be processed for the purpose of responding to your enquiry.

I will retain correspondence only for as long as necessary to handle the enquiry and, where applicable, for the duration of any resulting business relationship or as required by law.

## 10. Data Retention

Personal data will only be retained for as long as necessary for the purposes described in this Privacy Policy or for as long as required by applicable legal obligations.

The specific retention period depends on the type and purpose of the data.

## 11. Your Rights

Under the GDPR, you may have the following rights:

* the right to access your personal data;
* the right to correct inaccurate or incomplete data;
* the right to request deletion of your personal data;
* the right to restrict processing;
* the right to object to certain processing;
* the right to data portability; and
* the right to withdraw consent at any time where processing is based on consent.

To exercise your rights, please contact:

**[hello@candidscenery.com](mailto:hello@candidscenery.com)**

You also have the right to lodge a complaint with a competent data protection supervisory authority.

In Spain, the relevant supervisory authority is the **Spanish Data Protection Agency (AEPD)**.

## 12. Third-Party Services

This website may use third-party services, including Squarespace and Instagram/Meta.

These providers may process personal data independently of this website operator. Their respective privacy policies and terms apply to their processing activities.

Where third-party services involve transfers of personal data outside the European Economic Area, the relevant provider is responsible for implementing an appropriate legal transfer mechanism in accordance with applicable data protection law.

## 13. Data Security

Reasonable technical and organisational measures are used to protect personal data against unauthorised access, loss, misuse, alteration or destruction.

However, no transmission or storage system can be guaranteed to be completely secure.

## 14. Changes to This Privacy Policy

This Privacy Policy may be updated from time to time to reflect changes to the website, services, legal requirements or data processing practices.

The current version will always be published on this page.

**Last updated: September 2026**