Privacy policy

How I handle your information when you get in touch or enquire about my wedding photography and film services.

Who is responsible for your information

The data controller and owner of joanlluisvisuals.com is Joan Lluís Clemens Sansó, with Spanish tax identification number 41660970N and business address Carrer d’en Salas, número 16, Manacor, Illes Balears, España, trading as Joan Lluís Visuals.

For privacy questions or to exercise your rights, email joanlluisvisuals@gmail.com. This information covers the website and enquiries received through its contact channels. Booking a photography or film service will be accompanied by the relevant information and contractual terms.

What information is collected

The contact form asks for your name, email address, wedding date, celebration location and message. It also lets you indicate which services interest you and records the language and confirmation that you have read the privacy information. Required fields are identified on the form and are needed to understand and answer your enquiry. The form does not request payments or file attachments.

If you contact me by email or WhatsApp, your contact details and the content you choose to send will be processed. Avoid sending identity documents, health information or other sensitive details. Only share someone else’s personal data when you have a lawful basis to do so.

When you browse, servers and security tools may process technical information such as your IP address, request time, requested resource, browser and request outcome to deliver the website and prevent abuse. Website measurement is explained below.

How information is used and the legal basis

Enquiries and quotations: to reply personally, check dates and locations, explain services and prepare a proposal at your request. The legal basis is taking steps towards a possible contract at your request. Other messages are handled on the basis of the legitimate interest in responding, while respecting your rights.

Security and operation: to prevent spam, fraud and attacks, resolve incidents and keep the website available. The legal basis is the legitimate interest in protecting the service. Necessary information may also be processed to meet applicable legal obligations.

Submitting the form does not subscribe you to marketing or authorise publication of photographs, messages or testimonials. Publication in the portfolio or on social media requires a separate legal basis and specific information. No automated decisions with legal effects are made about you, and no advertising profiles are created.

Who can access your information

Your enquiry is recorded in the website’s content management system and may generate an email notification. The owner and authorised providers may access it when needed to support hosting, backups, content management and email. Minicolab provides technical services for the website, visitor measurement and spam protection.

The contact email uses Google’s Gmail. Choosing WhatsApp or Instagram also means using Meta services subject to their own policies. Your data is not sold or shared for third-party advertising. It may be disclosed to authorities when legally required.

Using Gmail and, if you choose them, WhatsApp or Instagram may involve processing outside the European Economic Area. Google and Meta describe their destinations and transfer mechanisms in their policies. Applicable safeguards must include an adequacy decision or, where appropriate, standard contractual clauses and additional measures. You can request information about providers and safeguards using the contact email.

How long information is kept

Enquiries and email messages are kept while needed to respond to your request, answer questions and follow up on a proposal that remains open. The criteria for deciding when this need ends are the last communication, whether the request is still active and whether there is a related booking or claim. When an enquiry has ended and retention is no longer needed, the data must be erased, subject to applicable legal retention obligations.

If you book a service, necessary documentation is kept during the relationship and for applicable tax, accounting and liability periods. Once its purpose has ended, personal data is erased or retained with access restricted where required by law.

Technical and measurement information is kept for the time needed to detect and resolve incidents and analyse changes in website audience and performance. Aggregated statistics that do not identify a person may be retained while useful for that analysis. Erasing an enquiry must cover its content management record and email copies. Backup copies follow their renewal cycle and will not be used to restore erased data for new purposes.

Cookies and browsing statistics

Your language preference and basic visitor measurement are explained on the cookies and statistics page. It covers the technologies used, their purposes, browser controls and retention criteria.

Spam protection

The form uses Cap, hosted at captcha.minicolab.com and managed by Minicolab, to check that a submission is not abusive automation. Your browser solves a technical challenge and the service validates the result. This communication involves connection information and a temporary verification token.

Cap does not use tracking cookies or serve advertising. Information needed for the check is used for security. If you cannot complete the form, you can contact me by email.

Your rights and how to exercise them

You can request access, correction, erasure, restriction, portability or object to processing where applicable. Where processing relies on consent, you can withdraw it without affecting earlier processing. Email joanlluisvisuals@gmail.com with your request. Additional identity information will only be requested if necessary.

You will normally receive a response within one month. If a request is complex, you will be informed within that period of any extension. You can also complain to the Spanish Data Protection Agency at www.aepd.es.

Updates to this information

This page will be reviewed when owner details, services or data processing change. Where a change requires new consent or individual information, this will be obtained or provided before the relevant processing begins. Last updated: 1 October 2026.