Privacy Policy

01 — Introduction and Scope

Daniel Vision Lab respects the privacy of visitors, clients, prospective clients, collaborators, models, interview participants and other people who interact with danielvisionlab.com.

This Privacy Policy explains how personal data is handled when you browse this website, submit a contact request, ask about photography, video, aerial cinematography or creative services, or take part in a professional collaboration, interview or photographic project.

The principal framework applicable to processing carried out by the Italian-based Controller includes Regulation (EU) 2016/679 (the General Data Protection Regulation — GDPR), the Italian Personal Data Protection Code (Legislative Decree No. 196/2003, as amended), and the rules applicable to cookies and electronic communications. Other privacy laws may apply to particular processing activities where their legal scope and requirements are met.

This notice is intended to provide the information required by applicable law, including Articles 13 and, where relevant, 14 GDPR. It does not claim that every privacy law worldwide automatically applies to Daniel Vision Lab.

02 — Data Controller

The Controller responsible for the processing described in this notice is:

You may use the email address above to ask questions about this notice or to exercise applicable data-protection rights.

03 — Categories of Personal Data

The information processed depends on how you use the website and which services or functions you interact with.

Information you provide

When you contact Daniel Vision Lab or discuss a project, the information may include:

• First and last name;
• Email address and telephone number, where provided;
• Company, brand or professional information, where provided;
• The subject and contents of your message;
• The “Website” field, if completed on the contact form;
• Details concerning a requested photography, video, aerial-cinematography or creative project;
• Attachments and other information you choose to provide.

Technical and visit information

Website infrastructure, analytics and visitor-monitoring functions may process technical or usage information. Depending on the service and its actual settings, this may include an IP address or related network identifier, date and time of access, requested page or URL, referring source, browser, operating system, device information, diagnostic events and records needed to investigate security incidents.

Where the website’s visitor-monitoring configuration derives an approximate location from an IP address, the result may indicate a country, region or city. This is an estimate, may be inaccurate and is not a precise GPS location.

Please do not submit special-category personal data through the ordinary contact form unless it is genuinely necessary and specifically requested.

04 — How Data Is Collected

Depending on the interaction, personal data may be collected:

• Directly from you through the contact form, email or other communications;
• During quotation, booking, contract or collaboration discussions;
• Automatically from website, hosting, security, analytics or visitor-monitoring systems;
• From an interview participant, client or collaborator in connection with a project;
• From publicly available professional information where relevant and lawful for a specific editorial or professional project.

Where data is obtained from a source other than the individual, the information required by Article 14 GDPR will be provided where applicable, subject to any exception established by law.

05 — Purposes and Legal Bases

When the GDPR applies, personal data is processed for specified purposes and on an applicable legal basis. The basis depends on the context and the actual processing carried out.

Enquiries and quotations

To read and respond to questions, quotation requests and collaboration enquiries, and to take requested steps before entering into a contract.

Legal basis: Article 6(1)(b) GDPR where the processing is necessary to take steps at your request before a contract; otherwise, Article 6(1)(f) GDPR where necessary for the legitimate interest in managing and responding to relevant professional communications.

Professional services and collaborations

To arrange, deliver and manage photography, video, aerial cinematography, creative services, interviews and agreed collaborations.

Legal basis: Article 6(1)(b) GDPR where processing is necessary to perform a contract or take pre-contractual steps.

Legal, tax and accounting obligations

To issue and manage invoices, maintain legally required records and comply with applicable accounting, tax and other legal obligations.

Legal basis: Article 6(1)(c) GDPR.

Website operation, security and abuse prevention

To maintain site stability, diagnose technical issues, protect the website, detect malicious activity and investigate security incidents.

Legal basis: Article 6(1)(f) GDPR, where applicable. The legitimate interests pursued are website security, service reliability, prevention of abuse and the establishment, exercise or defence of legal claims.

Analytics and visitor monitoring

The website uses analytics functionality to understand website traffic and performance. The DVL Site Intelligence / Site Monitor plugin is active for visitor monitoring. Depending on the configuration, the systems may process technical and visit information described in Section 03.

Analytics is presented as an optional function in the website’s consent interface. Where applicable law requires consent for cookies, device storage or other tracking technologies, the relevant technology must remain disabled until valid consent has been given. Personal-data processing based on consent is carried out on the basis of Article 6(1)(a) GDPR where that is the applicable legal basis. Strictly necessary security and server logs are assessed separately under Article 6(1)(f) GDPR, where applicable.

Photographic, editorial and portfolio publication

To create, edit, manage and, where authorised and lawful, publish photographs, interviews, biographies, testimonials and information about professional collaborations.

Legal basis: determined for each project according to the applicable legal basis, agreement, image release, licence or consent where required. This Privacy Policy does not itself replace a model release, licence or other project-specific authorisation.

06 — Contact Form and Communications

The Contact page may collect first name, last name, email address, telephone number, subject, message and a website address if you complete that field. The fields actually marked as required in the live form determine which information is necessary to submit a request.

The information is used to review and answer your enquiry and, where relevant, to take requested pre-contractual steps. If you do not provide information marked as required, Daniel Vision Lab may be unable to respond adequately to the request.

Form messages may be transmitted through the email-delivery service configured for the website and may be retained in the website system and/or the receiving mailbox, depending on the technical settings. Where an external provider processes personal data on behalf of Daniel Vision Lab, the applicable data-processing arrangements are put in place where required by law.

Sending a contact request does not, by itself, authorise unrelated marketing communications. Personal data is not used for unrelated promotional emails unless a separate lawful basis and any required consent are in place.

By submitting the contact form, you ask Daniel Vision Lab to process the information provided to respond to your enquiry and, where relevant, take pre-contractual steps. Sending the form is not consent to unrelated marketing. Please read this Privacy Policy and the Cookie Policy.

07 — Analytics and DVL Site Intelligence / Site Monitor

Analytics is present on the website, and the DVL Site Intelligence / Site Monitor WordPress plugin is active for visitor monitoring. The information actually recorded depends on each service’s current configuration.

Visit-monitoring information may include the date and time of a visit, the page requested, the referring source, browser, operating system, device information, an IP address or related network identifier and an approximate location derived from IP where that function is enabled. The information actually recorded on a particular visit depends on the functions enabled in the current configuration.

The information is intended for website statistics, performance review, technical troubleshooting and, where applicable, security monitoring. Access should be limited to people who need it for those purposes.

The analytics and visitor-monitoring setup determines which technical identifiers are used, how IP addresses are handled, which service providers may access the information and how long records are kept. Further information about cookies and similar technologies is available in the Cookie Policy.

Approximate location derived from IP is not a precise physical location and can identify the wrong city or region, particularly when traffic passes through a VPN, proxy, mobile network or other intermediary.

08 — Cookies and Consent

The website may use cookies, local storage and similar technologies for core functionality, security, storing privacy choices and analytics. Strictly necessary technologies may be used where legally permitted.

Non-essential cookies or similar technologies that require consent under applicable rules must not be activated before valid consent. Consent should be freely given, specific, informed and expressed through a clear affirmative action. Closing a banner or continuing to browse is not, by itself, consent.

The website currently uses analytics functionality. The exact cookies, identifiers, provider names, purposes and expiry periods depend on the deployed configuration and must be accurately listed in the separate Cookie Policy.

The website provides ordinary links to social-media platforms. It does not intentionally use social-media advertising pixels or embedded social-media feeds as described by the current site operator. If an embedded service, advertising pixel or other tracking integration is added or detected, this notice, the Cookie Policy and consent configuration must be reviewed.

Visitors should be able to review, change or withdraw their consent through the website’s cookie-preference controls. A persistent and easy-to-find control for reopening preferences should be available throughout the site.

09 — Adult Access and Nude Art

The Nude Art portfolio is intended for adults. The site’s ordinary adult-access interface may ask visitors to confirm that they are at least 18 years old.

A simple age confirmation is not an independent identity-verification system. The standard confirmation described here does not request an identity document, selfie or biometric data. A technical mechanism may remember that the confirmation has been completed, according to its actual configuration.

Where a stronger age-assurance or access-control obligation applies to particular content in a particular jurisdiction, the site must assess and implement the measures legally required for that content. This Privacy Policy does not determine whether a specific age-verification law applies.

10 — Photography, Interviews and Collaborations

As part of photography, video, editorial and creative work, Daniel Vision Lab may process names, images, voice recordings, biographies, interview answers, professional details, testimonials and project-related information.

Such information is used and published only on an applicable legal basis and with any permissions, releases or licences required for the particular project and intended use. The legal basis depends on the context and is not automatically consent in every situation.

Individuals involved in a project should be informed, where required, about the intended publication channels and uses. A separate model release, interview authorisation, contract or image licence may be needed; this Privacy Policy does not replace those documents.

Documents relating to permissions, contracts, copyright, image rights and legal claims may be retained for as long as reasonably necessary for those purposes and any applicable legal obligations.

If a project involves minors or reveals special-category information, the necessary legal basis and additional safeguards must be assessed before collection or publication.

11 — Recipients and Service Providers

Personal data may be accessed or disclosed where necessary for the purposes described in this notice, in accordance with applicable law. Depending on the services actually used, recipients may include:

• Website hosting and infrastructure providers;
• WordPress, website maintenance, security and technical-support providers;
• The analytics provider or providers used by the website;
• The email or mail-delivery provider configured for website communications;
• Backup or storage providers, where used;
• Accountants, legal advisers or other professional advisers where necessary;
• Public authorities or courts when disclosure is required by law.

Where a provider processes personal data on behalf of Daniel Vision Lab, an agreement meeting Article 28 GDPR requirements is put in place where legally required. The recipient categories that apply to a particular processing activity depend on the services used for that activity.

Personal data is not disclosed to unrelated third parties for their own marketing unless a lawful basis and the notices or consent required by applicable law are in place.

12 — Social Media and External Links

The website contains ordinary links to external websites and social-media platforms. When you click a link, you leave Daniel Vision Lab’s website and the external provider may process data according to its own privacy notice, terms and technical configuration.

Daniel Vision Lab does not control the independent processing carried out by those platforms. Please consult the privacy information of the relevant provider before interacting with its services.

13 — International Data Transfers

Depending on the hosting, analytics, email, security and other services actually configured, personal data may be accessed or processed outside Italy or the European Economic Area.

Where a transfer of personal data outside the EEA takes place and the GDPR requires safeguards, the Controller must rely on a valid mechanism under Chapter V GDPR, such as an applicable European Commission adequacy decision or appropriate safeguards, including Standard Contractual Clauses where suitable. Additional measures may be required following an assessment of the transfer.

The actual destinations, providers and transfer mechanisms must be checked against the website’s service contracts and settings. Contact danielvisionlab@gmail.com to request information about safeguards relevant to a particular processing activity, where applicable.

14 — Data Retention

Personal data is retained only for as long as necessary for the purposes for which it was collected, taking into account applicable legal obligations and the need to establish, exercise or defend legal claims.

Enquiries

General enquiries may be retained for up to 24 months after the last relevant communication where that period is necessary to manage and document the enquiry. Longer retention may apply if it develops into a contract, legal matter or claim, or where required by law. This period must be applied consistently in the actual handling of messages.

Contracts, invoices and accounting records

These records are retained for the periods required by applicable tax, accounting and other legal obligations.

Analytics, visitor-monitoring and security records

These records are retained according to the actual settings of the analytics, DVL Site Intelligence / Site Monitor, hosting and security systems, and only for as long as necessary for statistics, troubleshooting, security and incident investigation. The retention settings should be reviewed and configured to support deletion or anonymisation when data is no longer needed.

Cookie and consent records

The expiry of cookies and privacy-preference records depends on the actual consent-management configuration and is described in the Cookie Policy where applicable. No fixed duration is stated here unless it has been verified in the live configuration.

Photography and collaboration records

Releases, permissions, contracts and related documentation may be retained for the period reasonably necessary to document rights and obligations, comply with the law and establish, exercise or defend legal claims.

15 — Data Security

Daniel Vision Lab uses reasonable technical and organisational measures intended to protect personal data against unauthorised access, accidental loss, alteration, disclosure or misuse. These measures are selected and maintained with regard to the nature of the processing and the risks involved.

Depending on the systems in use, measures may include access controls, HTTPS, software updates, backups and security monitoring. The measures actually implemented should be checked periodically. No online service or electronic storage method can be guaranteed to be completely secure.

16 — Your Rights

Where the GDPR applies and the legal conditions are met, you may have the right to:

• Access your personal data;
• Request correction of inaccurate or incomplete data;
• Request erasure in the circumstances provided by law;
• Request restriction of processing;
• Receive data in a portable format, where the right applies;
• Object to processing based on legitimate interests, on grounds relating to your situation;
• Object at any time to processing for direct marketing;
• Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing before withdrawal;
• Lodge a complaint with a competent data-protection supervisory authority.

These rights are subject to the conditions and exceptions established by applicable law. To submit a request, contact danielvisionlab@gmail.com. A proportionate identity check may be requested where reasonably necessary to protect the data subject.

Under the GDPR, requests are ordinarily answered within one month of receipt. That period may be extended by up to two further months where permitted by Article 12 GDPR, taking into account the complexity and number of requests; the individual will be informed where required.

17 — Italian Supervisory Authority

If you believe that your personal data has been processed unlawfully, you may lodge a complaint with the competent supervisory authority, including the Italian Data Protection Authority:

18 — International Privacy Rights

Depending on your location and the processing involved, laws outside the European Economic Area may provide additional rights or require additional disclosures. Such rules apply only where their territorial, material and other legal requirements are met.

Daniel Vision Lab will assess requests according to the law applicable to the relevant processing. This notice does not represent that every foreign privacy statute applies to the website or that rights such as rights relating to targeted advertising, sale or sharing of personal information are triggered where their legal conditions are not met.

19 — Children and Minors

The general website is not intended to collect personal data from children unlawfully. If a project involves a minor, the relevant legal basis, parental responsibility, permissions and safeguards must be assessed before personal data or images are collected or published.

The Nude Art portfolio is intended for adults. Any additional age-assurance requirements must be assessed according to the actual content and applicable law in the relevant jurisdiction.

20 — Automated Decision-Making

This website is not intended to make decisions about visitors that produce legal effects or similarly significant effects solely through automated processing. If such processing is introduced, the information and safeguards required by applicable law, including Article 22 GDPR where applicable, will be provided before it begins.

21 — Changes to This Privacy Policy

This notice will be reviewed when the website, its forms, analytics, visitor-monitoring functions, service providers, processing purposes or applicable legal requirements materially change.

The “Last updated” date will be amended when a revised version is published. Where required by law, additional information or consent will be provided before materially different processing begins.

22 — Contact

For questions about this Privacy Policy, the processing of personal data or the exercise of privacy rights, please contact: