1. Data Controller
Oksana Guzenko – Guzimage
Speisinger Straße 20/1/9
1130 Vienna, Austria
Email: oksana@guzimage.com
Phone: +43 660 672 8114
Website: https://www.guzimage.com
This Privacy Policy explains how I process personal data when you visit this website, contact me or use my photography and video production services.
Personal data is processed in accordance with the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and, where applicable, the Austrian Telecommunications Act 2021 (TKG 2021).
2. Website Hosting and Server Logs
This website is operated using external hosting and technical service providers.
When you visit the website, technical information may be processed automatically in server log files in order to display the website, maintain its functionality and security, and protect it against misuse or attacks. This information may include your IP address, date and time of access, requested pages, browser and device information, operating system, referring website and technical response information.
This information is not used for advertising, visitor profiling or behavioural tracking.
The legal basis is Article 6(1)(f) GDPR. My legitimate interest is the secure and reliable operation of this website.
Server log data is deleted or anonymised when it is no longer required for website operation or security. Individual records may be retained for longer where necessary to investigate a security incident or to establish, exercise or defend legal claims.
3. Enquiries and Bookings
When you contact me through the website contact form, by email, telephone or another communication channel, I process the information you provide in order to respond to your enquiry, prepare an offer, arrange a booking or manage an existing assignment.
This may include your name, email address, telephone number, requested service, preferred date and time, message and related correspondence.
Where your enquiry concerns a potential or existing contract, processing is based on Article 6(1)(b) GDPR. Other enquiries are processed on the basis of Article 6(1)(f) GDPR, based on my legitimate interest in responding to correspondence.
Providing this information is voluntary. However, without the information necessary to respond to your request or organise a booking, I may be unable to provide the requested service.
Enquiry and correspondence data is retained only for as long as necessary to process the enquiry or manage the resulting business relationship, unless longer retention is required by law or necessary for the establishment, exercise or defence of legal claims.
External email, hosting and technical service providers may process information on my behalf where this is necessary to provide these services.
4. Photography and Video Services
When you book photography or video services, I process information necessary to plan, perform, edit and deliver the commissioned work.
This may include contact information, booking information, photographs, video and audio recordings, project-related correspondence and billing information.
Where the person concerned is the client or another party to the contract, processing necessary for providing the commissioned service is based on Article 6(1)(b) GDPR.
Photographs and recordings may also contain other people who are not themselves parties to the contract, for example family members, guests or event participants. Depending on the circumstances and purpose of the assignment, such processing may be based on Article 6(1)(f) GDPR and my legitimate interest in carrying out and documenting the commissioned photography or video assignment, or on consent where consent is required.
Portfolio and Advertising
Identifiable client photographs or videos are not published in my portfolio, website, social media or advertising solely because a photography or video service has been booked.
Where permission is required for such publication, I obtain separate permission or consent. Where processing is based on consent, the legal basis is Article 6(1)(a) GDPR.
Consent may be withdrawn at any time by contacting me. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
For photographs or videos of children, the required permission for publication is obtained from the appropriate parent or legal guardian where applicable.
Retention of Photo and Video Files
Original photo and video files, including RAW files, are generally retained for three years from delivery of the completed work.
After completion of the assignment, this retention is based on Article 6(1)(f) GDPR. My legitimate interest is to respond to subsequent requests relating to the commissioned work, including re-editing or replacing previously delivered files.
After this period, original files are deleted unless continued retention is necessary for a legal claim or another lawful purpose.
Edited files, project files and backup copies are retained only for as long as reasonably necessary for delivery, client support, backup integrity, permitted portfolio use or the establishment, exercise or defence of legal claims. Backup copies are removed through the normal backup rotation process.
Accounting Records
Invoices, payment records and other documents that are subject to statutory accounting and tax retention requirements are generally retained for seven years from the end of the relevant calendar year, and longer where required in connection with pending proceedings.
The legal basis is Article 6(1)(c) GDPR.
5. Delivery of Photographs and Videos
Depending on the project, completed photographs and videos may be delivered through services such as Google Drive, WeTransfer or Wfolio.
For this purpose, these services may process uploaded photographs and videos, file metadata, recipient information and technical access information required to provide the gallery, transfer or download.
Where delivery forms part of a commissioned service, the legal basis is Article 6(1)(b) GDPR.
Client galleries and download links created specifically for delivery are normally made available for no more than 14 days. Clients should download their files during this period. Access is subsequently withdrawn.
The expiry of a download link or gallery does not necessarily mean that every technical backup held by the relevant service provider is immediately deleted.
The three-year retention period for original files described above is separate from the temporary availability of online galleries or download links.
Further information about data processing by these services is available in the respective providers’ privacy information:
Google: https://policies.google.com/privacy
WeTransfer: https://wetransfer.com/legal/privacy
Wfolio: https://wfolio.com/
6. Photo and Video Editing
Adobe Photoshop
I use Adobe Photoshop for photo editing and retouching. My normal working image files are stored locally and are not used as Adobe cloud documents solely for ordinary local editing.
Some Adobe features, including cloud-based generative editing functions such as Generative Fill or Generative Expand, require image data and related instructions to be transmitted to Adobe’s services for processing.
Where this processing is necessary to provide the commissioned editing service to the client, the legal basis is Article 6(1)(b) GDPR. In other appropriate cases, processing may be based on Article 6(1)(f) GDPR and my legitimate interest in efficiently producing the commissioned work.
More information about Adobe’s data processing is available at:
https://www.adobe.com/privacy/policy.html
Evoto
For selected photographs I may use Evoto for AI-assisted photo editing and colour processing.
Certain Evoto features use cloud processing. When these features are used, image data may be transmitted to Evoto’s systems for the purpose of performing the requested editing operation.
Where this processing is necessary to provide the commissioned service, the legal basis is Article 6(1)(b) GDPR. In other appropriate cases, processing may be based on Article 6(1)(f) GDPR and my legitimate interest in efficiently producing the commissioned work.
More information about Evoto’s privacy and data-processing practices is available at:
https://www.evoto.ai/privacy-center
7. Cookies and Website Services
This website does not use analytics tools, advertising trackers, marketing pixels or technologies for behavioural profiling.
In particular, I do not use Google Analytics or the Meta/Facebook Pixel to analyse or track visitors to this website.
The website may use technically necessary cookies or similar technologies required for website operation, security and storing privacy or consent preferences. These technologies are not used for advertising or behavioural analysis.
Technically necessary technologies may be used without consent where permitted by Section 165(3) TKG 2021. Where personal data is processed in connection with necessary website functionality or security, the legal basis is Article 6(1)(f) GDPR.
A consent-management system is used to manage optional external content. Where consent is required, such content is not activated until you have made the corresponding choice.
You can withdraw or change your consent at any time using the website’s privacy or cookie settings.
Locally Hosted Fonts
Fonts used for the visual presentation of this website are hosted locally on this website. Your browser therefore does not need to connect to Google Fonts or another external font service in order to load these fonts.
Instagram
This website displays content connected with my Instagram profile.
Where displaying Instagram content requires a direct connection to Instagram or Meta servers, external content is loaded only in accordance with the visitor’s consent settings. When such content is activated, technical information such as your IP address, browser information and information about the page you are visiting may be transmitted to Meta.
If you click a link leading to Instagram, you leave this website and the processing of your information on Instagram is governed by Meta’s own privacy information.
The legal basis for loading optional external Instagram content is your consent pursuant to Article 6(1)(a) GDPR and, where applicable, Section 165(3) TKG 2021.
More information is available at:
https://www.facebook.com/privacy/policy/
YouTube Background Videos
Some pages of this website use videos hosted by YouTube, including videos used as visual backgrounds.
YouTube content may transmit technical information, including your IP address, browser and device information and information about the page you are visiting, to Google when the video is loaded.
YouTube content that requires consent is therefore controlled through the website’s consent-management system and is not activated until the required consent has been given.
The legal basis for loading YouTube content is your consent pursuant to Article 6(1)(a) GDPR and, where applicable, Section 165(3) TKG 2021.
You may withdraw or change this consent at any time using the website’s privacy or cookie settings.
More information about Google’s and YouTube’s processing of personal data is available at:
https://policies.google.com/privacy
External Links
This website contains links to external websites and social media platforms. A normal external link does not itself cause the external provider to receive personal data merely because the link is displayed on this website.
When you click such a link, you leave this website. The privacy policy and data-processing practices of the respective external provider then apply.
8. Recipients and International Data Transfers
Personal data is disclosed to external service providers only where this is necessary for website operation, communication, file delivery, photo or video editing, accounting, technical support or another purpose described in this Privacy Policy.
These recipients may include hosting and IT service providers, email and communication providers, accounting service providers, file-transfer and gallery services, and photo or video editing providers.
Where a provider processes personal data on my behalf as a processor, the processing is subject to the applicable contractual and data-protection arrangements.
Some of the services described in this Privacy Policy may involve processing of personal data outside the European Economic Area (EEA). Where such a transfer takes place, it is carried out on the basis of the safeguards available for the relevant service, such as an applicable adequacy decision or appropriate contractual safeguards, including Standard Contractual Clauses where required.
Further information about international transfers and the safeguards used by an individual provider can be found in that provider’s privacy information. You may also contact me if you require further information about the processing of your personal data.
9. Your Data Protection Rights
Subject to the conditions of the GDPR, you have the right to request access to your personal data and the right to request rectification or erasure of inaccurate or unlawfully processed data.
You may also have the right to restrict processing, object to processing and receive personal data you have provided in a portable format.
Where processing is based on Article 6(1)(f) GDPR, you have the right to object to the processing on grounds relating to your particular situation.
Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
To exercise your rights, please contact:
oksana@guzimage.com
10. Automated Decision-Making
I do not use automated decision-making within the meaning of Article 22 GDPR and I do not create behavioural or advertising profiles of visitors to this website.
11. Right to Lodge a Complaint
If you believe that the processing of your personal data infringes data-protection law, you have the right to lodge a complaint with a competent supervisory authority.
In Austria, the competent authority is:
Österreichische Datenschutzbehörde
Barichgasse 40–42
1030 Vienna, Austria
Email: dsb@dsb.gv.at
Website: https://www.dsb.gv.at
12. Changes to This Privacy Policy
I may update this Privacy Policy where necessary to reflect changes to the website, the services I use or applicable legal requirements.
Last updated: 5 October 2026
Oksana Guzenko – Guzimage
Speisinger Straße 20/1/9
1130 Vienna, Austria
Email: oksana@guzimage.com
Phone: +43 660 672 8114
Website: https://www.guzimage.com
This Privacy Policy explains how I process personal data when you visit this website, contact me or use my photography and video production services.
Personal data is processed in accordance with the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and, where applicable, the Austrian Telecommunications Act 2021 (TKG 2021).
2. Website Hosting and Server Logs
This website is operated using external hosting and technical service providers.
When you visit the website, technical information may be processed automatically in server log files in order to display the website, maintain its functionality and security, and protect it against misuse or attacks. This information may include your IP address, date and time of access, requested pages, browser and device information, operating system, referring website and technical response information.
This information is not used for advertising, visitor profiling or behavioural tracking.
The legal basis is Article 6(1)(f) GDPR. My legitimate interest is the secure and reliable operation of this website.
Server log data is deleted or anonymised when it is no longer required for website operation or security. Individual records may be retained for longer where necessary to investigate a security incident or to establish, exercise or defend legal claims.
3. Enquiries and Bookings
When you contact me through the website contact form, by email, telephone or another communication channel, I process the information you provide in order to respond to your enquiry, prepare an offer, arrange a booking or manage an existing assignment.
This may include your name, email address, telephone number, requested service, preferred date and time, message and related correspondence.
Where your enquiry concerns a potential or existing contract, processing is based on Article 6(1)(b) GDPR. Other enquiries are processed on the basis of Article 6(1)(f) GDPR, based on my legitimate interest in responding to correspondence.
Providing this information is voluntary. However, without the information necessary to respond to your request or organise a booking, I may be unable to provide the requested service.
Enquiry and correspondence data is retained only for as long as necessary to process the enquiry or manage the resulting business relationship, unless longer retention is required by law or necessary for the establishment, exercise or defence of legal claims.
External email, hosting and technical service providers may process information on my behalf where this is necessary to provide these services.
4. Photography and Video Services
When you book photography or video services, I process information necessary to plan, perform, edit and deliver the commissioned work.
This may include contact information, booking information, photographs, video and audio recordings, project-related correspondence and billing information.
Where the person concerned is the client or another party to the contract, processing necessary for providing the commissioned service is based on Article 6(1)(b) GDPR.
Photographs and recordings may also contain other people who are not themselves parties to the contract, for example family members, guests or event participants. Depending on the circumstances and purpose of the assignment, such processing may be based on Article 6(1)(f) GDPR and my legitimate interest in carrying out and documenting the commissioned photography or video assignment, or on consent where consent is required.
Portfolio and Advertising
Identifiable client photographs or videos are not published in my portfolio, website, social media or advertising solely because a photography or video service has been booked.
Where permission is required for such publication, I obtain separate permission or consent. Where processing is based on consent, the legal basis is Article 6(1)(a) GDPR.
Consent may be withdrawn at any time by contacting me. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
For photographs or videos of children, the required permission for publication is obtained from the appropriate parent or legal guardian where applicable.
Retention of Photo and Video Files
Original photo and video files, including RAW files, are generally retained for three years from delivery of the completed work.
After completion of the assignment, this retention is based on Article 6(1)(f) GDPR. My legitimate interest is to respond to subsequent requests relating to the commissioned work, including re-editing or replacing previously delivered files.
After this period, original files are deleted unless continued retention is necessary for a legal claim or another lawful purpose.
Edited files, project files and backup copies are retained only for as long as reasonably necessary for delivery, client support, backup integrity, permitted portfolio use or the establishment, exercise or defence of legal claims. Backup copies are removed through the normal backup rotation process.
Accounting Records
Invoices, payment records and other documents that are subject to statutory accounting and tax retention requirements are generally retained for seven years from the end of the relevant calendar year, and longer where required in connection with pending proceedings.
The legal basis is Article 6(1)(c) GDPR.
5. Delivery of Photographs and Videos
Depending on the project, completed photographs and videos may be delivered through services such as Google Drive, WeTransfer or Wfolio.
For this purpose, these services may process uploaded photographs and videos, file metadata, recipient information and technical access information required to provide the gallery, transfer or download.
Where delivery forms part of a commissioned service, the legal basis is Article 6(1)(b) GDPR.
Client galleries and download links created specifically for delivery are normally made available for no more than 14 days. Clients should download their files during this period. Access is subsequently withdrawn.
The expiry of a download link or gallery does not necessarily mean that every technical backup held by the relevant service provider is immediately deleted.
The three-year retention period for original files described above is separate from the temporary availability of online galleries or download links.
Further information about data processing by these services is available in the respective providers’ privacy information:
Google: https://policies.google.com/privacy
WeTransfer: https://wetransfer.com/legal/privacy
Wfolio: https://wfolio.com/
6. Photo and Video Editing
Adobe Photoshop
I use Adobe Photoshop for photo editing and retouching. My normal working image files are stored locally and are not used as Adobe cloud documents solely for ordinary local editing.
Some Adobe features, including cloud-based generative editing functions such as Generative Fill or Generative Expand, require image data and related instructions to be transmitted to Adobe’s services for processing.
Where this processing is necessary to provide the commissioned editing service to the client, the legal basis is Article 6(1)(b) GDPR. In other appropriate cases, processing may be based on Article 6(1)(f) GDPR and my legitimate interest in efficiently producing the commissioned work.
More information about Adobe’s data processing is available at:
https://www.adobe.com/privacy/policy.html
Evoto
For selected photographs I may use Evoto for AI-assisted photo editing and colour processing.
Certain Evoto features use cloud processing. When these features are used, image data may be transmitted to Evoto’s systems for the purpose of performing the requested editing operation.
Where this processing is necessary to provide the commissioned service, the legal basis is Article 6(1)(b) GDPR. In other appropriate cases, processing may be based on Article 6(1)(f) GDPR and my legitimate interest in efficiently producing the commissioned work.
More information about Evoto’s privacy and data-processing practices is available at:
https://www.evoto.ai/privacy-center
7. Cookies and Website Services
This website does not use analytics tools, advertising trackers, marketing pixels or technologies for behavioural profiling.
In particular, I do not use Google Analytics or the Meta/Facebook Pixel to analyse or track visitors to this website.
The website may use technically necessary cookies or similar technologies required for website operation, security and storing privacy or consent preferences. These technologies are not used for advertising or behavioural analysis.
Technically necessary technologies may be used without consent where permitted by Section 165(3) TKG 2021. Where personal data is processed in connection with necessary website functionality or security, the legal basis is Article 6(1)(f) GDPR.
A consent-management system is used to manage optional external content. Where consent is required, such content is not activated until you have made the corresponding choice.
You can withdraw or change your consent at any time using the website’s privacy or cookie settings.
Locally Hosted Fonts
Fonts used for the visual presentation of this website are hosted locally on this website. Your browser therefore does not need to connect to Google Fonts or another external font service in order to load these fonts.
This website displays content connected with my Instagram profile.
Where displaying Instagram content requires a direct connection to Instagram or Meta servers, external content is loaded only in accordance with the visitor’s consent settings. When such content is activated, technical information such as your IP address, browser information and information about the page you are visiting may be transmitted to Meta.
If you click a link leading to Instagram, you leave this website and the processing of your information on Instagram is governed by Meta’s own privacy information.
The legal basis for loading optional external Instagram content is your consent pursuant to Article 6(1)(a) GDPR and, where applicable, Section 165(3) TKG 2021.
More information is available at:
https://www.facebook.com/privacy/policy/
YouTube Background Videos
Some pages of this website use videos hosted by YouTube, including videos used as visual backgrounds.
YouTube content may transmit technical information, including your IP address, browser and device information and information about the page you are visiting, to Google when the video is loaded.
YouTube content that requires consent is therefore controlled through the website’s consent-management system and is not activated until the required consent has been given.
The legal basis for loading YouTube content is your consent pursuant to Article 6(1)(a) GDPR and, where applicable, Section 165(3) TKG 2021.
You may withdraw or change this consent at any time using the website’s privacy or cookie settings.
More information about Google’s and YouTube’s processing of personal data is available at:
https://policies.google.com/privacy
External Links
This website contains links to external websites and social media platforms. A normal external link does not itself cause the external provider to receive personal data merely because the link is displayed on this website.
When you click such a link, you leave this website. The privacy policy and data-processing practices of the respective external provider then apply.
8. Recipients and International Data Transfers
Personal data is disclosed to external service providers only where this is necessary for website operation, communication, file delivery, photo or video editing, accounting, technical support or another purpose described in this Privacy Policy.
These recipients may include hosting and IT service providers, email and communication providers, accounting service providers, file-transfer and gallery services, and photo or video editing providers.
Where a provider processes personal data on my behalf as a processor, the processing is subject to the applicable contractual and data-protection arrangements.
Some of the services described in this Privacy Policy may involve processing of personal data outside the European Economic Area (EEA). Where such a transfer takes place, it is carried out on the basis of the safeguards available for the relevant service, such as an applicable adequacy decision or appropriate contractual safeguards, including Standard Contractual Clauses where required.
Further information about international transfers and the safeguards used by an individual provider can be found in that provider’s privacy information. You may also contact me if you require further information about the processing of your personal data.
9. Your Data Protection Rights
Subject to the conditions of the GDPR, you have the right to request access to your personal data and the right to request rectification or erasure of inaccurate or unlawfully processed data.
You may also have the right to restrict processing, object to processing and receive personal data you have provided in a portable format.
Where processing is based on Article 6(1)(f) GDPR, you have the right to object to the processing on grounds relating to your particular situation.
Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
To exercise your rights, please contact:
oksana@guzimage.com
10. Automated Decision-Making
I do not use automated decision-making within the meaning of Article 22 GDPR and I do not create behavioural or advertising profiles of visitors to this website.
11. Right to Lodge a Complaint
If you believe that the processing of your personal data infringes data-protection law, you have the right to lodge a complaint with a competent supervisory authority.
In Austria, the competent authority is:
Österreichische Datenschutzbehörde
Barichgasse 40–42
1030 Vienna, Austria
Email: dsb@dsb.gv.at
Website: https://www.dsb.gv.at
12. Changes to This Privacy Policy
I may update this Privacy Policy where necessary to reflect changes to the website, the services I use or applicable legal requirements.
Last updated: 5 October 2026