Last Updated: August 2026
1. Introduction
John Mak Photography respects your privacy and is committed to protecting your personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”).
This page explains how we approach data protection, the rights available to individuals, and how you can exercise those rights.
John Mak Photography is operated as an individual business based in Greece and provides photography education, articles, interviews, community features, and related online services through:
https://johnmakphotography.com
2. Data Controller
For the purposes of GDPR, the data controller is:
John Mak Photography
Email:
contact@johnmakphotography.com
Contact page:
https://johnmakphotography.com/contact
The data controller determines how and why personal data is processed.
3. Personal Data We Process
Depending on how you interact with our website, we may process personal data including:
- Name
- Email address
- Messages submitted through contact forms
- Newsletter subscription information
- Comments submitted on articles
- Information provided through story submissions or photographer interviews
- Images and written content voluntarily submitted for publication features
We only collect information that is necessary for the purpose for which it is provided.
4. How We Use Personal Data
We may process personal data for the following purposes:
- Responding to inquiries and requests
- Managing newsletter subscriptions
- Sending educational updates when you have provided consent
- Publishing approved community stories, interviews, and submissions
- Communicating with contributors
- Improving website functionality and user experience
- Protecting the security and integrity of our website
- Complying with legal obligations
5. Legal Bases for Processing
Under GDPR, we process personal data based on one or more of the following legal bases:
Consent
We rely on consent when you:
- subscribe to our newsletter,
- submit information voluntarily,
- provide permission for content publication.
You may withdraw consent at any time.
Legitimate Interests
We may process information where necessary for legitimate business purposes, including:
- improving our educational platform,
- maintaining website security,
- preventing abuse or spam,
- managing website operations.
Legal Obligations
We may process information when required to comply with applicable laws or legal requests.
Contractual Necessity
If we provide paid products or services in the future, processing may be necessary to fulfill contractual obligations.
6. Your GDPR Rights
Under GDPR, you may have the following rights:
Right of Access
You may request information about the personal data we hold about you.
Right to Rectification
You may request correction of inaccurate or incomplete personal information.
Right to Erasure
You may request deletion of your personal data where applicable.
Right to Restrict Processing
You may request that we limit how your personal data is processed in certain circumstances.
Right to Data Portability
Where applicable, you may request your personal data in a commonly used and machine-readable format.
Right to Object
You may object to certain types of processing, including processing based on legitimate interests or direct marketing.
Right to Withdraw Consent
Where processing is based on consent, you may withdraw your consent at any time.
Withdrawal of consent does not affect processing that occurred before consent was withdrawn.
7. Data Security
We take reasonable technical and organisational measures to protect personal data against:
- unauthorised access,
- accidental loss,
- misuse,
- alteration,
- disclosure.
Our website uses security measures including website security tools, spam protection, malware monitoring, backups, and access protection mechanisms.
However, no online service can guarantee absolute security.
8. Data Retention
We retain personal data only for as long as necessary for the purposes described in our Privacy Policy or as required by applicable laws.
Examples:
- Contact inquiries may be retained for as long as necessary to respond and maintain business records.
- Newsletter information is retained until you unsubscribe or request removal.
- Story and interview submissions are retained according to the applicable permission and publication arrangements.
When information is no longer required, it will be securely deleted or anonymised where appropriate.
9. Third-Party Service Providers
We may use trusted third-party providers to operate and improve our website.
These may include services such as:
- Website hosting providers
- Website security services
- Newsletter and customer relationship management providers
- Analytics providers
- Spam protection services
- Form providers
These providers may process personal data according to their own privacy policies and applicable data protection obligations.
10. International Data Transfers
Because John Mak Photography operates internationally, some service providers may process information outside the European Economic Area (EEA).
Where personal data is transferred internationally, we seek to ensure appropriate safeguards are in place as required by GDPR.
11. Cookies and Tracking Technologies
John Mak Photography uses cookies and similar technologies to improve website functionality, analyse website usage, and remember user preferences.
Information about cookies, analytics technologies, consent management, and how you can control your preferences is available in our separate:
Cookie Policy
12. Data Breach Notification
In the event of a personal data breach, we will assess the nature and risk of the incident.
Where required under GDPR, we will notify the relevant supervisory authority and affected individuals within the applicable legal timeframes.
13. Exercising Your Rights
To request access, correction, deletion, or information about your personal data, please contact:
Email:
contact@johnmakphotography.com
Contact page:
https://johnmakphotography.com/contact
Please include enough information for us to verify and respond to your request.
14. Changes to This GDPR Information Page
We may update this page from time to time to reflect changes in our website, services, or legal requirements.
The latest update date will always be displayed at the top of this page.
15. Related Policies
For additional information, please review:
Thank you for trusting John Mak Photography with your information.