Privacy & cookies
This policy explains how the personal data you submit through nkfotografo.com is handled and which cookies the site uses, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Act 3/2018 (LOPDGDD).
1. Data controller
- Controller: Nader El Kadaoui
- Address: Calle Río Danubio, 29660 Marbella (Málaga), Spain
- Email: info@nkfotografo.com
2. What data is collected and why
Contact form
The form collects your name, email address, phone number (optional), project type and the message you write. The purpose is to answer your enquiry and, where applicable, prepare a quote.
The form does not send data to any server of ours: it opens your email application with the message drafted so that you send it yourself. The data therefore arrives as an ordinary email to the address above.
If you get in touch via WhatsApp, your phone number and the content of the conversation will be processed for the same purpose. That service is provided by WhatsApp Ireland Limited under its own terms and privacy policy, which are independent of this site.
Browsing
If you accept analytics cookies, aggregated usage data is collected through Google Analytics, as set out in the cookies section.
3. Legal basis
- Consent (art. 6(1)(a) GDPR) to answer your enquiry and for analytics cookies. You may withdraw it at any time.
- Performance of a contract or pre-contractual steps (art. 6(1)(b) GDPR) where the enquiry leads to a commission or quote.
- Legal obligation (art. 6(1)(c) GDPR) to retain tax and accounting records for services provided.
4. Retention period
Enquiries that do not lead to a commission are kept for as long as needed to deal with them and for no more than one year from the last contact. Data relating to commissioned services is kept for the applicable tax and commercial limitation periods, generally six years. Cookies are kept for the periods shown in the table in section 7.
5. Recipients
Data is not shared with third parties except where legally required. The following providers act as processors or independent controllers:
- Cloudflare, Inc. — website hosting and content delivery network.
- Google Ireland Limited — web analytics (Google Analytics 4), only if you accept cookies.
- Google Ireland Limited — email service (Gmail) where enquiries are received.
- WhatsApp Ireland Limited — messaging, if you choose that channel.
Some of these providers may transfer data internationally to the United States, relying on the EU-US Data Privacy Framework or on standard contractual clauses approved by the European Commission.
6. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time, by writing to info@nkfotografo.com stating which right you wish to exercise. Proof of identity may be requested.
If you believe the processing does not comply with the applicable rules, you may lodge a complaint with the Spanish Data Protection Agency (aepd.es).
7. Cookies
A cookie is a small file downloaded to your device when you visit a website. This site installs no analytics cookie until you accept it in the banner shown on your first visit. If you make no choice, or if you decline, Google Analytics is never activated.
Cookies used
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
nk-consent | First party | Remembers whether you accepted or declined analytics cookies. Strictly necessary; stored in the browser's local storage. | Until you clear your browser data |
_ga | Analytics: distinguishes unique users. Only if you accept. | 2 years | |
_ga_WLG852S5N2 | Analytics: maintains session state. Only if you accept. | 2 years |
How to change your choice
You can review your choice at any time from the "Manage cookies" link in the footer. You can also block or delete cookies from your browser settings: Chrome, Firefox, Safari or Edge.
Google Analytics collects usage data in aggregate form (page views, visit duration, device type, approximate location). You can read how Google handles that information in its privacy policy and install the opt-out add-on if you prefer to block it across all websites.
8. Security
The site is served entirely over HTTPS. Reasonable technical and organisational measures are in place to protect data against loss, misuse or unauthorised access.
9. Changes to this policy
This policy may be updated if the services used or the applicable rules change. The date of the last revision appears at the end.
Last updated: 28 July 2026