This policy explains how personal data is handled when you visit www.inesj.com (and its subdomains) and when you contact Ines Juanola. It follows the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and Spain’s Organic Law 3/2018 on Data Protection (LOPDGDD).
## Who is responsible for your data
Ines Juanola (INESJ) — NIE X7799100F — Barcelona, Spain — contact@inesj.com
## What data, why, and on what basis
**When you contact me** by email, phone or Instagram (through the links on this website), I receive your name, your contact details and whatever you choose to write.
– **Purpose:** to answer you, prepare a quote and, if we work together, organise the shoot, deliver the photographs and invoice.
– **Legal basis:** steps taken at your request before a contract, and the contract itself (Art. 6(1)(b) GDPR); for general messages, my legitimate interest in answering the messages I receive (Art. 6(1)(f)); for invoices, my legal obligations (Art. 6(1)(c)).
**When you visit the website**, the hosting server automatically records technical data in its logs: IP address, date and time, the page requested and the browser used.
– **Purpose:** to deliver the website and keep it secure.
– **Legal basis:** legitimate interest in running a secure website (Art. 6(1)(f) GDPR).
-**People in the photographs.** Some photographs on this website show people. They are published with the agreement of the people concerned or under the terms agreed with the client. If you appear in a photograph and would like it removed, write to contact@inesj.com and it will be taken down.
There is no contact form, no newsletter and no profiling, and no data is ever sold.
## How long data is kept
– **Messages that do not lead to a collaboration:** deleted within 12 months.
– **Client data:** for the duration of our collaboration, then for as long as the law requires (accounting and tax
records are generally kept for six years).
– **Server logs:** kept by the hosting provider for a short period, for technical and security purposes.
## Who receives the data
Your data is never passed on to anyone for their own purposes. It is handled only by the services needed to run this website and my email:
– **Hostinger** (Hostinger International Ltd., Cyprus, EU, or its EU affiliate named in the hosting contract) — website hosting.
– **Google** (Google Ireland Ltd. and Google LLC) — email, through Gmail. Google may process data in the United States; Google LLC is certified under the EU–US Data Privacy Framework.
– **Meta** (Instagram) — only if you choose to contact me on Instagram, under Instagram’s own privacy policy.
– My tax adviser and public authorities, when the law requires it (for example, for invoices).
## Cookies
This website does not use advertising, tracking or analytics cookies, and it does not load fonts or any other content from third-party services. WordPress may set technical cookies only for the site administrator while logged in. If this ever changes, this policy will be updated before any non-essential cookie is used, and your consent will be asked.
## Your rights
At any time, you can ask to access, correct or delete your data, to restrict or object to its use, or to receive it in a portable format. To do so, write to contact@inesj.com; you will receive an answer within one month.
If you consider that your data has not been handled properly, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos — www.aepd.es).
## Changes to this policy
This policy may be updated, for example if the website gains new features. The date below shows the current version.
*Last updated: 6 October 2026*