Privacy Policy

Last updated: 25 May 2026

This site (anna-ulyanova.com) is operated by Anna Ulyanova, photographer based in Milan and Moscow. We respect your privacy and process personal data in line with the EU General Data Protection Regulation (GDPR).

Controller

Anna Ulyanova · info@anna-ulyanova.com

What data we collect

• Email address — when you subscribe to the newsletter through the form on this site
• Email and any message content — when you contact us directly
• Technical data — IP address, browser type, pages visited (in server logs, kept for up to 30 days for security and operational purposes)
• Cookies — see Cookie Policy

How we use it

• To send you the newsletter — only if you opted in via double opt-in
• To reply to inquiries and provide services you've requested
• To operate and secure the website

Legal basis (GDPR Art. 6)

• Newsletter — your explicit consent (Art. 6(1)(a))
• Direct communication — performance of a contract or legitimate interest (Art. 6(1)(b), (f))
• Server logs — legitimate interest in maintaining a secure service (Art. 6(1)(f))

Where data is stored

• Site hosting: Contabo GmbH (Germany) — within the EU
• Email: Posteo e. K. (Germany) — within the EU
• Newsletter: Brevo SAS (France) — within the EU
• DNS and network protection: Cloudflare, Inc. (USA) — under Standard Contractual Clauses for any data transfer

Sharing

We do not sell or rent your data. We share it only with the service providers listed above, strictly to operate this site and the newsletter.

Your rights (GDPR Art. 15–22)

• Access — request a copy of the data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — ask us to delete your data
• Portability — receive your data in a machine-readable format
• Object — to specific processing operations
• Withdraw consent — at any time (e.g. unsubscribe link in every newsletter)
• Lodge a complaint with a supervisory authority (Italian Garante: garanteprivacy.it)

To exercise any of these rights write to info@anna-ulyanova.com.

Retention

• Newsletter subscription — until you unsubscribe
• Server logs — up to 30 days
• Client gallery data — kept while the engagement is active; removed on request

Children

This site is not directed at children under 16. We do not knowingly collect data from minors.

Changes

We may update this policy from time to time. Significant changes will be highlighted on this page; subscribers will be notified via the newsletter.