Privacy policy
Last updated: July 2026
1. Privacy at a glance
The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally.
Some data is collected in order to provide the website without errors. Other data is only collected when you actively contact us — via the enquiry form, the newsletter or the booking calendar.
2. Controller
The controller for data processing on this website is:
Julia Kirisits, MA Julia Kirisits Fotografie & Design Waldesruhgasse 3B 5111 Bürmoos Austria
Phone: +43 650 6640423 Email: info@juliakirisits.at
3. Your rights
You have the right at any time to obtain free information about the origin, recipients and purpose of your stored personal data. You also have the right to rectification, erasure, restriction of processing and data portability.
Many processing operations are only possible with your explicit consent. You may withdraw consent at any time by informal notice by email. The lawfulness of processing carried out before withdrawal remains unaffected.
Where processing is based on Art. 6(1)(e) or (f) GDPR you have the right to object at any time on grounds relating to your particular situation. Where data is processed for direct marketing, you have the right to object at any time.
In the event of breaches of the GDPR you have the right to lodge a complaint with a supervisory authority. In Austria this is the Datenschutzbehörde, Barichgasse 40-42, 1030 Vienna, dsb.gv.at.
4. SSL/TLS encryption
For security reasons and to protect the transmission of confidential content, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the "https://" in your browser's address bar.
5. Hosting and technical provision
This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. When you access the site, Vercel processes technically necessary access data (including IP address, browser type and version, operating system, referrer URL and time of access) in server log files. This is based on our legitimate interest in providing the website without technical errors (Art. 6(1)(f) GDPR). A data processing agreement is in place with Vercel; transfers to the USA are covered by standard contractual clauses.
The content of this website (texts and images from the content management system) is stored in a Postgres database operated by Neon Inc. and in the Vercel Blob object store. Only editorial content is held there — no visitor data.
6. Cookies and consent
This website uses only technically necessary storage plus services you explicitly agree to. On your first visit you can decide which optional services are loaded.
Storing your cookie decision is technically necessary. It is kept in your browser's local storage, is never transmitted to us, and exists solely so the notice is not shown on every visit. The legal basis is our legitimate interest in a functioning website (Art. 6(1)(f) GDPR).
Optional services — booking via Calendly and anonymous audience measurement — are only loaded after you have agreed. The legal basis is your consent (Art. 6(1)(a) GDPR and § 165(3) of the Austrian Telecommunications Act 2021). You can change or withdraw your decision at any time via the "Cookie settings" link in the site footer.
7. Enquiry form
If you contact us via the enquiry form, we process the details you enter (name, email address, optionally company, type of enquiry and your message) in order to deal with your request. Transmission is by email via the service provider Resend, Inc., 2261 Market Street, San Francisco, CA 94114, USA.
Processing is based on Art. 6(1)(b) GDPR where your enquiry relates to entering into or performing a contract, and otherwise on your consent and our legitimate interest in handling enquiries (Art. 6(1)(a) and (f) GDPR).
Your enquiry remains with us until you ask us to delete it, withdraw your consent, or the purpose for storage no longer applies. Mandatory statutory retention periods remain unaffected.
8. Newsletter
For the newsletter we process your email address. Sending and list management are handled by Resend, Inc. Processing is based on your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time, after which your address is removed from the list.
9. Spam protection (Cloudflare Turnstile)
To protect the forms against automated submissions we use Cloudflare Turnstile, provided by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Turnstile checks whether an entry comes from a human and processes technical details of your browser for this purpose. Turnstile is designed to be privacy-friendly and does not use cookies for recognition. The legal basis is our legitimate interest in preventing misuse (Art. 6(1)(f) GDPR).
10. Booking (Calendly)
For booking discovery calls we embed Calendly, provided by Calendly LLC, 271 17th St NW, Atlanta, GA 30363, USA. The booking calendar is only loaded once you have agreed. On loading, your IP address and browser data are transmitted to Calendly, which may set cookies. If you book an appointment, Calendly processes the data you provide. The legal basis is your consent (Art. 6(1)(a) GDPR). Further information: calendly.com/privacy.
11. Audience measurement
We use Vercel Web Analytics and Vercel Speed Insights to understand which pages are viewed and how quickly the site loads. Both work without cookies and without cross-device recognition; evaluation is aggregated and anonymous. This measurement is only loaded after your consent (Art. 6(1)(a) GDPR).
12. Social networks
We do not embed any social media plugins. We link to our Instagram profile with a plain link only. No data is transmitted to the network unless you click that link.
13. No AI-generated content
All photographs and texts on this website were created by humans. No AI-generated images and no AI-generated text are used. No AI system that interacts with you is operated on this website.