Privacy Policy
Privacy Policy
Last updated: November 21, 2025
Who I am
This website is operated by:
Controller: Marco Di Marco, photojournalist, photographer, videographer, tour guide
Website: https://marcodimarco.photo
Contact email: info@marcodimarco.photo
I am based in Iceland and process personal data in line with the General Data Protection Regulation (GDPR) and applicable EEA data protection rules.
If you have any questions about this Privacy Policy or how your data is handled, you can contact me at the email address above.
What personal data this site collects and why
1. Website visits and technical logs
When you visit this website, the hosting provider (Kinsta) automatically records basic technical information in server logs. This typically includes:
- IP address
- Date and time of access
- Pages visited and basic request details
- Browser type and operating system
This data is used for technical operation, security, and troubleshooting (for example, to detect abuse or attacks) and is kept by the host for a limited period as part of normal server operations. The legal basis is my legitimate interest in running a secure and functioning website.
At launch, I do not use Google Analytics or similar third party analytics tools. If I add them in the future, this Privacy Policy and the cookie banner will be updated.
2. Comments
If comments are enabled on articles or posts and you leave a comment, the site collects:
- The data shown in the comments form (for example, name, email, website)
- Your IP address
- Browser user agent string
This helps with spam detection and moderation.
An anonymised string created from your email address (a hash) may be sent to the Gravatar service to check if you use it. The Gravatar privacy policy is available at https://automattic.com/privacy/. After your comment is approved, your profile picture (if you use Gravatar) may be visible next to your comment.
The legal basis is your consent and my legitimate interest in maintaining a safe and functional comment section.
3. Contact forms and email
When you contact me through a form on this website (for example, to ask about assignments, tours, or trip planning), Forminator collects the information you provide. This usually includes:
- Name
- Email address
- Message content
- Optional details about your project, travel dates, or interests
Form submissions are:
- Stored in the WordPress database so I can track and respond to messages
- Forwarded to my email (Outlook) so I can reply to you
I use this information only to respond to your inquiry, manage our communication, and keep a basic record of past conversations if needed for follow up.
The legal basis is:
- Pre-contractual measures and contract performance when you ask for a quote or service
- Legitimate interest when you contact me with general questions
If you want a previous message deleted, you can email me at info@marcodimarco.photo and I will remove it from my inbox and, where possible, from the website records, unless I need to keep it for legal or administrative reasons.
4. Newsletter sign-ups
If you subscribe to my newsletter, I collect:
- Your email address
- Optional name
- Your consent to receive occasional updates
At launch, newsletter data is stored:
- In the WordPress database via the newsletter form
- In my email system if I export it to manage mailing lists manually
Newsletter emails are sent only to people who have actively opted in. You can unsubscribe at any time by using the link in the email (when available) or by writing to info@marcodimarco.photo and asking to be removed.
In the future I may connect the newsletter to a dedicated email service provider (for example, Mailchimp). If I do, your email and name will be stored on that provider’s servers, and this Privacy Policy will be updated with the provider’s name and a link to its privacy policy.
The legal basis for processing newsletter data is your consent.
5. Media uploads
If at any point users are able to upload images to the website (for example, through forms or accounts), you should avoid uploading images with embedded location data (EXIF GPS). Visitors to the website could download and extract location data from such images.
At launch, public uploads are not a main feature of this site, but this note applies to any future functionality that allows uploads.
6. Cookies
This site uses cookies that are necessary for technical operation and user experience. Examples include:
- Cookies that remember your cookie and privacy preferences
- Cookies set by WordPress for login, screen options, and editing
- A temporary cookie to see if your browser accepts cookies
If you leave a comment, you may choose to save your name, email address, and website in cookies so you do not have to fill them again. These cookies typically last up to one year.
If you log in (for example, if in the future the site offers user accounts), WordPress sets cookies for your login session and screen display preferences.
When I add a cookie consent tool, you will see a banner that lets you manage non-essential cookies, such as those used by embedded services or analytics.
7. Embedded content from other websites
Pages on this site may include embedded content, such as:
- YouTube videos (for showreels, clips, or documentary excerpts)
Embedded content from other websites behaves exactly as if you visited the external site directly. These third parties may:
- Collect data about you
- Use cookies
- Add third-party tracking
- Monitor your interaction with the embedded content
This can include tracking your interaction if you have an account and are logged in to that service (for example, your YouTube or Google account).
I use embedded content to display video or other relevant material directly on the site. The legal basis is legitimate interest in presenting my work in a clear and accessible way.
You can limit the data these services collect by logging out of your accounts on those platforms and by adjusting your privacy settings on the platforms themselves.
Who has access to your data
Your personal data is handled by:
- Myself, Marco Di Marco
I read and respond to messages, manage assignments, and run the site. - Hosting provider: Kinsta
Kinsta hosts the website and processes server log data and some technical information as part of providing hosting. - Email provider: Microsoft / Outlook
Contact form messages are forwarded to my Outlook email account for correspondence.
If in the future I connect a newsletter or email marketing service (for example, Mailchimp), that provider will also process your email address and any related data used for sending newsletters.
I do not sell or rent your personal data. Data is shared only when necessary for:
- Technical operation of the website
- Responding to your requests
- Fulfilling legal obligations
How long data is kept
Retention periods vary depending on the type of data:
- Contact form messages and emails: kept as long as needed to manage our communication and any resulting work. I periodically review and delete old correspondence that is no longer needed.
- Newsletter data: kept until you unsubscribe or I stop using the mailing list.
- Comments: if enabled, comments and their metadata are kept for the life of the site, unless you request removal or I moderate them.
- Server logs: kept by the host for a limited time for security, diagnostics, and operational reasons.
- Administrative and contractual records: if you become a client, some data may be kept for accounting, tax, and legal obligations for the periods required by law.
Your rights under GDPR
If you are in the EEA or subject to GDPR, you have the right to:
- Access your personal data and receive a copy
- Correct inaccurate or incomplete data
- Request erasure of your data in certain circumstances
- Restrict processing in certain cases
- Object to processing based on legitimate interests
- Data portability where applicable (for example, for data you provided yourself under consent or contract, processed by automated means)
To exercise any of these rights, you can email: info@marcodimarco.photo
I may need to confirm your identity before acting on your request. Some rights may be limited where I am required to keep data for legal or administrative reasons.
You also have the right to lodge a complaint with your local data protection authority. In Iceland, this is the Icelandic Data Protection Authority (Persónuvernd).
International data transfers
This website is hosted by Kinsta, whose servers may be located within the EEA or other jurisdictions. My email provider (Outlook / Microsoft) and any future newsletter provider may store data on servers outside the EEA, for example in the United States.
When personal data is transferred outside the EEA, I rely on appropriate safeguards such as standard contractual clauses or equivalent legal mechanisms used by the relevant providers, in line with GDPR requirements.
Security
I use reasonable technical and organisational measures to protect your data, including:
- A reputable managed host (Kinsta)
- HTTPS encryption for this site
- Limited access to back-end systems and email
No online service can guarantee absolute security, but I aim to minimise unnecessary collection and keep the systems I use up to date.
Children
This website and its services are aimed at adults and professional users. It is not targeted at children under 16. If you believe a child has provided personal data via this site, please contact me at info@marcodimarco.photo so I can review and, where appropriate, delete that data.
Changes to this Privacy Policy
This Privacy Policy may be updated from time to time, for example when I add new services (such as analytics, a newsletter provider, or booking systems) or when legal requirements change.
The date at the top of this page will show the latest update. Significant changes may be highlighted on the site.
How to contact me about privacy
For any questions about this Privacy Policy or your personal data, you can contact:
Marco Di Marco
Email: info@marcodimarco.photo
I will do my best to respond within a reasonable time and address your request or concern.