Privacy policy
Updated: 10 September 2026
1. Controller
Emina Huremović · LiZa Memories Photography
Mela-Spira-Str. 32b, 8054 Graz, Austria
Email: info@liza-memories-photography.com
Phone: +43 681 819 427 80
2. Website delivery and hosting
GitHub Pages, provided by GitHub, Inc., hosts this website. Delivering and securing the site involves processing IP addresses, requested pages or files, timestamps and technical connection data. The legal basis is our legitimate interest in operating a functional and secure website (Article 6(1)(f) GDPR). Hosting logs follow the provider’s retention rules; we do not assert a specific account-level retention period here.
3. Privacy choice and browser storage
The website itself sets no HTTP cookies for advertising or visitor recognition. Your optional statistics choice is stored as lizaPrivacyConsent in your browser’s LocalStorage. It contains only the version, statistics on/off and expiry date. The choice expires after 180 days. This storage is necessary to respect your decision and is not used as a visitor identifier. We do not use SessionStorage.
You can change or withdraw your choice through . Without a choice, statistics remain off. If storage is blocked, the choice applies only to the current page. The former lizaLanguage entry is no longer used; you can remove old entries by clearing website data in your browser. The language follows the DE, EN or BS page address.
4. Optional statistics: Cloudflare Web Analytics
After your consent, the homepages may load Cloudflare Web Analytics, provided by Cloudflare, Inc., to measure visits, loading speed and stability. Its script reads technical browser performance data and sends measurements, page information and, where applicable, referring-page information to Cloudflare. Our website does not send form contents to this analytics service.
According to Cloudflare, Web Analytics is cookie-free, uses no LocalStorage or SessionStorage identifiers and creates no persistent visitor identifier. The IP address inherently received with a network connection is discarded at the nearest data centre and is not stored in core RUM databases or logs, according to the provider. Reports are available for up to six months; this does not describe every other retention period of the company.
We load this optional measurement on the basis of consent (Article 6(1)(a) GDPR; section 165(3) Austrian TKG 2021). Without consent, neither the script nor analytics transmissions are initiated. On withdrawal, analytics are stopped and any page with an active beacon reloads. This does not undo earlier lawful transmissions.
5. Contact form and Formspree
Only when you submit the form are your details sent over HTTPS to Formspree, Inc. These include name, email, phone, photography service and, where provided, date, location, benefit code, message, package, source page and language. Processing serves your inquiry and potential pre-contractual steps (Article 6(1)(b) GDPR); general communication is based on our legitimate interest (Article 6(1)(f) GDPR).
No Formspree script, CAPTCHA or embed is loaded before submission. Formspree also processes data in the United States. Its privacy policy describes processing, recipients, retention and international transfers. We keep inquiries as long as needed to handle them; statutory duties or legal claims may require longer retention.
6. Fonts, photos and video
Cormorant Garamond and Manrope fonts, images, icons, the video preview and video are delivered locally through our website. Loading fonts does not connect to Google Fonts. There is no YouTube or Vimeo embed and the video does not autoplay.
7. Google, reviews and social media
Google Maps, Google reviews, Instagram and WhatsApp are ordinary links. The review section and Instagram photographs are local content, not widgets or social plugins. Merely loading the page does not load those services as embeds. Clicking a link opens the respective provider, whose privacy information then applies. Search metadata and structured data do not themselves load Google scripts.
8. Local inquiry events
The website may create in-memory events for a confirmed successful form submission and phone or WhatsApp clicks. No additional analytics recipient is currently connected. These events are not stored persistently and contain no names, email addresses or message contents. A contact click or form submission is not a booking confirmation.
9. International processing
The listed providers may process data outside the EU/EEA. Optional analytics consent does not replace any required contractual data protection safeguards. The linked provider policies describe transfer mechanisms and recipients. Contact us for questions about safeguards applicable to your data.
10. Your rights
Subject to the GDPR, you have rights including access, rectification, erasure, restriction, portability and objection. You may withdraw consent for the future and complain to the Austrian Data Protection Authority. Contact us at the email address above for privacy requests.