Privacy Policy
Last updated: October 2026
This policy explains how I collect and use your personal data when you visit this website, contact me or book a photography project, in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, “GDPR”) and Italian data protection law.
1. Data controller
The data controller is Luca Rajna – Luca Rajna Progetti Fotografici, VAT no. IT03841320132, c/o Studio Rossi & Partners, Via F. Ferrucci 6, 20145 Milan, Italy. You can reach me at contact@ajn.it, through the contact form on this website or by post at the Milan address.
2. What data I collect and why
Enquiries. When you write to me through the “Get in touch” form, I collect your name, your email address, your partner’s name (for couples), the service you are interested in, the social profile or website you choose to share, and your message. I use these data only to reply to you and, if you wish, to prepare a quote and a project. Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
Clients. If you book a project, I process the data needed to agree and carry out the service and to issue invoices: name, contact details, address, tax details, dates and places of the photoshoot. Legal basis: performance of a contract (Art. 6(1)(b)) and compliance with legal obligations (Art. 6(1)(c)).
Photographs. The photographs I take of you are personal data. I use them to deliver your project. I publish them on this website, on social networks or in printed material only with your consent, which you give separately and may withdraw at any time for future publications. Photographs of minors are taken and published only with the consent of those exercising parental responsibility. Legal basis: contract and consent (Art. 6(1)(a) and (b)).
Website statistics. This website uses Matomo, an analytics tool hosted on servers in Italy managed by my technical provider, to count visits and understand which pages are read. Matomo may set first-party cookies. The data are not sold or shared with other parties. Legal basis: your consent, given through the cookie banner (Art. 6(1)(a)).
Spam protection. The contact form is protected by Google reCAPTCHA, provided by Google Ireland Ltd., which analyses technical data such as your IP address and your interaction with the page to tell people from automated programs. Google’s Privacy Policy and Terms of Service apply. Legal basis: my legitimate interest in protecting the website from spam and abuse (Art. 6(1)(f)).
Technical data. Like every website, this one records technical data in its server logs, such as IP address, browser type, and date and time of access. These data are needed to keep the site secure and working. Legal basis: legitimate interest (Art. 6(1)(f)).
Links to social networks. This website contains links to my profile on Instagram. They are simple links: no data are sent to Instagram unless you click on them, after which Meta’s own privacy policy applies.
3. Cookies
- Technical cookies, which need no consent: the cookie that remembers your choice on the banner, the language cookie set by the translation system, and the security cookies set by Google reCAPTCHA.
- Statistics cookies, set only with your consent: Matomo (_pk_id, _pk_ses).
You can change your choice at any time by deleting this website’s cookies from your browser. The banner will then appear again.
4. Who receives your data
Your data are handled by me and, on my behalf, by my hosting and technical provider in Italy and by the email service I use. Where applicable, they are also handled by my accountant and by the provider named above (Google), acting as a processor or as an independent controller. I never sell your data.
5. Transfers outside the European Union
Google may transfer data to the United States. Google is certified under the EU–US Data Privacy Framework, which the European Commission recognises as providing an adequate level of protection.
6. How long I keep your data
- Enquiries that do not lead to a booking: up to 24 months from our last contact.
- Contracts and invoices: 10 years, as required by Italian law.
- Photographs: in my archive for as long as needed to provide the service and any reprints you may request. They stay published only while your consent remains valid.
- Statistics cookies: for the duration set by Matomo, as shown in your browser.
7. Your rights
Under Articles 15 to 22 of the GDPR you may ask me at any time to:
- access your data;
- correct them;
- delete them;
- restrict or object to their processing;
- receive them in a portable format;
- withdraw any consent you have given, without affecting what was done before.
To exercise these rights, write to me at contact@ajn.it, through the contact form or by post at the Milan address above. You also have the right to lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).
8. Changes to this policy
I may update this policy from time to time. The date at the top shows the latest version.