Privacy and Data Protection Policy

The protection of your privacy and personal data is a fundamental commitment of Luís Miguel Rosenstok Henriques in the exercise of his professional photography activity under the brand Boris the Cat.

1. Data Controller

The controller responsible for the processing of personal data collected through this website is:

  • Name: Luís Miguel Rosenstok Henriques
  • VAT Number (NIF): 207740542
  • Headquarters: Portugal
  • Contact Email: [email protected]

2. Collected Data and Purpose

We collect and process different types of personal data depending on your interaction with the website and our services:

Data Category

Purpose

Legal Basis (GDPR)

Identification Data (Name, Email)

Responding to quote requests and information inquiries.

Pre-contractual steps.

Billing Data (VAT, Address)

Execution of the service provision contract and tax obligations.

Execution of a contract and compliance with legal obligations.

Photographic Images

Provision of photography services, delivery of galleries, and portfolio (website/social media).

Execution of a contract and Explicit consent.

Contact Data (Email)

Sending marketing communications, newsletters, and promotions.

Consent.

3. Data Sharing with Third Parties

To ensure service quality and the technical operation of the website, your data may be processed by trusted external entities:

  • Hetzner (VPS): Website hosting and technical data storage.
  • Pixieset: Online gallery platform for photo selection and delivery.
  • Sage: Billing software to comply with tax obligations.
  • Google Analytics: Statistical traffic analysis (anonymized or pseudonymized data).

4. Data Retention

We keep the data only for the period necessary for the purposes for which it was collected:

  • Contacts and Quotes: 2 years after the last contact.
  • Photographs in Digital Archive: 2 years after service delivery (unless otherwise agreed in the service contract).
  • Billing Data: 10 years (legal obligation under Portuguese tax law).

5. Rights of the Data Subject

Under the General Data Protection Regulation (GDPR), the user has the following rights:

  1. Right of Access: To consult the personal data we hold.
  2. Right to Rectification: To correct inaccurate or incomplete data.
  3. Right to Erasure (“Right to be Forgotten”): To request the deletion of your data.
  4. Right to Data Portability: To receive data in a structured format.
  5. Right to Object: To object to data processing for marketing (newsletters).

To exercise these rights, please contact us via email at [email protected].

6. Cookies

This website uses cookies to improve the browsing experience and analyze traffic through Google Analytics. You can manage your cookie preferences at any time through the configuration panel available on our website.

7. Security

We implement appropriate technical and organizational measures (such as SSL certificates on Hetzner hosting) to protect your data against loss, unauthorized access, or disclosure.

Last updated: May 2026.