Privacy Policy

Transformational Eye SRL (Amir Weiss, festival photography and video) — last updated 28 September 2026.

This policy explains what personal data we collect through amirweiss.com and our booking and client forms (awform.amirweiss.com and awtform.amirweiss.com), why we collect it, and your rights. We are based in the European Union and process data under the GDPR.

Who is responsible

Data controller: Transformational Eye SRL, Romania. Contact: [email protected].

What we collect

• Identity for our forms: your email address, verified either by a one-time code we email you or by Google Sign-In. With Google Sign-In we receive only your name, email address and profile picture. We do not receive your Google password or access to your Gmail, Drive, Calendar, or any other Google data.
• What you enter in a form: for example your artist or company name, contact details, social media links, festival and set information, requested services, and billing details for invoices.
• Technical data: basic server logs (IP address, time, pages requested) used for security and abuse prevention, and a browser storage entry that remembers your verified email for the period shown on the form.

Why we use it

• To confirm and prepare bookings, deliver photos and videos, send quotes and invoices, and contact you about your booking (contract and legitimate interest).
• To keep your client profile up to date, so returning clients don't re-enter their details (legitimate interest; you can ask us to delete it).
• To meet accounting and tax obligations (legal obligation).
• To protect the forms from spam and abuse (legitimate interest).

We do not sell your data, use it for advertising, or share it with third parties for their own marketing.

Where it is stored and who can see it

Form data is stored on our own servers (self-hosted, in the EU) and in our encrypted backups. Only Transformational Eye staff working on your booking can access it. We use a few service providers to run the service: Google (sign-in), our email provider (sending codes and messages), Cloudflare and our hosting provider (delivering the website securely), and, where you request an invoice, our invoicing system.

How long we keep it

Booking and client records are kept while we work together and afterwards as long as needed for delivery, support and your future bookings. Invoices and accounting records are kept for the period required by law (in Romania, generally 10 years). Server logs are kept for a short period. You can ask us to delete data we are not legally required to keep.

Your rights

You can ask to access, correct, delete, restrict or export your data, and object to its processing, by emailing [email protected]. You can also withdraw Google access at any time in your Google Account (Security → Third-party connections). You have the right to complain to your data protection authority (in Romania: ANSPDCP).

Changes

We will update this page if the way we handle data changes. The date at the top shows the latest version.