Last updated 6 August 2026
Privacy & cookies
This page explains what information is processed when you visit owercontreras.com or send an enquiry, why it is processed, and the choices and rights available to you.
The controller for this website is Ower Contreras, a photographer and videographer based in the Algarve, Portugal. For privacy questions, email owercontreras4@gmail.com.
Contact enquiries
When you use the contact form, the website processes your first name, last name, email address and message so Ower can answer your enquiry and, where relevant, take steps towards a photography or film booking.
The legal basis is taking steps at your request before a possible contract (Article 6(1)(b) GDPR) and, where applicable, Ower’s legitimate interest in managing business correspondence (Article 6(1)(f) GDPR). Information needed for accounting or other legal duties may be kept under Article 6(1)(c) GDPR.
Web3Forms acts as a processor for delivery of the form. Its published privacy information says submissions may be retained for up to three years unless they are deleted earlier or a shorter plan limit applies. Its infrastructure may process information in several regions, including India; its data processing terms provide safeguards including the EU Standard Contractual Clauses for relevant international transfers. Ower should delete enquiries when they are no longer needed. Do not include sensitive personal information in the message field.
The contact form uses hCaptcha, provided by Intuition Machines, Inc., to distinguish genuine enquiries from automated spam. When the contact page is opened and the check is completed, hCaptcha may process technical and interaction data such as IP address, browser information, time on the page and pointer movements. The legal basis is Ower’s legitimate interest in protecting the form and website from spam and abuse (Article 6(1)(f) GDPR). hCaptcha acts as a processor, describes limited retention and data minimisation, and provides international-transfer safeguards including the EU-US Data Privacy Framework and Standard Contractual Clauses.
Hosting and technical logs
The website is hosted by Vercel, which acts as a processor under its data processing agreement. Vercel may process technical request information such as IP address, browser details, requested page, date and time to deliver, secure and diagnose the website.
This processing is based on Ower’s legitimate interest in providing a secure and reliable website (Article 6(1)(f) GDPR). Technical information is kept only as long as needed for operation, security and applicable legal duties. Vercel uses a global infrastructure and describes its international-transfer safeguards, including Standard Contractual Clauses, in its data processing agreement.
Google Analytics
Only if you select “Accept measurement”, the website loads Google Analytics 4 to understand how the site is used: which pages are viewed, roughly which regions visitors come from and which sites or searches brought them here. The legal basis is your consent (Article 6(1)(a) GDPR and the applicable rules for storage or access on your device).
Google Ireland Limited processes this information for the website. Google states that Google Analytics 4 does not log or store individual IP addresses. Personalised advertising signals are disabled. You can withdraw your consent at any time via “Privacy settings”; measurement then stops and the related cookies are removed from your browser.
Google Ads conversion measurement
Only if you select “Accept measurement”, the website loads the Google tag to understand whether an advert led to a successfully delivered contact form. The legal basis is your consent (Article 6(1)(a) GDPR and the applicable rules for storage or access on your device). The conversion event does not include your name, email address or message. The site keeps ad personalisation disabled at all times; advertising and analytics storage are used only after your consent.
If you reject, the Google advertising tag is not loaded. You can change or withdraw your choice at any time through “Privacy settings” at the bottom of the screen. The choice, date and privacy-policy version are stored locally in your browser for up to 180 days so the website can remember it; the site asks again after that period or after a relevant policy update.
After consent, Google may use identifiers and first-party cookies such as names beginning with _gcl_ for conversion attribution. Google may process information outside the European Economic Area under the safeguards described in its own privacy documentation.
YouTube videos
Lifestyle pages can show locally provided video cover images or a preview image supplied by YouTube. The video player itself uses YouTube’s privacy-enhanced youtube-nocookie.com domain and loads only after you choose to play a video. At that point Google receives technical information such as your IP address and browser details and applies its own privacy terms.
Your rights
Depending on the circumstances, you may ask for access, correction, deletion, restriction or portability of your personal information, or object to processing. Where processing relies on consent, you may withdraw it at any time without affecting earlier lawful processing.
Contact owercontreras4@gmail.com to exercise a right or ask a question. You may also lodge a complaint with Portugal’s data protection authority, the Comissão Nacional de Proteção de Dados (CNPD).