Our GDPR Privacy Policy in full :Â
1. Introduction
1.1 We are committed to safeguarding the privacy of Nicola Auckland Photography website visitors and customers.
1.2 This policy applies where we are acting as a data controller with respect to the personal data of Nicola Auckland Photography website visitors and customers
1.3 In this policy, “we”, “us” and “our” refer to Nicola Auckland Photography
2 How we use your personal data
2.1 In this Section 2 we have set out: (a) the general categories of personal data that we may process; (b) the purposes for which we may process personal data;
2.2 We may process data about your use of our website and services (“usage data”). The usage data may include your IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views and website navigation paths, as well as information about the timing, frequency and pattern of your service use. The source of the usage data is Google Analytics. This usage data may be processed for the purposes of analysing the use of the website and services.
2.3 We may process your personal data provided to us as part of :
-
An enquiry about our services (“enquiry data”)
-
A service we are providing to you (“service data”)
-
Publication on our website or in other marketing material (“publication data”)
-
A financial transaction, either paying for our service to you or for supplying goods purchased from us.
-
A legal defence, establishment, exercise or obligation
-
An insurance purchase or claim The data processed may include, but is not limited to, your name, address, contact telephone number and email address.
2.4 Please do not supply any other person’s personal data to us, unless we prompt you to do so.
2.5 In order to create and deliver photographic services it is necessary that we store images of your likeness, both of yourselves as signatories and, in the case of weddings, events, photoshoots and commercial photography, of your families, guests, pets, employees and anyone else you may engage to feature in your imagery. These files are stored as both jpg and RAW files.
2.6 Photographs are captured on at least two cameras containing SD and XQD cards. RAW and JPEG images are uploaded to external hard drives and to an Amazon cloud storage (external storage) facility at the event or photoshoot for event for additional security.
3. Providing your personal data to others
3.1 We may disclose aspects of your personal data to:
-
Our insurers and/or professional advisers to obtain cover or service
-
Suppliers and subcontractors to deliver our service
-
Our card services provider, Square, to handle your card payment
-
Comply with a legal obligation to protect you or us The data provided may include, but is not limited to, your name, address, contact telephone number and email address.
4. Transfers of your Personal Data
4.1 There are some circumstances in which your personal data may be transferred, including to countries outside the European Economic Area (EEA).
4.2 The hosting facilities for our website are situated in the USA.
4.3 The location of our Image Hosting service is situated in USA.
4.4 You acknowledge that personal data that you submit for publication through our website or services may be available, via the internet, around the world. We cannot prevent the use or misuse of such personal data by others.
5. Retaining and deleting personal data
5.1 Personal data that we process for any purpose shall not be kept for longer than is necessary.
5.2 We will retain your personal data for the following lengths of time:
(a) Invoices, contact and contract details will be retained for a maximum period of 6 years (statute of limitations) following final delivery of services
(b) Planning information, wedding details and customer notes will be kept for a minimum of one year and a maximum of two years after your event has taken place.
6. Amendments
6.1 We may update this policy from time to time by publishing a new version on our website. It is your responsibility to check that you are still happy with this policy.
7. Your rights
7.1 Your principal rights under data protection law are:
(a) the right to access;
(b) the right to rectification;
(c) the right to erasure;
(d) the right to restrict processing;
(e) the right to object to processing;
(f) the right to data portability;
(g) the right to complain to a supervisory authority; and
(h) the right to withdraw consent.
7.2 You have the right to know whether or not we process your personal data. Where we do, you have the right to know why, how and who we share it with. You also have the right to access the data we hold about you, and receive a copy of it. You can obtain a copy of the personal information we hold about you by contacting us at nicolaauckland@gmail.com
7.3 You have the right to have any inaccurate personal data about you rectified and to have any incomplete personal data about you completed.
7.4 In some circumstances you have the right to be forgotten. You have the right to request that all information held about you is deleted and to withdraw or restrict your consent for your data to be processed. There are some circumstances where the continued processing is necessary, they include; for exercising the right of freedom of expression and information; for compliance with a legal obligation; or for the establishment, exercise or defence of legal claims.
7.5 You have the right to object to our processing of your personal data for direct marketing, scientific or historical research or for statistical purposes.
7.6 If you consider that our processing of your personal information infringes data protection laws, you have a legal right to lodge a complaint with a supervisory authority responsible for data protection. You may do so in the EU member state of your residence, your place of work or the place of the alleged infringement.
7.7 To the extent that the legal basis for our processing of your personal information is consent, you have the right to withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing before the withdrawal.
7.8 You may exercise any of your rights in relation to your personal data by writing to us at nicolaauckland@gmail.com
8. About cookies
8.1 A cookie is a file containing an identifier (a string of letters and numbers) that is sent by a web server to a web browser and is stored by the browser. The identifier is then sent back to the server each time the browser requests a page from the server.
8.2 Cookies may be either “persistent” cookies or “session” cookies: a persistent cookie will be stored by a web browser and will remain valid until its set expiry date, unless deleted by the user before the expiry date; a session cookie, on the other hand, will expire at the end of the user session, when the web browser is closed.
8.3 Cookies do not typically contain any information that personally identifies a user, but personal information that we store about you may be linked to the information stored in and obtained from cookies.
9. Cookies that we use
9.1 We use cookies for the following purposes:
(a) analysis – we use cookies to help us to analyse the use and performance of our website and services
10. Cookies used by our service providers
10.1 Our service providers use cookies and those cookies may be stored on your computer when you visit our website.
10.2 We use Google Analytics to analyse the use of our website. Google Analytics gathers information about website use by means of cookies. The information gathered relating to our website is used to create reports about the use of our website. Google’s privacy policy is available at: https://www.google.com/policies/privacy/
11. Managing cookies
11.1 Most browsers allow you to refuse to accept cookies and to delete cookies. The methods for doing so vary from browser to browser, and from version to version.
11.2 Blocking all cookies will have a negative impact upon the usability of many websites.
12. Our details
12.1 This website is owned and operated by Nicola Auckland Photography
12.2 Our office is at Kempton House, Kempton Way, Dysart Road, Grantham, NG31 7LE.
12.3 You can contact us:
(a) by post, to the postal address given above;
(b) by email to nicolaauckland@gmail.com
13. Data protection officer
13.1 Our data protection officer’s contact name is: Nicola Auckland
14 CLIENTS AND WEDDING GUESTS CAPTURED IN PHOTOS
14.1 Under GDPR legislation, a photograph may in some instances constitute a form of personal data where they can be processed to allow “the unique identification or authentication of a natural person”. Guests at weddings or events appear in photos taken by Nicola Auckland Photography as a part of the visual recording of the event in photos. Guests captured in portraits or in group photos do so as part of the event and their rights are protected by Nicola Auckland Photography as detailed in this privacy policy.
14.2 In terms of explicit GDPR compliance, Wedding and event clients and guests are photographed within the parameters of GDPR legislation on the basis of ‘legitimate interests’. The taking of photographs of wedding and event guests when viewed as a form of processing personal data is necessary for the legitimate interests of Nicola Auckland Photography as a photography business unless there is a good reason to protect a given individual’s personal data which overrides those legitimate interests.
14.3 Operating within the parameters of legitimate interests as laid out in GDPR legislation, the disproportionate effort involved in providing privacy policy information to all event guests at the event and the degree to which it would distract us from performing our job renders it infeasible to do. Event clients are therefore requested to direct their guests to read this privacy policy in advance of the event and to advise them to contact us in advance with any concerns around the processing of their personal data, namely being photographed.
15 YOUR RESPONSIBILITY:
15.1 It is your responsibility and/or the responsibility of your guests to come and speak to the photographer prior to a wedding or event to inform them of any circumstances in which a person cannot have their photograph taken. In instances such as: Foster/ Adoption or looked after children Witness Protection Special Forces/ Intelligence Services
16 DISPLAY OF IMAGES
16.1 We may display photographs to promote Nicola Auckland Photography on the Nicola Auckland Photography website and blog, on social media, on wedding blogs, on wedding photography related websites, in exhibitions, in advertising, brochures, magazine articles and other such material, providing that the images used are used lawfully and without damage to Nicola Auckland Photography’s client(s). The rights of the people captured in these photographs are protected by Nicola Auckland Photography as detailed in this privacy policy. Potential clients will be asked to give permission for this as part of the contractual agreement before any work is undertaken.
16.2 I currently use the following:
Instagram – @nicolaaucklandphotography
Facebook Business Page NicolaAucklandPhotography
Pinterest – https://www.pinterest.co.uk/NicolaAucklandPhotography/
Photographers Website – www.nicolaaucklandphotography.co.uk
LinkedIn - https://www.linkedin.com/in/nicolaaucklandphotography/
17 WITHDRAWL OF CONSENT
17.1 Anyone photographed by Nicola Auckland Photography, whether a client, event guest or any other participant, and whether past or current may withdraw consent for a photograph in which they appear to be displayed. The process for this is to email Nicola Auckland Photography at nicolaauckland@gmail.com specifying the photo in question. Pursuant to the request, Nicola Auckland Photography will then remove the photo from online and printed display wheresoever it appears at the earliest opportunity.