Who is responsible
The data controller is Nataliia, working as an independent photographer under the name Photo in Copenhagen, Copenhagen, Denmark. Contact: nataliia@photoincopenhagen.dk.
What I collect and why
- Booking and account data: name, e-mail, phone number, preferred language, booking date, location and your message. Used to answer your request, plan and carry out the photoshoot and deliver your photos. Legal basis: steps prior to and performance of a contract (GDPR art. 6(1)(b)).
- Photographs: photos from your session are stored to deliver them to you. They are shown in my portfolio or on social media only if you have given separate consent (art. 6(1)(a)), which you can withdraw at any time.
- Payment records: the date, package and amount of paid bookings are kept for up to five years as documentation for the tax authorities (art. 6(1)(c)).
- Security data: failed login attempts are stored with IP address for 15 minutes to protect accounts (art. 6(1)(f)).
Cookies and tracking
This website uses no advertising or analytics trackers and loads no third-party fonts or scripts. One strictly necessary session cookie is set when you log in or send a form, so no cookie banner is required.
Who receives your data
Your data is never sold. It is processed by my hosting and e-mail provider Simply.com (Denmark) and, for photo delivery, by the file transfer service you receive a link from (normally WeTransfer, the Netherlands). Both are located in the EU/EEA.
How long I keep it
Customer accounts are anonymised when they have been inactive for 36 months after the last booking. Payment records are kept for up to five years. You can delete your account yourself at any time.
Your rights
You have the right to access, correct, delete, restrict and receive a copy of your data, and to object to processing. In your client page you can update your details, download all your data and delete your account. You can also just write to me.
Security
The site uses encrypted connections (HTTPS), passwords are stored only as one-way hashes, and access to customer data is limited to me.
Complaints
You can complain to the Danish Data Protection Agency, datatilsynet.dk.
Contracts
When you sign the photography agreement in your client page, the agreement text, the name you typed, the time and your IP address are stored as proof of the agreement (art. 6(1)(b) and (f)). Signed agreements are kept for three years after the photoshoot, the limitation period for claims, also if you delete your account.
Invitations and discounts
If you book through a friend's invitation link, your friend only learns that their invitation was used – never your contact details, date or price. Discount certificates are linked to your client account.
Updated: