Privacy Policy for Studio Lyspunkt
This privacy policy explains how Studio Lyspunkt collects, uses, and protects your personal information when you use our site, engage our services, or interact with our online platform. We are committed to protecting your privacy and handling your data in a transparent and lawful manner, in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR).
Who We Are
We are Studio Lyspunkt, a photography service provider offering portrait photography, commercial photography, event photography, product photography, photo editing, printing services, family portraits, headshots, and studio rental. Our registered address is 45 Storgata, 0184 Oslo, Norway.
Personal Data We Collect
We collect various types of personal data, which may include:
- Identity and contact data: such as your name, address, email address, phone number, and other contact details you provide when booking a session, making an inquiry, or using our services.
- Financial data: information related to payments for our services. We do not store full payment card details; these are processed securely by third-party payment providers.
- Transaction data: details about the services you have purchased from us.
- Photographic data: images and likenesses captured during photography sessions you book with us. These are personal data as they can identify you.
- Technical data: including internet protocol (IP) addresses, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access our site.
- Usage data: information about how you use our site and services.
- Marketing and communications data: your preferences in receiving marketing from us and your communication preferences.
How We Collect Your Data
We collect personal data through direct interactions, such as when you:
- Book a photography session or studio rental.
- Inquire about our services via phone, email, or our site.
- Participate in a photography session.
- Place an order for prints or other products.
- Subscribe to our newsletter or marketing communications (if offered).
- Provide feedback or reviews.
We also collect data automatically as you interact with our site using technologies such as cookies (please see our cookie policy for more details).
How and Why We Use Your Data (Purpose and Legal Basis)
We use your personal data for the following purposes, relying on specific legal bases under GDPR:
- To provide and manage our services: Including booking sessions, conducting shoots, editing photos, arranging printing, and managing studio rentals. This is necessary for the performance of a contract with you.
- To process payments: Handling transactions for services rendered. This is necessary for the performance of a contract.
- To communicate with you: Responding to inquiries, sending booking confirmations, providing updates about your session or order, and communicating about our services. This is necessary for the performance of a contract or our legitimate interests in responding to queries and managing our business.
- To improve our services: Analyzing usage data to understand how our services and site are used, and using feedback to enhance our offerings. This is based on our legitimate interests in developing and growing our business.
- For marketing purposes: Sending you updates or promotional materials about our services that may be of interest to you. We will obtain your consent where required by law or rely on legitimate interests for existing customers. You can opt-out at any time.
- To display your photographs (with permission): If you provide explicit consent, we may use your photographs for our portfolio, website, social media, or promotional materials. This processing is based on your specific consent.
- To comply with legal obligations: Such as maintaining records for tax purposes. This is necessary to comply with a legal obligation.
Sharing Your Personal Data
We may share your personal data with trusted third parties in certain circumstances:
- Service providers: Such as photo labs for printing services, secure payment processors, cloud storage providers, or IT support services, who process data on our behalf and under our instructions.
- Legal and regulatory authorities: If required to do so by law, court order, or governmental regulation.
- Professional advisors: Such as lawyers, accountants, or insurers.
- In the event of a business transfer: If we sell or buy any business or assets, your data may be disclosed to the prospective seller or buyer.
We require all third parties to respect the security of your personal data and treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.
Data Security
We have implemented appropriate technical and organizational security measures to prevent your personal data from being accidentally lost, used, accessed in an unauthorized way, altered, or disclosed. Access to your personal data is limited to employees, agents, contractors, and other third parties who have a business need to know. They will only process your personal data on our instructions and are subject to a duty of confidentiality.
Data Retention
We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Photographic images are stored securely and retained based on agreements with clients and for portfolio purposes where consent is given, in line with industry standards and practices, always ensuring security and appropriate deletion when no longer needed or requested by the client (subject to contractual agreements).
Your Data Protection Rights
Under data protection law, you have rights including:
- Your right to be informed: About how we collect and use your personal data.
- Your right of access: To request a copy of the personal data we hold about you.
- Your right to rectification: To request correction of any incomplete or inaccurate data we hold about you.
- Your right to erasure (the right to be forgotten): To ask us to delete or remove personal data where there is no good reason for us continuing to process it.
- Your right to restrict processing: To ask us to suspend the processing of your personal data in certain scenarios.
- Your right to object to processing: Where we are relying on a legitimate interest and there is something about your particular situation which makes you want to object.
- Your right to data portability: To request the transfer of your personal data to you or a third party in a structured, commonly used, machine-readable format.
- Your right to withdraw consent: If we are relying on your consent to process your personal data, you have the right to withdraw that consent at any time.
To exercise any of these rights, please contact us using the contact details provided below.
Right to Lodge a Complaint
If you have concerns about how we are using your personal data, you have the right to lodge a complaint with the relevant data protection supervisory authority in Norway, which is Datatilsynet. We would appreciate the opportunity to deal with your concerns before you approach the supervisory authority, so please contact us in the first instance.
Changes to This Privacy Policy
We may update this privacy policy from time to time to reflect changes in our practices or for legal reasons. The updated policy will be posted on our site. We encourage you to review this policy periodically.
Contact Information
If you have any questions about this privacy policy or our data protection practices, please contact us by post at:
Studio Lyspunkt
45 Storgata
0184 Oslo
Norway