What personally identifiable information A-Fotografy collects from you through the Site, how it is used and with whom it may be shared.
What choices are available to you regarding the use of your data.
The security procedures in place to protect the misuse of your information.
How you can correct any inaccuracies in the information.
The DPA & GDPR compliance.
THE DPA & GDPR MAY 2018
This website complies with the DPA (Data Protection Act 1998) and already complies with the GDPR (General Data Protection Regulation) which comes into effect from May 2018. We will update this policy accordingly after the completion of the UK’s exit from the European Union.
WHO ARE WE
A-Fotografy is the data controller and we are responsible for your personal data (referred to as “we”, “us” or “our” in this privacy notice).
Our full details are:
Email address: firstname.lastname@example.org
Postal address: 151 London Road, St Margarets House, Studio 502, EH76AE
Telephone number: 07850209999
It is very important that the information we hold about you is accurate, therefore please let us know if at any time your personal information changes by emailing us.
What Information Is Collected?
Internet Traffic Data
Internet traffic data includes but is not limited to internet service provider information, the collection of IP addresses, entry and exit pages, various operating systems and other such information. We collect no personally identifying information through this process, and it is used to help analyze user traffic with respect to various services available through A-Fotografy to allow for more customized and enjoyable user experience.
We use “cookies” on this Site. A cookie is a piece of data stored on a site visitor’s hard drive to help us improve your access to our site and identify repeat visitors to our site. For instance, when we use a cookie to identify you, you do not have to log in a password more than once, thereby saving time and improving efficiency while on our site. Cookies can also enable us to track and target the interests of our users to enhance the experience on our site. Usage of a cookie is in no way linked to any personally identifiable information on our Site.
EMAIL MAILING LIST & MARKETING MESSAGES
Email marketing messages sent after a visitor has supplied their contact information and consented to be contacted may contain tracking beacons / tracked clickable links or similar server technologies in order to track reader activity within email marketing messages. Where used, such marketing messages may record a range of subscriber data relating to engagement, geographic, demographics and already stored subscriber data.
A-Fotografy must collect some information from you to allow you to use and access services, products and materials. Identifier Information is only collected by your personally providing such information to A-Fotografy via e-mail, by phone, or otherwise through A-Fotografy website pursuant to making a purchase or requesting service.
DOWNLOADS & MEDIA FILES
Any downloadable documents, files or media made available on this website are provided to users at their own risk. While all precautions have been undertaken to ensure only genuine downloads are available users are advised to verify their authenticity using third party anti-virus software or similar applications.
We accept no responsibility for third party downloads and downloads provided by external third party websites and advise users to verify their authenticity using third party anti-virus software or similar applications.
SOCIAL MEDIA POLICY & USAGE
We adopt a Social Media Policy to ensure our business and our staff conduct themselves accordingly online. While we may have official profiles on social media platforms users are advised to verify authenticity of such profiles before engaging with, or sharing information with such profiles. We will never ask for user passwords or personal details on social media platforms. Users are advised to conduct themselves appropriately when engaging with us on social media.
There may be instances where our website features social sharing buttons, which help share web content directly from web pages to the respective social media platforms. You use social sharing buttons at your own discretion and accept that doing so may publish content to your social media profile feed or page. You can find further information about some social media privacy and usage policies in the resources section below.
Information Collection, Use, and Sharing
We are the sole owners of the information collected on the Site. We only have access to/collect information that you voluntarily give us via email or other direct contact from you. We will not sell, rent or otherwise share this information with any other individual or business entity, except as reasonably necessary to provide products, materials, or services to you.
We will use your information to respond to you, and will not share your information with any third party outside of our organization, other than as necessary to fulfill your request, e.g. to ship an order.
Your Access to and Control Over Information
You may opt out of any future contacts from us or request that we discontinue sending of email and other communications at any time at any time by contacting us at email@example.com
We take precautions to protect your information. When you submit sensitive information via the Site, your information is protected both online and offline.
Wherever we collect sensitive information, that information is encrypted and transmitted to us by secure servers. We have included common indications of such secured features when appropriate such as a closed lock icon at the bottom of your web browser.
While we use encryption to protect sensitive information transmitted online, we also protect your information offline. Only employees who need the information to perform a specific job (for example, billing or customer service) are granted access to personally identifiable information. The computers/servers in which we store personally identifiable information are kept in a secure environment.
In order to use this Site, a user may complete the registration form. During registration a user is required to give certain information (such as name and email address). This information is used to contact you about the products/services on our site in which you have expressed interest. At your option, you may also provide demographic information (such as gender or age) about yourself, but it is not required.
We request information from you on our order form. To buy from us, you must provide contact information (such as your name and shipping address) and financial information (like credit card number, expiration date). This information is used for billing purposes and to fill your orders. If we have trouble processing an order, we will use this information to contact you.
DISCLOSURE OF YOUR INFORMATION
We share your personal data with third parties in the following situations:
• Service Providers: we sometimes engage selected third parties who act on our behalf to support our operations, such as (i) card processing or payment services (see the section below headed “Payment Information”), (ii) IT suppliers and contractors (e.g. data hosting providers or delivery partners) as necessary to provide IT support and enable us to provide our goods/services, and (iii) providers of specialist services, including retouching, printers, framers and book binders. Pursuant to our instructions, these parties may access, process or store your personal data in the course of performing their duties to us and solely in order to perform the services we have hired them to provide.
• Business Transfers: if we sell our business or our company assets are acquired by a third party personal data held by us about our customers may be one of the transferred assets.
• Administrative and Legal Reasons: if we need to disclose your personal data (i) to comply with a legal obligation and/or judicial or regulatory proceedings, a court order or other legal process. (ii) to enforce our Terms & Conditions or other applicable contract terms that you are subject to; (iii) to protect us, our members or contractors against loss or damage. This may include (without limit) exchanging information with the police, courts or law enforcement organisations.
Surveys & Contests
From time-to-time our site requests information via surveys or contests. Participation in these surveys or contests is completely voluntary and you may choose whether or not to participate and therefore whether or not to disclose information sought by such surveys or contests. Information requested may include contact information (such as name and shipping address), and demographic information (such as zip code, age level). Contact information will be used to notify the winners and award prizes. Survey information will be used for purposes of monitoring or improving the use and satisfaction of this site.
YOUR DATA PROTECTION RIGHTS
Certain applicable data protection laws give you specific rights in relation to your personal data. In particular, if the processing of your personal data is subject to the GDPR, you have the following rights in relation to your personal data:
• Right of access: If you ask us, we will confirm whether we are processing your personal data and, if so, provide you with a copy of that personal data along with certain other details. If you require additional copies, we may need to charge a reasonable fee.
• Right to rectification: If your personal data is inaccurate or incomplete, you are entitled to ask that we correct or complete it. If we shared your personal data with others, we will tell them about the correction where possible. If you ask us, and where possible and lawful to do so, we will also tell you with whom we shared your personal data so you can contact them directly.
• Right to restrict processing: You may ask us to restrict or ‘block’ the processing of your personal data in certain circumstances, such as where you contest the accuracy of the data or object to us processing it. We will tell you before we lift any restriction on processing. If we shared your personal data with others, we will tell them about the restriction where possible. If you ask us, and where possible and lawful to do so, we will also tell you with whom we shared your personal data so you can contact them directly.
• Right to object: You may ask us at any time to stop processing your personal data, and we will do so:
o If we are relying on a legitimate interest to process your personal data — unless we demonstrate compelling legitimate grounds for the processing or
o If we are processing your personal data for direct marketing.
• Right to withdraw consent: If we rely on your consent to process your personal data, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing of your data before we received notice that you wished to withdraw your consent.
• Right to lodge a complaint with the data protection authority: If you have a concern about our privacy practices, including the way we handled your personal data, you can report it to the UK data protection authority (the Information Commissioner’s Office or ICO), or, as the case may be, any other competent data protection authority of an EU member state that is authorised to hear those concerns (you may find EU Data Protection Authorities’ contact information here).
If you wish to exercise any of these rights please contact us as described in the “Contact” section below. We may also need to ask you for further information to verify your identity before we can respond to any request.