Privacy Policy
This privacy policy explains how Nordlys Photo Studio processes information collected through our online platform and services. We are committed to protecting your privacy and handling your personal data in a transparent and lawful manner in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR).
Nordlys Photo Studio, located at 27 Pilestredet, 3rd Floor, Oslo, 0164, Norway, is the data controller responsible for processing your personal data collected via our site.
Information We Collect
We collect personal data that you provide directly to us when you use our site, inquire about or book our services, or communicate with us. This may include:
Identity and Contact Data: Such as your name, email address, phone number, and billing address when you book a session or request a service like portrait photography, commercial shoots, event coverage, photo retouching, studio rental, product photography, or family portraits.
Payment Data: Information required to process payments for services, though we typically rely on secure third-party payment processors and do not store full payment card details ourselves.
Communications: Records of your correspondence with us, including emails and messages related to your inquiries or bookings.
Content Data: Any information you choose to share with us in the context of using our services, such as details about your desired photography session.
Images: Photographs created as part of the services we provide. The processing and use of these images are subject to separate agreements and terms related to the specific service booked.
We also automatically collect certain information when you visit our site, including:
Technical Data: Such as your IP address, browser type and version, operating system, referral source, and website navigation paths.
Usage Data: Information about how you use our site and services, including the pages you view, the time spent on those pages, and other statistics. This data is typically collected using cookies and similar technologies. Please refer to our separate Cookie Policy (if available) or the relevant section below for more details.
How We Use Your Information
We use your personal data for various purposes based on different legal bases:
To provide and manage our services: This includes scheduling sessions, performing photography, retouching, and studio rental services, processing your bookings, and delivering the final products. This processing is necessary for the performance of a contract with you.
To communicate with you: Responding to your inquiries, providing customer support, sending you service updates, and communicating about your bookings. This is based on contractual necessity or our legitimate interests in providing customer service.
To process payments: Handling transactions for the services you purchase. This is necessary for the performance of a contract and for legal compliance (e.g., invoicing).
To improve our site and services: Analysing usage data to understand how our online platform is used and identify areas for improvement. This is based on our legitimate interests in growing our business and enhancing user experience.
For security and fraud prevention: Protecting our site, systems, and users from security threats and fraudulent activity. This is based on our legitimate interests in ensuring the security of our operations and legal obligations.
For legal compliance: Meeting our legal and regulatory obligations, such as tax and accounting requirements.
Sharing Your Information
We may share your personal data with trusted third parties in the following circumstances:
Service Providers: We engage third-party companies and individuals to facilitate our services (e.g., payment processing, hosting, analytics, booking systems, cloud storage). These third parties have access to your personal data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.
Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court order or government agency).
Business Transfers: If we are involved in a merger, acquisition, or asset sale, your personal data may be transferred as part of that transaction. We will notify you before your personal data is transferred and becomes subject to a different privacy policy.
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
For example, basic information about customers (including Contact, Identity, Financial and Transaction Data) may be kept for a period required by tax law after they cease being customers. Photographs resulting from services are retained according to the specific service agreement and our operational needs for a limited time for purposes like re-orders, unless otherwise agreed.
Your Data Protection Rights
Under applicable data protection laws, you have certain rights regarding your personal data. These rights may include:
The right to access: You have the right to request copies of your personal data.
The right to rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
The right to erasure: You have the right to request that we erase your personal data, under certain conditions.
The right to restrict processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
The right to object to processing: You have the right to object to our processing of your personal data, under certain conditions.
The right to data portability: You have the right to request that we transfer the data that we have collected to another organisation, or directly to you, under certain conditions.
The right to withdraw consent: If we are processing your data based on your consent, you have the right to withdraw that consent at any time.
To exercise any of these rights, please contact us using the contact details provided below.
You also have the right to lodge a complaint with the relevant supervisory authority, which in Norway is Datatilsynet (the Norwegian Data Protection Authority).
Data Security
We have implemented appropriate technical and organisational security measures to protect your personal data from accidental loss, unauthorised access, use, alteration, or disclosure. However, no method of transmission over the internet or method of electronic storage is completely secure.
Cookies
Our site uses cookies and similar tracking technologies to collect information about how you interact with our online platform. This helps us to provide you with a good experience when you browse our site and allows us to improve our site. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of our site may become inaccessible or not function properly.
Children's Privacy
Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children under 16 without parental consent. If you are a parent or guardian and believe that your child has provided us with personal data, please contact us.
Changes to This Policy
We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page. You are advised to review this privacy policy periodically for any changes.
Contact Us
If you have any questions about this privacy policy or our data processing practices, you may contact us by mail at:
Nordlys Photo Studio27 Pilestredet, 3rd Floor
Oslo, 0164
Norway