- a) Right of confirmation
- The right to be informed about how data is processed and used and for what purposes.
- b) Right of access
- The right to have access to any personal data held.
- c) Right to rectification
- The right for any inaccurate personal data rectified or completed if it is incomplete.
- d) Right to erasure (Right to be forgotten)
- The right to have personal data erased.
- e) Right of restriction of processing
- The right to request the restriction or suppression of personal data.
- f) Right to data portability
- The right to data portability allows individuals to obtain and reuse their personal data for their own purposes across different services.
- g) Right to object
- The right to object processing of personal data in certain circumstances.
- h) Automated individual decision-making, including profiling
- The rights with respect to automated decision making and profiling.
- i) Right to withdraw data protection consent
- The right to withdraw consent at any time.
- j) Right to complain to a supervisory authority
- The right to make a complaint about your use of personal data
For further and more detailed information regarding your rights please visit the ICO Website: https://ico.org.uk/
The Personal Data we collect
By directly contacting and working with Whitney Lloyd Photography you agree access to some or all of following personal data information to be shared with the company;
Contact Telephone or Mobile Numbers
The data subject may, at any time, prevent the setting of cookies through our website by means of a corresponding setting of the Internet browser used, and may thus permanently deny the setting of cookies. Furthermore, already set cookies may be deleted at any time via an Internet browser or other software programs. This is possible in all popular Internet browsers. If the data subject deactivates the setting of cookies in the Internet browser used, not all functions of our website may be entirely usable.
Name and Contact of the controller
Controller for the purposes of the General Data Protection Regulation (GDPR), other data protection laws applicable in Member states of the European Union and other provisions related to data protection is:
The legitimate interests pursued by the controller
Where the processing of personal data is based on Article 6(1) lit. f GDPR our legitimate interest is to carry out our business in favour of the well-being of all our employees and the shareholders.
Purposes for which data is processed
Digital Photographs and Printed Products:
We process personal data to be able to provide finished products to client; this includes the processing of data with third parties in order to obtain printed products such as Albums, Photobooks, Presentation material and Printed Photographs – All third party supplier details as well as their privacy policies are detailed below. Personal Data may also from time to time be shared with online Blogs or Magazines by which on every instance the client will be required to provide consent beforehand and will be contacted by Whitney Lloyd Photography requesting this data to be shared.
Carrying out services:
We use personal data (contact numbers, email addresses, addresses) to communicate with clients to be able to arrange meetings to discuss their bookings, to ensure satisfaction of finished products, to be able to successfully and safely deliver said products,
We process personal data (photographs) through this website (www.whitneylloydphotography.com) , social media platforms such as Instagram, Facebook and Pinterest. We do this pursue our legitimate interests of carrying out our services. The legal basis for this and privacy policies of the aforementioned social media platforms are detailed below:
Data protection provisions about the application and use of Facebook:
The data protection guideline published by Facebook, which is available at https://facebook.com/about/privacy/, provides information about the collection, processing and use of personal data by Facebook. In addition, it is explained there what setting options Facebook offers to protect the privacy of the data subject. In addition, different configuration options are made available to allow the elimination of data transmission to Facebook. These applications may be used by the data subject to eliminate a data transmission to Facebook.
Data protection provisions about the application and use of Instagram:
Further information and the applicable data protection provisions of Instagram may be retrieved under https://help.instagram.com/155833707900388 and https://www.instagram.com/about/legal/privacy/.
Data protection provisions about the application and use of Jetpack for WordPress:
The applicable data protection provisions of Automattic may be accessed under https://automattic.com/privacy/. The applicable data protection provisions of Quantcast can be accessed under https://www.quantcast.com/privacy/.
Data protection provisions about the application and use of Pinterest:
The data protection guideline published by Pinterest, which is available under https://about.pinterest.com/privacy-policy, provides information on the collection, processing and use of personal data by Pinterest.
Legal basis for the processing
Art. 6(1) lit. a GDPR serves as the legal basis for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is party, as is the case, for example, when processing operations are necessary for the supply of goods or to provide any other service, the processing is based on Article 6(1) lit. b GDPR. The same applies to such processing operations which are necessary for carrying out pre-contractual measures, for example in the case of enquiries concerning our products or services. Is our company subject to a legal obligation by which processing of personal data is required, such as for the fulfillment of tax obligations, the processing is based on Art. 6(1) lit. c GDPR. In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or of another natural person. This would be the case, for example, if a visitor were injured in our company and his name, age, health insurance data or other vital information would have to be passed on to a doctor, hospital or other third party. Then the processing would be based on Art. 6(1) lit. d GDPR. Finally, processing operations could be based on Article 6(1) lit. f GDPR. This legal basis is used for processing operations which are not covered by any of the above mentioned legal grounds, if processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data. Such processing operations are particularly permissible because they have been specifically mentioned by the European legislator. He considered that a legitimate interest could be assumed if the data subject is a client of the controller (Recital 47 Sentence 2 GDPR).
From time to time this policy may have changes made to it so it is good practice to check back to this page regularly to ensure you remain in agreement and are kept up-to-date.
Any questions relating to this policy please send an email to email@example.com