Who is responsible for processing your data
The controller responsible for personal data is photographer Anton Krot, Finland. For questions about data processing or exercising your rights, email anton.krot@gmail.com or call +358 44 928 2018. This policy applies to antonkrot.fi, enquiries and photography bookings, and the client galleries used to deliver photographs.
What personal data is processed
Depending on how you use the website and services, the following data may be processed:
your name, email address, phone number and the content of correspondence; details of the requested or booked shoot, agreements and payments; photographs and videos created during a shoot, and working files needed to select, edit and deliver the results; when using a Wfolio client gallery, data generated by viewing the gallery, downloading photographs and using its available features; technical information about visits to the website or gallery, such as device and browser data, IP address and technical identifiers, if recorded by the platform.
Data is provided by you, the person booking the shoot or the event organiser; created while providing the service; or generated through use of the website and gallery. Photographs may show other identifiable people, such as family members or event participants.
How your data is used
Data is used to respond to enquiries, discuss and confirm bookings, conduct shoots, edit and deliver photographs, maintain necessary records, keep the website and galleries secure, and respond to requests concerning data rights. A customer’s contact details are processed to take steps before entering into a contract and to perform the contract. Accounting records are retained where required by law. Publishing identifiable photographs in a portfolio, on a website or on social media is not necessary to book a shoot; it requires separate consent or another applicable legal basis. Where processing is based on consent, it may be withdrawn for the future. I do not make decisions about you solely by automated means and do not use data for profiling.
Who may have access to your data
Wfolio is used to host the website and provide client galleries. Correspondence may take place by email or through the messaging service you choose. Relevant service providers may be used for invoicing and payment processing. Data is made available to providers only to the extent necessary for their services. Personal data is not sold. A client-gallery link is intended to deliver photographs and may be forwarded by its recipient to other people. It is not the same as a personal account with identity verification. Publishing photographs on a public website or social media is a separate action from delivering them through a private gallery. If you follow a link to a messaging service or another external platform, its operator processes data under its own policies.
How long data is retained
The availability of photographs for download from a client gallery is guaranteed for one month from the date the link is sent. After that, gallery availability and link functionality are not guaranteed. The end of this month does not itself mean the photographs are automatically deleted. Data is retained only for as long as necessary for the stated processing purposes or for the period required by applicable law. Accounting records are kept for the periods prescribed by law. Photographs used in a portfolio on the basis of consent are used until consent is withdrawn or the relevant purpose ends.
Your rights
Where provided by law, you may request access to your personal data, its correction or deletion, restriction of processing or data portability, and you may object to processing based on legitimate interests. If processing is based on consent, you may withdraw it; this does not affect the lawfulness of processing before withdrawal. To exercise your rights, email anton.krot@gmail.com. You may be asked to verify your identity to protect your data. Your rights may be limited by law or by the rights of other people shown in photographs. If you believe your data is being processed unlawfully, you may lodge a complaint with the Office of the Data Protection Ombudsman in Finland: tietosuoja.fi.
Updates to this policy
This policy will be updated if the ways personal data is processed change.