Privacy Policy for Nordlys Bryllupsfoto

1. Introduction and company information

This privacy policy explains how Nordlys Bryllupsfoto collects, uses, stores, shares, and protects personal data when you contact us, request our services, book wedding photography, visit our website, or otherwise interact with us.

Data controller: Nordlys Bryllupsfoto

Address: Nordlys Bryllupsfoto, Karl Johans gate 12, 0154 Oslo, Norway

Email: [email protected]

Phone: +47 23 45 67 89

As a wedding-photographer business, Nordlys Bryllupsfoto may process personal data relating to clients, wedding guests, vendors, and other individuals appearing in photographs or related communications.

2. Data collection and processing

Nordlys Bryllupsfoto may collect and process the following categories of personal data:

• Identification and contact information: name, address, email address, phone number, and other contact details.
• Booking and contract information: event date, venue, package selection, payment status, invoices, correspondence, and contract details.
• Photographic and audiovisual data: photographs, video clips, and related metadata captured during consultations, engagement sessions, weddings, or post-production.
• Communication data: messages, inquiries, requests, feedback, and notes from meetings or calls.
• Technical data: IP address, browser type, device information, and website usage data if you visit our website.
• Payment data: billing details and transaction information, processed through payment providers or accounting systems.
• Special categories of data: in limited cases, photographs may reveal sensitive information such as religious ceremonies, health-related circumstances, or ethnic origin. We process such data only where necessary and with an appropriate legal basis.

We collect personal data directly from you, from your authorized representatives, from event organizers, and from third-party service providers where relevant and lawful.

3. Purpose of data processing

Nordlys Bryllupsfoto processes personal data for the following purposes:

• to respond to inquiries and provide quotations;
• to manage bookings, contracts, and client relationships;
• to plan and deliver photography services for weddings and related events;
• to edit, store, and deliver photographs and related materials;
• to issue invoices, process payments, and maintain accounting records;
• to communicate with clients, guests, and vendors regarding event logistics;
• to maintain backups, security, and operational continuity;
• to comply with legal obligations, including tax, accounting, and record-keeping requirements;
• to establish, exercise, or defend legal claims;
• to improve our services, website, and customer experience;
• to market our services where permitted by law and, where required, with consent.

4. Legal basis for processing

Depending on the context, Nordlys Bryllupsfoto relies on one or more of the following legal bases for processing personal data:

• Performance of a contract: where processing is necessary to provide photography services, manage bookings, or fulfill contractual obligations.
• Legitimate interests: where processing is necessary for business administration, service improvement, security, or limited direct communication, provided these interests are not overridden by your rights and freedoms.
• Consent: where we ask for your consent, for example for certain marketing activities, publication of images, or processing of special categories of data where required.
• Legal obligation: where processing is necessary to comply with applicable laws, including accounting, tax, and record-keeping obligations.
• Vital interests or public interest: only in exceptional circumstances where applicable law permits such processing.

Where we process special categories of personal data, we do so only when a valid legal basis exists under applicable privacy laws and, where necessary, with your explicit consent.

5. Data sharing and third parties

Nordlys Bryllupsfoto may share personal data with third parties only when necessary and lawful, including:

• Service providers: IT hosting, cloud storage, email services, backup solutions, website analytics, editing software, and customer management tools.
• Payment and accounting providers: for invoicing, payment processing, bookkeeping, and tax compliance.
• Subcontractors: second photographers, assistants, editors, or album production partners engaged to support service delivery.
• Professional advisers: lawyers, accountants, auditors, and insurers.
• Public authorities: where required by law or lawful request.

All third parties are expected to protect personal data appropriately and to process it only according to our instructions or their own legal obligations. We do not sell personal data.

6. Data transfer to third countries

Some of our service providers may store or process personal data outside Norway, the EEA, or the European Union. Where such transfers occur, Nordlys Bryllupsfoto ensures that appropriate safeguards are in place, such as:

• adequacy decisions by the relevant authorities;
• standard contractual clauses or equivalent transfer mechanisms;
• additional technical and organizational measures where necessary.

We take reasonable steps to ensure that transferred data receives a level of protection consistent with applicable privacy laws.

7. Storage duration

Nordlys Bryllupsfoto retains personal data only for as long as necessary for the purposes described in this policy, unless a longer retention period is required or permitted by law.

• Client and contract records: retained for the duration of the client relationship and thereafter for a period necessary for accounting, tax, and legal purposes.
• Photographs and project files: retained according to the service agreement, client instructions, operational needs, and backup cycles.
• Communication records: retained for a reasonable period to manage inquiries, disputes, and service follow-up.
• Marketing data: retained until you withdraw consent or object, where applicable.

When personal data is no longer needed, it is securely deleted, anonymized, or archived in accordance with legal requirements and internal retention procedures.

8. User rights

Subject to applicable law, you may have the following rights regarding your personal data:

• Access: to request confirmation of whether we process your data and to obtain a copy of that data.
• Rectification: to request correction of inaccurate or incomplete data.
• Erasure: to request deletion of your data where legal conditions are met.
• Restriction: to request that processing be limited in certain circumstances.
• Data portability: to receive certain data in a structured, commonly used, machine-readable format and, where technically feasible, to have it transmitted to another controller.
• Objection: to object to processing based on legitimate interests and to object to direct marketing at any time.

To exercise your rights, please contact Nordlys Bryllupsfoto using the contact details provided below. We may need to verify your identity before responding. We will respond within the time limits required by applicable law.

9. Withdrawal of consent

Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

If you withdraw consent, we will stop the relevant processing unless another lawful basis applies. For example, we may still retain certain records where required by law or necessary to establish, exercise, or defend legal claims.

10. Right to complain

If you believe that Nordlys Bryllupsfoto has processed your personal data in violation of applicable privacy laws, you have the right to lodge a complaint with the competent supervisory authority.

We encourage you to contact us first so that we can try to resolve your concern directly and promptly.

11. Data security

Nordlys Bryllupsfoto implements appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. These measures may include:

• access controls and password protection;
• encrypted storage and secure transfer methods where appropriate;
• regular backups and recovery procedures;
• limited access on a need-to-know basis;
• staff and contractor confidentiality obligations;
• security reviews and updates to systems and software.

While we take reasonable steps to protect personal data, no method of transmission or storage is completely secure. We therefore cannot guarantee absolute security.

12. Contact information

If you have questions about this privacy policy or our processing of personal data, please contact:

Nordlys Bryllupsfoto
Karl Johans gate 12, 0154 Oslo, Norway
Email: [email protected]
Phone: +47 23 45 67 89

13. Changes to privacy policy

Nordlys Bryllupsfoto may update this privacy policy from time to time to reflect changes in our practices, services, legal requirements, or technical developments. The updated version will be published with a revised effective date where appropriate.

We encourage you to review this privacy policy periodically to stay informed about how we process personal data.