Updated on 28.10.2019
PhotoConsent always strives to secure and safeguard your information. Below you can read more about the processing of your personal data, what the purpose of the processing is and what rights you have when your personal data is processed.
Purpose of the processing of personal data
Personal information is information that can identify an individual. The processing of personal data, also known as data processing, includes, among other things, storing, accessing and transferring the information for a specific purpose.
PhotoConsent helps photographers and others who process photographs (these are referred to hereafter as “PhotoConsents customers” to obtain consent for the data processing that is done by a subject’s personal information, including photographs of them ( Photographed persons are referred to hereafter as “photography subjects”). PhotoConsent thus provides a service to make it easier for photographers to comply with the personal data law. PhotoConsent also offers to store obtained consents. It is possible that obtained consent statements contain the image to which consent relates, or an image to identify the consent giver (the photograph subject).
In the case of photography subjects, PhotoConsent only receives and processes the personal data contained in the consent statement signed by the photography subject at the instigation of PhotoConsent’s customers. PhotoConsent’s customers may choose to associate images of the data subject in the consent statements obtained. PhotoConsent does not have the ability to access and manage individual consent statements. PhotoConsent also does not see images that may have to be associated with consent statements that PhotoConsent stores on behalf of its customers. Photoconsent’s customers’ processing of photography subject’s personal information, including photographs, is agreed between the photographer and subject, which is why PhotoConsent is not responsible for this. Questions and requests for photographs that you are the subject of should therefore be directed to the photographer in question and not PhotoConsent.
For PhotoConsent’s customers, only information necessary to fulfill PhotoConsent’s service is collected and processed.
PhotoConsent has entered into data processing agreements with the companies PhotoConsent use to ensure that they also comply with the rules and principles of personal data protection.
In exceptional circumstances, PhotoConsent may be compelled by other legislation to disclose information to authorities, insurers, banks or others, provided that they have legitimate access to the information.
PhotoConsent has taken the necessary technical and administrative measures to prevent information being accidentally or illegally deleted, published, lost, impaired or in the knowledge of unauthorized persons, abused or otherwise treated in violation of the law.
Categories of personal data
PhotoConsent collects contact information in the form of name, address, telephone number and e-mail of the individual or company wishing to use PhotoConsent’s service. Only contact information provided by Photoconsent’s customers will be collected.
In some cases, PhotoConsent’s customers will include photographs of data subjects in the consent statements.
PhotoConsent processes customer payment information to fulfill PhotoConsent’s service.
PhotoConsent only stores and processes the information necessary to fulfil its service and comply with the documentation requirements of the authorities or others.
Recipients of personal data
In order to keep the consent statements in a safe and reliable manner for PhotoConsents customers, PhotoConsent uses servers from Amazon Web Services, which are based in Ireland. It is thus accepted that the consent statements with the personal information of photography subjecting and PhotoConsents are forwarded and stored by Amazon Web Services. Amazon Web Services, Inc. Provides only the hosting of the consent statements and thus cannot access individual personal data in consent statements.
Contact information and other personal information of PhotoConsent’s customers are not disclosed outside PhotoConsent’s business, unless specifically agreed with the company or private person who provided the information, or because it is necessary due to the legitimate requirements of others, see above about authorities and others.
Storage of information
The personal information belonging to PhotoConsents customers is stored as long as the customer uses PhotoConsent’s service. If the customer no longer wants to make use of the service or breaches any of its obligations under the agreement with PhotoConsent, PhotoConsent shall keep the customer’s information for a minimum of 6 months unless the customer exercises his or her right to request deletion. An inactive customer’s information is deleted no later than 1 year after the customer has become inactive.
The personal data belonging to photography subjects, as set out in the consent statements PhotoConsent store, are kept as long as PhotoConsent’s customers are active and consent from the photograph subject is in effect.
Access to your information
If you know or suspect that PhotoConsent is processing personal data about you, you have a number of rights in relation to the processing. These rights are listed below.
As a photography subject, please note that PhotoConsent does not have access to the information contained in the consent statements that PhotoConsent stores for its customers. It will therefore not be possible to gain access to, object to, request rectification or deletion by contacting PhotoConsent. As a photography subject, you should instead contact the photographer or other party to whom you have given your consent.
If you want to make use of your rights, please contact email@example.com
When contacted, PhotoConsent will initially make sure that you are the real owner of the information or images before you can exercise your rights.
A request will be processed within a reasonable time and no later than 4 weeks after receipt. If it takes longer to process your enquiry, you will be informed accordingly.
The right of Access
You have the right to request access to the personal data PhotoConsent stores and processes about you.
It is noted that PhotoConsent does not have access to individual consent statements and the images contained herein. PhotoConsent also does not have access to the images that consent to. While PhotoConsent will respond to requests for access as far as is technically possible, it is not possible to obtain access to individual consent statements or any photos contained therein.
The right to object
PhotoConsent will assess in each case whether your objection is justified.
Right to ask for rectification
You have the right to correct inaccurate information. The right applies to factually incorrect information and incomplete information, if this is of significance to the processing.
The right to ask for deletion
You have the right to request that your information be deleted. This right is applicable if the information is no longer necessary to fulfill the purposes if you revoke your consent, including ceasing to use Photoconsent’s service, or if the processing is unlawful.
PhotoConsent does not immediately delete customer information – see above “storing information” by, for example, inactive customers. If you wish to delete your information immediately, please contact PhotoConsent and request it.
This right is not conclusive, as certain data cannot be deleted due to other legislation, or the purpose of which gives me the right to store personal data and images. If the processing has been done because of a legitimate interest and not a given consent, then it will first be assessed whether the legitimate interest weighs heavier than your desire for deletion.
Right to data portability
You have the right to obtain your information in a technically readable format. Only information that PhotoConsent can access can be provided. PhotoConsent may not provide information in consent statements or any images contained herein.
The right to withdraw consent
You can withdraw your consent to your data processing at any time.
PhotoConsentes customers must contact PhotoConsent and formally withdraw their consent. Withdrawing consent for data processing will entail the termination of PhotoConsent’s service.
Photography subjects must contact the photographer with whom the consent statement has been made. If the photograph subject believes that valid consent has not been given to PhotoConsent’s processing of their information, they must contact PhotoConsent and demonstrate that the data processing is not legal.
PhotoConsent is only entitled to retain information that is to be used as evidence to authorities, insurers, banks or others who have a legitimate access to the information.
The right to complain
You are always welcome to contact PhotoConsent if you have any questions or wish to complain about the processing of your personal data. However, you also always have the right to complain to the Data Protection Agency, which is the authority responsible for the compliance with the legislation on personal data processing. You can send a complaint to firstname.lastname@example.org
Tel: 4072 2426