Privacy Policy

This Privacy Policy explains how Csenge Karoliina Photography ("the Photographer", "we", "us") collects, uses and protects personal data in accordance with the EU General Data Protection Regulation (GDPR).

Data Controller

Csenge Karoliina Photography
Business ID: 3336775-7

Tampere, Finland

Contact person

Csenge Székely

Email: csenge.k.szekely@gmail.com

Phone: +358 45 150 1651

What Personal Data We Collect

Depending on the services you use, we may collect:

  • Name

  • Company name (if applicable)

  • Email address

  • Telephone number

  • Billing information

  • Session details

  • Information you voluntarily provide through contact forms, emails or questionnaires

  • Photographs created during photography sessions

  • Communication relating to enquiries and bookings

Why We Process Your Personal Data

Personal data is processed in order to:

  • Respond to enquiries

  • Arrange and deliver photography services

  • Manage customer relationships

  • Process payments and invoicing

  • Deliver image galleries

  • Send newsletters and marketing communications (only where consent has been given)

  • Comply with legal and accounting obligations

Photographs are processed and stored for delivering the agreed services and, where permission has been granted, for portfolio and marketing purposes.

Legal Basis for Processing

Personal data is processed on one or more of the following legal grounds:

  • Performance of a contract

  • Consent

  • Compliance with legal obligations

  • Legitimate interests, such as operating and developing the photography business

How Your Data Is Collected

Information is collected directly from you when you:

  • Submit a contact form

  • Book a photography session

  • Subscribe to the newsletter

  • Contact us by email, telephone or social media

  • Meet with us in person

  • Enter into a photography agreement

Sharing Your Information

Personal information is never sold to third parties.

However, trusted third-party service providers may process personal data on our behalf in order to deliver photography services and operate the business.

These may include services such as:

  • Squarespace (website and contact forms)

  • Online gallery providers

  • Accounting and invoicing software

  • Email marketing services

  • Cloud storage providers

All service providers are required to process personal data in accordance with applicable data protection legislation.

Data Security

Personal data is handled confidentially and protected using appropriate technical and organisational security measures.

Access to personal information is restricted solely to the Data Controller and authorised service providers where necessary for delivering agreed services.

Reasonable measures are taken to protect personal information against unauthorised access, loss, misuse or disclosure.

Data Retention

Personal data is retained only for as long as necessary to fulfil the purposes described in this Privacy Policy.

Certain information may be retained for longer where required by Finnish accounting, taxation or other applicable legislation.

Marketing information is retained until consent is withdrawn.

Your Rights

Under the GDPR, you have the right to:

  • Access your personal data

  • Correct inaccurate information

  • Request deletion of your data

  • Restrict processing

  • Object to processing

  • Withdraw consent at any time where processing is based on consent

  • Request transfer of your personal data where applicable

  • Lodge a complaint with your local data protection authority

Requests may be submitted by contacting the Data Controller.

Photography & Image Use

Photographs created during photography sessions are handled in accordance with the agreed Photography Terms & Conditions and any separate photography agreement.

Permission for portfolio or marketing use is always respected according to the agreement made with the Client.

Copyright ownership is governed separately by the Photography Terms & Conditions and applicable copyright legislation.

Cookies

This website may use cookies and similar technologies to improve website functionality, analyse visitor behaviour and enhance the user experience.

Where required by law, visitors will be asked for consent before non-essential cookies are stored.

Changes to This Privacy Policy

This Privacy Policy may be updated from time to time to reflect changes in legislation, services or business operations.

The latest version will always be available on this website.

Last updated: 10.7.2026