Privacy statement



1. Controller

Studio IMG Oy

Contact details:

Metsänhoitajankatu 5

FI-00790 Helsinki

Contact details for matters concerning the filing system


Peter Forsgård

+358 400 427 567


2. Data subjects

The customer and stakeholder filing system contains the contact persons of shoots done for the company with invoicing information as well as the photographs taken in customer jobs and the metadata that they contain. 


3. Purpose of the filing system and personal data

Grounds for keeping the filing system: 

Personal data is processed based on a customer relationship

Personal data is processed based on consent.

Personal data is processed only for pre-defined purposes, which are as follows: 

management of customer relationship

provision of information on services



4. Personal data stored in the filing system

The customer filing system contains the following information: 


Contact details




telephone number


Customer information


information on products/services purchased

photographs taken to order

The metadata of photographs includes the name of the subject and location data on the shoot location. 


5. Rights of the data subject

The data subject has the following rights, and requests for exercising them should be submitted to


Right to review

The data subject may review the personal data stored. 

Right to rectification

The subject may request the rectification of inaccurate data concerning them.


Right to object

The data subject may object to the processing of personal data if they feel that the personal data has been processed unlawfully. 


Direct marketing ban

The data subject has the right to prohibit the processing of data for direct marketing. 


Right to erasure

The data subject has the right to request the erasure of data if the processing of the data is not necessary. We will process the erasure request, after which we will either erase the data or provide a justifiable reason why the data cannot be erased. 

It should be noted that the controller may have a statutory or other right to not erase the data requested. The controller is obliged to retain accounting material in accordance with the period of time (10 years) defined in the Accounting Act (Chapter 2, Section 10). For this reason, material related to accounting cannot be erased before the deadline.


Withdrawal of consent

If the processing of the personal data concerning the data subject is based solely on consent, and not e.g. a customer relationship or membership, the data subject may withdraw consent.

The data subject may appeal the decision to the Data Protection Ombudsman.

The data subject has the right to demand that we limit the processing of the contested data until the matter is resolved. 


Right of appeal

The data subject has the right to lodge a complaint with the Data Protection Ombudsman if they feel that we are in violation of applicable data protection legislation when procession personal data. Requests concerning rights should be submitted by e-mail or letter. We will respond to the requests at the latest within one month of the request, unless there is a special reason to extend the response time.


Contact details of the Data Protection Ombudsman: 


6. Regular data sources

By rule, customer information is obtained: 

from the customer as the customer relationship is created

names of the people in the photo and location data in connection with the shoot

The website uses cookies to collect behavior-related information. They are used, for example, for targeting the communications better and for marketing.


7. Regular disclosure of data

Data will not be disclosed for marketing purposes outside of Studio IMG Oy. 

We have ensured that all of our cloud service providers used for sharing photographs comply with data protection legislation. Photographs contain data on the name of the subject, date and location of the shoot.


8. Duration of processing

As a rule, the personal data of the customer’s contact person will be processed at least as long as required by other applicable laws. 

The data subject can remove themselves from our marketing list through a link included in each marketing e-mail that we send. 


9. Processors of personal data

The customer filing system is processed by the employees of Studio IMG Oy. Customer information is also processed by an accounting firm. 

Photographs are stored on the premises of Studio IMG Oy and in a password-protected, secure cloud service.

The controller and its employees process personal data. We may also outsource the processing of personal data in part to a third party, in which case we will guarantee through contractual arrangements that the personal data is processed in accordance with applicable data protection legislation and otherwise properly. 


10. Transfer of data outside the EU

Personal data and customer information will not be transferred outside the EU or the European Economic Area. 


If photographs and their metadata are transferred outside the EU/EEA, it is done on legitimate grounds: The European Commission has determined that a sufficient level of data protection has been ensured in the recipient country, the transferee is Privacy Shield certified or the transfer takes place using standard clauses published by the EU Commission. Any data transfer is carried out on grounds required by the law and with adequate protective mechanisms.


11. Automated decision-making and profiling

We do not use data for automated decision-making or profiling.