Privacy statement
1. Controller
Studio IMG Oy
Contact details:
Metsänhoitajankatu 5
FI-00790 Helsinki
Contact details for matters concerning the filing system
Peter Forsgård
+358 400 427 567
peter@peterforsgard.com
2. Data subjects
The customer and stakeholder filing system contains the contact persons of shoots done for the company with invoicing information as well as the photographs taken in customer jobs and the metadata that they contain.
3. Purpose of the filing system and personal data
Grounds for keeping the filing system:
Personal data is processed based on a customer relationship
Personal data is processed based on consent.
Personal data is processed only for pre-defined purposes, which are as follows:
management of customer relationship
provision of information on services
marketing
4. Personal data stored in the filing system
The customer filing system contains the following information:
Contact details
name
address
telephone number
Customer information
information on products/services purchased
photographs taken to order
The metadata of photographs includes the name of the subject and location data on the shoot location.
5. Rights of the data subject
The data subject has the following rights, and requests for exercising them should be submitted to peter@peterforsgard.com
Right to review
The data subject may review the personal data stored.
Right to rectification
The subject may request the rectification of inaccurate data concerning them.
Right to object
The data subject may object to the processing of personal data if they feel that the personal data has been processed unlawfully.
Direct marketing ban
The data subject has the right to prohibit the processing of data for direct marketing.
Right to erasure
The data subject has the right to request the erasure of data if the processing of the data is not necessary. We will process the erasure request, after which we will either erase the data or provide a justifiable reason why the data cannot be erased.
It should be noted that the controller may have a statutory or other right to not erase the data requested. The controller is obliged to retain accounting material in accordance with the period of time (10 years) defined in the Accounting Act (Chapter 2, Section 10). For this reason, material related to accounting cannot be erased before the deadline.
Withdrawal of consent
If the processing of the personal data concerning the data subject is based solely on consent, and not e.g. a customer relationship or membership, the data subject may withdraw consent.
The data subject may appeal the decision to the Data Protection Ombudsman.
The data subject has the right to demand that we limit the processing of the contested data until the matter is resolved.
Right of appeal
The data subject has the right to lodge a complaint with the Data Protection Ombudsman if they feel that we are in violation of applicable data protection legislation when procession personal data. Requests concerning rights should be submitted by e-mail or letter. We will respond to the requests at the latest within one month of the request, unless there is a special reason to extend the response time.
Contact details of the Data Protection Ombudsman: www.tietosuoja.fi/fi/index/yhteystiedot.html
6. Regular data sources
By rule, customer information is obtained:
from the customer as the customer relationship is created
names of the people in the photo and location data in connection with the shoot
The website uses cookies to collect behavior-related information. They are used, for example, for targeting the communications better and for marketing.
7. Regular disclosure of data
Data will not be disclosed for marketing purposes outside of Studio IMG Oy.
We have ensured that all of our cloud service providers used for sharing photographs comply with data protection legislation. Photographs contain data on the name of the subject, date and location of the shoot.
8. Duration of processing
As a rule, the personal data of the customer’s contact person will be processed at least as long as required by other applicable laws.
The data subject can remove themselves from our marketing list through a link included in each marketing e-mail that we send.
9. Processors of personal data
The customer filing system is processed by the employees of Studio IMG Oy. Customer information is also processed by an accounting firm.
Photographs are stored on the premises of Studio IMG Oy and in a password-protected, secure cloud service.
The controller and its employees process personal data. We may also outsource the processing of personal data in part to a third party, in which case we will guarantee through contractual arrangements that the personal data is processed in accordance with applicable data protection legislation and otherwise properly.
10. Transfer of data outside the EU
Personal data and customer information will not be transferred outside the EU or the European Economic Area.
If photographs and their metadata are transferred outside the EU/EEA, it is done on legitimate grounds: The European Commission has determined that a sufficient level of data protection has been ensured in the recipient country, the transferee is Privacy Shield certified or the transfer takes place using standard clauses published by the EU Commission. Any data transfer is carried out on grounds required by the law and with adequate protective mechanisms.
11. Automated decision-making and profiling
We do not use data for automated decision-making or profiling.