At ALR Photography, we are committed to protecting the privacy and personal data of our customers, suppliers, employees, and other stakeholders. We operate in compliance with the General Data Protection Regulation (GDPR) as well as Romanian Law no. 190/2018, which implements GDPR in Romania. This policy outlines how we collect, process, store, and share personal data in Romania.
ALR Photography is legally registered as ROBERTS AARON LEE PERSOANA FIZICA AUTORIZATA with registration number CUI 41431477. Our registered address is Bulevardul Eroilor 44, Ap.3, Cluj-Napoca, Cluj, 400129 Romania.
Data Collection and Processing
We collect and process personal data of our customers, suppliers, employees, and other stakeholders for legitimate purposes. This includes but is not limited to:
Analytics: We use services such as Google Analytics (https://policies.google.com/privacy) to collect data on website traffic and user behaviour. This information is used to improve our website and services. We rely on our legitimate interest in improving our services as the lawful basis for this processing.
Payments: We utilise secure and trusted payment service providers, including Stripe (https://stripe.com/privacy), Braintree (https://www.paypal.com/us/webapps/mpp/ua/legalhub-full), and PayPal (https://www.paypal.com/us/webapps/mpp/ua/privacy-full), for processing payments made on our website. The personal data collected during the payment process is used solely for the purpose of facilitating the transaction.
- Booking Service: Our self-hosted booking service collects personal data such as name, contact information, and session preferences to facilitate the reservation of photo sessions. This information is processed based on the legitimate interest of fulfilling a contract or taking steps at the request of the data subject.
- Contact Forms: Our contact forms allow individuals to request information or communicate with ALR Photography. The personal data provided through these forms is used solely for the purpose of responding to inquiries and is processed based on the legitimate interest of providing information or services requested by the data subject.
- Client Areas: Our client areas provide access to features such as payment history and photo proofing galleries for our customers. The personal data collected for these purposes is processed based on the performance of a contract or taking steps at the request of the data subject.
We only collect data that is necessary for the specified purposes and do not retain data for longer than necessary. We take appropriate measures to ensure the accuracy and security of the data we collect.
We may share personal data with the following third-party service providers who assist us with our operations:
- Payment Processors: We share personal data with payment service providers, including Stripe, Braintree, and PayPal, to facilitate secure payment transactions.
- Hosting and Website Service Providers: We work with hosting and website service providers who may have access to personal data as necessary to provide their services and ensure the proper functioning and security of our website.
We ensure that any third-party service providers we work with are GDPR compliant and adhere to appropriate data protection standards. We have established data processing agreements with these providers to safeguard the personal data shared with them.
We may also share personal data if required by law or legal proceedings, or to protect our legal rights.
Data Subject Rights
Data subjects have the right to access, correct, and delete their personal data, as well as to object to or restrict the processing of their data. We will respond to any data subject requests in a timely manner and in compliance with GDPR and Romanian law.
To facilitate these rights, we have implemented the following pages on our website:
- Data Rectification Request: This page (https://alr-photography.com/client/data-rectification-request/) allows data subjects to request the rectification of any inaccurate or incomplete personal data we hold about them.
- Forget Me: This page (https://alr-photography.com/client/forget-me/) enables data subjects to request the erasure of their personal data from our records, subject to legal obligations and legitimate interests.
- Request Data: This page (https://alr-photography.com/client/request-data/) provides data subjects with the ability to request a copy of their personal data that we hold, in a portable and commonly used format.
If you have any questions or concerns regarding our GDPR policy or how we collect, process, store, or share personal data, please contact us at [email protected] or at our registered address in Romania.
Updates to the Policy
We may update this GDPR policy from time to time to reflect changes in our operations or legal requirements. We encourage you to review this policy periodically to stay informed.
Last updated: 4th July 2023