Privacy policy
Data privacy is important to Exakta Photo and we want to be open and transparent about how we handle your personal data. We therefore have a policy that sets out how your personal data is processed and protected.
Who is the controller of your personal data?
Exakta Photo is the controller of the personal data we process about you and is responsible for your personal data in accordance with applicable data protection rules.
Exakta Photo AB
Brännögatan 5
211 24 Malmö
Sweden
Company registration number: 559259-3866
What data is processed?
The data processed is the photos taken during school photography at your school/preschool, your name, personal identity number (only for invoice payment), address, email address and phone number, as well as information about any orders you place with us and the information you provide when contacting us.
The data has either been collected directly from you during photography, obtained from your school, or provided by you and/or your guardian via our website or in other contacts with us.
If photos are ordered by the guardian of the person photographed, the orderer's personal data will be processed to fulfil the agreement we enter into with them, in the same way as the data we process about the pupil.
On what basis is your data processed?
For processing carried out solely on behalf of the school, Exakta Photo AB is only a processor for the school and not the controller. For questions about or objections to the school's processing of your personal data, you must contact the school. Exakta Photo AB does, however, independently process the class list in order to obtain consent from the pupil or guardian to access the school photos via our website. This processing is based on a balancing of interests, where our legitimate interest is to be able to obtain consent for further processing. We then process photos and other personal data only if such consent is given.
Consent is given when logging in on our website. We then use your personal data to set up and manage your personal account in order to display photos and to offer and sell products via our web shop.
If you order goods or services from us, your personal data will be processed to fulfil the agreement we then enter into to produce, deliver and charge for what has been ordered.
Finally, we process your personal data to handle your enquiries, complaints and any claims regarding orders. Depending on the data you provide, such processing takes place either so that we can fulfil our agreement with you or on the basis of a balancing of interests, where our legitimate interest is to be able to handle complaints and customer service matters.
How long do we keep your data?
If you do not order any products from us, the data will be processed until the end of the calendar year following the year in which consent was given, or until you withdraw your consent. You have the right to withdraw your consent to the processing at any time via "my page" and "Delete account".
When the data is processed to fulfil our agreement with you, it is processed until delivery has taken place and you have paid for the products you received. After that, the data is processed for marketing purposes for a maximum of 12 months after the customer relationship has ended. If you do not pay your invoice, your personal data will be processed for as long as the invoice is unpaid, or if our claim against you is sold on, for a maximum of 36 months from the time of sale.
In addition, we retain and process relevant parts of your personal data where required by law, for example to meet accounting obligations.
Right of access
You have the right to request information about the personal data we hold about you at any time, free of charge. If you have created an account with Exakta Photo, you can log in and download all the information we hold about you via "my page". If you have not created an account, you can contact Exakta Photo to access your data.
Right to rectification
You have the right to request rectification of your personal data if it is incorrect, including the right to complete incomplete personal data. If you have an account with Exakta Photo, you can edit your personal data on your account pages.
Otherwise, you are welcome to contact us with a request for rectification or completion.
The right to be forgotten and the right to object
You have the right to request at any time that we stop processing the personal data that Exakta Photo processes on the basis of your consent or for marketing purposes. Contact us if you wish to exercise this right.
You can object at any time to processing for marketing purposes. If you do, your personal data will be deleted. You can opt out of processing for direct marketing purposes, for example by:
- Changing the settings on your Exakta Photo account.
- Emailing Exakta Photo.
You also have a general right to object to our processing of your personal data. Exakta Photo will not continue to process the personal data unless we can demonstrate a legitimate interest in continuing that outweighs your interest, or where we need to continue processing the data to establish legal claims, such as a claim for payment.
Your right to restriction of processing
You can also request that the processing of your personal data be restricted (frozen) if you believe the personal data we process is inaccurate, if the processing is unlawful, if we no longer need to keep or process the data but you still need it to establish legal claims, or if you have objected to the processing and until we have handled your objection.
Right to lodge a complaint with a supervisory authority
If you believe that Exakta Photo processes your personal data incorrectly, you can contact us. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY), which is the supervisory authority. More information is available at www.imy.se.
To which recipients can your data be disclosed?
Your personal data is passed on to third parties only to provide the services offered to you, to enable companies to verify your address, to enable communication companies to send you an order confirmation, to storage and distribution companies in connection with the delivery of your order, to payment providers to handle your payment, to credit reference agencies for identity and credit checks, and to debt collection agencies. Please note that many of these companies have an independent right or obligation to process your personal data.