Privacy Policy

Last updated: 4 April 2025

This Privacy Policy describes how your personal data is collected, used, and shared when you visit or interact with our services, in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and Finnish data protection legislation.

Controller of the Data

Business name: Janka Pasztory Photography
Business ID (Y-tunnus): 2808239-4
Address: Ristiaallokonkatu 6 G 93, 02320 Espoo, Finland
Email: info@jankapasztory.com
Phone: +358 440 848485

Purpose and Legal Basis for Processing Personal Data

We process personal data to:

Respond to inquiries and communicate with clients
Fulfill photography service agreements and deliver ordered products
Improve our services and develop customer experience
Maintain accounting and fulfill legal obligations
Send marketing and promotional emails (with consent)
Schedule meetings and sessions
Deliver digital photo galleries

The legal bases for processing are:

Consent – e.g. for newsletters or marketing communication
Contract – e.g. when entering into a photography service agreement
Legal obligation – e.g. invoicing and accounting under Finnish law
Legitimate interest – e.g. improving services, website analytics

What Data We Collect

We may collect and process the following personal data:

Full name
Email address
Phone number
Billing and delivery address
Social media handles (optional)
Date of birth of minor participants (for contractual and legal purposes)
Order and payment history
Feedback and communication

Automatically collected data (via website and cookies):

IP address
Browser type and version
Device and operating system
Referral URLs and page interactions
Cookie identifiers

Cookies and Tracking Technologies

We use cookies and similar tracking technologies (e.g. Meta Pixel, Google Analytics cookies) to personalize your experience, analyze traffic, and improve our website and marketing effectiveness.

Cookies are only activated after you have given explicit consent via our cookie banner.
You can manage or withdraw your cookie consent at any time through the cookie banner or your browser settings.

Newsletter and Email Marketing

We use MailerLite as our email marketing platform. When you subscribe to our newsletter, your name and email address are stored on MailerLite’s secure EU-based servers.
You can unsubscribe at any time via the unsubscribe link or by contacting us directly.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy, including legal, accounting, or reporting requirements.

For fulfilling services: data is stored for up to 12 months after service delivery
For legal obligations (e.g. bookkeeping): data is retained for 6 years in compliance with the Finnish Accounting Act

Personal data will be securely deleted when it is no longer required.

Third-Party Disclosures and International Transfers

We do not sell or share your data for marketing purposes with third parties. However, we use several trusted service providers to operate our business and provide a seamless experience for our clients.

Personal data may be processed by:

MailerLite – for newsletter and marketing emails
Meta Platforms (Facebook, Instagram) – for marketing and targeted advertising through Meta Pixel
Wix.com – as our website hosting platform, including analytics and contact form processing
Zoho Mail – for secure email communication
Google Analytics – for analyzing website traffic and visitor behavior
Pixieset – for image delivery, proofing, and digital downloads
Calendly – for online scheduling and appointment booking

Some of these providers may process data outside the EU/EEA (e.g. Meta, Zoho, Google, Pixieset). In such cases, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission or participation in the EU-U.S. Data Privacy Framework if applicable.

Data Security

All personal data is stored electronically on secure servers protected by passwords and firewalls. Access is restricted to the data controller and trusted processors operating under confidentiality agreements.

Your Rights as a Data Subject

Under the GDPR, you have the following rights:

Right to access your personal data
Right to correct inaccurate or incomplete data
Right to request deletion ("right to be forgotten")
Right to restrict processing
Right to object to processing (e.g. for marketing purposes)
Right to data portability
Right to withdraw consent at any time

To exercise any of these rights, contact us at info@jankapasztory.com. We will respond within one month.

You also have the right to lodge a complaint with the supervisory authority in Finland:

Office of the Data Protection Ombudsman
www.tietosuoja.fi

Children’s Privacy

We do not knowingly collect data from anyone under the age of 18 without parental consent. If you believe your child has provided personal data, please contact us. We will delete the information promptly if consent was not obtained.

Changes to This Privacy Policy

We may update this Privacy Policy to reflect legal or operational changes. You will be notified via email or website notice if any significant changes are made.

Contact

If you have any questions, requests, or concerns about your data, contact us at:
info@jankapasztory.com
Ristiaallokonkatu 6 G 93, 02320 Espoo, Finland