PRIVACY NOTICE

Review of this privacy policy

We may update this privacy notice from time to time as necessary. If we make changes, we will change the date at the top of this Policy, and if the changes are significant, we may provide you with additional notice such as adding a statement to the homepage of www.gillmaheu.com.  Please check this Policy regularly to see details about our information practices and the different ways you can help protect your privacy. We advise you to print a copy for your records.

If you have any question regarding our privacy policy, please contact us at info@gillmaheu.com

(written 24/05/2018, edited for new information 14/11/2023)

PRIVACY POLICY for GILL MAHEU PHOTOGRAPHY

As of 25 May 2018 the new General Data Protection Regulation (GDPR) comes into force across the European Union – the aim of the text is to give people much more control over how their personal data is stored and used.

The law requires us to tell you about your rights and our obligations to you in regards to the processing and control of your personal data, and whilst we have done our very best to be as transparent and concise as possible explaining how it affects you and your personal data when working with Gill Maheu Photography & www.gillmaheu.com we STRONGLY advise you to read the full official text here :  https://gdpr-info.eu/

1: INTRODUCTION

As a basic summary the General Data Protection Regulations gives people more power to protect their personal data with several rights regarding their personal data including:

The right of access by the data subject – the citizen has the right to know what data is being collected about them, why it’s being collected and how it’s being used.

The right to rectification: the citizen has the right to have data modified or updated.

The right to erasure (the right to be forgotten) : the citizen has the right to have their private data removed completely.

The right to restriction of processing: The citizen has the right to restriction of processing for example if the accuracy of the personal data is contested or the processing is unlawful

The right to data portability: the citizen has the right to receive a copy of the personal data concerning him or her

The right to object

The Right to withdraw data protection consent – the citizen has the right to withdraw his or her consent to processing of his or her personal data at any time.

This Privacy Policy will explain how your data is collected and used at Gill Maheu Photography. If you have any questions please feel free to contact us at info@gillmaheu.com.

2: ABOUT US

This site is run by Gill Maheu for Gill Maheu Photography – in this document “we”, “our” or “us” refers to Gill Maheu Photography. Our business address is Gill Maheu Photography, Combachenex, 74150 Massingy, France.

3: LEGAL BASIS FOR PROCESSING YOUR PERSONAL INFORMATION

The General Data Protection Regulation requires us to have a “legal basis” for processing (using) your personal data. The legal basis we rely on are:

– Where we have your specific consent to use your personal information for a specific purpose (for example, where we contact you by email).

– Where we process your personal information for our legitimate interests which includes the interests of Gill Maheu Photography to conduct and manage our services to allow us to give you the best possible service and most secure experience. Of course we will consider you and your rights and the impact upon them before processing your personal information.    Where the processing of personal information is necessary to perform a contract with you (for example, where you have purchased a product from us).

– Where the processing of personal information is necessary to comply with a legal or regulatory obligation that applies to us (for example, in some instances, we may be required to share your information with law enforcement agencies or other regulators).

4: OUT SOURCED SERVICES

Our website is hosted in the United Kingdom and we may also use outsourced services in countries outside the European Union from time to time in other aspects of our business, but they are all GDPR compliant.

The website is hosted by 34SP – here is their GDPR compliant Privacy Policy https://www.34sp.com/securityandprivacy

Our Client Management software company is LightBlue Software – here is their GDPR compliant Privacy policy – https://www.lightbluesoftware.com/legal/privacy_notice.php . We use Lightblue management software in order to organise and work with all our clients. Your information will be transferred to LightBlue Software Limited. Only Gill Maheu Photography will have access to your personal data stored on LightBlue’s system on behalf of Gill Maheu Photography. It will not be used for any other marketing purposes and will not be passed onto any third parties. LightBlue’s technical support team will have the means to access to your personal data but will never access or share this data other than by request from Gill Maheu Photography.

The client picture galleries are hosted by Pixieset – here is their GDPR compliant Privacy policy – https://pixieset.com/privacy/ (see part 19)

Our Album design service is provided by StompSoftware who are also GDPR compliant see here – http://www.stompsoftware.com/privacy-policy/

5: INFORMATION WE COLLECT WHEN YOU VISIT OUR SITE

We take seriously the protection of your privacy and confidentiality. We understand that all visitors to our website are entitled to know that their personal data will not be used for any purpose unintended by them, and will not accidentally fall into the hands of a third party other than stated above.

We undertake to preserve the confidentiality of all information you provide to us, and hope that you reciprocate.

We will collect personal information that you provide to us when you choose to get in contact with Gill Maheu Photography via the contact form (https://gillmaheu.com/contact/ ). to enquire about Gill Maheu Photography’s wedding or other photography services. By completing this contact form you agree to Gill Maheu contacting you about Gill Maheu Photography’s wedding or other photography services.  You will not be added to any mailing lists and will only be contacted by Gill Maheu personally in relation to your enquiry.

The data from the contact form is emailed to info@gillmaheu.com via our studio management company (LightBlue Software) and also stored on the website server. The website server is accessible by the website administrators for www.gillmaheu.com.

Your personal details are added to our studio management software, BUT will not be used for any marketing purposes nor will they be passed onto any third parties.

At any time you may review or update personally identifiable information that we hold about you, by sending a request to info@gillmaheu.com

If you wish to request for any email(s) containing your personal information to be deleted, please email info@gillmaheu.com (important please add DELETE to the subject line of your message. 

6: CLIENT DATA HELD ON FILE

We take care over the processes around looking after personal data stored on our physical systems Gill Maheu Photography holds the following personal data of clients: i) names ii) addresses iii) phone numbers iv) contracts v) timelines and other information pertinent to the service being provided within our password protected Client Management software on our password protected home office PC. Hard copy contracts are filed in our secure home office.

Client photos are safely stored within our password protected home office PC and backed up to external hard drives stored in locked cabinets.

7: SENDING A MESSAGE TO OUR TEAM

When you contact us, whether by telephone, through our website or by e-mail, we collect the data you have given to us in order to reply with the information you need. We record your request and our reply in order to increase the efficiency of our business.

We keep personally identifiable information associated with your message, such as your name and email address so as to be able to track our communications with you to provide a high quality service

8: INFORMATION WE OBTAIN FROM THIRD PARTIES

Although we do not disclose your personal information to any third party (except as set out in this notice), we sometimes receive data that is indirectly made up from your personal information from third parties whose services we use.

We use Google Analytics which provides us with information regarding how many people visit our site, the pages they visit and their general location.  This information is used solely for the purpose of ensuring our Website and our services are directed towards what our clients wish to see and what they would like to receive from us.  No such information is personally identifiable to you.

9: RETENTION PERIOD FOR PERSONAL DATA

Except as otherwise mentioned in this privacy notice, we keep your personal information only for as long as required by us:
–     to provide you with the services you have requested;
–     to comply with other law, including for the period demanded by our tax authorities (10years);
–     to support a claim or defence in court.

10: COOKIES

We will also collect certain information automatically when you visit our Site when you access our Site, we use “cookies” to make it easier for you to use our Site. These cookies record data about the pages you browse and the activities you carried out during your visit. Further details about our use of cookies is set out in our Cookie Policy here;

11: E MAILING LISTS

At the present time we do not use email lists – should we change this in the future you would of course be notified before being added to the list and given the option to opt out.

12: ENCRYPTION OF DATA

Please note the small green padlock in your browser. That means this website is secured using SSL (Secure Sockets Layer) technology. This ensures the website is safe, protected from hackers and information is encrypted for extra security.

13: EXTERNAL LINKS

Although this website only looks to include quality, safe and relevant external links, users are advised adopt a policy of caution before clicking any external web links mentioned throughout this website. (External links are clickable text / banner / image links to other websites.)

The owners of this website cannot guarantee or verify the contents of any externally linked website despite their best efforts. Users should therefore note they click on external links at their own risk and this website and its owners cannot be held liable for any damages or implications caused by visiting any external links mentioned.

14: SOCIAL MEDIA PLATFORMS

Communication, engagement and actions taken through external social media platforms that this website and its owners participate on are custom to the terms and conditions as well as the privacy policies held with each social media platform respectively.

Users are advised to use social media platforms wisely and communicate / engage upon them with due care and caution in regard to their own privacy and personal details. This website nor its owners will ever ask for personal or sensitive information through social media platforms and encourage users wishing to discuss sensitive details to contact them through primary communication channels such as by telephone or email.

This website may use social sharing buttons which help share web content directly from web pages to the social media platform in question. Users are advised before using such social sharing buttons that they do so at their own discretion and note that the social media platform may track and save your request to share a web page respectively through your social media platform account.

15: SHORTENED LINKS IN SOCIAL MEDIA

This website and its owners through their social media platform accounts may share web links to relevant web pages. By default, some social media platforms shorten lengthy URLs [web addresses] (this is an example: http://goo.gl/fbsS).

Users are advised to take caution and good judgement before clicking any shortened URLs published on social media platforms by this website and its owners. Despite the best efforts to ensure only genuine URLs are published many social media platforms are prone to spam and hacking and therefore this website and its owners cannot be held liable for any damages or implications caused by visiting any shortened links.

16: THIRD PARTY MARKETING

We do not sell on your information to any third parties for marketing or other purposes.

17: THIRD PARTY ADVERTISING ON OUR WEBSITE

Third parties may not advertise on our website.

18: FACIAL RECOGNITION SOFTWARE

When the images are processed in Lightroom and Photoshop no facial recognition data is added to the image.  Please check whether you have disabled the Facial recognition option in Facebook etc to avoid it being activated there.

19: CLIENTS AND WEDDING GUESTS CAPTURED IN PHOTOS

Under GDPR legislation, a photograph may in some instances constitute a form of personal data where they can be processed to allow “the unique identification or authentication of a natural person”. Gill Maheu Photography will never photograph an individual as a means of unique identification or authentication unless consensually contracted to do so. Guests at weddings appear in photos taken by Gill Maheu Photography as a part of the visual recording of the event in photos. Guests captured in portraits or in group photos do so as part of the event and their rights are protected by Gill Maheu Photography as detailed in this privacy policy.

In terms of explicit GDPR compliance, Wedding clients and guests are photographed within the parameters of GDPR legislation on the basis of ‘legitimate interests’. The taking of photographs of wedding guests when viewed as a form of processing personal data is necessary for the legitimate interests of Gill Maheu Photography as a photography business unless there is a good reason to protect a given individual’s personal data which overrides those legitimate interests.

Operating within the parameters of legitimate interests as laid out in GDPR legislation, the disproportionate effort involved in providing privacy policy information to all wedding guests at the event and the degree to which it would distract us from performing our job renders it infeasible to do. Wedding clients are therefore requested in their contract to direct their guests to read this privacy policy in advance of the event and to advise them to contact us in advance with any concerns around the processing of their personal data, namely being photographed.

20: USE OF THE IDENTIFIABLE IMAGE

In accordance with GDPR regulations, clients have several options where it comes to image display. While it definitely benefits Gill Maheu Photography as a business to be able to show new, regular and exemplary work via this site or corresponding social media channels, and/or to share these images with co-suppliers e.g. wedding venues, it is recognised that certain clients may wish to place limitations on this sharing.

Therefore clients have the right to request any of the following:
– anonymised accompanying text;
– use of initials only;
– online photograph samples showing unidentifiable images only;
– online photograph samples showing non-people images (details only);
or to fully request no online images to be shared.

In addition, clients may request in writing that identifiable and commissioned images be erased from online sources (website, blog, Facebook page, Instagram page) at any future point in time by contacting info@gillmaheu.com (important please add DELETE to the subject line of your message).

Any image data will be used appropriately and with consent (your contract).

For any other questions or concerns, please contact me I will be more than happy to answer your questions.

 21: CLIENT GALLERIES

Gill Maheu Photography creates a client gallery for each client to whom photos are delivered as part of the services contracted. The client galleries are externally hosted currently by PixieSet. The link to their privacy policy can be found above.

To access client gallery, you will be asked to enter personal data (email address and a password). The personal data (email address) is stored within Pixieset, and on their servers and will be used to email you to let you know that your Gallery is available to view. Once you have accessed their gallery with the PIN number and made your selection for the album choices you can request for the gallery to be removed. Any such emails sent to you will only be during the year for which the gallery is live. After a year the gallery will be automatically deleted and your personal data (email address) is removed from Pixieset.

Only Gill Maheu will have access to your email address on Pixieset. It will only be used as detailed above, will not be used for any other marketing purposes and will not be passed onto any third parties. PixieSet’s technical support team will have the means to access to your personal data (email address) but will never access or share this data other than by request from Gill Maheu.

If you do not wish for your email to be in Pixieset we suggest that you do not log into any Gill Maheu Photography client galleries. You can arrange to come to the office for an In Person sales session.

We cannot guarantee or verify the contents of any externally linked website despite our best efforts. Users should therefore note that they click on external links at their own risk and we cannot be held liable for any damages or implications caused by visiting any external links mentioned 

22: INFORMATION RELATING TO YOUR METHOD OF PAYMENT

Your payment information is never taken by us or transferred to us either through our website or otherwise.  We provide you with our banking details or should you choose it the address to which a cheque should be sent. We do not, at this time, provide a means for Direct Debit set up or payment.

23: SENSITIVE DATA.

We will never ask for this sort of personal data from you. What is sensitive data? The definition of sensitive data is data consisting of your ethnic or racial origins, your political opinions, religious or philosophical beliefs, if you have trade union membership, about your genetic or biometric data, data concerning your health or data concerning a natural person’s sex life or sexual orientation.