Privacy Policy | Sommerkamp

Introduction.

www.sommerkamp.me is owned by Sommerkamp Projects & Photography. SP&P is a single business company owned by Sandra Sommerkamp, incorporated in Munich and registered at the Chamber of Crafts in Bavaria (no. 7126869).

SP&P is committed to being fully compliant with the General Data Protection Regulation (GDPR); the place of jurisdiction is Munich (DSGVO).

I fully understand the importance of protecting your data and your privacy. Therefore I take great care considering how your personal data is used, stored and shared. Your personal data will be collected and used for the purpose of this business only, but always taking into consideration my obligations under the law and your rights in relation to the personal data that is held. This Privacy Notice will outline how I collect, use and disclose your personal data so please take care to read it carefully.

Definition.

In this Privacy Notice, the following terms shall have the following meanings:

"SP&P" is used as a short form for the company Sommerkamp Projects & Photography, owned by Sandra Sommerkamp

“data” means all information that relates to and identifies a living individual that you have given to Sandra Sommerkamp via mail, email correspondence using info@sommerkamp.me, in personal conversations at meetings or on this website, e.g. in the contact submission form

"I" means Sandra Sommerkamp, owner of the company Sommerkamp Projects & Photography

“you / your / client” means the client or anyone engaged with any service provided by Sandra Sommerkamp, respectively her company Sommerkamp Projects & Photography

How do I collect your data?

From the information you provide me when you enquire via email, telephone or, my website contact form
From the information you provide me during a meeting
From the information you provide me when entering into a contract with Sommerkamp Projects & Photography
When you communicate with me electronically, via mail or by telephone
From publicly available sources, platforms; social media
When you interact with my website and technical data about your browsing actions and patterns is automatically collected by third parties
I may receive personal data about you from third parties (including, for example, providers of web analysis services) who may also use cookies, over which I have no control. These cookies are likely to be analytical/performance cookies or targeting cookies. For example, my website uses Google Analytics, a web analytics service provided by Google, Inc. Google Analytics uses cookies (text files placed on your computer) to help website operators analyze how users use and interact with my site.

What data do I collect?

All data collected is the minimum required to successfully run this business and carry out the photography services provided to my clients.

Full name
Your address
Email address
Telephone numbers
Business or Company name
Job title
Profession
Financial Information such as bank account details
Your preferences and requirements in relation to the photography services I provide
Images are taken when engaging in my photography services
My website will not store any identifying information about your visit on your computer apart from a small text file called a cookie, which in itself doesn’t contain any identifying information
Depending on the configuration of your browser, the pages and images you view on my website may be stored on your computer. This is known as caching
I may collect information about your visit to our website including the date and time, site response times, downloads, errors, page visit time length, a route to my website from other websites, including the address of the other sites, or route to our website from search engine links including the search engine address and the search term used
Other technical information such as your internet protocol (IP) address, the browser type and version with plug-in types and version, the type of computer or device you use to access my website and the operating system and internet services providers utilized and other similar information

How do I use your data?

My use of personal data will always have a lawful basis, either because it is necessary for my performance of a contract with you, because you have consented to our use of personal data (e.g. by subscribing to emails or by requesting our services), or because it is in our legitimate interests. In general, your data may be used in the following ways:

So that I can supply you with my products and services (please note that I require your personal data in order to enter into a contract with you)
So that I can personalize and tailor my products and services for you and your experience within those services
Replying to emails and inquiries from you;
Market research
With your permission and/or where permitted by law, for customer relationship management or marketing purposes, I may contact you by email and/or telephone and/or text message and/or post with information, news and offers on my services. I will not, however, send you any unsolicited marketing or spam and will take all reasonable steps to ensure that we fully protect your rights and comply with my obligations under the GDPR and the Privacy and Electronic Communications (EC Directive) Regulations 2003
Technical data collected regarding your visit to our website is used to improve our website and content for users and their devices.

How long will the data be stored?

When I collect or process your personal data, I will only keep it for as long as it is necessary for the purpose for which it was collected or as required by law and any relevant authorities. At the end of this retention period, your data will either be deleted or anonymized so that it can be used in a non-identifiable way for example for statistical analysis and planning.

Please see below some examples of our customer data retention periods following termination of a relationship with an organization or individual:

Communications including emails, calendar entries and contact details - 7 years
Financial data and transactions - 7 years
Contracts - 7 years
Images and image bank – in perpetuity unless asked to delete.

Where do I store your data?

Your personal data will only be held on safeguarded applications and by organizations that are GDPR compliant:

I use Googlemail and Hover for all of our email correspondence. My back up system for all email correspondence and data is Apple iCloud.
Your data may be stored within servers administered by WeTransfer and PicDrop
For clients purchasing images via the website, we do not collect or store any financial or credit card details ourselves. Any payments are made via Paypal or Credit Card Service from this Website Provider www.wix.com, who act on our behalf in this respect

Data Security.

Data security is very important to me. To protect your data I have taken suitable measures to safeguard and secure it as follows:

All devices that have potential access to your data are password-protected, including desktop computers, laptops, mobiles, and tablets.
As mentioned above, your personal data will only be held on safeguarded applications and by organizations that are GDPR compliant.
I limit access to your personal data to only those agents, contractors and other third parties who have a business need to know. They will only process your data on our instructions.
I have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

Do I share your data?

I may share your data with others, but only with your permission to do so.

I may sometimes contract with third parties to supply products and services to you on our behalf. This may include payment processing, delivery of goods and outsourcing. In some cases, the third parties may require access to some or all of your data. Where any of your data is required for such a purpose, I will take all reasonable steps to ensure that your data will be handled safely, securely, and in accordance with your rights, our obligations, and the obligations of the third party under the law.

My website may include links to third-party websites. Clicking on those links may allow third parties to collect or share data about you. I do not control these third-party websites and am not responsible for their privacy statements, content or security. When you leave our website, we encourage you to read the privacy notice of every website you visit.

What are your rights in relation to your personal data?

The following is an overview of your rights under the GDPR. You have the right to:

Be informed about my collection and use of personal data;
Request access to the personal data I hold about you or your employees;
The correction of your personal data if any that I hold about you or your employees is inaccurate or incomplete;
Request the deletion of any personal data I hold about you or your employees in specific circumstances, for example when you withdraw your consent or object and I have no legitimate overriding interest, or once the purpose for which I hold the data has come to an end. (Please note I hold some personal data as images in our secure files until or unless I am asked to delete them.) If you would like any of your personal data deleted, whether it be in image form or otherwise, please contact me using the details in the Contact section of this policy. Please note that the deletion of certain personal data, such as imagery, may negatively impact the services I can provide.
Restrict the processing of your personal data in specific circumstances. Please note that I am still able to keep your information, but I won't use your data in the future in the way that you have restricted it;
Request a copy of the personal data I hold of you to transfer to another service or organization;
To object to me using personal data for particular purposes; and
ask for a review by a Director of any decision that was made based solely on automatic processing of your data, and to ask us to carry out regular checks to ensure any profiling processes are being carried out as they should be.

How can you make a complaint?

If you have any cause for complaint about our use of your personal data, please contact info@sommerkamp.me. I will do my best to resolve the problem for you immediately.

If you have any questions about any of the subjects covered within this Privacy Notice, please contact:

Sommerkamp Projects & Photography

Sandra Sommerkamp [owner]

phone: +49 (0) 89 443 109 27

web: www.sommerkamp.me

mail: info@sommerkamp.me

road no.: 7126869

VAT no.: DE299090609

If you do not accept and agree with this Privacy Notice, you must contact info@sommerkamp.me and any personal data we hold for you will be deleted.

Changes to Privacy Policy.

Any changes that we make to this Privacy Notice will be posted on this page. Please check this page regularly to ensure that you are aware of updates. I reserve the right to notify any users of my services of any major change to my policies by email, except for users that have elected to opt-out of communications from me. This document was last reviewed on March 13th, 2020