Last updated: November 2025
privacy & cookie policy
14. Updates to This Policy
contents
1: Introduction
2: Purpose
3. What Personal Data We Collect
4. Legal Basis for Processing
5. How We Use the Data
6. Third-Party Data Processors
7. Transfers of Data Outside the EEA
8. Image Rights & Client Consent
9. Data Retention
10. Use of the Website & Cookies
11. Security of Data
12. Your Rights Under GDPR
13. Legitimate Interest and Archival Use
This Privacy and Cookie Policy describes how Tetiana Prykhodko Photography and Marketing (“we,” “our,” or “us”) collects, uses, and protects personal data in accordance with the EU General Data Protection Regulation (GDPR) and the Norwegian Personal Data Act (Personopplysningsloven).
Your privacy matters to us. We follow all current Norwegian and EU regulations for processing personal data so that you can feel safe when visiting our website or using our services.
Business Information:
Tetiana Prykhodko Photography and Marketing
Kaptein Koss’ vei 8, 2013 Skjetten, Norway
Org.nr 935 363 292
Email: info@tanyaphotography.no
introduction
The purpose of this policy is to inform you how we handle personal data — what we collect, how it is used, how long we keep it, and your rights regarding that data.
Purpose of This Policy
We only collect information necessary to provide and improve our services:
- Identification data: name, phone number, email, address (for bookings or invoicing).
- Booking and session details: date, type of session, family members’ names, preferences.
- Images and photos created during your session.
- Payment information: processed securely by Vipps, Klarna or Stripe (we do not store card details).
- Technical information: IP address, browser type, device, and cookies when you visit our website.
What Personal Data We Collect
We process your personal data based on:
- Performance of a contract (Art. 6 (1)(b) GDPR) — to fulfil bookings, deliver images, and handle payments.
- Legal obligation (Art. 6 (1)(c)) — for bookkeeping and tax compliance.
- Legitimate interest (Art. 6 (1)(f)) — for communication, website improvement, and maintaining customer relationships.
- Consent (Art. 6 (1)(a)) — for newsletter sign-up and portfolio/marketing image use.
Legal Basis for Processing
- Responding to inquiries and managing bookings.
- Preparing contracts and invoices.
- Delivering and maintaining your online gallery.
- Processing payments and accounting.
- Communicating updates and offers (only with consent).
- Improving our website and user experience through analytics.
How We Use the Data
We only share data with trusted third-party providers who comply with GDPR:
- Dubsado – contracts, forms, and client management.
- Showit – website platform and hosting.
- Mailchimp – newsletters and marketing emails.
- Google Analytics 4 – anonymous website traffic analysis.
- Gmail (Google Workspace) – email communication.
- Vipps, Klarna, Stripe – secure payment processing.
Third-Party Data Processors
Some of our service providers (e.g., Google, Dubsado, Mailchimp) may process data outside the EEA.
In such cases, transfers occur only to countries with adequate data-protection agreements or under EU Standard Contractual Clauses, ensuring equivalent GDPR protection.
Transfers of Data Outside the EEA
As a newborn and family photography studio, image data is central to our work.
- Photographs are processed only to deliver your purchased session.
- Portfolio or marketing use of any image happens only with your explicit written consent in the signed contract.
- Consent can be withdrawn anytime by contacting info@tanyaphotography.no.
- All textiles, props, and surfaces in the studio are cleaned and sanitized after every session; no one other than clients and staff enters the workspace.
- Client galleries are stored securely and deleted after 6 months unless otherwise agreed.
Image Rights & Client Consent
- Contact form inquiries: 12 months after last contact.
- Contracts & invoices: 5 years (Norwegian accounting requirement).
- Client galleries & photos: 6 months after final delivery.
- Newsletter data: until unsubscribed. After these periods, data is permanently deleted unless longer retention is required by law or legitimate interest (e.g., legal claims).
Data Retention
We apply strict security measures to protect all stored information:
- Password-protected and encrypted systems.
- Two-factor authentication where available.
- Regular backups and secure connections (SSL).
- Access limited to authorized personnel only.
Security of Data
You have the right to:
- Access a copy of your personal data.
- Request correction or deletion of data.
- Restrict or object to processing.
- Withdraw consent at any time.
- Data portability (transfer to another provider).
- File a complaint with the Norwegian Data Protection Authority (Datatilsynet) if you believe your data is misused.
Your Rights Under GDPR
In rare cases, we may retain selected, anonymised images or session data for training, safety, or historical portfolio reference.
Such retention is based on legitimate interest under Art. 6 (1)(f) GDPR and is never used publicly without your written consent.
Legitimate Interest and Archival Use
This Privacy & Cookie Policy may be updated periodically to reflect legal or operational changes.
The latest version will always be available on www.tanyaphotography.no.
Last updated date is shown at the top of the page.
Updates to This Policy
Tetiana Prykhodko Photography and Marketing
Kaptein Koss’ vei 8, 2013 Skjetten, Norway
Org.nr 935 363 292
info@tanyaphotography.no
Kaptein Koss’ vei 8, 2013 Skjetten, Norway
Org.nr 935 363 292
info@tanyaphotography.no
Privacy policy
Design by Tonic Site Shop & Nordicdesign.studio
|
Org.nr 935 363 292
|
© Newborn by Tanya 2025
|