Privacy Policy

1. General Information

1. This Privacy Policy applies to the website available at: https://familyphotographyglasgow.com/p.
2. The website operator and personal data controller is Kinga Szulz, 7 Blochairn Pl, Glasgow G21 2EB, UK.
3. The operator's contact email address is: kingaszulzphotolifestyle@gmail.com.
4. The Operator is the Controller of personal data voluntarily provided by users through the Website.
5. The Website processes personal data for the following purposes:
   • Managing and distributing newsletters.
6. The Website collects information about users and their behaviour through:
   • Data voluntarily entered into forms and stored in the Operator's systems.
   • Cookies stored on users' devices.

2. Data Protection Measures Used by the Operator

1. Login areas and personal data submission forms are protected by SSL encryption. This means that personal data and login credentials entered on the Website are encrypted on the user's device and can only be read by the destination server.
2. Personal data stored in the database is encrypted so that only the Operator, who holds the appropriate encryption key, can access it. This helps protect the information in the event of a database security breach.
3. User passwords are stored in hashed form. Hashing is a one-way process that cannot be reversed and is a recognised standard for securely storing passwords.
4. The Operator periodically changes administrative passwords.
5. To minimise the risk of unauthorised access to data, the Operator uses complex passwords containing uppercase and lowercase letters, numbers and special characters, with a minimum length of eight characters.
6. The Website uses two-factor authentication as an additional security measure for logging in.
7. An important part of data protection is the regular updating of all software used by the Operator to process personal data, including software components.

3. Hosting

1. The Website is hosted and technically maintained on servers operated by: other_company.
2. To ensure technical reliability, the hosting company maintains server-level logs, which may include:
   • Requested URLs (addresses of pages and files).
   • Time of incoming requests.
   • Time of sending responses.
   • Client device identification through the HTTP protocol.
   • Information about errors occurring during HTTP transactions.
   • URLs of previously visited websites (referrer links), where users access the Website through an external link.
   • Information about the user's browser.
   • IP addresses.
   • Diagnostic information related to the self-service ordering of services through forms on the Website.
   • Information related to emails received by and sent from the Operator.

4. Your Rights and Additional Information About Data Processing

1. In certain circumstances, the Controller may share your personal data with other recipients where necessary to fulfil a contract with you or to comply with legal obligations. These recipients may include:
   • Hosting companies acting as data processors.
   • Law firms and debt collection agencies.
2. Your personal data will not be processed for longer than necessary to fulfil the purposes for which it was collected, taking into account applicable legal requirements, such as accounting regulations. Marketing data will not be processed for longer than three years.
3. You have the right to request from the Controller:
   • Access to your personal data.
   • Rectification of inaccurate personal data.
   • Erasure of your personal data.
   • Restriction of processing.
   • Data portability.
4. You have the right to object to the processing referred to in Section 3.3(c), where personal data is processed on the basis of the Controller's legitimate interests, including profiling. However, this right may not apply where compelling legitimate grounds for processing override your interests, rights and freedoms, particularly where processing is necessary for establishing, exercising or defending legal claims.
5. You have the right to lodge a complaint regarding the Controller's activities with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland.
6. Providing personal data is voluntary but necessary for the operation and use of certain Website services.
7. Automated decision-making, including profiling, may be used in relation to you for the purpose of providing services under a contract and conducting direct marketing activities by the Controller.
8. Personal data is transferred to third countries within the meaning of data protection legislation. This means that your data may be transferred outside the European Union.

5. Information Collected Through Forms

1. The Website collects information voluntarily provided by users, including personal data where such data is submitted.
2. The Website may record connection parameters, including timestamps and IP addresses.
3. In some cases, the Website may store information that allows data submitted through a form to be associated with the email address of the user completing it. In such cases, the user's email address may appear within the URL of the page containing the form.
4. Data submitted through forms is processed for purposes corresponding to the function of each form, such as handling service requests, responding to business enquiries or registering services. The context and description of each form clearly explain its purpose.

6. Administrator Logs

1. Information about users' behaviour on the Website may be recorded in logs. This information is used for Website administration purposes.

7. Important Marketing Technologies

1. The Operator uses Google Analytics (Google Inc., based in the United States) to analyse Website traffic statistics. The Operator does not provide personal data to this service provider, only anonymised information. The service uses cookies stored on users' devices. Users can view and edit information about their advertising preferences collected by Google's advertising network using the following tool:

   https://www.google.com/ads/preferences/

2. The Operator uses the Facebook Pixel. This technology enables Facebook (Facebook Inc., based in the United States) to recognise that a person registered on Facebook has visited the Website. Facebook processes this information as an independent data controller. The Operator does not provide Facebook with any additional personal data. The service uses cookies stored on users' devices.
3. The Operator uses tools to analyse user behaviour by creating heatmaps and recording interactions on the Website. This information is anonymised before being transferred to the service provider, ensuring that individual users cannot be identified. In particular, passwords and other personal data entered by users are not recorded.
4. The Operator uses automation tools to manage certain Website functions, such as sending an email to a user after they visit a specific page, provided that the user has consented to receiving commercial communications from the Operator.

8. Information About Cookies

1. The Website uses cookies.
2. Cookies are small pieces of data, particularly text files, stored on the user's device and used to enable the Website to function properly. Cookies typically contain the name of the website from which they originate, their storage duration and a unique identifier.
3. The Website Operator is responsible for placing cookies on users' devices and accessing them.
4. Cookies are used for the following purposes:
   • Maintaining a user's session after logging in, so that they do not need to re-enter their username and password on every page.
   • Supporting the activities described in the section entitled "Important Marketing Technologies".
5. The Website uses two main types of cookies:
   • Session cookies: Temporary files stored on the user's device until they log out, leave the Website or close their browser.
   • Persistent cookies: Files stored on the user's device for a period specified in the cookie settings or until they are deleted by the user.
6. Web browsers generally allow cookies to be stored on users' devices by default. Users can change these settings, delete existing cookies or automatically block cookies. Detailed information is available in the browser's help section or documentation.
7. Restricting the use of cookies may affect certain functions available on the Website.
8. Cookies stored on users' devices may also be used by third parties cooperating with the Website Operator, including Google (Google Inc., USA), Facebook (Facebook Inc., USA) and Twitter (Twitter Inc., USA).

9. Managing Cookies – How to Give and Withdraw Consent

1. If users do not wish to receive cookies, they can change their browser settings. Please note that disabling cookies necessary for authentication, security and maintaining user preferences may make it difficult, or in some cases impossible, to use certain Website features.
2. To manage cookie settings, select your browser from the list below and follow the relevant instructions:

   Desktop browsers:

   • Microsoft Edge
   • Internet Explorer
   • Google Chrome
   • Safari
   • Mozilla Firefox
   • Opera

   Mobile devices:

   • Android
   • Safari (iOS)
   • Windows Phone