Anna Voloshyna Photography
GDPR Compliance
At Anna Voloshyna Photography, we are committed to ensuring compliance with the General Data Protection Regulation (GDPR) to protect the privacy and rights of individuals in the European Union (EU), including those in the Netherlands. This page outlines our efforts to comply with the GDPR and explains how we handle personal data in accordance with its provisions.
Data Controller
- Anna Voloshyna Photography, located at https://voloshyna.com,is the designated Data Controller responsible for ensuring compliance with the GDPR.
Lawful Basis for Processing
- We process personal data lawfully, transparently, and for specified purposes. The lawful bases for processing personal data include:
- Consent: We obtain explicit consent from individuals before processing their personal data for specific purposes.
- Contractual Necessity: Processing personal data is necessary for fulfilling contractual obligations with individuals.
- Legal Obligation: Processing personal data is necessary to comply with legal obligations under Dutch and EU law.
- Legitimate Interests: Processing personal data is necessary for legitimate interests pursued by Anna Voloshyna Photography, provided that such interests do not override the rights and freedoms of individuals.
Rights of Data Subjects
- Individuals whose personal data we process have the following rights under the GDPR:
- Right to Access: Individuals have the right to request access to their personal data and obtain information about how it is processed.
- Right to Rectification: Individuals can request the correction of inaccurate or incomplete personal data.
- Right to Erasure: Individuals have the right to request the deletion of their personal data under certain circumstances, also known as the "right to be forgotten."
- Right to Restriction of Processing: Individuals can request the restriction of processing their personal data under certain circumstances.
- Right to Data Portability: Individuals have the right to receive their personal data in a structured, commonly used, and machine-readable format and transmit it to another controller.
- Right to Object: Individuals can object to the processing of their personal data in certain situations, including direct marketing.
- Rights Related to Automated Decision Making and Profiling: Individuals have the right not to be subject to decisions based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them.
Data Protection Officer (DPO)
- Anna Voloshyna Photography appoints a Data Protection Officer (DPO) responsible for overseeing GDPR compliance and handling data protection inquiries. The DPO can be contacted at anna@voloshyna.com
Data Security Measures
- We implement appropriate technical and organizational measures to ensure the security and confidentiality of personal data and protect it against unauthorized or unlawful processing, accidental loss, destruction, or damage.
Data Breach Notification
- In the event of a data breach that is likely to result in a risk to the rights and freedoms of individuals, we will notify the relevant supervisory authority and affected individuals without undue delay, as required by the GDPR.
International Data Transfers
- We may transfer personal data to countries outside the European Economic Area (EEA) only if adequate safeguards are in place to ensure an equivalent level of protection for personal data as required by the GDPR.
Records of Processing Activities
- We maintain records of our processing activities, including purposes of processing, categories of personal data processed, and recipients of personal data, as required by the GDPR.
GDPR Compliance Review
- We regularly review and update our data protection policies and practices to ensure ongoing compliance with the GDPR and other relevant data protection laws.
Contact Information
- For inquiries regarding GDPR compliance or to exercise your rights under the GDPR, please contact us at anna@voloshyna.com
By using our services and providing your personal data, you acknowledge that you have read and understood our GDPR compliance efforts outlined on this page. If you have any questions or concerns about our GDPR compliance, please contact us.