PRIVACY POLICY
Information pursuant to Articles 13, 14 and 21 of the UK GDPR
PREAMBLE
Information pursuant to Articles 13, 14 and 21 of the EU General Data Protection Regulation (GDPR).
Preambel
We hereby inform you about our processing of your personal data and the claims and rights to which you are entitled according to data protection regulations. The exact type of data that is processed and how it is used is determined by the services you have requested or that have been arranged with you.
1. Who is responsible for data processing and who can I contact?
Star Vision Photography
172 Nuncargate Road, Kirkby in Ashfield NG17 9EA
team@starvisionphotography.co.uk
2. What sources and data do we use?
We process the personal data that we receive from you as part of our business relationship. In addition, we process, to the extent necessary for the provision of our services, personal data that we receive from other sources (e.g. the facilities in which we photograph, such as schools and day-care centres) in a legally permissible way (e.g. to execute orders, to fulfil contracts or on the basis of a consent granted by you). We are also permitted to process personal data which we may have obtained from publicly available sources (e.g. debtor directories, press, media) in a legally permissible way. Relevant personal data are personal details and contact details (name, address, telephone number and email address). In addition, this may also include order data or data from the fulfilment of our contractual obligations, such as advertising and sales data, documentation data, data on your use of our tele-media offerings, as well as other data comparable with the aforementioned categories.
3. Why do we process your data (purpose of processing) and on what legal basis?
We process personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR).
3.1. To fulfil contractual obligations (Art. 6 (1) letter. b GDPR)
The processing of personal data is carried out for the provision of the photographic services and the associated sale of captured images and their electronic transmission or production on photo products and delivery to customers, and in particular also to carry out our contracts or pre-contractual measures with you, as well as the execution of your orders. The purposes of data processing are primarily obligations arising from the sales contract in which you enter with us by placing an order in our shop and can include, among other things, reminders of important events. You can find further details about the purpose of data processing in the respective terms and conditions.
3.2. In the context of the balancing of interests (Art. 6 (1) letter f GDPR)
If necessary, we process your data beyond the actual fulfilment of the contract in order to protect our own legitimate interests or those of third parties. For: advertising or market and opinion research, insofar as you have not objected to the use of your data; the enforcement of legal claims and defence in legal disputes; ensuring IT security; prevention and investigation of criminal offences; measures for business management and further development of services and products.
We also process personal data when you contact us through our contact formular. We process any data you include in the formular. These data are needed to process and respond to your inquiry or request. As soon as your inquiry or request has been solved, we delete your data.
Should we be engaged in events where our photographic services have been used to take pictures, we process the personal data obtained there on the basis of the justified interest to fulfil the order given to us and to offer it for purchase. If this is the case, we shall refer to the photographs of the persons present during the event, as well as to a right of objection. Please note that an objection only takes effect in the future. All processing carried out until then remains unaffected.
3.3. On the basis of your consent (Art. 6 (1) letter a GDPR)
If you have given us consent to the processing of personal data for certain purposes (e.g. publication or use of images), the legality of such processing is based on your consent. You may revoke your consent at any time with effect for the future. Please note that the revocation only takes effect in the future. Processing carried out before the revocation remains unaffected.
3.4. Pursuant to legal requirements (Art. 6 (1) letter c GDPR) or in the public interest (Art. 6 (1) letter e GDPR)
We also process personal data on the basis of legal requirements. For example, we store invoice data (name, address) on the basis of existing legislation, such as the retention obligations.
4. Who gets my data?
In the course of using the online shop, your data will be received by those who require the data to fulfil our contractual and legal obligations. Our processors (Art. 28 GDPR) may also receive data for these purposes. These are companies in the IT services, production of photographic products, logistics, telecommunications and debt collection categories. A data transfer to recipients external to Star Vision Photography takes place only if legal provisions so permit and you have given your consent or we are authorised to issue such information. Under these conditions, recipients of personal data may be, for example: public bodies and institutions (e.g. supervisory authorities) in the presence of a statutory or official obligation. - Other data recipients may be those for which you have given us your consent for the transmission of data or have waived your consent.
5. How long will my data be stored?
Where necessary, we process and store your personal data to the extent necessary to comply with our contractual obligations. In addition, we are subject to various retention and documentation obligations. The time limits for storage and documentation can be two to ten years. Finally, the storage period is also assessed according to the statutory limitation periods, which are usually three years, but can also be up to thirty years in certain cases.
6. Is data transmitted to a third country or to an international organisation?
Data transmission to third countries (states outside the European Economic Area, EEA) takes place only to the extent necessary to fulfil our contractual requirements towards you, if required by law, or if you have given us your consent. We will inform you separately about the details if doing so is required by law.
7. What data privacy rights do you have?
Each person concerned shall have the right to information according to Art. 15 of the GDPR, the right to rectification under Art. 16 GDPR, the right to deletion in accordance with Art. 17 GDPR, the right to restrict the data processing according to Art. 18 GDPR and the right to data transferability under Art. 20 GDPR. In the right to information and the right to deletion, the restrictions under §§ 34 and 35 BDSG apply. In addition, there is a right of appeal to a data protection supervisory authority (Art. 77 GDPR).
8. Is there a duty for me to provide data?
In the context of our business relationship, you must provide only the personal data necessary for the establishment, execution and termination of a business relationship or for which we are legally obliged to collect. Without this data, we will usually have to reject the conclusion of the contract or the execution of the order or will no longer be able to execute an existing contract and may have to terminate. Furthermore, it is necessary for us to request additional data for the provision of paid services, including how to process your desired payment method.
9. Notification of important events
When you register to receive our notifications by email and/or SMS, the data you provide will be used exclusively for this purpose. We log your consent to receive the notification, including your IP address. No further data will be collected. The data will only be used for sending notifications and will be passed on to third parties only for the purpose of delivery. You can revoke your consent to the processing of your personal data and their use for sending notifications at any time. In each notification you will find an applicable link for revocation; in addition you can always send an objection by email to team@starvisionphotography.co.uk. Please note that the revocation will only take effect in the future. Processing carried out before the revocation remains unaffected.
10. Third-party functions
10.1. Cookies
What are cookies?
“Cookies” are text files that are stored on your computer that allow an analysis of your use of the website.
What exactly do cookies do?
The information generated by the cookie about your use of this website is usually transferred to a server and stored there. However, due to the activation of IP anonymisation on some websites, your IP address is sometimes shortened in advance within Member States of the European Union or in other contracting states of the Agreement on the European Economic Area. Depending on the service provider, such an IP address is stored truncated.
What are the transferred data used for?
On behalf of Star Vision Photography ,the third party will use this information to analyse your use of the website, to compile reports on the activities of the website and to provide further services to the website operator related to the use of the website and the Internet.
How do I turn off cookies?
You can prevent the storage of cookies by changing the corresponding setting in your browser software; however, we would point out that in this case you may not be able to use all the functions of this website to their full extent. Which third-party cookies are used? We use the following third-party cookies on our website:
- Google Analytics (For more information, see: https://support.google.com/analytics/answer/6004245?hl=de)
- Google Adwords (For more information, see: https://policies.google.com/privacy?hl=de)
- gotphoto.co.uk (For more information, see: Fotografen Online Service GmbH) (https://www.fotograf.de/datenschutzhinweise/)
10.2. Social media plugins
Social media plugins (links to social media) are used on our websites by the providers listed below. You can recognise the plugins as they are marked with their respective logos. These plugins may be used to send information, which may include personal information, to the service provider and may also be used by the service provider. We prevent the unconscious and unwanted collection and transmission of data to the service provider using a 2-click solution. To activate a desired social media plugin, you must first click on the corresponding button. The collection of information and its transmission to the service provider will only be triggered through this activation of the plugins. We do not collect personally identifiable information by means of the social media plugins or their use. We have no influence over what data an enabled plugin collects and how it is used by the provider. At present, it must be assumed that a direct connection to the services of the provider will be expanded and at least the IP address and device-related information will be collected and used. It is also possible that the service providers try to save cookies on the computer used. Please refer to the privacy policy of the respective service provider to see which specific data is collected here and how it is used. Note: If you are logged in to Facebook at the same time, Facebook may identify you as a visitor to a particular page. We have integrated the social media buttons of the following companies on our website:
- Facebook Inc. (1601 S. California Ave - Palo Alto - CA 94304 - USA) (for more information, see: https://www.facebook.com/policy.php)
- Twitter Inc. (795 Folsom St. - Suite 600 - San Francisco - CA 94107 - USA) (for more information, see: https://twitter.com/de/privacy)
- Pinterest Europe Ltd. (Palmerston House, 2nd Floor - Fenian Street - Dublin 2, Ireland) (for more information, see: https://policy.pinterest.com/de/privacy-policy)
- WhatsApp Ireland Limited (4 Grand Canal Square - Grand Canal Harbour - Dublin 2) (for more information, see: https://www.whatsapp.com/legal/?l=de#terms-of-service)
- Google Plus/Google Inc. (1600 Amphitheatre Parkway - Mountain View - CA 94043 - USA) (for more information, see: https://policies.google.com/privacy?hl=de)
As of: 28 Jan 2026
Information about your right to object
According to Art. 21 GDPR
1. General right to object
You have the right, for reasons arising from your particular situation, to file an objection at any time to the processing of personal data relating to you, on the basis of Art. 6 (1) letter f GDPR (data processing based on the balancing of interests). If you file an objection, we will no longer process your personal data unless we can prove compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or the processing is for the purpose of enforcement, exercise or defence of legal claims.
2. Right to object against the processing of data for direct marketing purposes
In individual cases we process your personal data in order to perform direct marketing. You have the right at any time to object to the processing of personal data relating to you for the purpose of such marketing. If you object to the processing for direct marketing purposes, we will no longer process your personal data for these purposes. The objection must be addressed in writing by email to the following contact person:
Star Vision Photography
team@starvisionphotography.com
This Privacy Policy explains how Star Vision Photography processes personal data and outlines the rights available to you under data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
The type of personal data processed and the manner in which it is used depends on the services you have requested or that have been arranged with you, including school and event photography services.
1. WHO IS RESPONSIBLE FOR DATA PROCESSING?
The data controller is:
Star Vision Photography
172 Nuncargate Road, Kirkby iin Ashfield NG17 9EA
2. WHAT SOURCES AND DATA DO WE USE?
We process personal data that we receive directly from you as part of our business relationship. In addition, where necessary for the provision of our services, we may receive personal data from third parties such as schools, academies, nurseries, or event organisers, where this is legally permissible and appropriate.
Personal data processed may include:
- Names and contact details (email address, postal address, telephone number)
- Order and transaction data
- Image data captured during photography sessions
- Communication records
- Technical data relating to use of our website or ordering platform
We may also process personal data from publicly available sources where legally permitted.
3. WHY DO WE PROCESS YOUR DATA AND ON WHAT LEGAL BASIS?
3.1 Fulfilment of contractual obligations (Art. 6(1)(b) UK GDPR)
We process personal data to provide our photographic services, including:
- Capturing and producing school photographs
- Making images available for viewing and purchase
- Fulfilling orders and delivering products
- Customer service and support
This includes all processing necessary to perform contracts entered into when an order is placed.
3.2 Legitimate interests (Art. 6(1)(f) UK GDPR)
Where necessary, we process personal data to pursue legitimate business interests, including:
- Operating and improving our services
- Ensuring IT security and system integrity
- Preventing fraud or misuse
- Managing business operations and quality assurance
- Responding to enquiries submitted via our contact forms
In school or event settings, images may be processed on the basis of legitimate interest in order to fulfil the photography service commissioned by the school or organiser. Individuals have the right to object to such processing at any time (see Section 11).
3.3 Consent (Art. 6(1)(a) UK GDPR)
Where we rely on consent (for example, for marketing use of images), processing is carried out only where valid consent has been obtained. Consent may be withdrawn at any time with future effect.
3.4 Legal obligations (Art. 6(1)(c) UK GDPR)
We process personal data where required to comply with legal obligations, including accounting and tax retention requirements.
4. WHO RECEIVES YOUR DATA?
Personal data is shared only where necessary and appropriate, including with:
- IT and hosting providers
- Online ordering and image delivery platforms
- Photographic production laboratories
- Logistics and delivery providers
- Payment processors
All third parties act under appropriate contractual and data protection safeguards. Data is not shared for unrelated purposes.
5. HOW LONG IS YOUR DATA STORED?
Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, including:
- Order fulfilment and reorders
- Customer service
- Legal, tax and accounting obligations
Retention periods typically range from 2 to 10 years, depending on the data type and legal requirements.
6. TRANSFERS TO THIRD COUNTRIES
Data may be processed outside the UK or EEA only where appropriate safeguards are in place or where required for service delivery. Where applicable, further information will be provided.
7. YOUR DATA PROTECTION RIGHTS
You have the right to:
- Access your data (Art. 15)
- Rectify inaccurate data (Art. 16)
- Request erasure (Art. 17)
- Restrict processing (Art. 18)
- Data portability (Art. 20)
- Lodge a complaint with the Information Commissioner’s Office (ICO)
8. IS THERE A REQUIREMENT TO PROVIDE DATA?
Provision of personal data is necessary to enter into and perform contracts with us. Without required data, we may be unable to provide our services.
9. NOTIFICATIONS AND COMMUNICATIONS
If you register to receive email or SMS notifications, your data will be used solely for this purpose. You may withdraw consent at any time via the unsubscribe link or by contacting:
team@starvisionphotography.co.uk
10. THIRD-PARTY FUNCTIONS
10.1 Cookies and analytics
We use cookies and similar technologies to operate and improve our website. These may include:
- Google Analytics
- Google Ads
- New Relic
- GotPhoto (Fotografen Online Service GmbH)
Cookies can be controlled via browser settings.
10.2 Social media links
Our website may contain links to social media platforms. Activating these links may result in data being transmitted to the relevant provider. We do not control data collected by third-party platforms.
11. RIGHT TO OBJECT (ART. 21 UK GDPR)
11.1 General right to object
You may object at any time to processing based on legitimate interests. We will cease processing unless compelling legitimate grounds exist.
11.2 Direct marketing
You may object at any time to processing of personal data for direct marketing purposes. Upon objection, your data will no longer be processed for such purposes.
Objections should be sent to:
Star Vision Photography
team@starvisionphotography.co.uk
Last updated: January 2026