I, Ray Smith, am the "Data Collector" on behalf of ActionSport Photography under this legislation, and so ActionSport Photography, or "I" may be used as appropriate in the following text.
For clarity, I DO NOT have any records of your payment details. When you pay for an order, that process is done through the PayPal organisation, and none of that information is recorded by me. I only receive notification from PayPal of who has paid, how much they have paid, and what the order is for. This information is received in the form of an email.
The order includes your name, your email, your phone number if you supply it and your address. This data is necessary for me to respond to your order in our mutual legitimate interest.
Your order details containing your personal data come in the form of an email from PayPal. Our email system is hosted on a secure server located away from our premises. In order to comply with legislation, orders must be stored for seven tax years, so we will expect to hold on to copies of emails for that period after the order was placed.
Your data is used strictly for the purposes of fulfilling your order. We do not carry out marketing campaigns and we do not maintain any kind of mailing or contact list. Your data will never be passed on or revealed to any third party.
When it comes to your photographs, the EU/GDPR hasn't been too specific about what that means for working photographers bar that we need to demonstrate reasonable and legitimate use. To that extent, all the photographs which have been made available for general viewing on the web site have been taken at events for which ActionSport Photography has been officially recognised by the organisers as providers of photographs for their event. This is considered of legitimate interest to all parties involved in the events covered. If you have a legitimate cause for concern about any photograph of you on the web site in the context of your privacy or personal data please contact me with details.
If you have questions about how your personal data is handled, you can just write to me and I will respond. I'm happy to show you the information I have on you, and unsurprisingly it will be exactly the things you've put on your order! If any of the information is wrong, you have the right to correct it.
Photographs taken at events may be used outside of ActionSport Photography. For example, they may be supplied to event organisers for their publicity purposes, to publications and online media for journalism purposes, as well as used on social media sites for the general interest of competitors who took part. This is not an extensive list, but if you do not wish for your photographs at an event to be used after an event for these or similar purposes, please contact me.
The new EU regulations require me to safeguard and act responsibly with your data. That is my intention and I take that seriously. If you have any doubts or concerns about GDPR compliance, please contact me.
Revision 1.0 Dated 24th May 2018