Republic of Photography Privacy Policy
Republic of Photography (“trading as Boothnation Ltd”, “we”, ”us”, “our”) is fully committed towards respecting and protecting the privacy of our clients and participants in our live photographic (and video) experiences.
As a business, our objective is to create live photographic experiences, commissioned by our clients. Our services include concept design, content generation(photographic and video-based) post production, production of instant photo prints, and social media sharing.
Our photographic experiences span across short term installations and permanent or fixed assets.
If you are a participant in our photographic experiences, details about how your data is processed is available in this policy.
This policy should be read collectively with any specific notices outlining the uses our clients may wish to make of your personal data together with the ability to opt in or out of selected uses which may also be provided when we collect personal data from you as part of the content capture experience.
In the delivery of our services we also process personal data relating to our clients, and website users. Further information of how we process this data is also available here.
Republic of Photography privacy policy was last updated in September 2019.
Purpose of This Privacy Policy
This privacy policy is intended to give you information on how Republic of Photography collects and processes your personal data in connection with your use of or participation in our services (including our website and live photographic experiences). It tells you how we look after your personal data and about your privacy rights and how the law protects you.
In the instance that our services are designed for or used by children, we do not knowingly collect data relating to children.
It is important that you read this privacy policy together with any other information we may provide on specific occasions when we collect or process personal data about you (including as part of our live photographic experiences) so you are fully aware how and why we are using your data. This privacy policy supplements such other notices and does not replace them.
The Handling of Personal Data
In relation to participants in our live photographic experiences:
When participating in our photographic experiences, you (the participant) will be made aware of who is responsible for the data you provide. Our client will be clearly identified, and whether the use of photo / video content is limited to sharing this content with you, or whether this content will be shared with our client together with any personal data you provide. In the latter instance, your data may be processed according to our client’s privacy policy.
In the instance that photo/video content is only shared with you, we are a controller of your data. In relation to your photo/video content, ROP will store this content on its secure servers, and it is therefore safeguarded by us. Relating to any personal information such as your name and email address, this will be temporarily stored in our secure cloud-based capture software. This information is therefore safeguarded by us, will not be used by ROP or passed on to any third party, and will be destroyed after a maximum of 3 months.
If your photo/video content has been publically shared by yourself (for example through social media), Republic of Photography may use your content for promotional case studies on our website, or social media channels.
In the instance that your photo/video content and data is shared with our client, our role will be limited to that of a data processor. We provide the photographic experience on behalf of our client, inclusive of any data capture obtained through your sharing of the photo / video content, and our client will be the controller of this data. Our client will be the party responsible for the processing of your personal data which will be processed in accordance with their privacy policy. The identity of our client will be clearly available to you when participating in the content capture experience. Any processing of your personal data by the client will not be covered in the remainder of this privacy policy.
In relation to your photo/video content, ROP will store this content on its secure servers, and it is therefore safeguarded by us. In relation to your photo/video content, ROP may store this content on its secure servers, and it is therefore safeguarded by us. In specific instances and in accordance with our agreement with our client, we may share all the image files from an event with our client and will be covered by their privacy policy, which will be clearly evident during said activation carried out on behalf of our client.
Regarding your personal information such as your name and email address, this data will be initially captured and stored by our secure cloud-based software, will not be used by ROP, and will destroyed from our records after 3 months. As indicated above, in this instance, our client becomes the controller of your data.
In specific instances, and in accordance with our agreement with our client, your photo/video content may be used and shared according to our client’s policy. According to our agreement with our client, if your photo/video content has been publically shared by yourself (for example through social media), Republic of Photography may use your content for promotional case studies on our website, or social media channels.
In relation to our clients and website users:
Republic of Photography is the controller of personal data you provide in connection with your interactions with us, or use of our services as a client or website user.
Variants of Personal Data we may collect
Personal data you may provide to us during our live photographic experiences. When participating in our photographic experiences, you will provide your photo or video content. At our social sharing station (if present), you may additionally provide your email address should you wish to email your content to yourself.
Use justification: With your consent. When you choose to participate in the content capture experiences at our clients’ premises or at their events, you will be asked to confirm your consent to us processing your personal data. This is entirely voluntary.
Personal data you may provide to us as a client or prospective client. In this instance you may provide your contact details such as name, business email address, telephone number and business address.
Use justification: contract performance, legitimate interests (to enable us to perform our obligations and provide our services to our clients, or to notify our clients about changes to our service).
Our correspondence. If we have any written (email) communications with you, we will typically keep a record of this.
Use justification: legitimate interests (where we may require this information for future reference, including reviewing agreements or services)
Your marketing preferences. If you have consented to being added to any of our mailing lists, we will have a record of your consent for us to email you with our newsletters.
Use justification: Legitimate interests (to keep an accurate record of who we have permission to contact). ROP will not contact you without your consent
Website use. As part of our aim to provide an effective online representation of our business, we may occasionally analyse our website traffic through our website provider.
Use justification: Legitimate interests (we may occasionally analyse our website traffic using our website provider in order to gauge how effective our online presence is.
6. Information relating to our business relationship. We may store information relevant to our business relationship to our clients, such as payment details or services bought/ provided.
Use justification: legitimate interests (where we may require this information for future reference, including reviewing agreements or services)
Sharing Your Personal Data
Where the live photographic experience is designed purely for your use, rather than for the use of a specific client or brand, we will control your data and will not share this with our clients or any third party.
Where the photographic experience is designed for a specific brand or client, your imagery and personal information may be shared with this client, who will become the controller of your data (outlined above in section 1).
We utilise a secure cloud-based capture software to record any personal data you share with us at our social sharing station. This is inclusive of name and email address, and provides us with a data overview of quantity of social shares per brand event or activation. Specific social media data is not stored by Republic of Photography (Boothnation Ltd), and personal information will be removed from our cloud software and destroyed 3 months following the brand event.
International Data Transfers
Some of the third parties with whom we work are based outside both the United Kingdom and the European Union, so their processing of your personal data will involve a transfer of this data outside the United Kingdom or the European Union. The countries to which your personal data may be transferred are set out in section 5 (Sharing your personal data).
When we transfer data, we take appropriate steps to ensure UK and EU data protection law is complied with. We will not transfer your personal data to any country (other than the United Kingdom) which is outside the European Union, except:
a) to a country which has been found by the European Commission to provide an adequate level of protection for personal data;
b) to an entity in the United States which is part of the EU-US Privacy Shield which requires it to provide similar protection to personal data shared between the European Union and the United States;
c) where we have ensured your personal data benefits from a similar degree of protection by using clauses approved by the European Commission which give personal data the same protection it has in the European Union.
Please contact us if you want further information on the specific mechanism we use when transferring your personal data out of the United Kingdom and the European Union.
Data Security
To prevent unauthorised access, maintain data accuracy and ensure the correct use of information, we have put in place appropriate procedures designed to safeguard and secure the information we collect.
Your Rights
You have rights (with some exceptions and restrictions) to:
1.
2.
3.
4. 5.
6. 7.
object to our processing of your personal data, including profiling. You can object, on grounds relating to your particular situation, at any time. In which case, we shall stop processing the data that your objection relates to, unless we can show compelling legitimate grounds to continue that processing.
access your personal data. If you make this kind of request and we hold personal data about you, we are required to provide you with information on it, including a description and copy of the personal data and why we are processing it;
request that we provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format; request erasure of your personal data in certain circumstances;
request correction or updating of the personal data that we hold about you and that is inaccurate
request the restriction of our processing of your personal data in some situations. If you request this, we can continue to store your personal data but are restricted from processing it while the restriction is in place; complain to your local data protection authority about our collection or use of your personal data. For example, in the UK, the local data protection authority is the UK Information Commissioner’s Office.
If you choose to exercise the rights described above, we may ask you to provide additional information so that we can satisfy ourselves as to your identity before we take further action.
Contact Details
If you have any questions about this policy, you can contact Republic of Photography in the following ways:
Republic of Photography (trading as Boothnation Ltd) 369 Geffrey Street
London
E2 8HZ
info@the-rop.com