It provides information on what data we collect, why we collect the data, how it is used and the lawful basis on which your personal data is processed, and what your rights are under the applicable data protection and privacy laws, including the General Data Protection Regulation (“GDPR”).
We are RKAB Works, 11 Balmuir Avenue, Bathgate, West Lothian, Scotland EH48 4BW. We are the data controller responsible for your personal data.
We collect and process the following information provided by you in the course of your initial enquiry and the formation, operation and conclusion of our contract for photography services:
Personal data will be processed in order to perform our contract with you, fulfil legal obligations and for legitimate interests, as described below.
We use your personal information in the following ways:
You acknowledge and agree that where provision of personal data is necessary to ensure compliance with legal obligations or to perform our contract with you, failure to provide relevant personal data for the abovementioned purposes may prevent us providing our goods and services to you.
We share your personal data with third parties in the following situations:
Any credit/debit card payments and other payments you make will be processed by our third party payment providers and the payment data you submit will be securely stored and encrypted by our payment service providers using up to date industry standards. Please note that we do not ourselves directly process or store the debit/credit card data that you submit.
We store and use this card or payment information for the purpose of processing any future payments that you make for additional goods and services. We will store this data in accordance with our legal obligations under applicable law and only for so long as legally permitted.
You may choose to opt out of us holding your card or payment data although this means that you will need to re-supply us with card/payment details for the purpose of making any future purchases.
Your personal data will be transferred to and stored in countries other than the country in which the information was originally collected, including the United States and other destinations outside the European Economic Area (“EEA”) to our service providers for the purposes described above.
Please note that the countries concerned may not provide the same legal standards for protection of your personal data that you have in the United Kingdom or EEA. Where we transfer your personal data to countries outside of the EEA we will take all steps to ensure that your personal data continue to be protected. We will implement appropriate safeguards for the transfer of personal data to our service providers in accordance with the applicable law, such as relying on our service providers’ Privacy Shield certification or implementing standard contractual clauses for data transfers. If you would like to receive more information on the safeguards that we implement, including copies of relevant data transfer contracts, please contact us as indicated below.
Certain applicable data protection laws give you specific rights in relation to your personal data. In particular, you have the following rights in relation to your personal data:
If you wish to exercise any of these rights please contact us as described in the “Contact” section below. We may also need to ask you for further information to verify your identity before we can respond to any request.