Privacy Policy

1. Controller
The controller responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Sven Kristiansen
SVENSØN
Brummerredder 36
22457 Hamburg
Germany
E-mail: mail@svensonphoto.com
This Privacy Policy applies to svensonphoto.com, including its contact functions, newsletter and online shop.

2. Website Platform, Hosting and E-Mail
This website is created and operated using Wix Studio and Wix services. Wix provides the technical infrastructure for the website, forms, customer accounts, online shop and related functions.
When you visit the website, technical data may be processed in order to provide, secure and maintain the website. This may include your IP address, date and time of access, requested pages, browser and device information, operating system, referrer information and technical log data.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure, reliable and technically efficient operation of the website.
Wix may process personal data through group companies and service providers in different countries. Where data is transferred outside the European Economic Area, the transfer is based on applicable safeguards such as an adequacy decision or Standard Contractual Clauses where required. Wix provides a Data Processing Agreement for the processing of personal data on behalf of its customers. 
The domain svensonphoto.com and the e-mail account mail@svensonphoto.com are provided by:
STRATO GmbH
Otto-Ostrowski-Straße 7
10249 Berlin
Germany
When you communicate with us by e-mail, STRATO processes the technical and communication data required to transmit and store the message.

3. Cookies and Consent Management
This website uses cookies and similar technologies.
Technologies that are strictly necessary for the operation, security, shop or checkout functions may be used without consent where the legal requirements for such use are met.
Cookies and technologies used for analytics, advertising or other non-essential purposes are activated only after you have given the required consent.
The legal basis for consent-based processing is Art. 6(1)(a) GDPR. Where information is stored on or accessed from your device, the requirements of Section 25 TDDDG also apply.
You can give, refuse or withdraw your consent at any time through the cookie settings on this website. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal. 
Your consent preferences may be stored in order to respect and document your selection.

4. Contact Form and E-Mail
If you contact us through the contact form or by e-mail, we process the information you provide in order to respond to your inquiry.
This may include your name, e-mail address, subject of inquiry, message and any additional information you voluntarily provide.
If your inquiry relates to a purchase, workshop, project or other contractual or pre-contractual matter, the legal basis is Art. 6(1)(b) GDPR.
For other inquiries, processing is based on Art. 6(1)(f) GDPR. Our legitimate interest is to respond to communications addressed to us.
Required fields are necessary in order to process your inquiry. Additional information is voluntary.

5. Newsletter
You may subscribe to our newsletter to receive information about photography, exhibitions, workshops, publications, Fine Art Prints and other news relating to SVENSØN.
For this purpose, we process your e-mail address and, where voluntarily provided, your name.
The newsletter is managed and sent using Wix Email Marketing. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR.
We use a double opt-in procedure. After registering, you receive an e-mail asking you to confirm your subscription. You become an active subscriber only after confirming your e-mail address. Information relating to the registration and confirmation may be retained in order to document your consent. Wix supports this procedure and records unconfirmed registrations as pending subscriptions. 
Newsletter services may provide information about delivery and, depending on the configuration, newsletter opens and links clicked. Where such information is attributable to an individual subscriber and requires consent, it is processed on the basis of Art. 6(1)(a) GDPR.
You may unsubscribe at any time using the unsubscribe link contained in each newsletter or by contacting mail@svensonphoto.com.
After unsubscribing, your address will no longer be used for newsletter distribution. Information necessary to document consent and withdrawal may be retained where required for legal compliance.

6. Online Shop and Customer Accounts
The online shop is operated using Wix Stores.
When you place an order, we process the information necessary to conclude and fulfil the contract. This may include your name, e-mail address, telephone number, billing and delivery address, products ordered, quantity, price, order and payment status and communication relating to the order.
The legal basis is Art. 6(1)(b) GDPR.
Where you create or use a customer account, the information necessary to provide and manage the account may also be processed through Wix.
Information marked as mandatory during checkout is necessary to process your order. Without this information, we may not be able to conclude or fulfil the contract.
Data that must be retained for accounting, tax or commercial-law purposes is processed on the basis of Art. 6(1)(c) GDPR.

7. Payment Services
Depending on the payment method selected at checkout, payments may be processed through Wix Payments, PayPal or payment services integrated with Wix, including Apple Pay and Google Pay.
The payment provider receives the information necessary to process the transaction. This may include your name, billing information, transaction amount, selected payment method and transaction-related information.
The legal basis for processing required to complete the purchase is Art. 6(1)(b) GDPR.
PayPal services are provided in Europe by:
PayPal (Europe) S.à r.l. et Cie, S.C.A.
22–24 Boulevard Royal
L-2449 Luxembourg
Luxembourg
Payment providers may process additional information under their own responsibility for purposes such as fraud prevention, security, risk assessment, regulatory compliance or, in the case of services such as PayPal Pay Later, eligibility checks. Their respective privacy policies apply to such processing.
We do not ourselves carry out automated decision-making within the meaning of Art. 22 GDPR.

8. Shipping
Where physical products such as books or Fine Art Prints are ordered, the information necessary for delivery is transmitted to the shipping or logistics provider responsible for delivering the order.
This generally includes the recipient's name and delivery address and, where necessary for delivery, additional contact information.
The legal basis is Art. 6(1)(b) GDPR.

9. Google Analytics and Advertising
Subject to your consent, this website uses Google Analytics, provided by:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
Google Analytics helps us understand how visitors use the website and enables us to improve its content, usability and performance.
Depending on the configuration, information may include pages viewed, approximate geographic information, device and browser information, source of access and interactions with website content.
Google states that individual IP addresses of users in the EU are not logged or stored by Google Analytics. IP address information is used temporarily to derive approximate geographic information and is then discarded. 
Google Analytics is activated only after the required consent has been given. The legal basis is Art. 6(1)(a) GDPR and, where applicable, Section 25(1) TDDDG.
Where Google Ads or conversion measurement functions are used, they may also process information about interactions with advertisements and subsequent use of this website. Such functions requiring consent are likewise activated only after the appropriate consent has been given.
You can withdraw your consent at any time through the cookie settings.

10. External Links and Social Media
This website contains links to external websites and social media platforms, including Instagram and Behance.
Where these are ordinary external links, no connection to the external provider is established merely because the link is displayed.
If you follow an external link, you leave our website. The respective provider may then process personal data in accordance with its own privacy policy.
If third-party content is embedded directly on the website, data is transmitted to the respective provider only in accordance with the applicable consent requirements where consent is required.

11. Recipients and International Data Transfers
Personal data is disclosed only where this is necessary for the purposes described in this Privacy Policy, where required by law or where you have given your consent.
Recipients may include Wix and its service providers, STRATO, payment service providers, PayPal, shipping and logistics providers, Google where the relevant services have been consented to, accounting or tax service providers and public authorities where legally required.
Some service providers may process personal data outside the European Union or European Economic Area.
Where personal data is transferred to a third country, the transfer is based on an applicable legal mechanism under Chapter V GDPR, such as an adequacy decision or appropriate safeguards including Standard Contractual Clauses.

12. Retention Periods
We retain personal data only for as long as necessary for the purpose for which it was collected or for as long as statutory retention obligations apply.
Contact inquiries are generally deleted once they have been conclusively dealt with and no further retention is necessary.
Newsletter data is processed until you unsubscribe or withdraw your consent, subject to the retention of information required to document consent or withdrawal.
Order, invoice and accounting records are retained in accordance with German commercial and tax law. Depending on the type of document, statutory retention periods may be six, eight or ten years. Current German commercial and tax law provides, for example, an eight-year retention period for booking records and longer or shorter periods for certain other categories of records. 
After the relevant retention period expires, the data is deleted unless continued storage is otherwise required or permitted by law.

13. Your Rights
Under the GDPR, and subject to the applicable legal requirements, you have the right to:

• access your personal data pursuant to Art. 15 GDPR;

• request rectification pursuant to Art. 16 GDPR;

• request erasure pursuant to Art. 17 GDPR;

• request restriction of processing pursuant to Art. 18 GDPR;

• receive your data in a portable format where Art. 20 GDPR applies;

• object to processing pursuant to Art. 21 GDPR; and

• withdraw consent at any time pursuant to Art. 7(3) GDPR.

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
Where processing is based on Art. 6(1)(f) GDPR, you have the right to object on grounds relating to your particular situation.
Where personal data is processed for direct marketing purposes, you may object to such processing at any time.

14. Right to Lodge a Complaint
You have the right to lodge a complaint with a competent data protection supervisory authority.
For Hamburg:
Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit
Ludwig-Erhard-Str. 22
20459 Hamburg
Germany
Telephone: +49 40 42854-4040
E-mail: mailbox@datenschutz.hamburg.de

15. Data Security
We use appropriate technical and organisational measures to protect personal data against accidental or unlawful loss, alteration, disclosure or unauthorised access.
Data transmitted through the website is encrypted where technically supported and appropriate.

16. Changes to this Privacy Policy
We may update this Privacy Policy where changes to the website, services used or legal requirements make this necessary.
The current version is always available on this website.

Last updated: September 2026