Alèna Photography considers your privacy very important. I will therefore process and use your personal data in a secure manner and in accordance with the General Data Protection Regulation (GDPR).  In this Privacy Policy, I explain which personal data I collect from you and why I do so. This policy also explains your rights regarding the processing of your personal data. If you have any questions about your privacy, you can contact me at info@photographybyalena.com. 

Article 1 – Who am I?

Alèna Photography is a sole proprietorship, registered at Aruba. I am registered with the relevant business register under registration number H59700.0 I am the data controller responsible for the processing of your personal data.

Article 2 – What personal data do I use?

Below you will find an overview of the personal data I process, why I process it, the legal basis that allows me to process this data, and how long I retain it. I process your name, business name (if applicable), address, email address, telephone number, and other information necessary to provide my services to you as effectively as possible. This may include special categories of personal data that I process when photographing you or other individuals involved in a photoshoot. I use this information to provide you with the agreed services for the duration of our agreement. I retain this data for 7 years after the end of our agreement, where required by applicable legal obligations.

Photo products and orders

When you place an order for photographic products, I process your name, billing address, delivery address, email address, payment details, and photographs. I retain this information for 7 years after your last order, where required by applicable legal obligations.

Online galleries

You may log in to an online gallery to download your photographs. As a result, I can see which email address was used to log in to the gallery. This information remains visible online through Pic-time until I delete the gallery.

Portfolio and social media

I use a portfolio on my website and social media channels to show previous work to potential clients. For this purpose, I may process photographs and other content created for you, together with your name or social media username if applicable, provided that you have given permission for this when entering into the agreement. I may retain this content indefinitely in my portfolio unless you request its removal. In that case, I will assess your request and determine whether the content should be removed or whether it forms part of my professional archive. You are responsible for creating a backup of your files after they have been delivered to you.

Other photographic material

Photographic material that is not included in my portfolio will be deleted 2 years after the photoshoot. Unedited material will be deleted 3 months after the content has been delivered. Invoicing and financial administration. For invoicing and financial administration, I process your name, business name (if applicable), relevant business registration details, address, email address, telephone number, bank details, and any outstanding balance. Without this information, I cannot process your payment. Where required by applicable tax legislation, I am legally required to retain this information for 7 years. After this period, I will delete or anonymise your personal data.

Copyright infringement

If I discover an infringement of my copyright, I may create a file containing information such as screenshots of the infringement, your name and business name (if applicable), address details in connection with a potential cease-and-desist or demand letter, and other relevant information required to handle the infringement. I will delete this information no later than 1 year after the infringement case has been fully resolved.

Complaints

If you have a complaint about my services, I will process your name, email address, telephone number, and the content of and communication relating to your complaint in order to find the best possible solution. I use this information for the proper performance of our agreement. I will delete information relating to complaints 1 year after the complaint has been resolved.

Analytics

To operate and optimise this website, I use analytics services. I have a legitimate commercial interest in analysing your browsing behaviour and related data in order to understand how my website and services are used and to improve them where necessary.

Cookies

This website uses cookies. Cookies are small pieces of information that are sent to your browser when you visit a website and are subsequently stored on the hard drive or in the memory of the device you use to visit the website. These cookies will not damage your device. You can read more about the use of cookies in my Cookie Policy.

Reviews and testimonials

To enable clients to leave reviews about my services, I may process the content of your message and, if applicable, your name. I may publish reviews about my services on my website and social media channels for commercial purposes. I will remove a review when it is no longer representative of my business or when you request its removal.

Contact form

If you wish to contact me through my website, I may ask for your name, email address, telephone number, and place of residence. By submitting the contact form, this information becomes visible to me. I will delete the information submitted through the contact form once your enquiry has been resolved, unless it results in an agreement or business relationship.

Comments

When you leave a comment on one of my articles or posts, I may process your name, email address, Gravatar, website, and the content of your message. This information may become automatically visible and will be retained until you delete your comment or I delete the relevant article or post.

Webinars, training and free resources

When you register for one of my webinars, training sessions, or free resources, I ask for your name and email address. I use this information to give you access to the relevant content and, where applicable, provide you with further information relating to the subject discussed. I will delete this information after completion of the activity or service for which you registered. If the webinar or training is paid, I will also process your billing information. This information will be retained for 7 years, where required by applicable tax legislation.

Personal accounts

For your personal account in my online platform or academy, I may process a password. I store this password in encrypted form together with your email address and/or username. I do this to help prevent security breaches and fraudulent use. I retain your account information, as well as any comments you post within the community, until you delete your account or no longer have access to the relevant content.

Article 3 – How do I obtain this information?

I obtain the information described above directly from you as a client or website visitor because you provide this information to me. I may also obtain your personal data from one of my clients if you are present during a photoshoot or other photographic assignment and I photograph you, or when you visit a gallery containing content created for my client. Your personal data may also be obtained when you are otherwise involved in a photoshoot or photographic assignment. I do my utmost to ensure that personal data relating to minors is only collected with parental or legal guardian consent. If you believe that I have collected personal data relating to a minor without the required consent, please contact me at: info@photographybyalena.com

Article 4 – What are your rights regarding your personal data?

The General Data Protection Regulation (GDPR) gives you several rights regarding the personal data I process about you.

1. Right of access

You have the right to request access to the personal data I hold about you at any time.

2. Right to rectification and erasure

If, after reviewing your personal data, you want your information to be corrected, supplemented, restricted, or deleted, you can submit a request to me.

3. Right to object

You have the right to object to the processing of your personal data when this processing is based on a legitimate interest.

4. Right to data portability

If you wish to transfer your personal data to another service provider, I will provide your data in a structured and commonly used format that can be opened by commonly used digital systems, where applicable.

5. Right to withdraw consent

If I process your personal data based on your explicit consent, you have the right to withdraw that consent at any time. Please note that withdrawing your consent may affect the services I am able to provide to you.  To exercise any of these rights, you can send a request to info@photographybyalena.com. Where legally required, I may ask you to provide a copy of an identification document. Any unnecessary information, such as your national identification number and photograph, should be covered or redacted. I will assess your request as soon as possible and, at the latest, within 30 calendar days, unless applicable legislation allows or requires a different period. If I cannot comply with your request, I will explain why your request has been rejected.

Article 5 – Who receives your personal data?

I will not provide your personal data to third parties unless this is necessary for the operation of my business, the performance of our agreement, or required by law. Your personal data may be shared with data processors, parties involved in the performance of our agreement, and external advisers where necessary. This may include suppliers of photographic products or services. Where required, I enter into data processing agreements with these third parties in order to protect your privacy as effectively as possible. I will never sell your personal data to third parties.

Article 6 – Automated decision-making

I may use automated decision-making based on information you provide, actions you take, or actions you fail to take. As a result, some of my services may become unavailable to you. You always have the right to provide your views regarding an automated decision and request that the decision be reviewed by another person.

Article 7 – Final provisions

I recommend that you review this Privacy Policy regularly, as I may make changes to my privacy practices or this policy. If you have any questions about this Privacy Policy or the way in which I use your personal data, you can contact me at:info@photographybyalena.com

If you have a complaint about the way I handle your personal data, you can contact me directly so that I can try to resolve the matter. You may also contact the relevant data protection authority in your country.

Business details

Alèna Photography
Aruba
Registration number  H59700.0
info@photographybyalena.com
www.photographybyalena.com

info@photographybyalena.com

Last updated: 2 sept 2026