Privacy Policy

Last updated: July 2026

This policy explains what personal data Alexander Krohn Photography collects, why, and how it is handled. The site is operated by Alexander Krohn, based in Vaasa, Finland ([email protected]).

What data is collected and why

Data Purpose Legal basis Retention
Name, email, message (contact form) Responding to enquiries Legitimate interest Until deleted from inbox
Name, email, postal address, phone (print orders) Fulfilling print orders Contract performance 1 year
Name, email, postal address, VAT number (invoicing) Issuing invoices and meeting accounting obligations Contract performance; legal obligation (Accounting Act) 7 years
IP address (contact form, order form, site login) Rate limiting to prevent abuse Legitimate interest 15 minutes – 1 hour
Session cookie (ak_session) Keeping you signed in to the private portfolio Strictly necessary 24 hours
Session cookie (gallery_session) Keeping you signed in to your client gallery Strictly necessary 7 days
Photo selections / favourites Saving your marked photos in your client gallery Contract performance Duration of gallery

No data is sold. Advertising and conversion-measurement cookies are set only if you accept them via the cookie banner (see Google Ads conversion tracking below).

Cookies

Strictly necessary session cookies are required for the private portfolio and client gallery to function. No consent is needed for these under the ePrivacy Directive.

Advertising and conversion-measurement cookies are set only after you give consent through the cookie banner. If you decline, no such cookies are stored. Your choice is saved in your browser's local storage so the banner does not appear again.

Google Ads conversion tracking

If you accept via the cookie banner, this site loads Google Ads conversion tracking (gtag.js). It measures whether a visit that came from one of my Google ads leads to an enquiry, such as a contact-form submission or a phone call, so I can see which ads are effective. This uses cookies and similar technologies for advertising measurement.

Google acts as a third-party processor for this purpose and may process your IP address and interaction data. See the Google Privacy Policy.

Tracking is off by default (Google Consent Mode). It runs only if you choose "Accept" in the cookie banner; if you decline, no advertising or analytics storage is used.

Third-party processors

The following companies process personal data on this site's behalf:

No other third parties receive your personal data.

Your rights

Under the GDPR and Finnish data protection law (tietosuojalaki 1050/2018), you have the right to:

To exercise any of these rights, contact [email protected]. Requests will be handled within 30 days.

You also have the right to lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi).

Data security

All data is transmitted over HTTPS. Session tokens are signed with HMAC-SHA256 and stored as HttpOnly cookies. Access to client galleries and the private portfolio is protected by PIN or password authentication with rate limiting.

Changes to this policy

If this policy changes materially, the "last updated" date at the top will be revised. Continued use of the site after changes constitutes acceptance.

Contact

Alexander Krohn
Vaasa, Finland
Y-tunnus 3628304-9
[email protected]