Privacy policy

Data controller

Alexandre Marcé (Lens_picture), photographer and artist-author.
Address: 23 allée Vauban, 92130 Issy-les-Moulineaux
Email: contact@lenspicture.com

Data, purposes, legal bases and retention

• Contact form and emails: name or nickname, email address, project type, message, page language. To reply to you and prepare a session. Legal basis: pre-contractual steps taken at your request (Art. 6(1)(b) GDPR), or legitimate interest in answering other messages (Art. 6(1)(f)). Kept 3 years after our last exchange.
• Sessions and works: identity, contact details, exchanges, photo selection, certificate of authenticity, rights assignment. To carry out the session and deliver the works. Legal basis: performance of the contract (Art. 6(1)(b)). Kept during our relationship, then 5 years as evidence (limitation period of article 2224 of the French Civil Code).
• Accounting: name, amount, date, royalty statement number. Legal basis: legal obligation (Art. 6(1)(c)). Kept 6 years (article L102 B of the French tax procedure code).
• Photos of the people photographed: image, name or nickname in the credit, link to a public account. To publish the works on the site and in the portfolio. Legal basis: your written image-rights consent (Art. 6(1)(a)), which you can withdraw at any time for the future. The photo is removed when you ask; the signed consent is kept 5 years after the last use, as evidence.
• Audience measurement: page viewed, referring page, country, device and browser type, loading time. To know how the site is visited. Tool: Cloudflare Web Analytics, with no cookie, no identifier and no cross-site tracking; results are only viewed as overall statistics. Legal basis: legitimate interest (Art. 6(1)(f)).
• Security and operation: IP address, date and time, browser, requested page (host's technical logs). To run the site and protect it from abuse. Legal basis: legitimate interest (Art. 6(1)(f)). Kept for a short period set by Cloudflare.

No data is sold, rented or used for advertising or profiling.

Recipients

Your data is only read by me. It goes through technical providers that process it solely on my behalf:

• Cloudflare, Inc. (United States): site hosting, delivery of form messages, audience measurement.
• Proton AG (Switzerland): mailbox for contact@lenspicture.com.
• GitHub, Inc. (United States): private storage of the site code and published photos.
• WeTransfer B.V. (Netherlands): file transfer at delivery.

Links to Instagram, LinkedIn, YouTube, Vimeo or Gendinfo open those sites, which apply their own rules. None of their content is embedded in the pages of this site.

Transfers outside the European Union

Cloudflare and GitHub are based in the United States and participate in the EU-US Data Privacy Framework, recognised by the European Commission's adequacy decision of 10 July 2023. Proton is based in Switzerland, a country recognised as offering an adequate level of protection.

Your rights

You can ask to access, correct or erase your data, to restrict its processing or to receive it in a portable format, and you can object to processing based on legitimate interest. You can withdraw your image-rights consent at any time. You can also give instructions on what happens to your data after your death.

To exercise these rights: contact@lenspicture.com, or the site form choosing “Photo removal request”. I reply within one month. If there is a doubt about your identity, I may ask you to confirm it.

Complaint to the CNIL

If you believe your rights are not respected, you can lodge a complaint with the CNIL, the French data protection authority: 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or online at cnil.fr/fr/plaintes.

Minors

The intimate gallery is for adults only. A session with a minor only takes place with a parent's written consent and presence.

Security

The site is only served over HTTPS. The editing panel is only accessible to me, after signing in. The original photo files are stored in a private repository.