Privacy Policy – CEKraemer Art

This Privacy Policy explains how CEKraemer Art collects, uses, stores and protects personal data in connection with photography services, client galleries, enquiries, bookings, orders and the delivery of photographs.

CEKraemer Art is the data controller for the personal data described in this Policy.

1. Personal data collected

Depending on the service provided, CEKraemer Art may collect and process:

• names and contact details, including email addresses, telephone numbers and postal addresses;

• booking, event and assignment information;

• correspondence, instructions and preferences supplied by customers;

• photographs and videos in which individuals may be identifiable;

• order, invoice and payment information;

• gallery activity, such as email registration, favourites, downloads and orders;

• technical information collected through Pixieset, including IP address, browser, device and access information;

• permissions relating to the publication or promotional use of photographs.

CEKraemer Art does not normally collect payment-card details directly. Where online payment facilities are used, payment information is processed by the relevant payment provider.

2. How personal data is used

Personal data may be used to:

• respond to enquiries and prepare quotations;

• arrange and provide photography services;

• communicate with customers before and after an assignment;

• photograph events, individuals, groups, artworks or other commissioned subjects;

• select, edit, store and deliver photographs;

• create and administer password-protected or public Pixieset galleries;

• enable customers to view, select, download or order images;

• issue invoices and maintain business and accounting records;

• manage copyright, licensing and usage permissions;

• respond to requests, complaints or legal claims;

• protect galleries, files, equipment and business systems;

• publish photographs for portfolio, exhibition, editorial, website or social-media purposes where appropriate permission has been obtained or another lawful basis applies.

Personal data will not be used for purposes incompatible with those for which it was collected.

3. Legal bases for processing

CEKraemer Art processes personal data under one or more of the following legal bases:

• Contract: where processing is necessary to provide a quotation, accept a booking, fulfil a photography agreement or deliver photographs and products.

• Legal obligation: where information must be retained or disclosed to comply with tax, accounting, consumer-protection or other legal requirements.

• Legitimate interests: where processing is reasonably necessary to operate and protect the business, communicate with customers, maintain records, secure galleries and files, or establish and defend legal rights, provided those interests do not override the rights and freedoms of the individuals concerned.

• Consent: where permission is requested for optional uses, particularly the public or promotional use of identifiable commissioned photographs.

Where processing is based on consent, consent may be withdrawn at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.

4. Photographs and publication

Photographs containing identifiable people may constitute personal data.

Photographs taken as part of a private commission are processed primarily to fulfil the photography agreement. They will not automatically be published on the CEKraemer Art website, social-media accounts, promotional materials or exhibition platforms merely because the photographs were commissioned.

Where appropriate, CEKraemer Art will obtain permission before using identifiable commissioned photographs publicly for portfolio, advertising, exhibition or promotional purposes.

Permission for promotional use is voluntary and is not a condition of receiving the commissioned photography service. Permission may be limited to particular photographs, platforms or purposes.

A customer arranging photography involving other people should inform participants, where reasonably possible, that photography will take place and explain how the finished images will be made available.

Additional care will be taken in relation to photographs of children. A parent, guardian or appropriately authorised person should provide any necessary permission for the commissioned or public use of identifiable images of a child.

5. Client galleries and Pixieset

CEKraemer Art uses Pixieset to host and deliver online client galleries. Pixieset may process photographs, names, email addresses, gallery activity, orders, downloads, IP addresses and technical information on behalf of CEKraemer Art or in connection with its own services.

Customers should keep gallery passwords, personal identification numbers and download codes secure. A customer who shares gallery access with another person is responsible for deciding whether that person should be permitted to view or download the photographs.

Pixieset may use cookies and similar technologies necessary for gallery operation, security, user preferences, analytics and online ordering. Further information about Pixieset’s own processing is available in Pixieset’s Privacy Policy.

6. Sharing personal data

Personal data may be shared only where reasonably necessary with service providers such as:

• Pixieset and other secure gallery or cloud-storage providers;

• professional printing laboratories and product suppliers;

• payment-processing providers;

• accountants, insurers, legal advisers and professional consultants;

• website, email, software and information-technology providers;

• delivery and postal services;

• public authorities where disclosure is legally required.

These recipients may process personal data only for the relevant service or under their own legal obligations.

CEKraemer Art does not sell or rent customers’ personal data.

Photographs will not be supplied to unrelated third parties for advertising or commercial exploitation without an appropriate legal basis or the relevant permission.

7. International data transfers

Some technology, gallery, cloud-storage or service providers may process information outside Ireland or the European Economic Area.

Where personal data is transferred internationally, CEKraemer Art will use providers that apply an appropriate lawful transfer mechanism and safeguards required by applicable data-protection law, where such safeguards are required.

8. Data retention

Personal data is retained only for as long as reasonably necessary for the purpose for which it was collected and to meet contractual, legal, accounting and professional obligations.

In general:

• enquiry information that does not result in a booking will normally be deleted when it is no longer needed;

• contracts, invoices and transaction records may be retained for the period required by Irish law;

• online galleries will be available for the period communicated to the customer and may then be closed or deleted;

• edited photographs and working files may be retained for a reasonable period after delivery for backup, replacement, archive and dispute-resolution purposes;

• photographs approved for portfolio or historical use may be retained until the relevant permission is withdrawn or the images are no longer required;

• data connected with a complaint or legal claim may be retained until the matter and any applicable limitation period have ended.

Customers should download and securely back up their photographs before the stated gallery expiry date. CEKraemer Art does not guarantee permanent storage of galleries, photographs or digital files.

9. Data security

Reasonable technical and organisational measures are used to protect personal data against accidental loss, unauthorised access, alteration, disclosure or destruction.

These measures may include password-protected galleries, access controls, secure devices, software updates, backup procedures and reputable storage and service providers.

No internet transmission or storage system can be guaranteed to be completely secure. Customers should notify CEKraemer Art promptly if they believe that gallery access information has been lost, disclosed or misused.

10. Individual rights

Subject to the conditions and exceptions in data-protection law, individuals may have the right to:

• request access to their personal data;

• request correction of inaccurate or incomplete data;

• request deletion of personal data;

• request restriction of processing;

• object to processing based on legitimate interests;

• withdraw consent where processing is based on consent;

• request transfer of certain personal data in a portable format;

• lodge a complaint with the Irish Data Protection Commission.

A request may be sent using the contact details below. Reasonable information may be requested to confirm the identity of the person making the request.

The rights of one person may need to be balanced against the privacy, copyright and other rights of people appearing in the same photograph.

11. Third-party links

Client galleries may contain links to Pixieset, payment providers, print laboratories or other external services. CEKraemer Art is not responsible for the privacy practices of independent third parties. Customers should review the privacy information provided by those services.

12. Changes to this Policy

This Privacy Policy may be updated to reflect changes in services, business practices or legal requirements. The current version will be displayed in the footer of CEKraemer Art collections.

13. Contact

Questions, requests or concerns about personal data may be sent to:

CEKraemer Art
County Clare, Ireland
Email: cek.visuals@gmail.com

The Irish supervisory authority is:

Data Protection Commission
Ireland

Last updated: 31 July 2026