Information pursuant to Articles 13, 14, and 21 of the General Data Protection Regulation (GDPR)
Preamble
We hereby inform you about the processing of your personal data and the rights to which you are entitled under data protection laws. Which data is processed specifically and how it is used largely depends on the services you have requested or that have been agreed with you.
1. Who is responsible for data processing and whom can I contact?The controller is:
La Récré Photographie
1169 3e Rue
Val-d'Or, Québec
genevievve@larecre.ca
2. What data sources and types do we use?
We process personal data that we collect as part of our business relationship with you. Additionally, we process, to the extent necessary for providing our services, personal data that we lawfully obtain from other services (e.g., institutions such as schools and daycares where we conduct photography). We may also process personal data acquired lawfully from publicly accessible sources (e.g., debtor lists, press, media) which we are permitted to use.
Personal data processed includes identity and contact information (name, address, phone number, email address), as well as order data, contractual obligations, marketing and distribution information, and usage data from our digital platforms.
3. Why do we process your data (purpose of processing) and what is the legal basis?
We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and other applicable data protection laws.
3.1. To fulfill contractual obligations (Art. 6(1)(b) GDPR)
Data is processed to provide photography services and to sell and deliver the resulting photos digitally or physically. This includes executing contracts, handling orders, and preserving memories of special events.
3.2. Based on legitimate interests (Art. 6(1)(f) GDPR)
Where necessary, data is processed beyond the execution of contracts to protect our legitimate interests or those of third parties. Examples: marketing (if not objected), legal defense, IT security, prevention of fraud, business development, and product improvement.
If we provide services at public events, we may process photos and data based on legitimate interest. Participants must be informed and may exercise their right to object. Note that objections are valid only moving forward.
3.3. Based on your consent (Art. 6(1)(a) GDPR)
If you give us consent for specific purposes (e.g., publishing photos), processing is lawful on that basis. You may revoke your consent at any time, effective going forward.
3.4. Based on legal obligations (Art. 6(1)(c) or (e) GDPR)
We process certain data due to legal obligations, such as storing billing data in accordance with commercial and tax regulations.
4. Who receives my data?Internal departments and third-party processors (per Art. 28 GDPR) may access your data to fulfill contractual or legal duties. This includes IT services, photo product manufacturers, logistics, telecommunications, and payment providers.
Data may also be shared with public authorities or institutions if legally required, or if you have given your consent.
5. How long is my data stored?
We store your personal data as long as necessary to fulfill contractual obligations or to comply with legal retention requirements (typically 2–10 years). Statutory limitation periods (typically 3 years, up to 30 in some cases) also apply.
6. What are my data protection rights?You have the right to:
Access your data (Art. 15 GDPR)
Rectify data (Art. 16 GDPR)
Erase data (Art. 17 GDPR)
Restrict processing (Art. 18 GDPR)
Data portability (Art. 20 GDPR)
You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR).
7. Am I obliged to provide data?
You only need to provide personal data necessary for establishing and managing a business relationship or that we are legally required to collect. Without this data, we may not be able to enter into or fulfill a contract.
8. Notification of important events
If you sign up for email and/or SMS alerts, the data you provide will be used solely for this purpose. Your consent, including your IP address, will be documented. You may withdraw your consent at any time via the unsubscribe link or by emailing info@larecre.ca. This withdrawal will apply moving forward only.
9. Third-party services9.1. Cookies
Cookies are text files stored on your computer to analyze website usage.
They transmit usage data to our providers, potentially anonymized (e.g., IP truncation within the EU). These providers evaluate usage and provide analytics reports.
You can block cookies via your browser settings, though some site features may not function fully.
We use third-party cookies from:
Google Analytics (support.google.com/analytics)
Google Ads (policies.google.com/privacy)
Fotograf.de (fotograf.de/datenschutzhinweise)
Information about your right to object under Art. 21 GDPR
1. General right to object
You may object at any time to processing based on legitimate interest (Art. 6(1)(f)) due to your personal circumstances. If you object, we will stop processing unless we have compelling reasons.
2. Right to object to direct marketing
You may object at any time to the use of your data for direct marketing. If you object, we will no longer use your data for that purpose.
Objections must be sent in writing or by email to:
La Récré Photographie
genevieve@larecre.ca
