Privacy
This page explains what personal data Kingofoto collects, why, how long it is kept, and how you can act on it. It fulfils Kingofoto's duty to inform you under Articles 13–14 of the EU General Data Protection Regulation (GDPR).
Who is the data controller
Hedonist Photo – Visuals & SEO CVR 43612395 · Enkeltmandsvirksomhed Marina Ozerova Søtorvet 5, 2., 1371 København K, Denmark Studio (by appointment): Kingosgade 13, Frederiksberg box@kingofoto.dk
Kingofoto is a trading name of the above entity. For any question about data — access, correction, deletion, portability — write to box@kingofoto.dk.
What data is collected
- Contact and booking forms. Name, email, phone (optional), session type, requested date and time, and the free-form message you write.
- Session metadata. The IP address you submitted from is held for at most one hour in a Cloudflare Workers KV store to enforce rate limiting. It is then purged automatically.
- Photographs. If you book a session, the photographs we make of you are processed under the session contract. They are stored on password-protected gallery services and returned to you as files.
No analytics cookies, tracking pixels, advertising identifiers, or third-party fingerprinting are used on this site.
Legal basis for processing
- Art. 6(1)(b) — contract / pre-contract. Booking and contact enquiries, and the subsequent session performance and delivery.
- Art. 6(1)(f) — legitimate interests. Very short-term rate limiting on public form endpoints.
- Art. 6(1)(a) — consent. If you explicitly consent to a photograph being used on this site, Instagram, or printed folios. You may withdraw that consent at any time.
- Art. 6(1)(c) — legal obligation. Danish bookkeeping law (bogføringsloven) requires financial records of invoiced sessions to be kept for five years after the end of the financial year.
How long it is kept
- Contact-form enquiries that do not convert: twelve months, then deleted.
- Booking-form enquiries that do not convert: twelve months, then deleted.
- Client records for confirmed sessions: five years from end of financial year (tax law).
- Rate-limit IP: up to one hour in Cloudflare Workers KV, then purged.
- Original and edited photographs: kept on backup for at least twelve months after delivery; thereafter on request.
Who processes it on our behalf
- Cloudflare, Inc. — site hosting, CDN, rate-limit KV store, Turnstile bot-check (EU region for KV and edge; transit may touch other regions).
- Resend, Inc. — outbound transactional email for form replies. EU region where available, otherwise US with Standard Contractual Clauses.
- Hostinger — inbound email hosting for
box@kingofoto.dk.
No data is sold, rented, or used for marketing. No third-country transfers occur beyond the processors listed above.
Your rights
- Access — get a copy of the data held about you.
- Rectification — have inaccurate data corrected.
- Erasure — "right to be forgotten", subject to the tax-law retention above.
- Restriction — limit what can be done with your data.
- Portability — receive the data in a machine-readable format.
- Objection — object to processing based on legitimate interests.
To exercise any of these, write to box@kingofoto.dk. You also have the right to lodge a complaint with the Danish supervisory authority, Datatilsynet.
Security
Submissions travel over TLS. Operational access is restricted to the controller. Photographs awaiting delivery are kept on encrypted drives or password-protected gallery services.