Privacy Policy

How do I handle your personal information?

GDPR - The Data Protection Regulation applies as law in all EU member states as of May 25, 2018 and replaces the Personal Data Act (PUL). The Data Protection Regulation contains rules on how to process personal data. Photographer Pia Lundberg is responsible for the information the photographer processes in connection with photography. This information includes pictures of you / portraits, your name, your email address, your postal address, phone number and is used in the following ways: I use hard disks and external server to store images, recipient lists for e-mail messages and invoice data in customer records. I do not disclose your information to third parties. All information is stored on a secure server for the purpose of:

  • Store images in the event that you as a customer want further access to them.
  • Publish the pictures on my own website and social media to show my work.
  • Distribute newsletters.
  • Send invoice by e-mail.

What personal information do I handle about you?
  • When you send your request, first name, last name, phone number and e-mail address are collected so that I will have the opportunity to return to you.
  • If you become my customer, I also collect address information and other information about your order. I only collect these personal information in order to be able to pay and deliver what you have ordered.
  • If you contact me, I collect name and email address.
  • I also use personal data in invoicing and accounting which are saved according to the Accounting Act.

The legal basis for the processing of your personal data is the agreement I make at the photo opportunity or in connection with this. I save your personal data for at least 7 years after I billed you or the time required by the Accounting Act.

Who do I provide personal information to?

I share personal information with other actors when needed for a specified purpose. In several cases, I employ subcontractors themselves, which will take part of the personal data as personal data assistants. This means that they can only use the data for my purposes, they must not use them for any purpose or gain and they must also follow rules regarding personal data. These types of subcontractors can be, for example, subcontractors for invoicing and delivery of goods, for IT operations and IT support, for invoicing and for accounting.

You have the right, upon request, to access the personal data registered about you. If they are incorrect, incomplete or misleading, you have the right to request that the data be corrected or deleted.

Do you want to know more?

If you want more information, change your information or report that you do not want me to store information about you as above, please contact me by e-mail at:

This privacy policy is a live document and the content may be updated. The policy is last updated 2019-03-28.