Personal data
Privacy Policy
This policy explains how personal information is handled when you visit Vongraven Images, make a digital purchase or contact us.
Vongraven Images is designed to collect only the information necessary to operate the website, process purchases, provide secure digital downloads and respond to customer enquiries.
Digital delivery and consent
Before immediate digital delivery begins, the purchase system records the confirmations made by the customer regarding the Terms of Purchase, the selected license and immediate delivery of the digital file.
A purchase confirmation containing the transaction details and the recorded digital delivery consent is made available to the customer after payment.
Temporary checkout and download records are stored in Cloudflare for approximately 24 hours. Download links are also time-limited.
After a payment has been successfully verified, a purchase record is stored separately in the Vongraven Images purchase database. This record is used to document the transaction, the license granted and the consent recorded before digital delivery.
Purchases
When you purchase an image or timelapse video, information relating to the transaction is processed in order to complete the purchase, verify payment and provide the purchased digital file.
The information handled by the Vongraven Images purchase system may include:
- The product purchased
- The selected license
- The purchase amount and currency
- PayPal order and payment reference numbers
- The date and time of the transaction
- Confirmation of the purchase terms and digital delivery consent
- Temporary download information
This information is used to fulfil the purchase agreement, document the transaction and provide access to the purchased file.
Payment through PayPal
Payments are processed by PayPal. Payment information submitted directly to PayPal is processed under PayPal's own privacy and security arrangements.
Vongraven Images does not store your full credit card number, bank account number or PayPal password. The website receives the transaction information necessary to verify that payment has been completed and to deliver the purchased file.
Digital delivery and consent
Before immediate digital delivery begins, the purchase system records the confirmations made by the customer regarding the Terms of Purchase, the selected license and immediate delivery of the digital file.
A purchase confirmation containing the transaction details and the recorded digital delivery consent is made available to the customer after payment.
Temporary order, consent and download records used by the current delivery system are normally retained for approximately 24 hours. Download links are also time-limited.
Contact and customer service
If you contact Vongraven Images by email, the information you provide may include your name, email address, message and any information you choose to include.
Correspondence is used to answer your enquiry, resolve purchase or download problems and, where relevant, document matters connected with a transaction.
Cloudflare
Cloudflare services are used as part of the technical infrastructure for payment processing, secure downloads, file delivery and website analytics.
Cloudflare may process technical information necessary to provide these services, including information associated with network requests and use of the website.
Website analytics
Vongraven Images uses Cloudflare Web Analytics to understand general website usage and performance.
Cloudflare Web Analytics is used without advertising or marketing tracking. It does not use cookies or local storage to identify visitors and does not use browser fingerprinting to identify individual users.
Vongraven Images does not currently use Google Analytics, advertising cookies or behavioural advertising tracking.
Legal basis
Personal information connected with a purchase is processed where necessary to enter into and perform the purchase agreement.
Information may also be processed where necessary to comply with legal obligations, including accounting and documentation requirements.
Information relating to security, technical operation and customer enquiries may be processed where necessary for legitimate interests in operating, protecting and supporting Vongraven Images, provided those interests do not override the rights and freedoms of the individual.
Retention
Personal information is not retained longer than necessary for the purpose for which it was collected, unless longer retention is required by law or is necessary to establish, exercise or defend legal claims.
Temporary checkout and download records stored in Cloudflare are normally deleted automatically after approximately 24 hours. Download links expire after the same technical retention period.
Completed purchase records stored in Supabase are retained for as long as reasonably necessary for transaction documentation, accounting requirements, administration of the license granted with the purchase and the establishment, exercise or defence of legal claims.
Purchase information will be deleted or anonymised when there is no longer a lawful or necessary reason to retain it.
Customer correspondence is retained only for as long as it remains necessary for the enquiry, transaction or applicable legal requirements.
Payment information held independently by PayPal is retained according to PayPal's own legal obligations and privacy policies.
Service providers and international transfers
Vongraven Images uses third-party service providers including PayPal, Cloudflare and Supabase where necessary to operate the website and process purchases.
These providers operate internationally and may process information outside Norway or the European Economic Area. Where applicable, such transfers are subject to the safeguards used by the relevant service provider under applicable data protection law.
Your rights
Subject to the conditions and exceptions in applicable data protection law, you may have the right to:
- Request access to personal information about you
- Request correction of inaccurate information
- Request deletion of information
- Request restriction of processing
- Object to certain processing
- Receive information in a portable format where the right to data portability applies
Some information may need to be retained despite a request for deletion where there is a legal obligation or another lawful reason to retain it.
You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet).
Changes to this policy
This Privacy Policy may be updated if the website, payment system, analytics tools or use of personal information changes.
The current version will be published on this page.
Contact
Questions about privacy or requests concerning personal information may be sent to:
images@vongraven.com