Privacy Policy
Last updated: 28.10.2026
Who we are
This website is run by Fotograf Eva Rose Furmyr (organisation number 982 221 323). This privacy policy explains how Eva Rose collects and uses personal data when you visit the website, contact her, sign up for the newsletter or book a photography project.
Eva Rose Furmyr is the data controller for the processing of personal data described in this policy.
Fotograf Eva Rose Furmyr
Liabygdvegen 38
6320 Isfjorden, Norway.
Email: evarose@gmail.com
What data we collect and why
Answering enquiries sent through the contact form or by email
Data we collect: Name, email address, any other details you choose to include in your message.
Legal basis (GDPR): Art. 6(1)(b), steps taken at your request before entering into an agreement, and art. 6(1)(f), legitimate interest in answering your enquiry.
Carrying out photography projects and staying in touch with clients
Data we collect: Name, email address, phone number, information about the project.
Legal basis (GDPR): Art. 6(1)(b), performance of a contract, and art. 6(1)(f), legitimate interest in follow-up with previous clients.
Accounting
Data we collect: Name, contact details and invoice information.
Legal basis (GDPR): Art. 6(1)(c), legal obligation under the Norwegian Bookkeeping Act.
Sending the newsletter
Data we collect: Email address, and name if you provide it.
Legal basis (GDPR): Art. 6(1)(a), your consent. You can unsubscribe at any time using the link in every newsletter.
Statistics about how the website is used (Google Analytics)
Data we collect: Pseudonymous identifiers stored in cookies, pages visited, device and browser type, approximate location.
Legal basis (GDPR): Art. 6(1)(a), your consent through the cookie banner.
Running the website securely
Data we collect: IP address, browser information and technical logs collected by Squarespace.
Legal basis (GDPR): Art. 6(1)(f), legitimate interest in keeping the website secure and working.
The contact form is provided by Squarespace. When you submit it, your message is saved as a contact in the website's Squarespace account and sent by email to Eva Rose. Enquiries are handled directly by email. Your information is not entered into any other customer database or system. Your personal data is not sold, and it is not used for automated decision-making or profiling.
Cookies
Cookies are small text files that a website stores in your browser. When you first visit the website, a cookie banner asks whether you accept non-essential cookies. Cookies used for statistics and embedded videos are only set if you accept them. You can change your choice at any time through the cookie settings link at the bottom of the website, or by deleting cookies in your browser settings.
Squarespace
Purpose: Makes the website, contact form and cookie banner work, and protects against misuse.
Type: Strictly necessary.
Provider: Squarespace Ireland Ltd.
Squarespace Analytics
Purpose: Basic visitor statistics in the website's admin panel.
Type: Analytics, set only with consent.
Provider: Squarespace Ireland Ltd.
Google Analytics (cookies such as ga and ga_*)
Purpose: Shows how visitors use the website, so it can be improved.
Type: Analytics, set only with consent.
Provider: Google Ireland Ltd.
Vimeo
Purpose: Plays videos embedded on the website. Vimeo may set its own cookies and collect usage data when a video is loaded or played.
Type: Third-party, set only with consent.
Provider: Vimeo.com, Inc.
Adove Fonts
Purpose: Displays some of the fonts on the website.
Type: Technical, no cookies set by default.
Provider: Adobe Inc.
You can read more in each provider's privacy policy: Squarespace, Google, Vimeo and Adobe. Google offers an opt-out browser add-on for Google Analytics.
Who we share data with
Personal data is only shared with service providers that are needed to run the website and the business:
Squarespace hosts the website and stores contact form submissions and newsletter subscribers.
Google provides email (where enquiries and client correspondence are kept) and Google Analytics.
Vimeo hosts the videos shown on the website.
An accountant, if one is used, receives invoice information needed for bookkeeping.
Some of these providers are based in, or use subprocessors in, the United States. Transfers outside the EEA are based on the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.
Personal data may also be disclosed to public authorities where required by law.
How long we keep your data
Enquiries that do not lead to a project: Deleted once a year, both from Squarespace and from email.
Contact details of clients Eva Rose has worked with: Kept for future contact, until you ask for them to be deleted.
Invoices and accounting records: 5 years, as required by the Norwegian Bookkeeping Act.
Newsletter subscription: Until you unsubscribe.
Google Analytics data: 14 months, then deleted automatically.
Cookies: Until they expire or you delete them; see your browser or the cookie settings.
Security
The accounts used for the website and email are protected with strong passwords and two-step verification. Only Eva Rose has access to them. Data sent through the website is encrypted (HTTPS).
Your rights
You have the right to:
see what personal data we hold about you (access)
have incorrect or incomplete data corrected
have your data deleted
restrict how your data is used
object to processing based on legitimate interest
receive your data in a portable format
withdraw your consent at any time, for example by unsubscribing from the newsletter or changing your cookie settings
To use your rights, email evarose@gmail.com. You will receive an answer without undue delay and within 30 days at the latest.
If you think your personal data is being processed unlawfully, you can complain to the Norwegian Data Protection Authority, Datatilsynet.
Changes to this policy
This policy may be updated, for example if new services are added to the website. The date at the top shows when it was last changed.
Contact
Fotograf Eva Rose Furmyr
Liabygdvegen 38
6320 Isfjorden, Norway
Email: evarose@gmail.com