Privacy Policy

Last updated: 14 October 2026

This Privacy Policy explains how ANTONIO CANO GARCIA, Organisation No. 919 126 043 (“the Photographer”, “I”, “me”), collects, uses, stores and protects personal data in connection with enquiries, bookings, photography and related services, invoicing, and use of this website.

1. Data Controller

The data controller is:

ANTONIO CANO GARCIA
Organisation No.: 919 126 043
Sole proprietorship / Enkeltpersonforetak
Kastellveien 23, 1170 Oslo, Norway

Email: photo@anthonicano.com
Phone: +47 941 48 533

2. Personal Data Collected

Depending on the circumstances, I may process information including:

Name
Email address
Phone number
Property address
Booking date and time
Property and access information
Information necessary for invoicing and accounting
Information provided through forms, email, telephone or other communication
Technical information associated with use of the website and cookies

For real estate assignments, some information about a seller, homeowner, tenant or other person connected with the property may be provided by the real estate broker or agency arranging the assignment rather than directly by that person.

Photography and video assignments may also incidentally contain personal information visible at a property, such as identifiable people, private photographs, documents, names, vehicle registration numbers or other identifying information.

3. Purposes and Legal Basis for Processing

Personal data is processed where necessary for the following purposes:

Enquiries and bookings: Responding to enquiries, preparing assignments, confirming appointments and providing requested services. The legal basis is normally performance of a contract or steps requested before entering into a contract, where the person concerned is a party to that contract, or legitimate interests in managing business enquiries and assignments.
Communication and property access: Communicating with brokers, sellers, homeowners and other relevant persons, and arranging access to properties. The legal basis is normally performance of a contract or legitimate interests in coordinating the commissioned service.
Production and delivery: Performing, editing, processing and delivering photography, video and related services. The legal basis is normally performance of a contract or legitimate interests in providing the commissioned service.
Customer service: Handling corrections, complaints, questions and follow-up requests. The legal basis is normally performance of a contract, compliance with legal obligations or legitimate interests in resolving service-related matters.
Invoicing and accounting: Creating invoices, maintaining accounting records and complying with tax and bookkeeping requirements. The legal basis is performance of a contract where applicable and compliance with legal obligations.
Website operation and security: Maintaining website functionality, preventing misuse and protecting technical systems. The legal basis is normally legitimate interests in operating a secure website.
Cookies and optional website technologies: Using non-essential cookies and similar technologies where valid consent is required.
Professional archiving and portfolio use: Retaining suitable photographic material for professional records, future client enquiries, licensing administration and presentation of the Photographer’s work. Where personal data is involved, the legal basis is normally legitimate interests, subject to an assessment of the rights and interests of the people concerned.

Where processing is based on legitimate interests, those interests are balanced against the rights and freedoms of the individuals concerned.

Where consent is required, it may be withdrawn in accordance with applicable law.

4. Invoicing and Accounting

Fiken is used for invoicing, accounting and related financial administration.

Depending on who is responsible for payment, an invoice may be issued to a real estate agency, broker, company, seller, homeowner or other agreed customer.

Only information reasonably necessary for invoicing, accounting and related legal obligations is entered or processed for these purposes.

5. Service Providers and Production Partners

Professional third-party service providers may be used where reasonably necessary to perform or deliver an assignment.

These include, where applicable:

ImageDesk: A Norwegian image-processing and retouching provider. Assignment information shared through its production system may include photographs, property addresses, appointment dates and times, broker names and broker email addresses. Image editing is carried out in Vietnam by Ursin Co. Ltd., a production subsidiary wholly owned by ImageDesk AS.
Video-editing providers: External video-production services, including Rotider Media when used. Video footage may be shared for editing and returned to the Photographer for delivery to the client. Client contact information is not normally provided for this purpose.
Dropbox: Cloud storage, file synchronisation and transfer of photographic and business material.
Acuity Scheduling: Online appointment booking and management.
Fiken: Invoicing, accounting and related financial administration.
Website and communication providers: Website hosting, technical maintenance, email and other services necessary to operate the business.
Other specialist production providers: Digital furniture, virtual staging, virtual renovation or other services ordered for a particular assignment.

Only information reasonably necessary for the relevant service should be shared.

Photographs and video may themselves contain personal data, even where names or contact details are not provided separately.

Service providers may process information on behalf of the Photographer or act as independent data controllers, depending on the service and the applicable arrangement.

Where a provider processes personal data on behalf of the Photographer, appropriate data-processing arrangements are required under applicable law.

Personal data is not sold or rented to third parties.

6. International Processing

Some service providers may process, access or store information outside Norway or the European Economic Area (EEA).

For example, image processing arranged through the Norwegian company ImageDesk is carried out in Vietnam by its production subsidiary, Ursin Co. Ltd. External video-editing services may also operate outside the EEA.

The fact that a service provider is registered in Norway does not necessarily mean that all processing takes place within the EEA.

Where personal data is transferred to or accessed from a country outside the EEA, the transfer must comply with applicable data-protection requirements. Depending on the circumstances, this may require an adequacy decision, appropriate contractual safeguards or another legally recognised transfer mechanism.

Information about relevant processing arrangements and applicable safeguards may be requested using the contact details in this Privacy Policy.

7. Photography, Video and Portfolio Use

Suitable photographs and video from assignments may be retained for professional archive purposes and may be used for the Photographer’s professional portfolio and self-promotion in accordance with the Terms & Conditions.

This may include the Photographer’s website, professional social media, price lists, presentations, marketing materials and examples shown to potential clients.

The Photographer normally asks that personal photographs, private documents and other sensitive or identifying items be removed or concealed before the photography appointment.

Reasonable care is taken to protect privacy. Where identifiable faces appear in images intended for delivery or publication, they are normally blurred or otherwise obscured, particularly where children are involved.

Other personal information visible in photographs, including family pictures, names, documents and identifying details, may also be removed or obscured where appropriate.

Original photographic files may contain information that is not visible in the final edited images.

If a property is confidential, off-market or subject to a specific confidentiality requirement, the client should inform the Photographer.

Requests concerning identifiable personal information appearing in photographs will be considered in accordance with applicable data-protection law.

8. Cookies

This website uses cookies and similar technologies.

The website uses Cookiebot by Usercentrics to provide information about cookies and allow visitors to manage their preferences.

Visitors can choose to deny non-essential cookies, allow selected categories or allow all available categories.

Where consent is required, non-essential cookies and similar technologies must not be activated before valid consent has been obtained.

Consent can subsequently be changed or withdrawn through the website’s cookie settings.

Cookies that are strictly necessary for the operation or delivery of requested website functionality may be used without consent where permitted by applicable law.

Further information about the cookies currently used by the website, their purposes, providers and relevant retention periods is available through the website’s cookie settings and cookie declaration.

9. Data Retention

Personal data is retained only for as long as reasonably necessary for the purposes for which it was collected or for as long as required by applicable law.

Accounting, invoicing and transaction information is retained for the periods required under Norwegian accounting and tax legislation.

Booking information, correspondence and other business records may be retained where reasonably necessary for customer service, contractual administration, dispute resolution or legal obligations.

Photographic and video archive

The Photographer maintains a long-term professional archive of completed assignments, including original photographs and edited material.

Files may be stored on local hard drives, other backup devices and cloud storage services such as Dropbox.

The archive supports legitimate professional purposes, including:

Maintaining records of completed photographic work
Responding to previous clients requesting existing photographs
Managing copyright and image-licensing enquiries
Considering requests for new licences for later sales, rentals or other permitted uses
Maintaining suitable portfolio and professional marketing material

Photographs are not routinely deleted solely because a property has been sold or the original marketing licence has expired.

Where archived material contains personal data, its continued retention must have a valid legal basis and remain necessary and proportionate for the relevant purpose. Retention needs will be reviewed where appropriate, particularly following a privacy-related request.

Requests to remove, anonymise or restrict the use of identifiable personal information will be assessed individually under applicable law. Where a valid erasure request applies and no lawful reason for continued retention exists, the relevant personal data will be deleted or appropriately anonymised.

External production providers

External production providers, including ImageDesk, may retain original files temporarily and completed photographs for longer periods in accordance with their storage practices.

Where applicable, requests concerning the deletion of photographs held by these providers may be coordinated through the Photographer.

Client download links and online delivery services are not guaranteed to remain available indefinitely. Clients are responsible for maintaining their own copies of delivered material.

10. Data Security

Reasonable technical and organisational measures are used to protect personal data against unauthorised access, alteration, disclosure, loss or misuse.

These measures may include access controls, secure accounts, appropriate storage practices and limiting the sharing of information to what is reasonably necessary.

However, no electronic transmission or storage system can be guaranteed to be completely secure.

11. Your Rights

Under applicable data-protection law, you may have the right to:

Request access to personal data held about you
Request correction of inaccurate or incomplete information
Request deletion of personal data where applicable
Request restriction of processing
Object to certain processing, including processing based on legitimate interests
Request data portability where applicable
Withdraw consent where processing is based on consent
Receive information about relevant international transfers and applicable safeguards

These rights may be subject to exceptions or limitations under applicable law, including legal requirements to retain certain accounting or business records.

Requests concerning personal data can be sent to photo@anthonicano.com.

Requests will be handled within the time limits required by applicable data-protection law.

You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) if you believe your personal data has been processed unlawfully.

12. Third-Party Websites

The website may contain links to third-party websites or services.

The Photographer is not responsible for the privacy practices, security or content of independent third-party websites.

13. Changes to This Privacy Policy

This Privacy Policy may be updated when necessary to reflect changes in services, technology, service providers or applicable legal requirements.

The current version will be published on the website with the date of the latest update.

14. Contact

Questions about this Privacy Policy or the processing of personal data may be directed to: