1. Data Controller
PHOTARCH is operated by Arkeologibyrån, a part of DLD · org. nr 810717-4156. For questions regarding your personal data, contact: info@photarch.com
2. What Data We Collect
When you create an account on PHOTARCH, we collect the following personal data:
- Name (first and last)
- Email address
- Workplace and job title (optional)
- Newsletter preference (opt-in only)
- Account creation date
We also collect anonymised usage data via Google Analytics (see Section 5).
3. Purpose and Legal Basis
We process your personal data for the following purposes:
- Account management — to provide access to the PHOTARCH archive and its features. Legal basis: performance of a contract (GDPR Art. 6.1.b).
- Newsletter — to send updates about new objects, methodology, and announcements, if you have opted in. Legal basis: consent (GDPR Art. 6.1.a). You can withdraw consent at any time from your account settings.
- Analytics — to understand how the archive is used and improve it. Legal basis: legitimate interest (GDPR Art. 6.1.f), subject to your cookie consent.
4. Data Retention
Account data is retained for as long as your account is active. If you request deletion of your account, your personal data will be removed within 30 days. Newsletter opt-in status is updated immediately upon unsubscribe.
5. Third Parties
We use the following third-party services that may process your data:
- Supabase — authentication and database hosting. Your account data is stored on Supabase infrastructure. Privacy policy: supabase.com/privacy
- Google Analytics — anonymised usage statistics, loaded only with your cookie consent. Data is processed by Google LLC. Privacy policy: policies.google.com/privacy
- Klaviyo — newsletter delivery for subscribers who have opted in. Only your email address is shared with Klaviyo. Privacy policy: klaviyo.com/legal/privacy-notice
6. Cookies
PHOTARCH uses the following types of cookies:
- Necessary cookies — used for authentication and session management (Supabase). These cannot be disabled.
- Analytics cookies — used by Google Analytics to collect anonymised data about how the archive is used. These are only set with your explicit consent.
You can change your cookie preference at any time by clearing your browser storage and reloading the page.
7. Your Rights
Under the GDPR, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request erasure of your data
- Withdraw consent (newsletter) at any time
- Lodge a complaint with the Swedish supervisory authority, IMY (Integritetsskyddsmyndigheten), at imy.se
To exercise any of these rights, contact us at info@photarch.com
8. Changes to This Policy
We may update this policy as the service develops. Material changes will be communicated via the newsletter (if you are subscribed) or a notice on the platform.