Privacy statement Barry Schultz Photography
Last update: September 30, 2022
Your privacy is very important to me. Your personal data is processed entirely in accordance with the General Data Protection Regulation (GDPR). In this privacy statement, you can read how I do this and what your rights are.
About me
Barry Schultz Photography
Lange Muiderweg 519 s
1382 LB Weesp
info@barryschultzphotography.com
KVK: 39032291
For which purposes do I process personal data?
Contact
In order to maintain contact, I process your (company) name, e-mail address, and phone number. You can also fill out a contact form on my website. That only collects your name and email address.
GDPR basis: legitimate interest.
Storage period: indefinite time, but no longer than necessary.
Quotes
If you request a quote, I will collect your (company) name and email address.
Basis of the GDPR: performance of the contract.
Storage period: indefinite time, but no longer than necessary.
(Digital) prints
When you order a (digital) print, I will process your company name, name, e-mail address, and address details. I need your e-mail address to send a digital print and to keep you informed about the order. I need your physical address details to send prints.
Basis of the GDPR: performance of the contract.
Storage period: a maximum of 7 years due to the legal retention obligation of administration.
Invoicing / Financial administration
For invoicing and/or for my financial administration, I process your name, company name, address details, possibly your Chamber of Commerce number, possibly your VAT number, invoice number, bank details, email address, and client number. When I send you an invoice, I already have your name, company name, and e-mail address because of our earlier contact.
Basis of the GDPR: legal obligation.
Storage period: a maximum of 7 years due to the legal retention obligation of administration.
Legitimate interest?
For the purpose “Contact”, I process personal data on the basis of “legitimate interest”. This is one of the bases mentioned by the GDPR on which you may process personal data. I have weighed my interest in processing your personal data against your interest (the right to privacy). Therefore, I do not process more data than necessary to achieve my goal, and I do not process it longer than necessary.
Recipients of your personal data
Your data will not be provided to third parties, unless necessary for business operations or unless required by law. The third parties to which I have (possibly) provided your data are:
- RealHosting
- Apple (e-mail)
- Accounting firm
- WeTransfer
- Printing offices
- Mail delivery companies
Barry Schultz Photography does not sell your data to third parties.
Transfer to third countries
Barry Schultz Photography tries to process personal data within the European Economic Area (EEA) as much as possible. However, I may still use services from outside the EEA. I only do so if there is an appropriate level of protection for the processing of personal data.
Security of your personal data
Barry Schultz Photography has taken appropriate technical and organizational measures to protect your personal data against loss or against any form of unlawful processing.
Automated decision-making
Automated decision-making means that decisions are made automatically on the basis of processed personal data, without the intervention of a real person. This does not apply to the services of Barry Schultz Photography.
Cookies
Cookies are small files that are placed on devices when you visit a website, such as on your laptop or telephone. These cookies remember information and are retrieved when you re-visit a website. Barry Schultz Photography only places functional cookies and anonymized analytical cookies.
Functional cookies. These are cookies that the website needs to function properly. These cookies have no impact on privacy and Barry Schultz Photography does not have to request permission for this.
(Anonymized) analytical cookies. These are cookies with which the website owner can manage the statistics of his website. For example, the number of visitors, how long a visitor is on the website, and which browser the visitor uses. I use Google Analytics for my statistics. With this statistics platform I collect IP addresses, but they are anonymized. Because the IP addresses are anonymized, I do not have to ask you for explicit permission to place these cookies.
However, I can still collect personal data by keeping statistics. The basis for this is legitimate interest. This is one of the bases mentioned by the GDPR on which you may process personal data. I have weighed my interest in processing your personal data against your interest (the right to privacy).
Your rights
Right of access, right to rectification, and right to erasure
You have the right to know which of your personal data Barry Schultz Photography processes. If certain data are incorrect, you can request me to rectify them. I can also delete data at your request.
Right to restriction of processing
This is the right to (temporarily) stop processing your data. For example, it is possible that the information I have about you is incorrect. If that is the case, I may no longer use this data until I have the correct data. In the following cases I must also (temporarily) stop processing your data: when the processing of the data is unlawful, when I no longer need the data or when you have objected to the processing of data.
Right to data portability
You have the right to receive your personal data from me in a structured, commonly used, and machine-readable form and to transfer it to another controller when you have given Barry Schultz Photography permission to process your personal data, and/or when the processing is done automatically.
Right to object
When I process your data because of “legitimate interest” and you disagree with the processing of your personal data, you can object. When you object, I shall no longer process the personal data, unless I can demonstrate compelling legitimate grounds for the processing which override the interests, rights, and freedoms of you or for the establishment, exercise, or defense of legal claims. If you object to the processing for the purpose of direct marketing, I will no longer process this data.
Right to withdraw your consent
When I have received your permission to process your (sensitive) personal data, you have the right to withdraw this permission at any time. This does not affect the lawfulness of the processing of the personal data before you have withdrawn your consent.
Right to lodge a complaint
If you have a complaint about how I handle your personal data, you have the right to submit a complaint to the Dutch Data Protection Authority.
If you would like to exercise any of these rights, please e-mail info@barryschultzphotography.com.
Changes to this privacy statement
I may change this privacy statement at any time. There may be developments in the field of legislation and regulations, or I may change certain things at my company. Please check my website regularly to see if anything has changed. You can always find the latest version online. If you use my services after the changes, you have agreed to them.
