Privacy Policy

Viktoria Jensen Photography is responsible for processing personal data as described in this privacy policy. We are committed to handling your information with care, transparency, and in full compliance with the General Data Protection Regulation (GDPR) and applicable Dutch privacy legislation.

Studio

Viktoria Jensen Photography

Address

Boekweitstraat 21, The Netherlands

Email

info@viktoriajensen.nl

KvK number

97953296

Depending on the nature of your enquiry or booking, we may collect and process the following categories of personal data:

• Name
• Email address
• Telephone number (if provided)
• Contents of contact messages and enquiry details
• Information provided during booking and session consultations
• IP address and approximate location
• Browser and device information
• Website usage and interaction data
• Photographs containing identifiable individuals

We only process personal data for specific, lawful, and transparent purposes. We use your information to:

• Respond to enquiries and provide quotations
• Manage photography bookings and session administration
• Deliver photography services and provide client galleries
• Send booking confirmations, reminders, and important service communications
• Maintain website security and prevent fraudulent activity
• Analyse website usage to improve our service
• Publish portfolio work and use photographs for promotional purposes, subject to consent

We process your personal data on one or more of the following legal bases, as defined under the GDPR:

Performance of a contract

Processing is necessary to execute the photography agreement you have entered into with us.

Legal obligation

Processing is necessary to comply with a legal obligation, such as tax and accounting requirements.

Consent

You have given explicit consent for a specific purpose, such as the use of your photographs in our portfolio or marketing materials.

Legitimate interest

Processing is necessary for our legitimate business interests, such as website analytics and improving our services, where these interests are not overridden by your rights.

Our website uses cookies — small text files stored on your device — to ensure proper functioning, understand visitor behaviour, and improve the user experience. We use the following categories of cookies:

• Functional cookies — essential for the website to operate correctly
• Analytical cookies — used to understand how visitors interact with the website
• Marketing cookies — used by third-party analytics tools to understand visitor engagement

Where legally required, we obtain your consent before placing non-essential cookies. You may update or withdraw your cookie preferences at any time through your browser settings.

We use Google Analytics, a web analytics service provided by Google LLC, to understand how visitors use our website. Google Analytics collects anonymised usage data, including pages visited, time spent, and referral sources, using cookies and similar technologies.

Data is processed and stored by Google on servers that may be located outside the European Economic Area. We have enabled IP anonymisation to minimise the personal data shared with Google.

You may opt out of Google Analytics tracking by installing the Google Analytics opt-out browser add-on.

We use Microsoft Clarity, a behavioural analytics tool provided by Microsoft Corporation, to understand how visitors interact with our website. Clarity may record anonymised session data, including mouse movements, clicks, and scroll behaviour, to help us identify usability issues and improve the website experience.

Data collected by Clarity is processed by Microsoft and may be stored on servers located outside the European Economic Area. No personally identifiable information is deliberately captured.

For more information, please refer to Microsoft's Privacy Statement.

We do not sell, trade, or rent your personal data to third parties. Data may be shared with carefully selected third parties only where necessary to deliver our services or comply with legal obligations:

• Hosting and infrastructure providers (website and gallery hosting)
• Email service providers (for sending booking communications)
• Website development and maintenance partners
• Google Analytics (website usage data)
• Microsoft Clarity (anonymised behavioural data)
• Tax and accounting authorities (when legally required)

All third-party processors are required to handle your data in accordance with GDPR and have appropriate data processing agreements in place.

We retain personal data only for as long as necessary for the purpose for which it was collected, or as required by law:

Contact requests

Up to 2 years after the last interaction

Booking and quotation records

As long as legally required for the relevant contract

Accounting records

7 years, as required by Dutch tax law

Technical logs

Up to 12 months

Photography portfolio images

Indefinitely, subject to any withdrawal of consent

We take the security of your personal data seriously. We apply appropriate technical and organisational measures to protect your information against unauthorised access, loss, alteration, or disclosure.

Our website uses HTTPS encryption. Access to personal data is restricted to those who require it to carry out their responsibilities. We regularly review and update our security practices.

While we take every reasonable precaution, no method of electronic transmission or storage is completely secure. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify you and the relevant supervisory authority as required by law.

Under the GDPR, you have the following rights regarding your personal data. You may exercise any of these rights by contacting us at info@viktoriajensen.nl. We will respond within 30 days.

Right of access

You have the right to request a copy of the personal data we hold about you.

Rectification

You have the right to request correction of inaccurate or incomplete personal data.

Deletion

You have the right to request the deletion of your personal data, subject to any legal obligations we must comply with.

Restriction

You have the right to request that we restrict the processing of your personal data in certain circumstances.

Objection

You have the right to object to the processing of your personal data where we rely on legitimate interest as the legal basis.

Data portability

You have the right to receive your personal data in a structured, commonly used format and to transfer it to another controller.

Withdraw consent

Where processing is based on consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

If you believe your privacy rights have been infringed, we encourage you to contact us first so we can try to resolve the matter directly.

If you are not satisfied with our response, you have the right to file a complaint with the Dutch Data Protection Authority:

Authority

Autoriteit Persoonsgegevens

Website

autoriteitpersoonsgegevens.nl

Address

Bezuidenhoutseweg 30, 2594 AV Den Haag

We may update this privacy policy from time to time to reflect changes in our practices, applicable law, or operational requirements. The current version, including the version date at the top of the page, is always available on our website.

We encourage you to review this policy periodically. For material changes, we will take reasonable steps to notify you directly where we hold your contact information.