Privacy Statement

WHO ARE WE?

Harm Bouwman Photography, located at Zuiderstraat 20-zw, 2011 XV Haarlem, is responsible for processing personal data as outlined in this privacy statement.

Contact Information:

Zuiderstraat 20-zw

2011 XV Haarlem

The Netherlands

www.harmbouwman.nl

Email: Harm.bouwman@gmail.com

Tel.: +31-(0)6 14987444

Harm Bouwman is the Data Protection Officer of Harm Bouwman Photography. He can be reached via Harm.bouwman@gmail.com.

PERSONAL DATA WE PROCESS

Harm Bouwman Photography processes your personal data when you use our services and/or provide them to us. Below is an overview of the personal data we process:

• First and last name

• Gender

• Address details

• Phone number

• Email address

• Bank account number

• Other personal data actively provided, for example, by creating a profile on this website, in correspondence, and by phone.

SPECIAL AND/OR SENSITIVE PERSONAL DATA

Our website and/or service does not intend to collect data from website visitors under 16 years of age unless they have parental consent. However, we cannot verify if a visitor is over 16. We recommend parents to be involved in their children’s online activities to prevent the collection of data without parental consent. If you believe we have collected personal data about a minor without permission, please contact us at Harm.bouwman@gmail.com, and we will remove this information.

PURPOSES AND LEGAL BASIS FOR PROCESSING PERSONAL DATA

Harm Bouwman Photography processes your personal data for the following purposes:

• Handling your payment

• Sending our newsletter

• Contacting you via phone or email when necessary to provide our services

• Providing you the opportunity to create an account

• Delivering goods and services to you

HOW LONG WE RETAIN PERSONAL DATA

Harm Bouwman Photography does not retain your personal data longer than necessary to achieve the purposes for which your data is collected. We adhere to the legal retention period of 7 years for the following categories:

• Obligation to retain accounting and administration

• Tax documentation and reports of deliveries of goods, imported and exported goods, and other relevant data

• Payment overviews/invoices

• Orders, proofs of delivery of orders

• All procurement reports of goods, import, and export

SHARING PERSONAL DATA WITH THIRD PARTIES

Harm Bouwman Photography shares your personal data with various third parties if necessary for the execution of the agreement and to comply with any legal obligations. We enter into a data processing agreement with companies that process your data on our behalf to ensure the same level of security and confidentiality of your data. Harm Bouwman Photography remains responsible for these processing activities.

COOKIES, OR SIMILAR TECHNIQUES, THAT WE USE

Harm Bouwman Photography only uses technical and functional cookies, as well as analytical cookies that do not infringe on your privacy. A cookie is a small text file that is stored on your computer, tablet, or smartphone when you first visit this website. The cookies we use are necessary for the technical operation of the website and your convenience. They ensure that the website works properly and remember your preferences. We can also optimize our website with these cookies. You can opt out of cookies by configuring your internet browser not to store cookies. Additionally, you can delete all information previously stored through your browser settings.

ACCESS, CORRECTION, OR DELETION OF DATA

You have the right to access, correct, or delete your personal data. You can do this yourself through the personal settings of your account. You also have the right to withdraw your consent to data processing or object to the processing of your personal data by our company, and you have the right to data portability. This means you can request us to send the personal data we have about you in a computer file to you or another organization specified by you. To exercise your right to object and/or right to data portability or if you have other questions/comments about data processing, please send a specific request to Harm.bouwman@gmail.com.

To ensure that the request for access has been made by you, we ask you to send a copy of your identity document with the request. In this copy, please black out your photo, MRZ (machine-readable zone, the strip with numbers at the bottom of the passport), passport number, and Citizen Service Number (BSN) to protect your privacy. Harm Bouwman Photography will respond to your request as soon as possible, but at least within four weeks.

Harm Bouwman Photography also wants to inform you that you have the option to file a complaint with the national supervisory authority, the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). This can be done through this link.

HOW WE SECURE PERSONAL DATA

Your privacy is important, so we take the security of your data very seriously. We have implemented various measures to ensure that your data is and remains secure. When securing your data, we consider the potential processing risks, such as loss or unauthorized use. Below are some of our security measures:

• We ensure that your account is secure and that no one from outside or inside can log in and access your data. Your password, among other things, is encrypted and stored securely.

• We regularly provide our website and app with automatic security scans.

• Communication via the website, email, or app occurs encrypted and securely.

• We continuously monitor for (covert) intrusion attempts. We repair vulnerabilities and take measures in case of intrusion.

• We use the latest technologies and software.

• We have many systems that communicate with each other. We ensure that we send data securely and controlled from one system to another.

• We protect our systems against malware, viruses, ransomware, and hacking software.

• Only Harm Bouwman Photography employees who need access to your data to perform their work can access your data.

• We log intrusion attempts and the use of your data by our employees to keep track of what happens.

• Third parties requiring access to your data are obligated to implement appropriate technical and organizational security measures and require their employees to maintain confidentiality.