Privacy Policy

Last updated: 13 april 2026

Helen Navajas Fine Art Photography, established at [full address], is responsible for the processing of personal data as set out in this privacy policy.

 

Contact details

Business name: Helen Navajas Fine Art Photography / Studio 31
Phone number: +31 6 34 92 65 61
Email address: info@helennavajas.nl
KvK number: KvK 61446114

  1. Personal data we process

We process personal data when you visit our website, contact us, submit an inquiry, or use our services. This may include:

  • First and last name
  • Email address
  • Phone number
  • The content of your message
  • Information you send to us through the contact form or by email
  • IP address
  • Information about your activities on our website
  • Internet browser and device type
  • Any information needed to prepare a quotation, scheduling, or the execution of a photoshoot
  1. How we collect personal data

We collect personal data:

  • when you fill in the contact form on the website;
  • when you send us an email or contact us by phone;
  • when you request a quotation or make an appointment;
  • when you visit our website;
  • when you contact us through social media.
  1. For what purpose and on what legal basis we process personal data

We process personal data for the following purposes:

  • To contact you in response to your question or request
  • To prepare and send quotations
  • To schedule and carry out appointments, photoshoots, and other services
  • To communicate with you about our services
  • To send invoices and maintain our administration
  • To comply with legal obligations, such as tax retention requirements
  • To ensure the website functions properly and securely
  • To improve our website and services

We process personal data on the basis of one or more of the following legal grounds:

  • consent;
  • performance of a contract;
  • legal obligation;
  • legitimate interest, such as normal business operations, communication with clients, and website security.
  1. Retention periods

We do not retain personal data longer than necessary for the purpose for which it was collected, unless we are legally required to keep it for a longer period.

In general, we apply the following retention periods:

  • Contact requests and quotation requests: up to 12 months after the contact has ended, unless it results in an assignment
  • Client and project records: as long as necessary for the performance of the agreement and thereafter as needed for administration and possible disputes
  • Administrative and invoice data: 7 years, where legally required
  • Technical log and security data: as long as necessary for website security and maintenance
  1. Sharing personal data with third parties

We do not sell your personal data to third parties. We only provide it when this is necessary for the performance of our agreement with you, for the operation of the website, or to comply with a legal obligation.

Depending on the use of the website and our services, personal data may be shared with:

  • the website hosting provider;
  • the website manager or technical service provider;
  • email provider;
  • backup and security service providers;
  • accountant or bookkeeping service;
  • payment or invoicing service providers, where applicable;
  • social media platforms, only when you communicate with us there yourself.

Where necessary, we enter into a data processing agreement with parties that process personal data on our behalf.

  1. Cookies and similar technologies

Our website may use functional, analytical, and possibly marketing cookies.

Functional cookies
These cookies are necessary for the proper functioning of the website. In principle, no consent is required for these.

Analytical cookies
We may use analytical cookies to gain insight into how the website is used. If these cookies are configured in a privacy-friendly way, this may be done without consent. If analytical cookies are not configured in a privacy-friendly way, we will ask for your consent in advance.

Marketing and tracking cookies
Only if these are used, they will be placed after you have given your consent. These cookies may be used to track browsing behaviour or to make advertisements more relevant.

You can delete or block cookies through your browser settings. Please note that the website may then function less effectively.

If a cookie banner is used on this website, you can manage your preferences there.

  1. Automated decision-making

We do not make decisions based on automated processing that could have significant consequences for individuals.

  1. Security of personal data

We take appropriate technical and organisational measures to protect personal data against misuse, loss, unauthorised access, unwanted disclosure, and unlawful alteration.

This includes:

  • secure connections where possible;
  • strong passwords and access control;
  • updates of the website, themes, and plugins;
  • limited access to personal data;
  • backup and security measures.
  1. Links to other websites and social media

Our website may contain links to third-party websites or social media platforms, such as Instagram, Facebook, and LinkedIn. The privacy policies of those external parties apply to the use of those websites. We recommend reading those policies separately.

  1. Your rights

You have the right to:

  • access your personal data;
  • have your personal data corrected;
  • have your personal data deleted, where legally possible;
  • restrict the processing of your personal data;
  • object to the processing;
  • withdraw your consent, where the processing is based on consent;
  • request data portability, where applicable.

You can send a request to info@helennavajas.nl. To make sure the request has been made by you, we may ask for additional verification. We will respond as soon as possible, and no later than within the legal time limit.

  1. Complaints

If you believe that we are not handling your personal data carefully, you can contact us at info@helennavajas.nl. You also have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

  1. Changes to this privacy policy

We may amend this privacy policy if changes in the law, the website, or our services make this necessary. The most current version will always be available on this website. We recommend checking this policy regularly.