Privacy policy

At Marieke Verboord Fotografie I handle the information you share with me with care. Below you can read what information I collect, for what purpose, how long I keep it and what rights you have. I’ve tried to keep it as clear and brief as possible.

Who I am

Marieke Verboord Fotografie is a trade name of Studio Maki & Filles VOF, a partnership of Gilles van Leeuwen and Marieke van Leeuwen Verboord.

• Address: De Greefstraat 6e, 5622 GJ Eindhoven, the Netherlands
• Chamber of Commerce (KvK): 98958615
• VAT: NL868720586B01
• Email: klik@mariekeverboord.nl
• Phone: +31 6 44 03 80 05

Studio Maki & Filles VOF is the data controller for the personal data collected through this website.

What data I process

Contact form

When you fill in the contact form, I receive:

• Your name
• Your email address
• The type of shoot you’re interested in (optional)
• The date (for a wedding or planned shoot)
• Your message and any other details

I use this information to answer your question and, if we agree on an assignment, to prepare for it. Legal basis: legitimate interest and — once we make arrangements — the performance of a contract.

Email and social media contact

If you send me an email or a message on Instagram, I keep that conversation and the details you share in it. The purpose and legal basis are the same as for the contact form.

Photos from shoots

During a shoot I take photos in which you (and possibly family or guests) are recognisable. These images are first and foremost for you: delivered through an online gallery and, if agreed, a photo album.

A selection is only shared on my website or social media in line with what we agreed beforehand. If you’d rather I didn’t publish certain photos, just let me know — you can tell me at any time.

Visitor statistics

To get a general picture of website traffic I use Cloudflare Web Analytics. This tool works without cookies and without identifiable data. No profile of you is built.

How long I keep data

• Enquiries that don’t lead to an assignment: up to one year after our last contact, unless you ask me to delete them sooner.
• Client records and correspondence for an assignment: seven years, in line with the statutory tax retention period.
• Photos from shoots: I keep the delivered selection in my archive for at least five years, so you can reorder or I can help if you lose your files.
• Visitor statistics: stored anonymously and cannot be traced back to you as a visitor.

Who I share data with

I never sell your data. To run my business I work with a number of processors, who only have access to what is strictly necessary:

• Formspree: receives contact form submissions and forwards them to my inbox.
• Cloudflare: website hosting (Cloudflare Pages) and anonymised visitor statistics.
• Pixieset: provides the online galleries where you can view and download your photos after the shoot.
• Moneybird: the accounting software that holds invoices and client records.
• Adobe Fonts (Typekit): provides the typefaces used on this website.
• Google Fonts: provides an additional typeface for readable body text.
• Behold.so: (once enabled) shows a feed of my latest Instagram posts at the bottom of the website.
• Instagram & WhatsApp: as soon as you click through to my Instagram profile or contact me via WhatsApp, Meta’s privacy terms apply.

Every processor that handles personal data on my behalf is covered by a data processing agreement or another appropriate legal basis.

Cookies

This website itself sets no tracking cookies. External widgets — such as an embedded Instagram feed — may set cookies from their own platform; you only accept those terms when you actively interact with them.

Security

The website runs entirely over HTTPS and uses modern security headers (HSTS, CSP, X-Frame-Options, Permissions-Policy). Access to records, email and accounts is protected with strong passwords and two-factor authentication wherever available.

Your rights

Under the GDPR you have the right to:

• access the data I process about you;
• have incorrect data corrected or deleted;
• restrict or object to the processing;
• receive a copy of your data (data portability);
• withdraw any consent you have given.

Send your request to klik@mariekeverboord.nl. I’ll respond within thirty days.

Making a complaint

If you have a complaint about how I handle your data, please let me know — we can usually sort it out together. If not, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) via autoriteitpersoonsgegevens.nl.

Changes

I may update this policy — for example if I start using different tools or if the law changes. The date at the top of this page shows when it was last updated.