The controller for the processing described here is Adrian Jeziorski Photography, registered in the Netherlands.

• Chamber of Commerce (KVK): 42133655
• VAT ID: NL005522116B46
• Email: adrianjeziorskiphotography@outlook.com
• Website: www.adrianjeziorskiphotography.com

I am not required to appoint a Data Protection Officer. You can reach me directly at the email address above for any question about your data.

Contact form. When you use the contact form I receive your first name, last name, email address and the content of your message. I use this only to answer your enquiry and, where relevant, to prepare or carry out an assignment. Legal basis: performance of a contract or steps taken at your request before entering into a contract (Article 6(1)(b) GDPR), or my legitimate interest in being able to respond to enquiries (Article 6(1)(f) GDPR).

Email, WhatsApp and Instagram. If you contact me through one of these channels, I process the data you send me in that conversation, only to reply and handle the enquiry. Legal basis: the same as for the contact form.

Newsletter. If you subscribe, I process your email address to send you updates about my work. Every message contains an unsubscribe link, and you can also ask me to remove you at any time. Legal basis: your consent (Article 6(1)(a) GDPR). You may withdraw consent at any time; this does not affect the lawfulness of processing before withdrawal.

Assignments and invoicing. If you book me, I process the details needed to carry out and invoice the assignment, such as your name, company name, contact details, billing address and payment details. Legal basis: performance of a contract (Article 6(1)(b) GDPR) and compliance with a legal obligation, in particular the Dutch tax retention requirement (Article 6(1)(c) GDPR).

Technical data. My hosting provider processes standard technical data such as your IP address, browser type and the pages you visit, in order to deliver the website and keep it secure. Legal basis: my legitimate interest in a working and secure website (Article 6(1)(f) GDPR).

As a motorsport photographer I take photographs at racetracks, race weekends and other events. These photographs may show recognisable people: drivers, team members, officials and spectators.

I publish this work on this website, on social media and, where agreed, for clients, teams, organisers and media. My basis for doing so is my legitimate interest in practising and presenting my profession, and the journalistic and artistic exception in Article 85 GDPR combined with Article 43 UAVG.

Separately from data protection law, Dutch portrait rights (portretrecht, Articles 19 to 21 of the Dutch Copyright Act) may apply. If you are recognisably shown in one of my photographs and you object to its publication, contact me and I will assess your request and, where your interest outweighs mine, remove the image.

For commissioned portraits and similar work I ask for permission separately before publishing.

• Enquiries that do not lead to an assignment: up to 12 months after our last contact.
• Assignments: for the duration of the assignment and up to 2 years afterwards.
• Invoices and accounting records: 7 years, as required by Dutch tax law.
• Newsletter: until you unsubscribe.
• Photographs: as part of my portfolio and archive for as long as they remain relevant to my work, unless you successfully object.

I do not sell your data and I do not share it with third parties for their own marketing. I do use service providers who process data on my behalf. Where the law requires it, this processing is covered by a data processing agreement.

• Pixpa hosts this website, the contact form and the newsletter.
• Microsoft is my email provider (Outlook).
• Google provides reCAPTCHA, used on the contact form to block automated spam. Google receives technical data such as your IP address for this purpose.
• Meta processes your message on its own platforms if you contact me through Instagram or WhatsApp, under their own privacy terms.

I may also disclose data where I am legally obliged to do so.

Some of these providers are based outside the EEA, or use servers outside the EEA. Where that happens, the transfer is covered by the European Commission Standard Contractual Clauses or another mechanism permitted under Chapter V of the GDPR.

This website uses functional cookies that are needed for the site to work, for example to keep your session secure and to remember your cookie choice. These do not require consent.

Google reCAPTCHA on the contact form also places cookies in order to tell humans from bots.

This website does not use Google Analytics, advertising cookies or tracking pixels. You can delete or block cookies through your browser settings; the website may then not work correctly.

I take appropriate technical and organisational measures to protect your data against loss and unlawful processing. The website uses an encrypted connection (HTTPS), access to my systems is protected by strong passwords and, where available, two-factor authentication, and I only keep data for as long as it is needed.

Under the GDPR you have the right to:

• access the personal data I hold about you;
• have inaccurate data corrected;
• have your data erased;
• restrict processing;
• object to processing based on legitimate interest;
• receive your data in a portable format;
• withdraw consent you have given, at any time.

Send your request to adrianjeziorskiphotography@outlook.com. I will respond within one month. I may ask you to identify yourself so that I do not give your data to someone else.

If you are not satisfied with how I handle your request, you have the right to lodge a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens.

I may update this policy, for example when the website or my services change. The date at the top shows when it was last revised. Please check this page from time to time.