Privacy statement

This website is operated by Daria Photography ("we", "us"), a photography business based in Amsterdam, the Netherlands (Chamber of Commerce / KVK 42145723). We are the controller of your personal data. You can reach us at admin@dariaphotography.nl.

Contact / booking form: your name, email, chosen session type, preferred time and message. We use this to respond to and handle your enquiry. Legal basis: taking steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR).

Analytics (only with your consent): Google Analytics 4 collects pseudonymous usage data to help us understand how the site is used. Legal basis: your consent (Art. 6(1)(a) GDPR). IP addresses are anonymized and Google Signals/ad personalization are disabled.

Advertising (only with your consent): Google Ads measures whether our online ads lead to a booking enquiry (conversion measurement) and helps us reach relevant audiences (remarketing / audience signals). Legal basis: your consent (Art. 6(1)(a) GDPR). We use Google Consent Mode v2, so these tags load only after you accept advertising cookies.

Photographs of clients are only published on this website or social media with your separate, explicit written consent (see 'Your images').

Under Dutch law the copyright in the photographs is ours, but you hold portrait rights (portretrecht) in your own likeness. Being photographed is not the same as agreeing to publication.

We only publish images in which you are recognizable after you have given separate, written consent for the specific channels (this website, portfolio, social media, advertising). You can withdraw that consent at any time, after which we will remove the image going forward.

Enquiries are kept for up to 24 months (so we can handle follow-up questions and any disputes, and because related records may be relevant for tax purposes), after which they are deleted automatically. Booking and invoicing data is kept for as long as required by Dutch tax law (currently 7 years). Analytics data retention is set to the shortest period Google offers.

We use a small number of processors who act on our behalf under a data processing agreement: our hosting provider (Google Cloud, EU region), our database and file storage (Google Firebase/Cloud Storage, EU region), our email provider, and — only with your consent — Google Analytics and Google Ads. We do not sell your data.

International transfers: with your consent, Google Analytics and Google Ads may process data on Google servers outside the EU, including in the United States (Google Ireland Ltd / Google LLC). Google is certified under the EU–US Data Privacy Framework; where required we also rely on the European Commission's Standard Contractual Clauses. Our hosting, database and file storage remain in the EU region.

You have the right to access, rectify, erase, restrict or object to the processing of your data, and to data portability. To exercise any of these, email us at admin@dariaphotography.nl. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

This website is served over HTTPS and hosted in the EU. We take appropriate technical and organizational measures to protect your data.