Privacy Policy

Who we are

Kundius Photography is the controller of the personal data described in this policy.

• Address: Bloemenlaan 28, 2292 DB Wateringen, the Netherlands
• Business ID: KvK 97177350
• Contact person: Kristina Kundius
• Email: [email protected]
• Phone: +31 6 2949 3643

What we collect and why

We use the personal data described below to answer your enquiries, to carry out work we agree with you, to meet our legal obligations and to understand how this site is used. Each purpose is set out below with the legal basis we rely on.

Contact

When you send us a message through this form we collect what you type into it: name, email, date / occasion and brief. We use it to answer you and, if you want to go ahead, to prepare a quote or a booking.

The site also sends you an automatic email confirming that we received your message.

Filling in the form is entirely up to you. We cannot answer you if you do not give us a way to reply.

Legal basis: steps taken at your request before entering a contract, and our legitimate interest in answering people who contact us (GDPR Art. 6(1)(b) and Art. 6(1)(f)).

Booking and invoicing

If you book us, we use your contact and booking details to carry out the work we agreed, to issue an invoice, and to keep the accounting records the law requires us to keep.

Legal basis: performance of our contract with you, and our legal obligations (GDPR Art. 6(1)(b) and Art. 6(1)(c)).

Other ways you reach us

You can also contact us on WhatsApp. Messages you send that way are held by that service as well as by us, under that service's own privacy policy, and we use them for the same purpose: answering you and arranging work.

Legal basis: steps taken at your request before entering a contract, and our legitimate interest in answering people who contact us (GDPR Art. 6(1)(b) and Art. 6(1)(f)).

Measuring how this site is used

When you open a page, this site records a visit. Each visit records:

• which page was opened and when
• how long the page was open and how much of that time it was actually in view
• how far down the page the visitor scrolled and which sections came into view
• which links and buttons were clicked, whether a form was started or sent, and whether a booking was completed
• the kind of device (desktop, mobile or tablet)
• the website or campaign the visit came from, if any

We keep each of these records for 14 months, after which it is deleted automatically.

This measurement uses no cookie and stores nothing on your device, and it keeps no record of your IP address. Each visit is given a random reference so that the pages of one visit can be joined up, and that reference is never written to your device — it exists only while the page is open, so it cannot recognise you when you come back.

If you send us a message through a form on this site, we save the reference of the visit you sent it from with your message, so your message is linked to that visit's record described above (for example which website or campaign brought you here and what kind of device you used). The reference itself is never stored on your device.

Legal basis: our legitimate interest in understanding how our pages are read and which of them lead to an enquiry (GDPR Art. 6(1)(f)).

Beyond this website

When you book us for a photography session, we use your contact details to arrange the shoot and communicate with you about timings, locations and requirements. We take, edit and store your photographs on our computers and backup systems as part of delivering the final images you have commissioned. We keep records of our correspondence with you and the details of your booking so we can deliver your order and handle any questions or additional requests you may have.

We do not make decisions about you by automated means and we do not build a profile of you.

Cookies

This site sets one cookie of its own, geo-country. It holds the two-letter code of the country you are visiting from, it is only set when your country is known, and it expires after 24 hours. It is used to show you the language version of the site that matches your country.

We set no other cookies. We do not use cookies to build a profile of you and we do not use cookies to show you advertising.

This site also remembers the language you picked in your browser's own storage, so it does not have to ask again. You can clear it in your browser at any time.

Who receives your data

We do not sell your personal data and we do not share it for anyone else's advertising.

These companies handle your data on our behalf and only on our instructions:

• Lessgo AI — runs this website, stores the messages sent through its forms, and sends the notification and automatic reply emails. It stores this data in Frankfurt, Germany. The code that receives and handles it may run in other regions.
• Vercel Inc. — hosts this website, runs the code that receives what you send through its forms, and delivers its pages and images. It processes this data in the United States. Transfers outside the EEA are covered by the European Commission's standard contractual clauses, under Vercel's data processing agreement.
• Resend (Plus Five Five, Inc.) — delivers the notification and automatic reply emails. It processes this data in the United States. Transfers outside the EEA are covered by the European Commission's standard contractual clauses, incorporated into its data processing agreement.

Photographs and files shown on this site are stored in the same hosting file storage and are served from it to your browser.

Vercel Inc. and Resend process your data outside the EEA. Those transfers are covered by the safeguards named above; you can ask us for a copy by emailing [email protected].

These services also receive your data, but they decide for themselves what they do with it, under their own privacy policies — they are not acting on our instructions:

• WhatsApp — carries the messages you send us there.

How long we keep it

• Enquiries that do not lead to a booking: we delete them after 12 months.
• Invoices and the records behind them: we keep them for 7 years after the end of the financial year, because Dutch tax law requires it.
• Work we did for you, and the messages about it: we keep them while the contract runs and for the bookkeeping period above.
• Visit records: we keep them for 14 months from the visit, after which they are deleted automatically.

Your rights

Under the GDPR you can ask us to:

• give you a copy of the personal data we hold about you (access);
• correct it if it is wrong (rectification);
• delete it (erasure);
• pause what we do with it while a question about it is settled (restriction);
• hand it to you or to someone else in a machine-readable file (portability);
• stop using it where we rely on our legitimate interest (objection);
• withdraw your consent, where we asked for consent, at any time.

To use any of these rights, email us at [email protected]. We answer within one month. Withdrawing consent does not undo what we lawfully did before you withdrew it.

If you think we are handling your personal data wrongly, you can complain to Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl). You can also complain to the data protection authority of the EU country where you live, where you work, or where you think the problem happened.

Children

This site is not aimed at children. In the Netherlands a child can agree to online services from the age of 16; below that age a parent or guardian has to agree. We do not knowingly collect personal data from children. If you believe a child has sent us personal data, email us at [email protected] and we will delete it.

Changes to this policy

We update this policy when this site changes or when the way Kundius Photography works changes. The date shown at the top of this page is the date of the version you are reading.