Privacy Policy

Last updated: 20 November 2025

1. Controller

This website is operated by Harm Jan Schuurman, photographer based in the Netherlands. For the purposes of the General Data Protection Regulation (GDPR), I am the data controller for the processing of personal data via this website and in connection with my assignments.

Contact details:
Harm Jan Schuurman
E-mail: info@harmjanschuurman.com
Website: www.harmjanschuurman.com

2. Personal data I process

I only process personal data that you actively provide or that is necessary for the use of the website, such as:

• Name and contact details (e-mail address, phone number)
• Content of messages sent via the contact form or by e-mail
• Invoice and payment data if an agreement is concluded
• Data about your use of the website (IP address, browser type, pages visited), where technically necessary or anonymised for statistics
• Images created in the context of photography assignments

3. Purposes and legal bases

I process your personal data for the following purposes and on the following legal bases:

• Contact and enquiries – to respond to your questions or provide a quote.
  Legal basis: legitimate interest and, once you decide to work with me, performance (or preparation) of a contract.
• Performance of assignments – planning, carrying out and delivering photo sessions and projects, including administration and invoicing.
  Legal basis: performance of a contract and compliance with legal obligations (e.g. tax law).
• Portfolio, publications and marketing – using images on my website, social media or in print, only where this is agreed or reasonably to be expected.
  Legal basis: legitimate interest or consent, depending on the context.
• Website functionality and security – ensuring that the website is displayed correctly, is secure and basic statistics can be monitored.
  Legal basis: legitimate interest in operating a secure and effective website.

4. Retention periods

I do not retain personal data longer than necessary for the purposes for which it was collected, unless a longer period is required by law. In practice this means for example:

• Contact and enquiry data: up to 2 years after our last substantive contact.
• Project files, contracts and invoices: up to 7 years after the end of the financial year (required by Dutch tax law).
• Images: as long as necessary for the assignment, my portfolio and publications, or until you reasonably object and this can be honoured.
• Technical log data: as short as possible, usually no longer than a few months.

5. Sharing personal data with third parties

I do not sell your personal data. I do, however, work with service providers who may process personal data on my behalf (processors). Where required, I have data processing agreements in place with these parties.

These may include for example:

• The hosting provider of this website
• E-mail and office software providers (cloud storage)
• My accountant or bookkeeping service
• Print labs and book or print services used to deliver physical products
• Backup and storage services for images

These parties may only process your data in line with my instructions and not for their own purposes.

6. Cookies

This website uses primarily functional and limited analytical cookies. A full overview of the cookies used and your options can be found in the cookie policy.

7. Security

I take appropriate technical and organisational measures to protect your personal data against loss, misuse, unauthorised access and unlawful disclosure. This includes encrypted connections (https), keeping software up-to-date and limiting access to systems and files. No security measure can, however, guarantee absolute protection.

8. Your rights

Under the GDPR you have, among others, the following rights:

• Right of access to the personal data I hold about you
• Right to rectification or completion of your data
• Right to erasure (“right to be forgotten”) where applicable
• Right to restriction of processing
• Right to data portability
• Right to object to certain processing activities, for example use in a portfolio

You can exercise these rights by contacting me at info@harmjanschuurman.com. I will normally respond within one month.

9. Complaints

If you have concerns about how I handle your personal data, please contact me first. You also have the right to lodge a complaint with your local data protection authority. In the Netherlands, this is the “Autoriteit Persoonsgegevens”.

10. Changes to this policy

I may update this privacy policy from time to time, for example when my services change or when required by law. The most recent version will always be available on this page.