Privacy Statement
Last updated 29-06-2026
Privacy statement
Michiel Heijmans Fotografie ("we", "us") attaches great importance to the protection of your personal data. This privacy statement explains which data we collect, why we collect it and how we handle it. We act in accordance with the General Data Protection Regulation (GDPR).
1. Identity of the data controller
| Name | Michiel Heijmans Fotografie |
|---|---|
| Address | Bijsterhuizen 2414, 6604 LL Wijchen, Netherlands |
| Chamber of Commerce | 87574012 |
| VAT number | NL004439631B22 |
| mail@fotografie-presets.nl | |
| Website | fotografie-presets.nl |
2. Which data do we collect?
2.1 Purchases and downloads
When you buy a preset or pack, or take out a subscription, we collect:
- Name and email address (for delivery and invoicing)
- Payment reference from the payment provider (Mollie ID), not your full payment details
- Download token (a temporary, traceable link, valid for 90 days)
- Time and amount of the purchase
2.2 Subscriptions
For a subscription we also record the start date, term and any cancellation date.
2.3 Newsletter
When you sign up for our newsletter, we store only your email address. You can unsubscribe at any time via the link at the bottom of every email.
2.4 Technical data
We temporarily store IP addresses (for a maximum of 90 days) in error logs. Our visitor statistics are kept anonymously, without an IP address or browser fingerprint. We do not use analytical or marketing cookies.
3. Legal bases for processing
- Performance of the contract: delivery of digital products, sending download links and invoices.
- Legal obligation: retaining invoice data for seven years (tax law).
- Consent: the newsletter. You can withdraw your consent at any time.
- Legitimate interest: error logs for system security and fraud prevention.
4. Retention periods
| Data | Retention period |
|---|---|
| Customer data and purchases | As long as needed for delivery + 7 years (accounting obligation) |
| Invoices | 7 years (statutory) |
| IP addresses (error logs) | Maximum 90 days |
| Newsletter | Until you unsubscribe |
5. Sharing with third parties
We share your data only with parties that need it to deliver our service:
- Mollie Payments B.V.: payment processing. Mollie is PCI-DSS Level 1 certified and processes your payment details entirely independently.
- Moneybird B.V.: invoicing. Your name and email address are shared to create an invoice.
- Resend Inc.: sending transactional emails (download links, invoices). Your name and email address are shared.
We never sell your data and never share it for other parties' marketing purposes.
6. Cookies
We use only functional cookies that are necessary for the website to work, such as a secure session cookie and cookies that remember your login or theme preference. We do not use analytical, marketing or tracking cookies, so no cookie banner is needed. See our Cookie statement for a full overview.
7. Your rights
Under the GDPR you have the following rights:
- Access: you can request which data we hold about you.
- Rectification: you can have incorrect data corrected.
- Erasure: you can request deletion of your data, insofar as we are not legally required to retain it.
- Restriction: you can have the processing of your data restricted.
- Portability: you can request your data in a structured format.
- Objection: you can object to processing based on legitimate interest.
To exercise these rights, contact us at mail@fotografie-presets.nl. We respond within 30 days.
8. Filing a complaint
If you believe we are not handling your personal data correctly, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) via autoriteitpersoonsgegevens.nl.
9. Changes
We may amend this privacy statement. For material changes we will inform active subscribers by email. The most recent version is always available on this page.