Your data,
handled clearly.

Who processes your data?

The controller for this website and the photography services is:

Which data is processed?

When you submit an inquiry, we process details such as your name, contact information, organisation, event information, location, budget and wishes. Client records may also include projects, gallery access, favourites and download logs. Technical session data is required for secure access and forms. Only anonymous daily totals are retained for visitor statistics.

Purposes and legal bases

Inquiries are processed to respond and prepare a proposal before a possible contract. Client, project and gallery data is processed to perform the photography agreement. Security and aggregated visitor statistics rely on the legitimate interest in protecting and improving the website, using minimal data.

Photographs and publication

Photographs may be personal data. Storage, delivery and access follow the assignment agreement. Publication in a portfolio, on the website or social media is agreed separately with the client and, where required, the people shown.

Retention periods

• Inquiries: up to 24 months after the last contact, unless longer retention is required for a contract or legal obligation.
• Administrative client and project records: up to 84 months, taking legal and accounting duties into account.
• Online galleries and selections: up to 24 months after delivery, unless agreed otherwise.
• Aggregated visitor statistics: up to 395 days.
• Temporary failed-login security records: up to 30 days; a successful login immediately clears the corresponding counter.

Privacy-friendly visitor statistics

The website stores only aggregated totals by day, page type, language, device category and referring domain. No IP addresses, full browser details, visitor IDs or analytics cookies are stored, and no external analytics service is loaded.

Security and failed login attempts

To protect administration and client galleries against abuse, the website temporarily records failed login counts using an irreversible hash of the entered email address. The email address itself and the IP address are not stored in this security log. Repeated failures result in a temporary login block.

Service providers and transfers

Data is only shared with providers needed for hosting, email, storage, delivery or administration. Access is limited to their assignment. Processing outside the European Economic Area requires appropriate safeguards.

Your rights

You may request access, correction, deletion, restriction or portability and object where applicable. Consent can be withdrawn at any time without affecting earlier lawful processing. Contact the privacy address below. You may also complain to the Belgian Data Protection Authority.

Cookies

The website only uses strictly necessary cookies for session security, forms, login and remembering the cookie notice. Internal visitor statistics do not use cookies. No analytics cookies, marketing cookies or external trackers are used.

Privacy contact

Last updated: 12/08/2026