Privacy Statement

1. Who is responsible for your data?

The Art is Dutch is the photography portfolio and business of Martin Fennema. Martin Fennema is the data controller responsible for the personal data described in this statement.

The Art is Dutch / Martin Fennema
Dutch Chamber of Commerce number: 78503795
Email: martin@courduvin.nl
Website: www.theartisdutch.nl

2. Scope of this statement

This Privacy Statement explains how personal data is collected and used when you visit this website, submit the contact form, communicate by email or social media, request a quotation, book a photographic assignment, collaborate on a project, license an image or otherwise work with The Art is Dutch.

3. Personal data collected

Depending on your interaction, the following information may be processed:

• your name, company name and contact details;
• your address and billing details where required for an agreement or invoice;
• messages, project briefs, quotations, agreements and other correspondence;
• information relating to a photographic assignment, collaboration, licence or model release;
• payment and transaction information, excluding full payment-card details;
• photographs, video, audio and related project metadata where you participate in a shoot or project;
• technical information such as IP address, browser, device, referring page and website activity; and
• cookie preferences and analytics data where you have consented to analytics cookies.

Please do not provide sensitive personal information unless it is necessary and has been specifically requested. Photographs may sometimes reveal personal characteristics or other sensitive information. Such material is handled with particular care and only where there is an appropriate legal basis.

4. Why personal data is used

Personal data may be used to:

• respond to enquiries and communicate about possible work;
• prepare and perform agreements, assignments, collaborations and image licences;
• plan, photograph, edit, deliver and archive commissioned or collaborative work;
• administer invoices, payments, records and legal obligations;
• protect copyright, establish permissions and manage model or property releases;
• publish agreed portfolio, editorial or promotional work;
• maintain the security and operation of the website; and
• understand website use and improve the portfolio when analytics consent has been given.

Personal data is not sold. It is not used for solely automated decision-making that produces legal or similarly significant effects.

5. Legal bases

Data is processed only where a lawful basis applies. Depending on the situation, this may be:

• steps requested before entering into a contract or performance of a contract;
• compliance with legal obligations, including tax and accounting duties;
• legitimate interests, such as answering enquiries, operating the business, protecting work and rights, maintaining security and keeping appropriate project records, where those interests are not overridden by your rights; or
• consent, including consent for analytics cookies and, where appropriate, particular portfolio or promotional uses.

You may withdraw consent at any time. Withdrawal does not affect processing that took place before consent was withdrawn.

6. Photographs and portrait use

Photographs of identifiable people are personal data. The appropriate basis and permissions depend on the nature of the project, the agreement, the intended publication and applicable law. Commissioned portraits and collaborative work are used for portfolio, editorial or promotional purposes only where the necessary agreement, permission or other lawful basis exists.

A request to remove or restrict a photograph will be considered carefully. Privacy and portrait rights may need to be balanced against copyright, contractual obligations, freedom of expression and legitimate artistic, documentary or archival interests.

7. Website, cookies and analytics

Essential cookies and technical services are used to operate and secure this Adobe Portfolio website. Analytics cookies are used only after you choose “Accept analytics” in the cookie banner. If you choose “Only essential”, analytics cookies remain blocked.

You can withdraw cookie consent by deleting this website’s cookies in your browser and choosing again when the banner appears. Browser settings may also be used to block or delete cookies, although this can affect website functionality.

The website contains links to Instagram, WhatsApp and other external services. If you follow those links, the external provider processes data under its own privacy terms.

8. Service providers and recipients

Personal data is shared only where necessary. Relevant recipients may include website and hosting providers such as Adobe, email and cloud-storage providers, bookkeeping or payment providers, professional advisers, project collaborators and technical suppliers. These parties receive only the information reasonably required for their role and are expected to protect it appropriately.

Information may also be disclosed where required by law, a competent authority or to establish, exercise or defend legal claims.

9. International processing

Some technology providers may process information outside the European Economic Area. Where required, appropriate safeguards are relied upon, such as an adequacy decision, approved contractual protections or another lawful transfer mechanism.

10. Retention

Personal data is kept no longer than reasonably necessary for the relevant purpose. General enquiries that do not lead to a project are periodically deleted. Project communications and delivery information are retained for as long as needed to perform the work and address reasonable follow-up questions or legal claims. Financial and accounting records are generally retained for seven years where Dutch law requires this.

Photographs, project files, model releases and licensing records may be retained for longer where necessary for copyright, authorship, portfolio, documentary or archival purposes, subject to applicable law and individual agreements. Data is deleted or anonymised when it is no longer needed.

11. Security

Reasonable technical and organisational measures are used to protect personal data, including access controls, passwords, secure connections, device security and reputable service providers. No internet or storage system can be guaranteed completely secure. If a personal-data breach creates a legal notification obligation, the appropriate authority and affected individuals will be informed as required.

12. Your rights

Subject to the GDPR and applicable exceptions, you may request:

• information about how your data is processed;
• access to your personal data;
• correction of inaccurate or incomplete data;
• deletion of data;
• restriction of processing;
• transfer of data you provided in a portable format;
• withdrawal of consent; and
• objection to processing based on legitimate interests or direct marketing.

Requests can be made using the contact details above. A response will normally be provided within one month. Additional information may be requested where reasonably necessary to confirm your identity.

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at www.autoriteitpersoonsgegevens.nl, or with another competent supervisory authority.

13. Children

This website is not directed at children and does not knowingly collect personal data from children through the contact form. Where a photographic project involves a minor, appropriate arrangements and permissions are agreed with a parent, guardian or responsible client as required.

14. Changes to this statement

This Privacy Statement may be updated when the website, services or legal requirements change. The current version will always be published on this page.

Last updated: 6 August 2026.