Who we are

Hans van Eijsden Photography’s main studio is based in Zwolle, The Netherlands. The address is Staatssecretarislaan 232, 8015DB Zwolle and the company registration number (KvK number) is 62551396. Our international English website address is https://www.hansvaneijsden.com and our Dutch website address is https://www.hansvaneijsden.nl.

What personal data we collect and why we collect it

Comments

When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
An anonymised string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.
To initiate and process subscriptions, the following information is used: subscriber’s email address and the ID of the post or comment (depending on the specific subscription being processed). In the event of a new subscription being initiated, we also collect some basic server data, including all of the subscribing user’s HTTP request headers, the IP address from which the subscribing user is viewing the page, and the URI which was given in order to access the page (REQUEST_URI and DOCUMENT_URI). This server data will be used for the exclusive purpose of monitoring and preventing abuse and spam.

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Contact forms

We keep contact form submissions for a certain period for customer service purposes, but we do not use the information submitted through them for marketing purposes.

Cookies

If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you have an account and you log in to this site, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
We use cookies to identify the visitor’s current language, the last visited language and the language of users who have logged in.
We’ll also use cookies to keep track of cart contents while you’re browsing our site.

Embedded content from other websites

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracing your interaction with the embedded content if you have an account and are logged in to that website.

Store

We collect information about you during the checkout process on our store.
While you visit our site, we’ll track products you’ve viewed: we’ll use this to, for example, show you products you’ve recently viewed.
Location, IP address and browser type: we’ll use this for purposes like estimating taxes.
When you purchase from us, we’ll ask you to provide information including your name, billing address, shipping address, email address, phone number, eventually credit card/payment details and optional account information like username and password. We’ll use this information for purposes, such as to send you information about your account and order, respond to your requests, including refunds and complaints, process payments and prevent fraud, setting up your account for our store, complying with any legal obligations we have, such as calculating taxes and improve our store offerings.
If you create an account, we will store your name, address, email and phone number, which will be used to populate the checkout for future orders.
We generally store information about you for as long as we need the information for the purposes for which we collect and use it, and we are not legally required to continue to keep it. For example, we will store order information for 7 years for tax and accounting purposes. This includes your name, email address and billing and shipping addresses.

Analytics

We collect through WordPress.com IP address, user agent, visiting URL, referring URL, timestamp of event, browser language, country code. Important: The site owner does not have access to any of this information via this feature. For example, a site owner can see that a specific post has 285 views, but he/she cannot see which specific users/accounts viewed that post. Stats logs — containing visitor IP addresses and WordPress.com usernames (if available) — are retained by Automattic for 28 days and are used for the sole purpose of powering this feature.
We track through WordPress.com post and page views, outbound link clicks, referring URLs and search engine terms, and country. We also track performance on each page load that includes the Javascript file used for tracking stats. This is exclusively for aggregate performance tracking in order to make sure that our plugins and code is not causing performance issues. This includes the tracking of page load times and resource loading duration (image files, Javascript files, CSS files, etc.). The site owner has the ability to force this feature to honour DNT settings of visitors. By default, DNT is currently not honoured because of an obvious decrease in post/page views.
Our website uses Google Analytics, a web analysis service of Google, Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (“Google Analytics” or “Google”). Google Analytics employs cookies that are stored to your computer in order to facilitate an analysis of your use of the site. The information generated by these cookies, such as time, place and frequency of your visits to our site, including your IP address, is transmitted to Google’s location in the US and stored there.
Google uses this information to analyse your use of our site, to compile reports for us on internet activity and to provide other services relating to our website.
Google may also transfer this information to third parties where required to do so by law or where such third parties process this data on Google’s behalf. Google states that it will in never associate your IP address with other data held by Google. You can prevent cookies from being installed by adjusting the settings on your browser software accordingly. You should be aware, however, that by doing so you may not be able to make full use of all the functions of our website.
Google Analytics also offers a deactivation add-on for most current browsers that provides you with more control over what data Google can collect on websites you access. The add-on tells the JavaScript (ga.js) used by Google Analytics not to transmit any information about website visits to Google Analytics. However, the browser deactivation add-on offered by Google Analytics does not prevent information from being transmitted to us or to other web analysis services we may engage.
Google Analytics also uses electronic images known as web beacons (sometimes called single pixel gifs) and are used along with cookies to compile aggregated statistics to analyse how our site is used.
You can find additional information on how to install the browser add-on referenced above at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
For the cases in which personal data is transferred to the US, Google has self-certified pursuant to the EU-US Privacy Shield (https://www.privacyshield.gov/EU-US-Framework).

Who we share your data with

We share your contact data – only for our billing purposes – with FactuurSturen. You can read their privacy policy here: https://www.factuursturen.nl/privacy.
We do the webhosting and server management by ourselves through And-Stuff (KvK 64042448).

How long we retain your data

If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue.
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.

What rights you have over your data

If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.

Where we send your data

Visitor comments may be checked through an automated spam detection service.
The information we collect includes the commenter’s IP address, user agent, referrer, and Site URL (along with other information directly provided by the commenter such as name, username, email address, and the comment itself).

How we protect your data

In order to check login activity and potentially block fraudulent attempts, the following information is used: attempting user’s IP address, attempting user’s email address/username (i.e. according to the value they were attempting to use during the login process), and all IP-related HTTP headers attached to the attempting user. We track failed login attempts (these include IP address and user agent). We also set a cookie (jpp_math_pass) for 1 day to remember if/when a user has successfully completed a math captcha to prove that they’re a real human.
We sync failed login attempts, which contain the user’s IP address, attempted username or email address, and user agent information with the Jetpack service.
We don’t work with Windows machines and we don’t work with Android machines. All our internal networks are protected with firewalls and countermeasures against viruses and malware are taken continuously.
All the web traffic to this website is protected through TLS (former SSL) via the HTTPS-protocol. Our domain names are DNSSEC-enabled. Our email traffic is encrypted and we are using DKIM, SPF, DMARC and TLSA (DANE) standards for extra protection and compatibility.

What data breach procedures we have in place

We use internal reporting systems on all of our servers, internal networks and devices. In case of a data breach we get notified immediately and we will take action. Our photo archive is AES-encrypted and not directly connected to the internet. For more security-related information feel free to contact our security department through abuse@hansvaneijsden.nl.