Privacy Policy
This policy explains what personal data I collect through rosiezopfi.com, why I collect it, and your rights. It applies to Rosie Zopfi film & photography.
1. Who is responsible
The data controller is Rosie Zopfi film & photography, Versantvoortstraat 28 C, 5615 AR Eindhoven, the Netherlands, registered with the Dutch Chamber of Commerce (KvK) under number 70403147. Contact: rosiezopfi@gmail.com.
2. What data I collect
- Booking form. When you send a booking request, I collect the details you enter: your name, email address, phone number (optional), preferred date, the type of shoot, the package you selected, and any notes you add.
- Email and messages. If you contact me by email, I receive your email address and whatever you choose to share.
I do not knowingly collect any special categories of data through the website, and the website does not use tracking or advertising cookies.
3. Why I use it and the legal basis
- To answer your request, prepare a quote and, if you book, carry out the assignment. Legal basis: taking steps at your request before a contract, and performance of the contract.
- To communicate with you about your project. Legal basis: my legitimate interest in responding to enquiries.
- To keep records required by law, such as invoices. Legal basis: a legal obligation.
4. Who processes it for me
To run the website and handle your request, a few trusted providers process data on my behalf or as needed to deliver your message:
- Web3Forms receives your booking-form submission and forwards it to my email inbox.
- Netlify hosts the website.
- Google (Gmail) handles my email, where your request is received and stored.
These providers may process data outside the European Economic Area. Where that is the case, they rely on appropriate safeguards such as the EU standard contractual clauses. I do not sell your personal data to anyone.
5. How long I keep it
I keep booking requests and related correspondence for as long as needed to handle your request and our working relationship. Invoices and related financial records are kept for 7 years to meet Dutch tax obligations. After that, data is deleted or anonymised.
6. Your rights
Under the GDPR you have the right to access your data, to have it corrected or deleted, to restrict or object to its use, and to receive a copy in a portable format. To exercise any of these, email me at rosiezopfi@gmail.com and I will respond within the legal term. If you believe your data is not handled properly, you may lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl).
7. Security
I take reasonable technical and organisational measures to protect your data against loss and unauthorised access. No method of transmission over the internet is completely secure, but I handle your information with care.
8. Changes
I may update this policy from time to time. The current version is always the one published on rosiezopfi.com.