Join me in Paris! Street Photography Masterclass, now just € 595! Click here

Privacy statement

This is a translation for your convenience. The Dutch version is the binding text; in case of any difference, the Dutch wording applies.

Michiel Heijmans Fotografie, established at Bijsterhuizen 2414, 6604 LL Wijchen, the Netherlands, is responsible for the processing of personal data as set out in this privacy statement.

Do you have a question about your data? Michiel Heijmans is the contact point for privacy and can be reached at mail@michielheijmans.com.

Michiel Heijmans Fotografie processes your personal data because you use our services and/or because you provide that data to us yourself. Below is an overview of the personal data we process:

  • First and last name
  • Address details
  • Phone number
  • Email address
  • Company name and VAT number, if you order as a business
  • What you ordered and when
  • An encrypted version of your IP address when you fill in a form, to prevent misuse

We never see your bank account number. Payment runs through Mollie; we only hear whether payment has been made.

Our website and services are not intended to collect data about visitors under 16, unless they have permission from a parent or guardian. We cannot however check whether a visitor is over 16. We therefore advise parents to be involved in their children’s online activities, so that data about children is not collected without parental permission. If you are convinced that we have collected personal data about a minor without that permission, please contact us at mail@michielheijmans.com and we will delete it.

Michiel Heijmans Fotografie processes your personal data for the following purposes. The legal basis is given after each one.

  • Handling your order: processing payment, delivering your booking or your book, and keeping you informed. Basis: performance of the agreement.
  • Sending you the emails of Streetsessions or Streetwise if you have bought one of those courses. Basis: performance of the agreement.
  • Sending you the newsletter if you have signed up for it. Basis: your consent, which you can withdraw again with the link at the bottom of every newsletter.
  • Calling or emailing you if that is needed to help you. Basis: performance of the agreement.
  • Keeping track of how the website is used, so that we can improve it. Basis: legitimate interest for counting visits, and your consent for measuring what you do on a page.
  • Retaining invoices. Basis: legal obligation.

Michiel Heijmans Fotografie does not take decisions about people on the basis of automated processing. There is always a person involved. Which systems process your data is set out below, under the parties we pass data to.

Michiel Heijmans Fotografie does not keep your personal data longer than is strictly necessary for the purposes for which it was collected. We apply the following retention periods:

  • Invoices and order data: 7 years. That is the statutory tax retention period.
  • Form submissions: 1 year.
  • Website statistics: 90 days. After that only totals remain, in which no individual can be recognised.
  • Newsletter subscribers: until you unsubscribe. After that we keep only your email address with a note that you have unsubscribed, so that you do not accidentally receive post again.

Michiel Heijmans Fotografie only passes your data to others where that is needed to carry out our agreement or because the law requires it. These parties process that data on our instructions and may not use it for anything else:

  • Mollie, for handling your payment.
  • Moneybird, for creating and storing invoices.
  • Amazon SES, for sending email. That sending runs through servers in Frankfurt, so within the European Union.
  • TransIP, where the website and the data are held. Also within the European Union.
  • Pushover, for a notification on Michiel's phone as soon as something is sold. That notification contains your name and what you ordered.
  • Cloudflare R2, where the daily backups of the site are kept. Those backups include the database, so your order details are in there too.
  • Google Drive, where a full copy of the site is added once a week, with the same data in it.

Backups at Cloudflare and Google may be stored outside the European Union, and a data processing agreement is in place with both parties.

We make the website statistics ourselves. No other party is involved and those figures never leave our own server. Google Analytics and Hotjar were taken out in August 2026.

A cookie is a small text file stored on your computer, tablet or phone when you visit this website. This website sets cookies you have no choice about, because the site does not work without them, and cookies that are only added once you give permission.

These are always present:

  • A session cookie, so that your shopping cart stays put while you carry on clicking. If you arrive through a link in the newsletter, that same session remembers which newsletter it was, so we can see which mailing led to an order. For that we keep only the number of that newsletter, and it disappears as soon as you close your browser.
  • Your choice in the cookie banner, so that we do not have to ask again on every visit.

Without a cookie we do still count how often a page is viewed, where you came from, and whether you are on a phone or a computer. That uses a number which lasts for one page view and then disappears, so nobody can be followed with it. Of your IP address we keep only an encrypted version that changes every day.

This one is only added if you click accept:

  • Our own measurement cookie, which stays for 30 days. It holds a random number, no name, no email address and no IP address. With it we see how long you stay on a page, how far you scroll and where you click, so that we can tell which pages work and which do not. Those figures stay on our own server.

If you click decline, or make no choice at all, that cookie is not set and it stays with the counting described above. You can always revisit your choice through Cookie preferences at the bottom of every page. If you want to get rid of all cookies, you can delete them through your browser settings, and set your browser there to stop storing cookies altogether.

You have the right to view, correct or delete your personal data. You also have the right to withdraw any consent you have given for processing, or to object to the processing of your personal data by Michiel Heijmans Fotografie, and you have the right to data portability. That means you can ask us to send the personal data we hold about you, in a computer file, to you or to another organisation you name. You can send a request for access, correction, deletion, data transfer, withdrawal of consent or objection to mail@michielheijmans.com.

To be sure a request really comes from you, we answer it at the email address already associated with your order or your subscription. If that is not possible, we will ask you to show in another way that you are who you say you are. We do not need a copy of your passport for that.

We respond to your request as quickly as possible, and within four weeks. Michiel Heijmans Fotografie would also like to point out that you have the option of lodging a complaint with the national supervisory authority, the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). You can do so through the following link: https://autoriteitpersoonsgegevens.nl/nl/contact-met-de-autoriteit-persoonsgegevens/tip-ons.

Michiel Heijmans Fotografie takes the protection of your data seriously and takes appropriate measures to prevent misuse, loss, unauthorised access, unwanted disclosure and unauthorised alteration. If you have the impression that your data is not properly secured, or there are indications of misuse, please get in touch at mail@michielheijmans.com.

Contact details:
Michiel Heijmans Fotografie
Bijsterhuizen 2414
6604 LL WIJCHEN
The Netherlands

mail@michielheijmans.com
+31 6 263 263 16
michielheijmans.com