Privacy Policy
Headshot Day Last updated: May 2025
Who are we
Headshot Day is a mobile portrait photography studio based in Amsterdam. We provide professional headshot photoshoots on location for companies and teams throughout the Netherlands.
Which data we process
We process personal data only insofar as it is necessary to perform our services. This includes:
Via the contact form and email:
First and last name
Email address
Phone number
Name and details of the company
When conducting a shoot:
Portrait photos of employees
Planning and appointment details
Via the website:
Technical data such as IP address, browser type and page visits (via cookies, see below)
Why we process this data
We process personal data based on the following grounds:
Execution of an agreement — for planning, executing and delivering the photoshoot and associated files.
Legitimate interest — for sending quotes, following up on requests and maintaining customer contact.
Consent — for using photos in our portfolio, on the website or in marketing materials. Consent is always requested separately and explicitly, and can be withdrawn at any time.
How long we keep data
We do not store personal data longer than necessary:
Contact details of prospects: maximum 1 year after the last contact
Customer data and invoice information: 7 years (statutory retention period)
Portrait photos in our archive: maximum 1 year after delivery, unless written permission has been granted for longer use
Sharing with third parties
We do not sell personal data. We only share data when it is strictly necessary for the execution of our service, such as with:
Payment service providers for invoicing
Cloud storage services for delivering files to customers
Email providers for communication
All parties we work with are contractually bound to confidentiality and comply with the GDPR.
Your rights
Under the GDPR, you have the following rights:
Access — you can request to see what data we have about you
Rectification — you can have incorrect data corrected
Erasure — you can request the deletion of your data
Restriction — you can object to certain forms of processing
Portability — you can request your data in a readable format
Objection — you can object to processing based on legitimate interest
If you do not agree with how we handle your data, you have the right to lodge a complaint with the Dutch Data Protection Authority: autoriteitpersoonsgegevens.nl
Cookies
Our website uses cookies to keep track of website statistics. We ask for permission for this via a cookie banner.
[FILL IN: specify which tools you use — e.g. Google Analytics, Plausible, or no analytics — and adjust this section accordingly.]
Security
We take appropriate technical and organizational measures to protect your data against loss, theft, or unauthorized access. Digital files are stored using secure services. Access to customer data is limited to individuals who strictly require it for their work.
Changes
This privacy policy may be amended if our services or legislation change. The current version is always on this page. In the event of significant changes, we will inform active customers via email.
