Privacy Policy

Last updated: 20 December 2025

This Privacy Policy explains how personal data is collected and used on this website, operated by René Timmermans (“I”, “me”, “my”).

I respect your privacy and only collect personal data that is necessary to respond to enquiries and fulfil print orders.

⸻

1. Data Controller

René Timmermans
Landscape & Environmental Photographer
Website: https://www.renetimmermans.se
Contact: info@renetimmermans.com

⸻

2. What Personal Data Is Collected

I may collect and process the following personal data:
• Name
• Email address
• Shipping address
• Order details (selected artwork, size, edition number)
• Payment status (no credit card details are stored)
• IP address (via server logs and security measures)

⸻

3. Purpose of Data Processing

Your personal data is collected and used solely for the following purposes:
• Responding to order requests and enquiries
• Confirming and processing print orders
• Arranging payment and fulfilment
• Shipping prints to the provided address
• Meeting legal and accounting obligations

Your data is never used for marketing, profiling, or mailing lists unless you explicitly request it.

⸻

4. Legal Basis for Processing

Personal data is processed based on:
• Performance of a contract or steps prior to entering a contract (Article 6(1)(b) GDPR)
• Legal obligations (e.g. accounting requirements)

⸻

5. Third-Party Processors

To fulfil orders, limited personal data may be shared with trusted third parties:
• PayPal – payment processing
• WhiteWall – print production and shipping
• Web hosting provider – website operation and security

These parties only receive the data necessary to perform their services and process it in accordance with GDPR.

⸻

6. Data Retention

Order-related personal data is retained only as long as necessary:
• Order and accounting data is stored for up to 7 years, in accordance with legal obligations
• Enquiry data that does not result in an order is deleted once it is no longer needed

⸻

7. Cookies and Analytics

This website does not use cookies for advertising or tracking purposes.

If analytics are used, they are configured to minimise data collection and respect user privacy. No personal data is sold or shared for marketing purposes.

⸻

8. Your Rights Under GDPR

You have the right to:
• Access your personal data
• Request correction of inaccurate data
• Request deletion of your data (where legally permitted)
• Request restriction of processing
• Object to processing

To exercise any of these rights, please contact me using the details above.

⸻

9. Data Security

Appropriate technical and organisational measures are in place to protect personal data from unauthorised access, loss, or misuse.

⸻

10. Changes to This Policy

This Privacy Policy may be updated from time to time. The latest version will always be available on this website.