Privacy Policy

Last updated: 19-01-2026

1. Introduction

This Privacy Policy explains how Arnout Rebel Photography (“we”, “us”, or “our”) collects, uses, and protects personal data when you visit or use our website, webshop, and related services, including newsletter subscriptions.

We process personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Dutch privacy laws.

2. Who We Are

Business name: Arnout Rebel Photography
Website: https://www.arnoutrebel.com
Email: info@arnoutrebel.com
Country of establishment: The Netherlands

For any questions regarding this Privacy Policy or your personal data, you may contact us using the details above.

3. Personal Data We Collect

Depending on how you interact with our website, we may collect the following personal data:

3.1 Data you provide directly

  • First and last name

  • Email address

  • Billing and shipping address

  • Information submitted via contact or newsletter forms

3.2 Webshop-related data

  • Order details

  • Purchase history

  • Invoicing information

3.3 Technical and usage data

  • IP address (anonymized where possible)

  • Browser type and version

  • Device information

  • Pages visited and interaction data

3.4 Payment data

Payments are processed by third-party payment providers (such as Stripe).
We do not store full payment or credit card details on our servers.

4. How We Collect Personal Data

We collect personal data:

  • When you submit a form or place an order

  • When you subscribe to our newsletter

  • Automatically through cookies and similar technologies

  • Via third-party services integrated into our website

5. Purposes of Data Processing

We process personal data for the following purposes:

  • Responding to inquiries and contact requests

  • Processing and fulfilling webshop orders

  • Managing customer relationships

  • Sending newsletters and marketing communications (with consent)

  • Improving website performance and user experience

  • Analyzing website usage

  • Meeting legal and tax obligations

6. Legal Bases for Processing

We process personal data based on one or more of the following legal grounds:

  • Consent (e.g. newsletters, non-essential cookies)

  • Performance of a contract (e.g. webshop orders)

  • Legal obligation (e.g. tax retention requirements)

  • Legitimate interest (e.g. website improvement and security)

7. Newsletter & Marketing Communications

If you subscribe to our newsletter:

  • We use your email address only for sending updates, news, and marketing content

  • Subscription is always based on explicit opt-in

  • You may unsubscribe at any time using the link in each email

We do not sell or share your email address for third-party marketing purposes.

8. Webshop & Payments

When you place an order through our webshop, we process personal data necessary to fulfill the order.

Payments are handled by trusted third-party payment providers such as Stripe. These providers process personal data in accordance with their own privacy policies and GDPR obligations.

9. Cookies & Analytics (Summary)

Our website uses cookies for functional, analytical, and (where applicable) marketing purposes.

We use Google Analytics to understand how visitors use our website.
For detailed information about cookies, please refer to our Cookie Policy.

10. Sharing Personal Data with Third Parties

We only share personal data with third parties when necessary for our services or legal obligations, including:

  • Website hosting providers

  • Payment service providers

  • Email marketing platforms

  • Analytics services (Google Analytics)

Where required, we enter into data processing agreements with these parties.

11. International Data Transfers

Some third-party service providers may process data outside the European Economic Area (EEA).

In such cases, appropriate safeguards are applied, such as:

  • EU adequacy decisions

  • Standard Contractual Clauses (SCCs)

12. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required by law.

13. Your Rights Under GDPR

You have the right to:

  • Access your personal data

  • Correct inaccurate data

  • Request deletion of your data

  • Restrict or object to processing

  • Request data portability

Requests can be submitted via [your email address].
We will respond within 30 days.

14. Data Security

We take appropriate technical and organizational measures to protect personal data against loss, misuse, unauthorized access, and disclosure.

15. Complaints

If you believe your personal data is being processed unlawfully, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens):

https://autoriteitpersoonsgegevens.nl

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.
The most current version will always be available on our website.