1. Controller
Kevin van Eeden & Patrick Popenco
(see Legal Notice for full addresses)
E-Mail: kevin.vaneeden@outlook.de
2. Data We Collect
When you place an order we collect:
- First and last name
- E-mail address
- Payment data — processed exclusively by Stripe; we never store card details
We do not use tracking tools, analytics, or advertising cookies.
3. Purpose of Processing
- Processing and fulfilling your order
- Providing secure download links for purchased photos
- Sending order confirmation and download links by e-mail
Legal basis: Art. 6(1)(b) GDPR — performance of a contract.
4. Service Providers (Data Processors)
We work with the following third-party services. Each acts as a data processor under a data processing agreement:
- Stripe Inc. — Payment processing · Privacy Policy
- Supabase Inc. — Database & file storage · Privacy Policy
- Vercel Inc. — Website hosting · Privacy Policy
- Resend Inc. — Transactional e-mail · Privacy Policy
5. Data Retention
Order data and download tokens are retained for 90 days and then deleted. We do not retain your data beyond what is necessary for order fulfilment.
6. Your Rights
Under GDPR you have the right to:
- Access your personal data
- Rectification of inaccurate data
- Erasure of your data
- Restriction of processing
- Data portability
- Object to processing
To exercise your rights, contact us at: kevin.vaneeden@outlook.de
7. Cookies
This website does not use tracking or advertising cookies. Technically necessary cookies (e.g. for authentication) are used solely to operate the service.
8. Supervisory Authority
You have the right to lodge a complaint with a supervisory authority. The competent authority is:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
www.ldi.nrw.de