GDPR Information

General Data Protection Regulation

Your rights under GDPR

As an EU resident, you have the following rights regarding your personal data:

• Right of access: Request a copy of all data we hold about you.
• Right to rectification: Correct inaccurate personal data.
• Right to erasure: Request deletion of your personal data ("right to be forgotten").
• Right to data portability: Receive your data in a machine-readable format.
• Right to object: Object to processing of your personal data.
• Right to restrict processing: Request that we limit how we use your data.

Data Controller

Fotobewaren — fotobewaren.com — is the data controller for all personal data processed on this platform.

Legal basis for processing

• Contract: Processing necessary to provide the service.
• Legitimate interest: Security, fraud prevention, service improvement.
• Consent: Marketing communications (opt-in only).

Data Processor Agreements

We have DPAs with: Stripe (payments), Cloudflare (CDN + R2 storage), SparkPost (email), Sentry (error monitoring).

Exercising your rights

To exercise any of the above rights, log into your account and visit Settings, or email [email protected]. We will respond within 30 days.

Supervisory authority

You have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.