Privacy Policy — Studio Roep

Last updated: 22 October 2026

1. Who we are

Studio Roep, registered with the Dutch Chamber of Commerce (KvK) under number 83555404 is the controller for the processing of personal data described in this policy.

Email: hi@studioroep.nl
Website: https://robertpauljansen.com

We operate this website, where we showcase photography and sell photographic prints. We also communicate with customers and prospects by email and, where you contact us there, through our social media accounts (see section 6).

2. Personal data we process

Depending on how you interact with us, we process:

• Your name, email address and any information you provide when contacting us.

• Your billing and delivery address, order details and, where needed for delivery, telephone number.

• Payment status, transaction references and invoice details. We do not receive or store your full card or bank details; these are handled by the payment provider.

• Technical and usage information, such as IP address, browser and device information, cookie identifiers, pages visited and interactions with our website.

• Information and photographs relating to commissioned photography assignments.

• Messages you send us through social media.

We receive information directly from you, through your use of our website and from service providers involved in processing your order or payment.

3. Why we use your information and on what legal basis

Orders and customer service. We use your information to process purchases, arrange printing and delivery, communicate about orders and handle returns or complaints. Legal basis: performance of our contract with you (Art. 6(1)(b) GDPR).

Payments and accounting. We process transaction and invoice information to complete purchases and to comply with our legal accounting and tax obligations. Legal basis: performance of contract and legal obligation (Art. 6(1)(b) and (c) GDPR).

Enquiries. We use information in your messages to respond to enquiries. Where you ask about a potential purchase or assignment, the legal basis is taking steps at your request before entering into an agreement (Art. 6(1)(b) GDPR). For other enquiries, we rely on our legitimate interest in responding and managing our business communications (Art. 6(1)(f) GDPR).

Website operation and security. We process necessary technical information to operate the website, prevent misuse and maintain security. Legal basis: our legitimate interest in providing a reliable and secure website and protecting our business and visitors (Art. 6(1)(f) GDPR).

Analytics. With your consent, we use Google Analytics and Squarespace Analytics to understand how visitors use our website and to identify improvements. Legal basis: your consent (Art. 6(1)(a) GDPR).

Photography assignments. We process the information needed to arrange and carry out commissioned assignments (Art. 6(1)(b) GDPR). Where we retain delivered photographs for possible reorders, our legitimate interest is to provide that follow-up service (Art. 6(1)(f) GDPR). We request your separate consent before using commissioned portraits in our portfolio or on social media (Art. 6(1)(a) GDPR).

You do not have to provide optional information. However, without the information necessary to process payment and arrange delivery, we cannot complete your order.

We do not use personal data for automated decision-making or profiling that produces legal or similarly significant effects for you.

4. Service providers and payments

Our website and online store are hosted by Squarespace. We share relevant information with Squarespace to operate the website, manage orders and provide website analytics.

Payments are handled by the payment service providers connected to our Squarespace checkout, currently Stripe, PayPal and Apple Pay. The provider involved depends on the payment option you select. These providers process payment details and may also process information for their own fraud prevention, security and legal obligations.

Where necessary, we share information with:

• Printing and fulfilment partners

• Delivery services.

• Hosting, email, storage and other IT service providers.

• Google, for Google Analytics.

• Accounting and professional advisers.

• Authorities, where disclosure is legally required.

We limit the information shared to what is needed for the relevant purpose. We do not sell your personal data.

Where service providers process information on our behalf, we make appropriate data processing agreements. Some providers also act as independent controllers for particular activities, as explained in their own privacy policies.

For more information about Squarespace’s processing, see the Squarespace Privacy Policy.

5. Cookies and analytics

We use necessary cookies and similar technologies to operate the website, shopping cart and checkout, maintain security and remember cookie preferences. These do not require consent.

With your consent, we also use Google Analytics and Squarespace Analytics. These services help us understand information such as which pages are visited, how visitors reach our website and how they interact with it.

Optional analytics cookies and associated tracking are activated only after you consent. Refusing these cookies does not prevent you from purchasing prints.

You can accept or reject optional cookies and change or withdraw your consent at any time through the “Manage cookies” option on our website. Information about the cookies, their providers and their lifetimes is available through those cookie settings. Cookie lifetimes are separate from the periods for which information collected through cookies is retained.

Studio Roep does not use a Meta/Facebook/Instagram advertising pixel.

6. Social media and external links

Our website may link to our social media accounts, such as Instagram. If you follow those links or contact us through social media, the relevant platform processes your data under its own privacy policy, and we are not responsible for that processing. If you send us a message there, we process it as an enquiry (section 3) and may ask you to continue by email.

7. Newsletter

We do not currently offer newsletter registration.

If we introduce a newsletter, we will update this policy with details of the email service provider before collecting subscriptions. Subscription will be based on your consent, optional, and not a condition of purchasing a print. Each newsletter will include an unsubscribe link, and you can also unsubscribe by emailing hi@studioroep.nl.

8. How long we retain information

Enquiries that do not lead to an order. Up to 12 months after the enquiry has been resolved.

Order and customer data. Delivery and order details are kept for as long as needed to complete the order, handle returns, complaints and warranty claims, and for the periods below.

Accounting and tax records. Order and invoice information forming part of our statutory accounting records is retained for seven years, in accordance with Dutch tax requirements. A different period may apply where required by law.

Other customer correspondence. Up to two years after an order or complaint has been completed, unless particular information is still needed for an ongoing dispute or legal claim.

Commissioned photographs. Up to five years after delivery to allow for reorders, unless a different arrangement is agreed. Photographs used with separate portfolio permission are reviewed periodically. If you withdraw that permission, we stop using them for that purpose and remove them from online channels under our control.

Google Analytics. We have configured a two-month retention period for user-level and event-level data, with retention resets on new activity disabled. This setting does not apply to standard aggregated reports.

Squarespace Analytics and technical information. Retention varies by the type of information and its purpose. Relevant criteria include whether information is still needed to provide website and reporting services, investigate security incidents, meet legal obligations or resolve disputes, and whether it has been aggregated or de-identified. Squarespace describes these criteria in its Privacy Policy and does not publish a single retention period covering all analytics information.

Future newsletter subscriptions. If introduced, subscription information will be retained until you unsubscribe. We may retain the limited information needed to respect your unsubscribe request and demonstrate that consent was obtained.

Where information is needed for a specific legal obligation or claim, we retain only the relevant information for the period necessary for that purpose.

9. International transfers

Our service providers, including Squarespace and Google, may process personal data outside the European Economic Area, including in the United States.

Where personal data is transferred outside the European Economic Area, we rely on an applicable adequacy decision (such as the EU–US Data Privacy Framework) or appropriate safeguards, such as the European Commission’s Standard Contractual Clauses. The mechanism depends on the recipient and service.

Squarespace states that it uses the EU–US Data Privacy Framework for applicable transfers to Squarespace, Inc., and Standard Contractual Clauses or other lawful mechanisms where appropriate.

You can contact hi@studioroep.nl for further information about safeguards applicable to your data and how to obtain a copy.

10. Your privacy rights

Depending on the circumstances and the applicable legal conditions, you have the right to:

• Access your personal data.

• Correct inaccurate or incomplete information.

• Request deletion of your personal data.

• Request restriction of processing.

• Object to processing based on legitimate interests.

• Receive your data in a portable format and have it transferred where applicable.

• Withdraw consent where processing is based on consent. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

To exercise your rights, email hi@studioroep.nl.

We respond without undue delay and normally within one month. Where necessary because of the complexity or number of requests, this period may be extended by up to two further months. We will explain any extension within the first month.

If we have reasonable doubts about your identity, we may request limited additional information to verify it. Please do not send a copy of your identity document unless we specifically request it and explain why it is necessary.

You also have the right to lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens (https://autoriteitpersoonsgegevens.nl).

11. Children

Our website and services are not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us with personal data, please contact us and we will delete it.

12. Security

We take appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access. Access to personal data is limited to people and service providers who need it for the relevant purpose.

If you have concerns about the security or handling of your information, contact hi@studioroep.nl.

13. Changes to this policy

We may update this policy when our services or processing activities change. The current version and its update date will be published on this page.