Latest version: 3 nov 2026
Janko Bosch Photography is responsible (the "controller") for the personal data processed through jankobosch.nl, the online store and my photography services. I take your privacy seriously and only collect what I need to deliver what you ask for.
Janko Bosch photography
Johan Kerkmeijerstraat 9
1624PL Hoorn
The Netherlands
Email: jankobosch[at]pm.me
KvK: 51967561
VAT-ID: NL001656655B48
I only process personal data you give me yourself, plus a minimum of technical data needed to run the website. I never sell your data.
Ordering in the store: your name, shipping and billing address, email, phone number (optional) and order details, used to process, ship and invoice your order.
Payment: payment status and a transaction reference, used to handle payment via Stripe. I never see your full card details.
Booking a photoshoot: your name, email, phone number, preferences for the shoot and appointment details, used to plan and carry out the shoot and to invoice it.
Contacting me by email: your name, email and message, used to answer your question.
Newsletter: your email address, used to send my monthly newsletter.
Administration: invoice and order data, kept to meet Dutch tax obligations.
Visiting the website: technical data such as IP address and browser type in server logs, used for security and to keep the site running.
I process your data on these legal grounds: to perform our contract (orders, payments, bookings and delivering your photos), to meet legal obligations (tax records), on the basis of my legitimate interest (answering emails and keeping the website secure), and with your consent (the newsletter and showing your photos in my portfolio).
I do not knowingly collect data from people under 16. Some content in the store is intended for adults only.
I only share data with parties that need it to deliver my services. Where they act on my behalf, they process data under a data processing agreement or their standard GDPR terms.
Stripe processes payments and helps prevent fraud. Data may be processed in the EU and the US, under EU Standard Contractual Clauses.
Substack sends my newsletter. You sign up on Substack itself; data is processed in the US.
Proton Mail handles my email, based in Switzerland.
Transip hosts the website, in The Netherlands.
Fathom Analytics provides anonymous visitor statistics. Fathom does not use cookies or store IP addresses, and processes EU visitor data on servers in the EU.
Google Fonts delivers the fonts used on this website. When the fonts load, Google receives your IP address. Data may be processed in the US under the EU-US Data Privacy Framework.
PostNL or another carrier delivers your order.
I may also share data when the law requires it, for example with the Dutch Tax Administration. Links to Instagram, Threads, LinkedIn and Pinterest are plain links; those platforms only receive data if you click through, under their own privacy policies.
I keep data no longer than needed for the purpose it was collected for.
Invoices, orders and payment records: 7 years, as required by Dutch tax law.
Booking and shoot details: until the shoot is delivered and paid, then only as part of the invoice record.
Email correspondence: up to 2 years after our last contact, unless it is part of an order or booking.
Newsletter address: until you unsubscribe.
Server logs: 30 days.
Data I must keep for tax purposes is used only for that purpose during the remaining period.
This website only uses a few cookies and similar techniques that are needed for it to work. I do not use advertising or tracking cookies, and nothing is used to build a profile of you. That is why there is no cookie banner.
Session cookie (jankobosch.nl): remembers your shopping cart while you browse. Deleted when you close your browser.
`__stripe_mid` (Stripe): fraud prevention for secure payments. Expires after 1 year.
`__stripe_sid` (Stripe): fraud prevention for secure payments. Expires after 30 minutes.
dark and visited (session storage, jankobosch.nl): remember your light or dark mode and whether you have already seen the opening animation. Deleted when you close the tab.
Statistics: I use Fathom Analytics to see how many people visit the site and which pages they view. Fathom does not use cookies, does not store your IP address and cannot identify you.
Fonts: the site loads its fonts from Google Fonts, so your browser connects to Google's servers and Google receives your IP address.
You can delete cookies at any time in your browser settings; the shopping cart may then not work properly.
Under the GDPR you have the right to:
Access the personal data I hold about you
Correct data that is wrong or incomplete
Delete your data, unless I am legally required to keep it (such as invoices for tax purposes)
Restrict or object to processing based on legitimate interest
Data portability: receive your data in a common format
Withdraw consent at any time, for example for the newsletter or portfolio use
To use these rights, email jankobosch-privacy@pm.me. I may ask you to confirm your identity first. I respond within one month.
I protect your data with appropriate measures, including an encrypted (HTTPS) connection, payment through Stripe so I never store card details and encrypted email via Proton.
If you are unhappy with how I handle your data, please contact me first so we can solve it together. You also have the right to file a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens, or with the supervisory authority in your own EU country.
I may update this policy when my services or the law change. The latest version is always on this page, with the date at the top.