Privacy Policy
Introduction
Daniella Perera Studio (registered with the Trade Register under number 84134925, hereinafter: ‘Daniella Perera Studio’) maintains a strict privacy policy. We take privacy very seriously and treat personal information with care and confidentiality. This Privacy Statement outlines how we handle the data of persons subscribing to our newsletter, persons who contact us via the contact form, clients that use our services, clients who make a purchase in our online shop (www.daniellapererastudio.com/shop) and/or other persons who contact us in other ways.
Personal data are any data that are characteristic of an individual (also called data subject) or that can be traced back to an individual (natural person). There are many types of personal data. They include, for example, name and address details but also telephone numbers or details about race, religion, or health.
Daniella Perera Studio is the data controller within the meaning of the General Data Protection Regulation (hereinafter: ‘GDPR’). In this context, Daniella Perera Studio is responsible for processing personal data and determines how and for what purpose these personal data are processed.
Set out below is a detailed description of the types of personal data relating to the persons listed above we process, for what purpose, for how long, and with whom we share those personal data. It also sets out the rights of the data subjects and how they can exercise them.
What personal data do we process, and for how long?
The persons whose personal data we collect include:
-
Persons subscribing to our newsletter;
-
Persons who contact us via the contact form;
-
Clients using our services;
-
Clients who make a purchase in our online shop;
-
Persons contacting Daniella Perera Studio in other ways;
We only process the personal data that are necessary for the purposes described here. We strive for minimal data processing, which means that, where possible, we process less or no personal data and do not store the personal data longer than necessary for the purposes of data processing listed below and in accordance with the legal retention periods. Personal data are destroyed after the expiry of the relevant retention periods.
We process the following personal data of the (natural) persons listed below:
PERSONS SUBSCRIBING TO OUR NEWSLETTER VIA www.daniellapererastudio.com
-
First name, surname and e-mail address for subscribing to our newsletter;
PERSONS WHO CONTACT US VIA THE CONTACT FORM
-
Form of address, first name, surname, e-mail address;
-
Subject of the message, the message (in the contact form or by e-mail), or notes of the request or application – whether personal data are being processed depends on the content of the message or note.
We are obliged to retain data relevant to our administration for the legally prescribed retention periods. In principle, we will delete personal data no later than six months after the message/request of the person who completed the contact form has been processed.
Clients using Our services
-
First name, surname, address details, e-mail address, mobile phone number and other contact details;
-
Bank account number for invoice payments;
We are obliged to retain data relevant to our administration for the legally prescribed retention periods. We delete all other personal data no later than two years after termination of the contract with the client or after the end of the business relationship.
Clients who make a purchase in our online shop
-
First name, surname, address details, e-mail address;
-
Bank account number for invoice payments;
We are obliged to retain data relevant to our administration for the legally prescribed retention periods. We delete all other personal data no later than two years after termination of the contract with the client or after the end of the business relationship.
Persons contacting daniella perera studio in other ways
-
First name, surname, e-mail address, and other contact details;
-
Messages and notes arising from our contact and relationship – whether personal data are being processed depends on the content of the message or note.
We are obliged to retain data relevant to our administration for the legally prescribed retention periods. In principle, we will delete personal data no later than six months after the message/request has been processed.
For what purpose do we use personal data?
We use the abovementioned personal data mainly to fulfil our legal obligations and to be able to carry out our activities to the best of our ability.
In addition, we use personal data for the reasons set out below.
Personal data of PERSONS SUBSCRIBING TO OUR NEWSLETTER VIA www.daniellapererastudio.com
We use the abovementioned personal data for:
-
The upkeep and improvement of Daniella Perera Studio’s services.
-
Approaching potential clients and/or other business contacts with commercial offers, newsletters, and promotional campaigns of Daniella Perera Studio that may be of interest to them, only if they have subscribed for this via Daniella Perera Studio’s website.
PERSONS WHO CONTACT US VIA THE CONTACT FORM
We use the abovementioned personal data for:
-
The follow-up of the enquiry or request made in the contact form.
-
Sending offers and/or information in response to a request to that effect.
Clients using our services
We use the abovementioned personal data for:
-
Registering and performing the contracts with our clients;
-
Informing clients about our (similar) products and services;
-
Compliance with laws and regulations, including those relating to safety and quality assurance, tax legislation, and fraud prevention. This also includes the necessary services that are provided to us by parties with specific expertise, such as tax consultants, accountants, legal advisors, and quality assurance consultants.
Clients who make a purchase in our online shop
We use the abovementioned personal data for:
-
Fulfilling the client’s order.
-
Compliance with laws and regulations, including those relating to safety and quality assurance, tax legislation, and fraud prevention. This also includes the necessary services that are provided to us by parties with specific expertise, such as tax consultants, accountants, legal advisors, and quality assurance consultants.
persons contacting daniella perera studio in other ways
We use the abovementioned personal data for:
-
The follow-up of the enquiry or request.
-
Compliance with laws and regulations, including those relating to safety and quality assurance, tax legislation, and fraud prevention. This also includes the necessary services that are provided to us by parties with specific expertise, such as tax consultants, accountants, legal advisors, and quality assurance consultants.
On what basis do we process personal data?
There must be a legitimate basis for processing personal data. We process personal data on the following bases:
PERSONS subscribing to our newsletter via www.daniellapererastudio.com
-
Consent given to us (when subscribing to our newsletter).
-
Based on a legitimate interest that is consistent with or arises from the purposes described above. We do this based on a careful assessment and balancing of interests.
If we process your personal data based on your consent, you have the right to withdraw your consent at any time. In that case, we will stop processing your personal data immediately.
PERSONS WHO CONTACT US VIA THE CONTACT FORM
-
Consent given to us when using the contact form.
-
Based on a legitimate interest that is consistent with or arises from the purposes described above. We do this based on a careful assessment and balancing of interests.
If we process your personal data based on your consent, you have the right to withdraw your consent at any time. In that case, we will stop processing your personal data immediately.
Clients using our services
-
Performance of a contract with the relevant client or business contact.
-
Compliance with legal obligations (including tax regulations).
Clients who make a purchase in our online shop
-
Consent given to us when an order is placed via (www.daniellapererastudio.com/shop). Consent is also given when the client wants to purchase a product via bank transfer, requests an invoice and makes payment.
-
Compliance with legal obligations (including tax regulations).
Sharing personal data
We share the collected personal data with third parties only for the abovementioned purposes or if this is required by law. What personal data are provided to whom will depend on the situation.
We only share the personal data with third parties insofar as this is necessary for the follow-up of the enquiry or request, obligated by law or court order, or if this is necessary for the performance of the services and/or the technical support of our services.
We ensure that, if necessary, arrangements are made with these third parties regarding the requirements for data exchange and specifically that the third party concerned also complies with the GDPR. We will not transfer personal data to a country outside the European Union without a legal basis.
Security of the personal data
We consider proper security of the personal data we process to be very important. We have taken technical and organisational measures to protect such personal data against (cyber) crime, destruction, loss, or other unlawful processing. These measures meet at least the general requirements for information security for an organisation such as ours. We regularly evaluate the measures taken and adjust them if necessary. If we use third-party services, such as IT suppliers, we agree on adequate security measures.
We ensure that employees only have access to personal data to the extent that is strictly necessary for the proper performance of their duties.
We agree on a confidentiality obligation with all persons who have access to the personal data processed by us and who are not already bound to secrecy by virtue of their profession, position, or legal regulations.
Privacy rights of data subjects
Under the GDPR, every data subject has rights that they can exercise against organisations that process their personal data. As a data subject, you have the following rights:
Right of access and/or rectification
By requesting access or rectification, you can find out what data we process about you, for what purpose, how we obtain these data, and what retention periods we use. You can also request to complete or correct your personal data.
Right to restriction of processing
If the personal data we process from you may be incorrect, are being processed unlawfully, no longer needed, or if you object to their processing as described below, we will at your request (temporarily) stop the processing of your personal data or process your personal data only in a limited number of cases.
Right to erasure
Once your relationship with us has ended, you may ask us to delete your personal data, which we will always do if the data processing is based solely on consent. In all other cases, we will assess whether there are reasons that preclude full or partial deletion of personal data, such as legal retention obligations.
Right to data transfer
If we process your personal data exclusively based on the consent granted by you or within the context of a contract concluded with you, you have the right to request us to transfer the data to yourself or a third party designated by you. In the case of a contract with you, such transfer is only possible if the contract with you has ended. Please note that data that we process on a different basis, such as a legal obligation or legitimate interest, are not eligible for transfer.
Right to object
If we process your personal data based on Daniella Perera Studio’s legitimate interest (for example, for marketing purposes), you can ask us to stop doing so. We will then assess whether we will comply with your request.
Right to submit a complaint to the data protection authority
If you believe that we are processing your personal data in violation of the GDPR, you can at all times submit a complaint about this to the Data Protection Authority. We refer to the website of the Data Protection Authority for the procedures for submitting such a complaint.
Amendment of the Privacy Statement
Daniella Perera Studio is entitled to change this Privacy Statement’s content at any time without prior notice. Amendments to the Privacy Statement will be published on Daniella Perera’s Studio website. None of the provisions of this Privacy Statement is intended to create any obligation or contract between Daniella Perera Studio and the data subjects whose data we process.
Questions and contact
For questions or comments about the processing of your personal data and this Privacy Statement, or in connection with the exercise of the above rights, please contact Daniella Perera Studio via the following contact details:
E-mail address: hello@daniellapererastudio.com
You can also use the contact form on our website. We will then contact you as soon as possible.
The current version of this Privacy Statement was drawn up on 23rd Apr 2024.