Privacy Statement

This is Wild Heart Tales Privacy and Cookie Policy, which covers the online and offline processing of your Personal Data and the Cookies used on the Wild Heart Tales Website. This document applies to all activities of Wild Heart Tales unless explicitly agreed or stated otherwise in writing. Wild Heart Tales respects the privacy of its Customers and Visitors to the Website. Wild Heart Tales practices care and accuracy when processing your Personal Data and processes the Personal Data in accordance with the General Data Protection Regulation (hereinafter GDPR). Below you will find more information about which Personal Data Wild Heart Tales processes, on what basis and for what purpose. Furthermore you will learn how Wild Heart Tales handles your Personal Data.

DEFINITIONS

Data Subject
An identified or identifiable natural person who is a Visitor to the Website or a Customer of Wild Heart Tales.
Visitor
A registered or unregistered user of the Website.
Customer
The natural person or legal person who purchases a product or service from Wild Heart Tales
Personal Data
Any information about an identified or identifiable natural person.
Website
The website of Wild Heart Tales, and any current and future website of Wild Heart Tales.

1. Controller
Controller and processor of Personal Data in relation to the Website and when selling goods and performing services is, unless stated otherwise in writing, one-(wo)man business, trading as Wild Heart Tales. This also includes third parties hired by Wild Heart Tales.

2. Applicability
This Privacy and Cookie Policy applies to all personal data of natural persons (hereinafter Data Subjects) which Wild Heart Tales processes regarding online or offline contact, in any applicable way. This also includes information collected through your visit to or purchase on the Website (hereinafter Wild Heart Tales products). In the event that our Website contains a link to the website of third parties and you choose to visit this Website, we encourage you to read the Privacy Policy of that third party. Wild Heart Tales is not responsible for the content of these Third Party Websites or the applicable Privacy Policy.

3. Personal Data
Below you will find an overview of which Personal Data we may collect from you in which individual situation.

4. Directly provided information
If you contact us either on- or offline, we might ask for the following information: first name, last name, postal and billing address, telephone number, e-mail address and IP-address.

Sensitive and criminal Personal Data
As a photographer, Wild Heart Tales processes sensitive data, namely photos. Wild Heart Tales processes this data in photo editing programs. This data is also stored and included in photo albums ordered by the customer. Photos of newborns or children under the age of 16 will not be made public (for example, placed on the Website) without the prior written consent of the parents and/or guardian.

Wild Heart Tales does not process any criminal personal data and also does not intend to provide Servicesto or collect data about persons younger than 16 years of age, unless permission has been obtained from parents or guardians, such as in the case of family and/or newborn photography. However, Wild Heart Tales cannot check whether a Visitor is older than 16 and therefore advises parents to be involved in the (online) activities of their children in order to prevent data about children being processed without parental consent. If you are convinced that Wild Heart Tales has collected personal data about a minor without this permission, please contact hello@wildhearttales.com and Wild Heart Tales will delete this data.

Automatically collected information
When visiting the Website of or in the case of online communication with Wild Heart Tales and its affiliates, various technologies may be used that automatically or passively collect information about your online activities. This information may be collected in the following manners:

Cookies
Technologies such as cookies, web beacons and mobile device identifiers are active on the Wild Heart Tales website in order to collect information about the use of our Website. For more information, including the types of cookies on the Wild Heart Tales Website and how to manage and adjust settings of cookies, please see the Wild Heart Tales Cookie Policy below.

Technical data
When you visit the Website, your Personal Data may be collected. This includes information such as your Internet Protocol (IP) address, your login details, the type of your (mobile) device, the operating system and browser type of your device, the settings for time zone and location, language, a unique identifier for your device, the address of a referring website, the path you take through our Website and other information about your session on our Website.

Information received from third parties
Wild Heart Tales may collect Personal Data received from other companies and organizations, including social media. We may collect Personal Data which is publicly available. For example, we may collect data when you interact with us through social media. By collecting additional information, we are able to correct inaccurate information and provide you with appropriate advice. It is not possible to create an account on our website.

Aggregated Information
Anonymized and aggregated information does not identify a specific person and therefore can not be traced back to a person. Wild Heart Tales uses such information for, among other things, insight into website visits and data analysis.

5. Justification for data processing
GDPR requires a legal ground of justification for processing Personal Data. Wild Heart Tales processes your data on the basis of the following justifications:

Execution of the agreement
In order to execute the agreement between Wild Heart Tales and her customers, it is necessary to process Personal Data in order to prepare and send your order.
Consent
Your consent is obtained through requests by e-mail or other social media, orders via the Website and when subscribing to our newsletter. If third parties process your data on behalf of Wild Heart Tales (“sub-processors”), your explicit consent will be requested in writing and prior to this processing. Your given consent can be withdrawn at any time by emailing hello@wildhearttales.com. The processing of Personal Data before the moment of withdrawal remains lawful on the basis of previously given consent.
Legitimate interest
Wild Heart Tales may have a legitimate interest in processing your Personal Data, such as marketing purposes but also to advise potential customers. Interests may differ per data processing. The interests of all concerned are weighed up fairly. Also, your Personal Data will be stored for at least two and maximum of seven years.

6. Purposes of processing data
Wild Heart Tales processes Personal Data for practical reasons such as executing the agreement by signing the booking form (JotForm), executing the agreement with her customer (photo editing), optimize her service providing, storage of photos, editing photos (Adobe Lightroom, Adobe Photoshop), album design (Albumstomp and AlbumPrüfr), Online Gallery (Pic-time), communicating with her customers (G-mail), processing payments, keeping records and billing purposes (Rompslomp), sending the order placed by the Customer and keeping her business in good (legal) standing.

The optimal use of the Website is achieved by processing and is based on commercial considerations such as marketing purposes and gaining insight into (unique) visitor numbers and other statistics. Wild Heart Tales also processes Personal Data to contact and instruct suppliers, for managing and optimizing (monitoring, posting messages and responding to comments) of social media accounts as well as placing advertisements, for insight into Website visitors and search behavior and in order to optimize the Website.

Other purposes may be

developing and improving new products and services;
assessing the effectiveness of our sales, marketing and advertising;
reporting to relevant authorities in case of a security or product problem;
complying with and reporting according to applicable law;
complying with legal obligations and our policies;
instituting or defending a legal claim.

News letter
Wild Heart Tales sends newsletters through Mailchimp to its customers and persons who have registered for this service. We process your name and e-mail address and it is possible to unsubscribe at any time. Once unsubscribed, said data will be deleted immediately.

7. Storage
Your Personal Data will no longer be stored on our mailservers and in our CRM-program than necessary to achieve the goals as set out above. Wild Heart Tales may keep your Personal Data longer on the basis of a (legal) obligation and any statutory time limitations. Your Personal Data will be stored by Wild Heart Tales for a minimum of two years and a maximum of seven years.

Data such as first and last name, address and e-mail address are used for administrative and financial purposes. This data will be kept for seven years as Wild Heart Tales is legally obliged by tax authorities to do so. This also applies to e-mail addresses and the content of e-mails.
Out of commercial interest, Wild Heart Tales uses data such as your (company) name, first and last name and e-mail address for direct marketing.
RAW images and photo’s will be stored for at least two and maximum seven years;
Information such as IP-addresses will be used by Google Analytics for statistic purposes, which will be set out in our cookie statement below.

8. Processing of Personal Data by third parties
In certain circumstances your Personal Data will be provided to third parties, such as social media companies. Your Personal Data may also be shared with suppliers who provide services to Wild Heart Tales, such as business, professional or technical support functions. This includes payment processors (Stripe, Mastercard), hosting providers, mail services (PostNL/DHL) and suppliers that support Wild Heart Tales with information technology services, marketing and analysis services. Your personal information may also be shared with our partners or other third parties in connection with marketing, promotional and other offers, as well as product information. Wild Heart Tales has entered into or will enter into a processor agreement with these parties in the event of new parties and does not allow these suppliers to process Personal Data for any purpose other than providing services on behalf of Wild Heart Tales. Other data will not be provided to third parties, unless mandatory provisions in laws and regulations make this necessary. Personal Data collected may be shared with the categories of recipients listed below.

Analysis and Tracking Tools
Wild Heart Tales uses third-party analytics and tracking tools, such as Google Analytics, to track, segment and analyze the use of the Wild Heart Tales services. Among other things, demographics and interest are hereby determined. Based on this, Wild Heart Tales gains a better insight into visitor preferences, on the basis of which the website and services can be improved. These tools may use technologies such as cookies, web beacons, pixel tags, log files, flash cookies, and/or other technologies to collect and store non-personal information. Usage data about visits to the Wild Heart Tales Website is collected and shared with Wild Heart Tales at our request. Page usage is measured. Wild Heart Tales has no access to or control over the use of these cookies or other tracking technologies by these third parties. We strongly advise you to read the Privacy Policy of these individual parties for information about cross-device tracking and disconnection from your devices.

Other
In certain other cases, Wild Heart Tales may share your personal data with third parties, for example when Wild Heart Tales is acquired by a third party or when Wild Heart Tales believes that a legal obligation requires that your personal data must be disclosed or to protect Wild Heart Tales its own rights, property and safety of its employees and customers, Wild Heart Tales may disclose your personal information.

9. Transfer to third countries
It may be necessary for Wild Heart Tales to transfer your Personal Data to countries outside the European Union (hereinafter: EU). For example, if Wild Heart Tales requires the assistance of companies established in a country outside the EU to provide or support its services. These countries do not always have an adequate level of protection. Passing on your Personal Data to such companies in the context of performing Services is only possible with your explicit consent.

The Court of Justice of the EU has declared the EU-US privacy shield invalid in the Schrems II judgment. As a result there is uncertainty about the practical consequences of this ruling when using providers in the United States. This might apply to Wild Heart Tales as we use, among others, Instagram and Facebook. We investigate how we can comply with legislation and regulations with our business operations and also keep up with developments. As soon as the European Data Protection Board (EDPB) issues guidance with additional measures, our Privacy and Cookie Policy will be adjusted where necessary. If you have any questions, please contact us at hello@wildhearttales.com.

10. Your rights
At any time you have to right to file a complaint or objection about processing your Personal Data by Wild Heart Tales. Other rights are to access, oblivion, rectification, addition, data portability, limitation of the processing or deletion of your Personal Data. To do so, send an email to hello@wildhearttales.com. We will ask you to provide us with specific information so that we can confirm your identity. This is a security measure to ensure that your personal information is not passed on to anyone who has no right to receive it. Below you can read what the aforementioned rights entail.

Access
You have the right to inspect your personal data at any time. The right of access only concerns access to your own Personal Data. You can request access to your Personal Data including a copy of the personal data that Wild Heart Tales has processed or is still processing about you. In the case that your data has been deleted, made anonymous or is no longer available due to legislation and regulations, YourMoments will immediately inform you

Oblivion
If there is no longer a legal basis for Wild Heart Tales to keep your Personal Data, you may submit a request to erase your Personal Data. You also have the right to ask Wild Heart Tales to erase or delete your data when you have successfully exercised your right to object to processing, when you are under the age of 16 and the personal data was collected through our Website, when Wild Heart Tales may have processed your data unlawfully or when we need to delete your personal data to comply with laws and regulations. It is also possible to delete your data if you withdraw your previously given consent. Please note that due to specific legal reasons we may not always be able to (fully) comply with your erasure request. Where applicable, we will notify you at the time of your request.

Rectification and addition
If you believe that your Personal Data held by Wild Heart Tales is incorrect or incomplete, you can submit a request to adjust. Wild Heart Tales will make reasonable efforts to adjust them where necessary and possible.

Data portability
You have the right to request Wild Heart Tales to transfer your Personal Data to you or a third party providing the same type of service. Wild Heart Tales will provide this data in a structured and machine-readable manner. The portability only applies to automated data for which we have received your consent in the past or which has been processed under an agreement between Wild Heart Tales and you.
Objection

In certain circumstances you may have the right to object processing of Personal Data by Wild Heart Tales. For example if you believe your rights and freedoms are at stake when processing your Personal Data on the basis of a legitimate ground or when the processing is related to a legal claim. Wild Heart Tales will weigh both your interests and those of Wild Heart Tales in order to be able to assess whether the data processing should be discontinued.

11. Security
Wild Heart Tales makes sure that appropriate technical and organizational measures to secure Personal Data are obtained. Equipment and software are used to continuously protect our systems and the Website with state of the art anti-virus software. Wild Heart Tales uses an external hard drive. Passwords of online programs are changed regularly. Wild Heart Tales also uses an SSL certificate for the Website for a secure internet connection. The plug-ins used for the Website are always up to date. Regular backups are also made.

12. Complaint Dutch Data Protection Authority
Complaints about the use of your Personal Data can be submitted to the Dutch Data Protection Authority (“Autoriteit Persoonsgegevens”) by using the form made available for this purpose on their website.

ADJUSTMENTS
If deemed necessary to be and remain compliant with laws and regulations or in case of (expansion of) Wild Heart Tales Products and services, Wild Heart Tales may adjust this Privacy and Cookie Policy without prior consent. Please consult our Policy regularly to stay up to date. The most current version can be found on the Website