Privacy Policy – Maurits Kortenbout Fine Art
Last updated: 18 October 2026
Maurits Kortenbout is committed to protecting personal data. This Privacy Policy explains which personal data may be processed through mauritskortenboutfotografie.nl and in connection with enquiries, commissions and sales, why these data are processed, how long they are retained and which rights individuals have.
The data controller for the personal data covered by this Privacy Policy is:
Maurits Kortenbout, trading as Maurits Kortenbout Fine Art
Website: mauritskortenboutfotografie.nl
Email: contact@mauritskortenboutfotografie.nl
Depending on how you contact Maurits Kortenbout or use the services offered, the following personal data may be processed:
No more personal data are knowingly collected than are necessary for the relevant purpose.
When you contact Maurits Kortenbout through the contact form, by email, telephone or by other means, the information necessary to deal with your message or enquiry may be processed.
The contact form on this website may request:
These data are used to respond to your enquiry, maintain contact with you and, where relevant, take preparatory steps in connection with a commission, purchase or other agreement.
Depending on the circumstances, the legal basis for this processing is the legitimate interest in dealing with enquiries and correspondence or the need to take steps at your request before entering into a contract.
Correspondence that does not result in an agreement will generally be retained for no longer than two years following the last substantive contact, unless there is a legitimate reason or legal obligation requiring the information to be retained for longer.
When you commission photography, purchase an artwork or otherwise enter into an agreement, personal data necessary for performing that agreement may be processed.
These may include:
The legal basis for this processing is the performance of a contract or taking steps at your request before entering into a contract.
Information forming part of the legally required financial or tax administration is retained for the applicable statutory retention period. In the Netherlands, basic business administration must generally be retained for seven years.
Other information is retained no longer than is reasonably necessary for performing and completing the agreement, providing any necessary aftercare and establishing, exercising or defending legal claims.
For financial and tax administration purposes, information such as your name, address details, invoice information, purchase information and payment details may be processed.
This processing takes place where necessary to comply with statutory and tax obligations.
Information forming part of the statutory tax administration will generally be retained for seven years, or for longer where this is required by law in a particular situation.
Photography commissions may involve the creation of photographs in which individuals are identifiable.
Arrangements concerning the creation, use and possible publication of such images may form part of a separate agreement or consent.
Where identifiable imagery is used on the website, in a portfolio, at an exhibition or for other publicity purposes, this will be done on an appropriate legal basis and, where necessary, subject to separate agreements or consent.
Personal data are not sold to third parties.
Data may, however, be provided to or processed by other parties where this is necessary for the provision of services, business operations or compliance with legal obligations.
These parties may include:
Only the personal data necessary for the relevant party to perform its role will be provided.
Where a third party processes personal data solely on behalf of Maurits Kortenbout, appropriate data-processing and security arrangements will be put in place where required.
Some technical service providers may process information on servers located outside the Netherlands or outside the European Economic Area (EEA).
Where personal data are processed outside the EEA, reasonable steps will be taken to ensure that an appropriate legal mechanism and safeguards are in place, such as a European Commission adequacy decision or European Commission Standard Contractual Clauses.
The website may use functional or technical cookies that are necessary for the website to operate correctly.
Google Analytics is not currently used, and Maurits Kortenbout Fine Art does not use advertising or tracking cookies for the purpose of profiling visitors for advertising.
If non-essential cookies or other tracking technologies for which consent is legally required are introduced in the future, they will not be used before valid consent has been obtained. This Privacy Policy and, where necessary, the information concerning cookies will then be updated accordingly.
Maurits Kortenbout takes appropriate technical and organisational measures to protect personal data against loss, unauthorised access, unauthorised alteration, disclosure or other unlawful use.
No method of electronic storage or data transmission can, however, guarantee absolute security.
Personal data are not used for solely automated decision-making that produces legal effects or similarly significantly affects an individual.
No automated profiling is carried out for commercial or advertising purposes.
Under the General Data Protection Regulation (GDPR), you may, depending on the circumstances, have the following rights:
Requests concerning these rights can be sent to:
contact@mauritskortenboutfotografie.nl
Requests will normally be dealt with within one month. Where necessary to prevent misuse, additional information may be requested to verify the identity of the person making the request.
Some data protection rights are not absolute. For example, a request may not be fulfilled, or may only be fulfilled in part, where information is required to be retained by law.
If you believe that your personal data are not being processed in accordance with applicable data protection law, you can contact Maurits Kortenbout at contact@mauritskortenboutfotografie.nl.
You also have the right to lodge a complaint with the Dutch supervisory authority:
Autoriteit Persoonsgegevens
Further information is available at autoriteitpersoonsgegevens.nl.
This website may contain links to third-party websites or services.
Maurits Kortenbout is not responsible for the way in which those external parties process personal data. When you visit an external website, the privacy policy of that party applies.
This Privacy Policy may be amended when the website, services, business operations or applicable legislation change.
The most recent version will be published on this website. The date on which this Privacy Policy was last updated appears at the top of this page.