PRIVACY STATEMENT

Welcome
Welcome to the Biggy Tooth website. In this privacy statement, Biggy Tooth explains how and why we collect and process certain personal data in accordance with the General Data Protection Regulation 2016/679 (GDPR). We also provide information about the data retention period and security methods.

Data Controller
The entity responsible for processing personal data is: 
Biggy Tooth 
76 / 1422 EC NL 
biggytooth@gmail.com

If you have any questions, you can contact us via this email address.

Personal Data When Visiting the Website
Functional Cookies
From your visit to our website, we process personal data. Primarily, these are functional cookies and limited analytical cookies, which are necessary to ensure the proper functioning of the website and to keep track of general anonymized visitor numbers.

Furthermore, we use Google Fonts and/or other fonts on our website. During your visit to the website, we also place analytical cookies that maintain the security of our website and, for example, check if visitors are not bots.

The legal basis for these functional cookies is legitimate interest.

Analytical Cookies
Additionally, we place analytical cookies using Google Analytics 4. The following (indirect) personal data are recorded:

  • IP address

  • Location data

  • Browsing and clicking behavior on our website

  • Device type

  • Operating system type

  • Browser type

We have a legitimate interest in processing this (indirect) personal data to analyze what our (potential) customers are most interested in, how we have reached them, and where they are located so that we can make targeted improvements to our offerings.

To protect your privacy, we have configured Google Analytics in accordance with the guidelines of the Dutch Data Protection Authority. This means that we work with the latest version (GA4), have entered into a data processing agreement with Google, partially mask your IP address for Google, do not share your data with Google (not even for advertising purposes), and have disabled the User-ID function.

Tracking Cookies + Social Media Pixels
In our cookie banner, you can give consent for the placement of tracking cookies and social media pixels. If you do not give consent, we will not place these cookies.

We use a Meta pixel for Facebook and Instagram. Additionally, we use YouTube for our video content.

Personal Data During a Photoshoot
A: When you request a photoshoot with us, we collect the following personal data:

  • First and last name

  • Address details

  • Email address

  • Phone number

  • Bank account number

B: Additionally, when a photoshoot takes place, we process the following personal data:

  • Images of the individuals appearing in the photos

C: It may also occur that we receive other personal data from you, which you actively provide, for example, by email or phone (voluntary personal data).

Legal Bases
Biggy Tooth processes the above-mentioned personal data because it is necessary for the performance of the contract. Without the data, it is not possible to respond to your request, make appointments, conduct the photoshoot, and receive payment(s) for it.

We also process the name and address details because it is legally required to include them on the invoice.

If you voluntarily provide personal data, the legal basis for processing is your (explicit) consent. You can always withdraw this consent.

Regarding the images of the individuals appearing in the photos, the person who books the photoshoot ensures that all present individuals agree to have photos taken of them. The legal basis in this case is therefore consent. Of course, it is still possible to indicate during the photoshoot to Biggy Tooth that you do not want yourself or your children to be photographed.

If you appear in a published photo, but do not want to, for example, on Facebook or Instagram, first contact the person who posted the photo. If that is Biggy Tooth, email info@biggytooth.com and put 'Remove photo due to privacy' in the subject of your email.

Retention Periods
For the personal data mentioned under A, Biggy Tooth keeps these for 7 years after sending the invoice in the administration, as this is required by law.

For the personal data mentioned under B, the photos themselves are kept for 5 years after the photoshoot ends. This is for potential reorders and for use in Biggy Tooth's own promotion/marketing. After that, they will be deleted.

For voluntary personal data mentioned under C, these are kept for 3 months after the photoshoot. This applies, for example, to emails/WhatsApp messages. After that, they are automatically deleted. 

If you have filed a complaint that takes longer than 3 months to resolve, Biggy Tooth will keep all personal data until the complaint is fully resolved.

Security
Biggy Tooth stores personal data in the following systems: 

    • MoneyBird (accounting software) 

    • Pic-Time (online gallery software)

    • External hard drives (physical)

Subprocessors
When providing my services, Biggy Tooth uses a number of software programs and other processors. The personal data mentioned under A are entered into the MoneyBird accounting program. The data is stored there by them as long as Biggy Tooth uses the program and is only used for administration. MoneyBird does not use your data itself. If Biggy Tooth no longer uses the accounting program, the data will be transferred to Biggy Tooth and then deleted by MoneyBird.

Photos are made available through the Pictime digital environment. Pictime requests an email address for verification to shield access to the photos for third parties. Pictime does not use this email address and/or the photos for its own purposes. Biggy Tooth removes the photos from the Pictime online environment within two years at the latest.

Photos can be downloaded via an email link from WeTransfer. WeTransfer does not use the personal data (such as your email address) and the photos themselves, and these are automatically deleted after 1 (one) week.

Access, Modification, and Deletion
You always have the right to access the personal data processed by Biggy Tooth. If this data is incorrect, you may also correct it. You can also withdraw your consent to the processing of personal data and request that the data be deleted. Biggy Tooth will comply with that request if the legal basis for processing is your consent (see above under legal bases).

Privacy Complaints
If you have a complaint about the processing of your personal data, you can first submit it to Biggy Tooth in writing via biggytooth@gmail.com. We aim to respond to your complaint within 4 weeks.

If you disagree with the response, you can file a complaint with the Dutch Data Protection Authority (AP).