EOSfoto is my personal photography website. I’m Marco Delnoij, and I manage its photographs, articles and technical operation.

This page explains what data is processed when you use EOSfoto, why it is needed and what choices and rights you have. For questions, contact me at info@eosfoto.nl.

Just browsing

You do not need an account to view the photographs and stories. You can also use the website without consenting to visitor statistics.

When you visit, the web server receives technical data such as your IP address, the requested web address, the time and information about your browser. This data helps deliver the website, investigate errors and prevent abuse.

Hosting is provided by Theory7.

If you email me

When you contact me, I receive your email address and the information you include in your message. I use it to answer your question and deal with any follow-up enquiries.

This does not add you to a newsletter or advertising list. Please avoid sending sensitive information unless it is needed for your question.

I keep correspondence for as long as it is needed for our contact, or as required by a legal obligation.

If you leave a comment

For a new comment, WordPress stores:

  • Your chosen name and email address.
  • Your comment text and the time.
  • Your IP address and browser information.

New comments are reviewed first. Once approved, your name, comment and date may be publicly visible. Your email address, IP address and browser information are not displayed on the website.

The administrator receives a brief email notification with a link to the secure administration area. The notification does not contain the visitor’s comment text, email address or IP address.

Spam protection and retention periods

Spam protection runs on the website’s own hosting, using a hidden honeypot field, rate checks and a filter list, among other measures. Comments are not sent to an external spam service for this purpose.

For new comments, the IP address and browser information are removed from the active comment database after one year during the daily cleanup. The comment itself remains for as long as it forms part of the publication.

Backups have their own retention periods and may temporarily continue to contain this data.

Remembering your details

If you choose to have your name and email address remembered, WordPress may store functional comment cookies for that purpose. You can delete these cookies in your browser.

Older comments

Some articles contain comments from the previous website. The public name, comment and date may remain visible. Associated contact details may still be held in the restricted administration archive.

Would you like to know what data has been retained, or have a comment edited or removed? Email me with a reference to the article and comment. I will assess what is possible and necessary for your request.

Cookies, language and reading settings

EOSfoto stores a few preferences to make the website pleasant to use:

  • Language: on your first visit, an available language is selected based on your browser language. If that language is unavailable, English is used. A language you choose yourself takes priority. Your language choice is stored in a functional cookie for up to six months.
  • Reading settings: preferences such as text size and contrast are stored in your own browser until you delete that data.
  • Statistics choice: your preference for visitor statistics is stored in your browser for up to six months.

No external translation service is contacted for translations or reading settings.

When signing in to administer the website, WordPress also uses functional cookies for authentication and the secure session. Blocking these may prevent administration from working properly.

Visitor statistics: only with consent

Google Analytics is loaded only on the live website after you have given your consent. Without consent, no Analytics cookies are placed and no Analytics requests are sent to Google.

With consent, Google may process information about pages visited and your browser for visitor statistics. Processing may take place outside the European Economic Area. You can read more in Google’s privacy policy.

Advertising personalisation and Google Signals are disabled. No advertising integration is configured. Searches and logged-in visits are not measured.

Changing your choice

Use Adjust cookie choice at the bottom of the website to change or withdraw your consent.

Withdrawal stops further measurement. The website removes the Analytics cookies it is able to remove. Withdrawing consent does not undo earlier processing.

Sign-in and security

The sign-in function is intended for administration. To prevent abuse, the website records failed sign-in attempts and temporary lockouts. This may include the IP address, the username entered and the time.

These security records are processed locally on the hosting. No cloud account is configured for sign-in protection.

Entries in the sign-in log are deleted after no more than thirty days during the daily cleanup. Temporary lockouts expire sooner.

In the event of a specific security incident, relevant data may be retained separately for as long as needed for investigation or a legal obligation.

The hosting provider’s settings and security processes govern its technical logs. You can contact me with questions about data associated with your visit.

Why data is used

Data is processed to:

  • Answer messages.
  • Review and publish comments.
  • Make the photo archive available.
  • Keep the website safe and reliable.

For optional visitor statistics, your consent is the legal basis. Where applicable, data is processed on the basis of a legitimate interest, taking visitors’ and commenters’ privacy into account. A legal obligation may also require data to be retained or disclosed.

I do not sell visitor data. Service providers may process data for hosting, email and security. Data may also be disclosed where the law requires it. Access to administration and data is restricted.

Your privacy rights

You can request access to your personal data and ask for it to be corrected or deleted. Depending on the circumstances, you can also object to processing, request restriction of processing or exercise your right to data portability.

Send your request to info@eosfoto.nl. To avoid disclosing data to the wrong person, I may request an appropriate check of your identity.

You will normally receive a response within one month. If more time is needed, I will explain why within that month.

You can lodge a complaint with the Autoriteit Persoonsgegevens, the Dutch data protection authority. You do not need to ask my permission first.

Using photographs, text and information

My own photographs are available under CC BY 4.0, unless stated otherwise beside an image. Using photographs explains the conditions and provides attribution examples.

My articles, and illustrations and screenshots by other people, are not automatically covered by that licence. My texts are protected by copyright except where a different rule applies, such as quoted legislation.

Photographs and stories show what I found during a visit. A location may since have changed, been demolished or returned to use. Laws, access rules and technical possibilities may also change.

A report therefore does not grant permission to enter land or a building, nor guarantee that the situation described still exists. Ask the rights holder for permission and observe the applicable rules.

I take care with the content and correct errors when I discover them. The website does not replace advice on your particular legal or technical situation. Visiting EOSfoto does not mean you waive statutory rights. Dutch law applies where applicable.

Changes

If the website or its processing of data changes, I will update this explanation. The date at the top of the page shows when it was last updated.