GERONIMO Inloggen

PRIVACY

Last updated: 17 September 2026

Your privacy matters to me. This statement explains which personal data Geronimo collects through this website, why I do that, and what your rights are. It follows the General Data Protection Regulation (GDPR).

1. Who I am

Geronimo is run by Geronimo, based in Nederland. I am the controller for the personal data described here.

2. Which data I collect

  • Contact form: your name, email address, phone number (optional), subject and message.
  • Login: your email address, to send you a secure login link.
  • Technical data: server logs with your IP address and browser type, and a scrambled (hashed) version of your IP address to prevent spam and abuse.

I do not ask for more data than I need, and I never collect special categories of personal data on purpose.

3. Why I use your data

  • To answer your message — based on my legitimate interest and, when you ask about a shoot, on steps you ask me to take before an agreement.
  • To keep financial records — a legal obligation.
  • To keep the website safe (spam protection, preventing abuse) — my legitimate interest.

I never sell your data and I do not use it for advertising.

4. How long I keep your data

  • Contact messages: up to 12 months after our last contact.
  • Invoices and payment records: 7 years, as required by Dutch tax law.
  • Login links: 30 minutes. Spam-protection records: 2 days.
  • Backups of the website database: 14 days.

5. Who else processes your data

I only work with service providers that need your data to make this website work, and I have agreements with them to protect it:

  • TransIP — hosting of this website and its database, in the Netherlands.
  • Stripe — only when online payments are enabled; Stripe then processes your payment details. I never see or store your card details.
  • My email provider — to send and receive the emails about your message.

Where a provider processes data outside the European Economic Area, this only happens with appropriate safeguards such as the EU Standard Contractual Clauses.

6. Cookies and tracking

This website only uses functional cookies that are needed for it to work. There are no analytics, advertising or tracking cookies, and no third-party scripts, fonts or embeds. That is why you don't see a cookie banner.

  • gr_csrf — protects forms against misuse (30 days).
  • gr_flash — shows a one-time message after you submit something (10 minutes).
  • gr_user — keeps you logged in (30 days).
  • gr_admin — only for the website administrator.

7. Your rights

You have the right to access, correct or delete your personal data, to restrict or object to its use, and to receive your data in a portable format. Where I use your data based on consent, you can withdraw that consent at any time.

Send your request to me. I respond within one month. If you are not satisfied with how I handle your data, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

8. Security

The website only works over a secure (HTTPS) connection. Access to your data is limited to me, passwords are stored as secure hashes, and I keep regular backups.

9. Changes to this statement

I may update this statement when the website or the law changes. The date at the top shows the latest version.