Privacy Policy

Last updated: September 2026

1. Data Controller

David Mertens
Independent photographer based in Namur, Belgium
Contact: contact form

2. Data Collected

This website does not place any tracking cookie without your prior consent. The only data that may concern you is:

• Via the contact form: the information you enter (first name, last name, your email address, subject, message) is transmitted securely to David Mertens so that he can reply to you, and is neither published nor shared. An anti-spam mechanism temporarily records your IP address to limit the number of submissions.
• Via a phone number displayed on the website: if you click on it, your own phone opens and you call me directly. The website itself neither collects nor stores anything on this occasion.
• Via Google Analytics, only if you accept it in the consent banner: anonymized audience measurement (pages viewed, referral source, device type). See the cookie policy for details.
• Via the website's hosting: my host (Cloudflare) automatically processes certain technical connection data (IP address, browser type) for security and network operation purposes, independently of my own intent.

No sensitive data (banking details, national identification number, etc.) is collected on this website.

3. Purpose of Processing

The messages you send me via the contact form or by phone are used exclusively to respond to your contact or collaboration requests.

Your data is neither sold, nor rented, nor transferred to third parties for commercial purposes.

4. Legal Basis

The processing of your data is based on your voluntary decision to contact me, on your explicit consent for Google Analytics, and on my host's legitimate interest in ensuring the security and operation of the website.

5. Data Retention Period

Exchanges via the contact form are kept for as long as necessary to handle your request, then deleted within 12 months.

The technical connection data processed by the host follows Cloudflare's own retention period, over which I have no direct control. Google Analytics data is kept for 14 months, a duration set by Google.

6. Your Rights (GDPR)

In accordance with the General Data Protection Regulation (GDPR) and the Belgian law of 30 July 2018, you have the following rights:

• Right of access to your personal data.
• Right to rectification in case of inaccuracy.
• Right to erasure ("right to be forgotten").
• Right to restriction of processing.
• Right to data portability.
• Right to object to processing.

To exercise these rights, use the contact form.

You also have the right to lodge a complaint with the Belgian Data Protection Authority (APD): www.autoriteprotectiondonnees.be

7. Security

The website is hosted on Cloudflare, which ensures encryption of connections and a level of security in line with industry standards.

8. Changes

This privacy policy may be updated at any time. The date of the last update is shown at the top of this page.

9. Contact

For any question regarding the protection of your data, use the contact form.