Privacy Policy DR-Booth (www.dr-booth.nl)

DR-Booth — Retersbekerweg 58, 6343 PL Klimmen | Chamber of Commerce (KVK) 84040602 | VAT NL003904947B08 hello@dr-booth.nl | +31 6 1990 5888 | dr-booth.nl

Last updated on 19 August 2026. This translation is provided for information only; in case of discrepancies, the Dutch version prevails.

DR-Booth rents out photo booths. In doing so, we process personal data: from our customers, but also from the guests who step in front of the camera. In this statement we explain what data that is, why we process it, how long we keep it and what rights you have.

We are the controller for this data.

1. Whose data do we process?

We distinguish three groups, because different rules apply to each:

• Customers and enquirers — anyone who requests a quote or rents the photo booth.

• Guests at the event — everyone who has a photo taken during the party. They have no agreement with us, but their data is still processed.

• Visitors to our website.

2. What data do we process?

From customers and enquirers: name, company name, address, postcode and town, phone number, email address, billing address, event details (date, venue, number of guests, wishes), design files supplied such as a logo or invitation, and payment and invoice details.

From guests: the photos, boomerangs and GIFs taken in the photo booth. If a guest wants to receive their photo, also the email address or phone number they provide. We ask for nothing more.

From website visitors: data collected via cookies and similar techniques, including your IP address, your device and browser details and which pages you view. Unlike our previous privacy statement, we do regard this data as personal data: an IP address can indirectly be traced to a person. See also our cookie policy.

3. Why do we process this data, and on what legal basis?

Purpose – Legal basis

Issuing a quote and performing the agreement – Performance of the agreement

Invoicing and bookkeeping – Legal obligation

Taking, printing and delivering photos to the lessee – Performance of the agreement with the lessee

Sending a guest their own photo – That guest's consent

Using photos for promotion – Only with prior consent

Keeping in touch and answering questions – Legitimate interest

Newsletter – Consent

Improving and securing the website – Legitimate interest, and consent where cookies are concerned

4. Photos: how we handle them

This is the most sensitive part of our work, so we spell it out.

• The photos from an event belong to the lessee. We deliver them via an online album and do not use them for anything else without good reason.

• We do not publish a single photo for promotional purposes without the lessee's prior consent. No consent means: no use.

• Even with the lessee's consent, we do not publish photos in which guests are recognisable unless consent has been given for that. The lessee can inform their guests about this; on request we show a consent question in the photo booth so guests can choose for themselves.

• We publish nothing from photos in which children are recognisable without the explicit consent of a parent or guardian who is present.

• Consent can always be withdrawn. Send a message to hello@dr-booth.nl and we will remove the images concerned from our own channels as soon as possible. We cannot retrieve what others have already shared.

5. How long do we keep data?

Data – Retention period

Event photos – 90 days after the event, then deleted from our systems

Photos with consent for promotion – As long as the consent applies; deleted after withdrawal

Invoice and bookkeeping data – 7 years, due to the statutory tax retention obligation

Customer data and correspondence – Up to 2 years after the last contact

Enquiries that do not lead to a booking – Up to 1 year after the enquiry

Newsletter data – Until you unsubscribe

Cookie data – See our cookie policy

So download your photos within 90 days — after that we no longer have them.

6. Who do we share data with?

We do not sell your data. We do use service providers who process data on our behalf. We have data processing agreements with them:

• Wix — our website, the booking system and forms

• Google — online photo albums, email and website statistics

• e-Boekhouden.nl — our bookkeeping and invoicing

• Our accountant and the Dutch Tax Administration (Belastingdienst), where required by law

The photos themselves do not pass through an external photo booth provider. Our photo booth runs on software we built ourselves, installed on our own equipment. Taking, composing and printing the photos happens entirely on the booth itself, without any third-party photo booth service. Images only leave our equipment for the online album and for sending photos to guests.

Some of the parties mentioned above may process data outside the European Economic Area. We only use parties that offer appropriate safeguards.

7. Security

We take appropriate measures: strong and unique passwords, two-factor authentication where possible, restricted access to the photos and periodic checks of our settings. Photos are deleted after 90 days, which limits the risk in the event of an incident.

Because the photo booth runs on our own software, the photos from your party are not sent to an external service provider for processing. That removes a link in the chain — and every link fewer is one risk fewer.

Do you suspect something is wrong with the security of your data? Let us know straight away at hello@dr-booth.nl.

8. Your rights

You have the right to:

• access your data

• have your data corrected

• have your data deleted

• have the processing restricted

• object to the processing

• have your data transferred

• withdraw consent you have given, at any time

This also applies to guests: if you appear in a photo and want it removed, we will take care of it. You don't need to be a customer of ours to exercise your rights.

Send your request to hello@dr-booth.nl. We respond within one month. To avoid giving data to the wrong person, we may ask for additional information showing that the data is yours.

9. Making a complaint

If you don't agree with how we handle your data, please let us know first — and we'll sort it out. If we can't resolve it together, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl) or with the data protection authority in your country of residence.

10. Changes

We update this privacy statement when our way of working or the rules change. The date at the top shows when this last happened.