Privacy Policy

Last updated: 8 October 2026

How JVN Photography ehf. collects, uses and protects your personal data.

This policy explains what personal data JVN Photography ehf. collects through jvn.photo, through our photo workshops and our shop, why we collect it, who we share it with, how long we keep it and what your rights are. If anything is unclear, email us at info@jvn.photo.

1. Who We Are

The controller of your personal data is JVN Photography ehf., Andrésbrunnur 10, 113 Reykjavík, Iceland, run by photographer Jeroen Van Nieuwenhove. Contact for anything to do with your data: info@jvn.photo.

We’re based in Iceland, which is part of the European Economic Area. Your data is protected by the General Data Protection Regulation (GDPR) as it applies in Iceland through Act no. 90/2018 on Data Protection and the Processing of Personal Data.

2. What We Collect, and Why

When You Sign Up for a Photo Workshop

We collect your name, email address and phone number, the number of places you want, any notes you add, the names and email addresses of anyone travelling with you, and your answers to questions about the trip (for example room and bed preferences, and gender where rooms are shared). We need this to hold your place, send you your booking details and payment links, and organise the trip. Legal basis: to take steps at your request before entering into a contract, and to perform that contract (GDPR Article 6(1)(b)).

Before the Trip

We ask each participant for the details we need to run a safe trip: the full name as it appears on your passport or ID, emergency contacts, dietary requirements and allergies, any medical conditions we should know about, arrival and departure details, and for some trips your nationality. Dietary, allergy and medical information can be health data, a special category under the GDPR. We only collect it with your explicit consent (Article 9(2)(a)), and to protect your vital interests in an emergency (Article 9(2)(c)). It is stored encrypted, and only the people who need it to look after you see it (see section 4).

Waivers

Participants sign a waiver online. We keep the signed document with your name, your signature, the date and time, and the IP address it was signed from, as a record that you signed it. Legal basis: performance of the contract and our legitimate interest in being able to show the waiver was signed (Article 6(1)(b) and (f)).

Paying for a Workshop

Our workshops are sold as travel packages through licensed travel agencies, Iceland Travel or Nonni Travel, depending on the trip. You pay the agency directly through the payment link we send you, and the agency processes your payment under its own privacy policy. We never see or store your card details. We record whether your deposit and balance have been paid.

Buying from Our Shop

When you order prints, books or other products we collect your name, email address, phone number, billing and delivery address, and what you ordered. We need this to process the order, deliver it and keep the accounting records the law requires. Legal basis: performance of the contract (Article 6(1)(b)) and our legal obligations (Article 6(1)(c)). Card and PayPal payments are handled by PayPal or myPOS; we never see or store your card number.

Online Courses

Our online courses, such as the Drone Photography Masterclass, are hosted on Teachable. When you buy or take a course there, Teachable processes your data under its own privacy policy, and we receive your name, email address and what you bought.

Newsletter, Interest Lists and Free Downloads

If you join our newsletter, an interest list for a workshop, or sign up for a free download or webinar, we collect your email address and, if you give them, your name and phone number, along with what you signed up for and when. We use this to send you what you asked for and, if you agreed, our newsletter and workshop announcements. Legal basis: your consent (Article 6(1)(a)). Every email has an unsubscribe link, and unsubscribing takes effect straight away. We keep a record that you unsubscribed, so you aren’t added back by mistake.

Our email services record whether each email is opened and which links are clicked, so we can see which emails people find useful.

We don’t use your email address for advertising, and we don’t share it with advertising platforms.

When You Contact Us

If you email us or use a contact form, we use what you send us to reply. Legal basis: our legitimate interest in answering you, or steps before a contract if you’re asking about a booking.

When You Visit the Website

Our web server and security service record technical data such as your IP address, browser and the pages you request, to deliver the site and protect it from abuse. With your agreement we also use analytics cookies (see section 6).

3. Who We Share Your Data With

We don’t sell your personal data. We share it with these people and services, and each gets only what it needs:

The travel agency for your trip (Iceland Travel or Nonni Travel): your booking details, payment status and the participant details needed for the trip, including dietary and medical information and emergency contacts, and a copy of your signed waiver. The agency is the organiser of the travel package and is responsible for your data under its own privacy policy.
The photographers leading your trip, including co-leaders: the participant details they need to guide the trip and look after you.
Hotels, restaurants and transport on your trip: only what they need, such as names, rooming and dietary requirements.
Service providers who process data on our behalf, under contracts that require them to protect it:
- WPMU DEV (website hosting) and Cloudflare (content delivery and security)
- Google Workspace (our email, and the documents and spreadsheets we use to organise trips)
- Brevo (sending the website’s emails, and our newsletter)
- Mailchimp (our newsletter, until we finish moving to Brevo at the end of 2026)
- Google Analytics (website statistics) and Google reCAPTCHA (protecting forms from spam)
- Payday (invoicing and accounting)
- PayPal and myPOS (shop payments), and DHL (shipping)
- Teachable (online courses)
Authorities, when the law requires it, and our accountant and auditors for the accounting records.

4. How We Protect Your Data

The site runs over an encrypted connection. Health information, dietary information, emergency contacts and nationality are stored encrypted. Access to booking and participant data is limited to the people who need it, and each co-leader only sees the trips they lead. Signed waivers are stored privately, not in a public part of the website. If a breach ever puts your data at risk, we’ll tell you and the Data Protection Authority, as the law requires.

5. How Long We Keep Your Data

Workshop bookings, participant details and waivers: until two years after the end of the trip, so we can deal with any questions or claims about it. After that they’re deleted or anonymised. Medical, dietary and emergency details are only shared for the trip itself.
Payment and accounting records (invoices, shop orders): seven years, as Icelandic bookkeeping law requires.
Newsletter and interest lists: until you unsubscribe or ask us to delete your data. We keep a minimal record of an unsubscribe so we don’t email you again.
Website activity logs: 90 days. Form submissions rejected as spam: 30 days.
Emails you send us: as long as they’re needed for the matter they’re about.

6. Cookies

Cookies are small files your browser stores for a website. We use:

Necessary cookies that make the site and shop work: your shopping cart, your currency, preventing double form submissions, and remembering that you’ve closed a popup or the cookie notice.
Analytics cookies (Google Analytics, _ga and _ga_*): these count visits and show us which pages are useful. Google Analytics doesn’t tell us who you are.
Order attribution cookies (WooCommerce, sbjs_*): these record how you arrived at the shop, such as from a search engine or a newsletter, so we know which channels work.
Our own link cookie (jvnl_ft, 30 days): this records the first page you landed on, so we know which articles lead to purchases through our recommended gear links. It holds no personal details.
Third-party content: embedded YouTube videos and maps may set their own cookies when they load.

You can block or delete cookies in your browser settings. Blocking necessary cookies may stop the shop or forms from working.

7. Affiliate Links

Some links to camera gear on our site are affiliate links, for example to Amazon. If you buy through one, we may earn a small commission at no extra cost to you. We count clicks on these links per day and country only; we don’t store your IP address or identify you. Once you’re on the retailer’s site, its own privacy policy and cookies apply.

8. International Transfers

Some of our service providers are based outside the EEA, mainly in the United States (Google, Cloudflare, Mailchimp, PayPal and Teachable). Where your data goes outside the EEA, it’s protected by the EU-US Data Privacy Framework where the provider is certified under it, or by the European Commission’s standard contractual clauses.

9. Your Rights

You have the right to:

get a copy of the personal data we hold about you
have it corrected if it’s wrong
have it deleted, unless we have to keep it by law
restrict how we use it, or object to our use of it, including for marketing
receive it in a portable format
withdraw your consent at any time, without affecting what we did before you withdrew it

To use any of these rights, email info@jvn.photo. We’ll answer within one month. We may ask you to confirm your identity first.

If you’re unhappy with how we’ve handled your data, please tell us first. You also have the right to complain to the Icelandic Data Protection Authority, Persónuvernd (personuvernd.is), or to the data protection authority where you live.

10. Children

Our website, shop and newsletter are not aimed at children under 16, and we don’t knowingly collect their data online. A participant under 18 can only join a workshop when booked by a parent or guardian, who provides their details.

11. Changes to This Policy

We update this policy when what we do with your data changes. The date at the top shows when it last changed. If a change matters to you, for example a new use of your data, we’ll tell you by email before it takes effect.

Are You Looking for Something Else?

If you can’t find the information you are looking for, please refer to the Contact page where you can submit your questions.