Privacy Policy


Website paulinewery.com – Version of 7 October 2026

1. Who is responsible for your data?

Drasch Incorporated SRL, Rue Kelle 158, 1150 Brussels, Belgium, company number BCE 0790.462.007, trading as Pauline Wéry – Photography Services (the "Provider"), is the controller of the personal data described below, in accordance with Regulation (EU) 2016/679 (GDPR) and the Belgian Act of 30 July 2018.

Contact: paulinewery@hotmail.com – +32 494 56 30 60.

This policy applies to website visitors, people who contact us, and newsletter subscribers. If you are a client of a private photo session, the privacy policy attached to your quotation also applies to everything related to your session.


2. What data do we collect, and why?

Newsletter

  • Data: your email address (and the date you signed up).
  • Purpose: to send you news and offers from the Provider.
  • Legal basis: your consent (Art. 6.1.a GDPR), given when you sign up through the form.
  • Retention: until you unsubscribe or withdraw your consent, and no later than 3 years after your last contact with us. We keep proof of your sign-up (date and address) for as long as needed to demonstrate your consent.

Contact and booking forms

  • Data: names of participants, email address, preferred location, content of your message.
  • Purpose: to answer your enquiry, prepare a quotation and organise a possible service.
  • Legal basis: steps taken at your request before entering into a contract, then performance of the contract (Art. 6.1.b GDPR).
  • Retention: 12 months after the last exchange if no service is concluded. If a contract is concluded, the privacy policy for photo sessions or weddings applies.

Browsing data and cookies

  • The website is hosted by Pixieset, which may use technical cookies necessary for its operation and, where applicable, audience measurement tools.
  • Cookies that are not strictly necessary are only used with your consent.

Complaints and defence of legal claims

  • Purpose: to handle a complaint or defend our rights in court.
  • Legal basis: legitimate interest (Art. 6.1.f GDPR).
  • Retention: for the duration of the dispute.

We do not collect any sensitive data through the website and we do not ask you for any.


3. Newsletter: how it works

  • Signing up is voluntary: you enter your email address yourself and click "Subscribe". No box is pre-ticked.
  • Signing up is not a condition of any service and has no effect on the price of a service.
  • Every email contains an unsubscribe link that works in one click. You can also write to us at paulinewery@hotmail.com.
  • Unsubscribing does not affect the lawfulness of emails sent before.
  • We never add your address to the newsletter without your consent.

4. Who do we share your data with?

  • Technical service providers: the platform that hosts the website and sends the newsletters (Pixieset), and our email provider. They process data on our behalf, under their contractual data protection commitments.
  • Competent authorities, where legally required.

We do not sell your personal data.

Some providers may process data outside the European Economic Area. In that case, we ensure that appropriate safeguards are in place (standard contractual clauses of the European Commission or equivalent).


5. Your rights

You have the right of access, rectification, erasure, restriction of processing, portability and objection (for processing based on legitimate interest). You may also withdraw your consent at any time, without affecting the lawfulness of processing carried out before.

To exercise these rights, write to paulinewery@hotmail.com. We will reply within one month, which may be extended in the cases provided for by the GDPR.

If you believe your rights have not been respected, you may lodge a complaint with the Belgian Data Protection Authority (APD/GBA), Rue de la Presse 35, 1000 Brussels – +32 2 274 48 00 – contact@apd-gba.be – www.autoriteprotectiondonnees.be.


6. Minors

The website and newsletter are not aimed at children under 13. If you believe a child has signed up, write to us and we will delete their data.


7. Security

We implement appropriate technical and organisational measures to protect your data (protected access, reputable tools). In the event of a data breach, the persons concerned and the APD are informed in accordance with legal obligations.


8. Updates

This policy may be amended. The version in force is the one published on this page, with its date at the top.