Privacy Policy
Last updated: December 19, 2025
1. Introduction
MakeMeFamous.nl ("we", "us", "our") values your privacy and is responsible for the processing of your personal data. This privacy statement explains how we collect, use and protect your data.
We process personal data in accordance with the General Data Protection Regulation (GDPR). This policy explains what data we collect, how we use it and your rights regarding your data.
2. Contact Details
MakeMeFamous.nl - Owners: Julian Roddeman & Teun Thyssen
Correspondence address: Kaaplandstraat 57a, 6531PM, Nijmegen, NL
E-mail: info@makemefamous.nl
Website: www.makemefamous.nl
KVK: 77277430 | BTW: NL003173631B14
For questions about data protection, you can contact us at: info@makemefamous.nl
3. What data do we collect
3.1 Personal data you provide
- Contact details: Name, email address, phone number
- Address details: Shipping and billing address for delivery of physical products
- Payment details: Processed via our secure payment provider Stripe (GDPR-compliant)
- Uploaded photos: Images you upload for generating AI portraits and product customization (posters, mugs, puzzles, etc.)
- Order details: Order history, product preferences, shipping status
3.2 Automatically collected data
- IP address: For security and fraud prevention
- Browser information: Type, version and language settings
- Usage data: Page visits, click behavior and interactions
- Cookies: See our Cookie Policy for more information
4. Purposes and legal basis
4.1 Legal basis
We process your personal data for the following purposes:
- Contract fulfillment: For processing orders and delivering products
- Legal obligation: For tax administration and compliance with laws and regulations
- Legitimate interest: For service improvement and fraud prevention
- Consent: For marketing communication and cookies (can always be withdrawn)
4.2 Specific purposes
- Processing orders and AI-generated portraits
- Shipping and delivery of physical products
- Customer support and communication
- Payment processing via Stripe
- Improvement of our AI models and services
- Marketing communication (only with your consent)
- Compliance with laws and regulations
5. Retention periods
- Order data: 7 years (legal obligation)
- Uploaded photos: Automatically deleted after 2 weeks
- Generated portraits: 2 weeks (or longer with account)
- Account data: Until deletion of your account
- IP addresses: Maximum 30 days
- Marketing data: Until withdrawal of consent
6. Sharing data with third parties
6.1 Processors
We only share your data with:
- Stripe: For secure payment processing (GDPR-compliant)
- Replicate.com: For AI processing of images (GDPR-compliant)
- Vercel: For hosting and infrastructure (GDPR-compliant)
- Resend: For email communication (GDPR-compliant)
- PrintAPI: For production and shipping of physical posters (GDPR-compliant)
- PostNL: For delivery of physical products (shipping details only)
- Supabase: For storage of account information and user authentication (GDPR-compliant)
6.2 Processor agreements
We have concluded GDPR-compliant processor agreements with all processors in which the protection of your data is guaranteed.
6.3 No sale of data
We never sell your personal data to third parties for marketing purposes. Your data is only used for the purposes for which you provided it.
7. Cookies
We use cookies forour Cookie Policy.
8. Your rights
Under the GDPR you have the following rights:
Right of access
You have the right to access your personal data that we process.
Right to rectification
You can request us to correct incorrect or incomplete data.
Right to erasure (right to be forgotten)
You can request deletion of your personal data, unless we have a legal obligation to retain it.
Right to data portability
You have the right to receive your data in a structured, commonly used format and transfer it to another service provider.
Right to restriction of processing
You can request restriction of the processing of your data under certain circumstances.
Right to object
You have the right to object to the processing of your personal data based on legitimate interest.
Exercising your rights:
To exercise your rights, you can contact us at info@makemefamous.nl. We will respond to your request within 30 days.
9. Security
We take the security of your data seriously and have implemented appropriate technical and organizational measures:
- SSL/TLS encryption for all data transfer
- Secure servers with regular security updates
- Limited access to personal data based on 'need-to-know'
Specific security measures:
- Encrypted storage of sensitive data
- Regular backups and disaster recovery procedures
- Firewall and intrusion detection systems
- Two-factor authentication for admin access
- Regular security audits and penetration tests
10. Children
Our services are not intended for children under 16 years of age. We do not knowingly collect data from children under this age. If we discover that we have collected such data, we will delete it immediately. If you suspect that we have inadvertently collected data from a child, please contact us.
11. Changes to this policy
We may update this privacy policy from time to time to reflect changes in our practices or for legal reasons. The most recent version is always available on our website. We will communicate important changes to you via email or via a notification on our website.
Last change: December 19, 2025
12. Complaints
If you have a complaint about how we process your personal data, please first contact us at info@makemefamous.nl. We strive to resolve your complaint within 30 days.
You also have the right to file a complaint with the supervisory authority:
Autoriteit Persoonsgegevens
Postbus 93374
2509 AJ Den Haag
Website: www.autoriteitpersoonsgegevens.nl
13. Contact
For questions about this privacy policy or your data:
MakeMeFamous.nl - Owners: Julian Roddeman & Teun Thyssen
Correspondence address: Kaaplandstraat 57a, 6531PM, Nijmegen, NL
E-mail: info@makemefamous.nl
Website: www.makemefamous.nl
KVK: 77277430 | BTW: NL003173631B14