Privacy policy
This English text is for information. The Dutch version is legally authoritative. Privacyverklaring
In brief
- We use data for quotes, sessions and invoicing — no ad profiles or resale.
- Raw session files are kept up to 24 months, then deleted unless you extend in writing.
- The contact form may route via FormSubmit (US); you can also email or call.
- Requests and complaints: [email protected] — supervisor: Dutch Data Protection Authority.
1. Controller
The controller for personal data on nelkenshift.click and at our studio, Govert Flinckstraat 142, 1073 CG Amsterdam (De Pijp), is:
Nelkenshift B.V. (private limited company (B.V.)), KvK 69985906, VAT NL806374020B01. Managing director: Sven de Vries. Reach us at [email protected] or 020 244 8917.
We process data under the GDPR and the Dutch GDPR Implementation Act. We have not appointed a DPO, which is not required at our scale. Company details: legal notice.
2. Who this covers
This policy applies to website visitors, quote requests and clients who record or order mix/master work at Nelkenshift: vocal and speech recording, band recording, mixing, mastering and podcast and interview recording.
When a business client brings guests, hosts or musicians, that client is usually the controller for their data. We then act as processor under our data processing agreement; those individuals should rely on the client’s policy first.
3. Data we process
Contact and quotes: name, email, phone (optional), service choice, preferred date (optional) and project text via contact or email. Without basics we cannot quote (see services from €95 per hour incl. 21% VAT).
Delivery: billing details, artist or band name, scheduling, correspondence, payment references. Card payments in the studio use our bank terminal; we do not store card numbers.
Audio: voice and performance are personal data when you are identifiable. We use them only to perform the contract. If you film the session yourself, you remain responsible for others’ image rights.
Technical: TransIP B.V. keeps server logs (IP, time, URL, user agent) for security. Your cookie choice is stored locally; see cookie policy.
We do not ask for health data. To reschedule, say you are unavailable — no medical documents needed.
4. Purposes, legal bases and retention
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Answering enquiries | Form, email | Pre-contract steps / legitimate interest (Art. 6(1)(b) and (f) GDPR) | 3 years after last contact |
| Booking and performance | Contact, schedule, project | Contract (Art. 6(1)(b)) | 5 years after the relationship ends |
| Session archive | Raw takes, project folders | Contract | 24 months after delivery unless the quote says otherwise |
| Accounting | Invoice, payment | Legal obligation (Art. 6(1)(c)) | 7 years (tax law) |
| Disputes | File, email | Legitimate interest (Art. 6(1)(f)) | Until closed plus appeal periods |
| Site security | Host logs | Interest / legal duty | Up to 12 months |
| Cookie choice | nlkn_consent_v1 | Dutch Telecommunications Act | 182 days |
No sale or rental of data. No newsletters. New uses are compatible with the original purpose or we ask for separate consent.
5. Voice, publicity, age and AI
We do not publish session clips on nelkenshift.click, studio selfies with recognisable faces, or your artist name in marketing without written approval.
Recordings are not used to train machine-learning models or build voice clones without explicit written consent from the data subject. See terms and conditions and disclaimer.
Bookings for people under 16 require a parent or guardian. The form targets adults who can contract on their own.
6. Recipients
Internally, only staff who need access for scheduling, recording or admin (see about us).
- TransIP B.V., Vondellaan 47, 2332 AA Leiden, the Netherlands — hosting, email and backups, usually in the EEA;
- FormSubmit (United States) — forwards the contact form to [email protected];
- accountant — invoicing data, bound by professional secrecy;
- bank — payments;
- public authorities — when the law requires it.
Processors sign Article 28 GDPR terms. Clients receive only files tied to their job.
7. Transfers outside the EEA
Core data and studio archives sit with TransIP B.V. in the Netherlands. FormSubmit processes form content in the United States; that transfer is needed to handle your request (Art. 49(1)(b) GDPR — steps at your request before a contract).
To avoid FormSubmit, email [email protected] or call 020 244 8917; we aim to reply within 2 business days.
8. Security
Measures include HTTPS-only, individual accounts with strong passwords, encrypted disks where feasible, premises locked outside Mon–Fri 10–22, Sat 11–18, and archive deletion after 24 months. Sessions in the live room (about 42 m²) are not publicly streamed.
If a breach likely affects your rights, we notify the Dutch DPA and you when the GDPR requires it. No online transfer is risk-free; after receipt we protect data within reasonable limits.
9. Your rights
You may request access, rectification, erasure, restriction, portability and object to processing based on legitimate interest, and withdraw consent where it applies.
Send requests to [email protected] or by post: Govert Flinckstraat 142, 1073 CG Amsterdam. We respond within one month; complex cases may be extended by two months with explanation. Usually free of charge.
Complaints to the Autoriteit Persoonsgegevens: autoriteitpersoonsgegevens.nl. Try FAQ or direct contact first — many issues resolve quickly.
10. Cookies and similar storage
No analytics or ad trackers. Only your banner choice under key nlkn_consent_v1 for 182 days in localStorage. Details: cookie policy and .
11. Third-party sites
Links to maps (OpenStreetMap) or app stores have their own policies. See sitemap for our pages.
12. Changes
This policy is informational and does not limit statutory rights. When services or rules change, we publish an updated version here with effective date 15 October 2026. Material changes are emailed to active clients where reasonable.
Contact: Nelkenshift B.V., Govert Flinckstraat 142, 1073 CG Amsterdam — [email protected].