Privacy notice
This English version is for information only. The Dutch version is legally authoritative. Privacyverklaring
In brief
- We keep contact and project details so we can answer and deliver the booked work.
- No mailing list, no ad network, no trade in personal data.
- Session projects leave our disks 12 months after the last studio day, unless tax law keeps the invoice longer.
- Client audio is not fed into tools that clone a voice or train a model.
- Write to [email protected] or call 020 244 1893 (Mon–Fri 10–19, Sat 11–17) for a privacy request.
1. Controller and contact
Sipopojexadvisory B.V. decides why and how personal data are used. The company is a private limited company (B.V.) at Ruyschstraat 14, 1091 BR Amsterdam (Amsterdam-Oost). Chamber of Commerce 98812623. VAT NL876127285B01. Capital €100. Managing director: Maarten van Dijk.
This notice covers sipopojexadvisory.click, the booking form, email, telephone and time spent in the rooms. Regulation (EU) 2016/679 and the law of the Netherlands apply. Where the two language versions differ, the Dutch page governs; English is here so you can read the same facts without guessing.
A data-protection officer is not required for a studio of this size. Privacy mail goes to [email protected]; you can also use 020 244 1893. Hours: Monday–Friday 10:00–19:00, Saturday 11:00–17:00, Sunday closed. Getting here: From Wibautstraat metro station (M51, M53, M54) it is about an 8-minute walk via Wibautstraat and Linnaeusstraat. Trams 3 and 7 stop at Ruyschstraat, roughly 2 minutes on foot. The entrance is at street level next to the bicycle racks.
2. People this notice speaks to
It speaks to people who open the site, people who ask for a price, and people who book Vocal recording, Mixing, Mastering, Podcast recording or Rehearsal room.
If a label, publisher or production house books time so that other singers, guests or players are recorded, that company decides later use of those takes. In that setup we act as processor. The standard clauses sit in the data processing agreement. Those guests should read the booker’s own notice; practical questions about the room still go to contact. File delivery and exploitation after a take are also sketched in session files and rights.
3. What arrives in our files
The web form. Given name, family name, mailbox, optional phone, the service you pick, an optional date and a short brief. Name and mailbox are mandatory because otherwise we cannot send a quote. FormSubmit, a United States relay, pushes that payload to [email protected]. The transfer is explained in article 7.
Once a date is held. Invoice lines, artist or band name, the diary, the email or phone thread, and the reference on a bank transfer. Published rates — €98 an hour for Vocal recording, €255 for one podcast episode — already include 21 % VAT. The invoice itself carries the client’s name, address and VAT number.
Sound. A recognisable voice or performance is personal data. We use it to finish the job you booked. If your crew brings cameras into the live room or a booth, that picture stream stays your file, not ours.
Server traces. TransIP B.V. (Vondellaan 47, 2332 AA Leiden, Nederland) stores connection logs (IP, clock, path, browser) to keep the site stable. The banner choice lives in local storage as sppj_consent_v1 and holds no name or mailbox.
We do not invite special-category fields. If you must move a date because you are unwell, a short “I cannot come” is enough; we do not ask for a doctor’s note.
4. Why we process, on what ground, and for how long
| Aim | What we hold | GDPR ground | How long |
|---|---|---|---|
| Answer an enquiry and draft a quote | Form plus the message thread | Steps you asked us to take before a contract (article 6(1)(b)) | Three years after the last message |
| Hold the booking, run the session, do the aftercare | Who you are, how to reach you, the project, the diary | Performing the contract (article 6(1)(b)) | Five years after the relationship ends (limitation of money claims, article 3:307 of the Dutch Civil Code) |
| Keep the working project and the exports | Takes, stems, mix and master files | Performing the contract (article 6(1)(b)) | 12 months after the last studio day, then wipe, unless you ask in writing to keep a copy longer |
| Raise invoices and keep the books | Identity, invoice, payment, VAT | A duty in statute (article 6(1)(c)) | Seven years (article 52 of the General Tax Act and article 2:10 of the Dutch Civil Code) |
| Handle a complaint or a dispute | Letters and the case file | Our interest in defending a claim (article 6(1)(f)) | For as long as the case and any appeal can run |
| Keep the public site safe | Host connection logs | Our interest in security, and a legal duty where logging is required (article 6(1)(f) and (c)) | As brief as the host needs; in practice not beyond twelve months |
| Remember the banner decision | Key sppj_consent_v1 on the device | Cookie-consent duty in article 11.7a of the Telecommunications Act | 182 days |
We do not sell lists and we do not rent them. We do not send promotional mail. The 30 % deposit and the 5-day free-cancel window in the terms only create payment and diary data, not a marketing profile.
Where the ground is our interest, we ask whether the aim is real, whether this use is needed, and whether your interests weigh more. You may request a short note of that balance and you may object.
5. Voice, portrait, age and automated tools
A voice and a captured face sit under the GDPR and under Dutch portrait rights in the Copyright Act. We do not put a clip, a studio still or your name on sipopojexadvisory.click or on a social channel unless you have first agreed in writing.
Client audio is not used to teach, trial or tune an artificial-intelligence system. We do not build a cloned or synthetic voice unless the person whose voice it is has given a specific written order.
Anyone younger than 16 is booked by a parent or guardian, who supplies the details. That floor matches article 5 of the Dutch GDPR Implementation Act for consent to information-society services. The form is for adults or that representative; it is not a product aimed at children. The live room (28 m²) also caps a band at 5 players — a working limit, not a new data field. The rooms have been in use since 2019: 3 spaces, of which 2 are vocal booths.
6. Who sees the file
Three people on staff can open client data, each for their own job: Maarten van Dijk (managing director and lead engineer), Sophie Bakker (mix and podcast engineer) and Jeroen Visser (studio coordinator and mastering). Others see data only when the task requires it:
- TransIP B.V., Vondellaan 47, 2332 AA Leiden, Nederland, host of sipopojexadvisory.click, site transip.nl, machines in the Netherlands;
- FormSubmit (formsubmit.co), which relays the form into our mailbox;
- the bookkeeper, under a secrecy duty, for invoice lines;
- the bank, for transfers;
- a lawyer or court if a dispute is live;
- authorities that ask within the law.
Anyone who processes personal data for us does so under a contract that meets GDPR article 28. The people and the rooms are introduced on about; the catalogue is on services.
7. Sending data outside the European Economic Area
TransIP B.V. in Leiden holds the site and the mailbox in the Union. FormSubmit is run from the United States. Submitting the form therefore moves that message through a US service. We have not seen a certification of that provider under the EU–US Data Privacy Framework. We rely on the GDPR derogation for steps you started by sending a project (article 49(1)(b)).
To skip that hop, write straight to [email protected] or call 020 244 1893. The request is handled the same way. Stems and mixes preferably travel on a channel you pick, or sit on our own disk at the Dutch host.
8. How we protect the rooms and the disks
Measures match a three-person studio: HTTPS only on sipopojexadvisory.click, one account per person, long passwords, a second factor where the tool offers it, encrypted workstation disks, the door locked after hours, and a wipe of working projects after 12 months. 3 rooms — live room 28 m², 2 booths — are open to staff and the booked party only. 24 microphones and 8 headphone sets are inventory, not personal data, but they are a reason to keep the door shut.
If an incident risks your rights, we tell the Autoriteit Persoonsgegevens within 72 hours (GDPR article 33) and we tell you as well when the risk is high (article 34). A path across the public internet is never risk-free; after arrival, the measures above apply.
9. Rights you can use
At minimum you may:
- ask what we hold and why we hold it (GDPR article 15);
- have mistakes or gaps corrected (article 16);
- ask for deletion when the file is no longer needed (article 17);
- ask us to freeze processing in the cases listed in article 18;
- receive a copy of what you supplied, in a common machine-readable shape (article 20);
- object where we lean on our own interest (article 21);
- pull back a consent without undoing earlier lawful use (article 7(3)).
Send the request to [email protected] or by post to Ruyschstraat 14, 1091 BR Amsterdam. The first answer leaves within a month. A hard case may add two months; we say so if that happens (article 12(3)). There is no fee. If we are not sure it is you, we may ask for a further check.
You may also complain to the Autoriteit Persoonsgegevens, the supervisor in the Netherlands, via autoriteitpersoonsgegevens.nl (PO Box 93374, 2509 AJ The Hague). A first mail to us usually closes the point faster. Day-to-day session questions, not a formal rights request, get an answer within 2 working days. See the FAQ as well.
10. Browsers, cookies and similar storage
A cookie is a tiny file a site can write on a device; local storage works on the same idea. sipopojexadvisory.click writes no audience, advertising or social cookies. The only entry is your banner decision under sppj_consent_v1, kept 182 days. The cookie policy lists the five groups and the control .
11. Outbound links
A map pin for Ruyschstraat 14 goes to OpenStreetMap. That operator runs its own rules; we do not set them. Session prep lives in the guides, including vocal warm-up before recording and podcast mic and room setup. Those articles do not add a second form.
12. Version and updates
This page describes what we actually do. It does not cut down rights the statute already gives you. If the work or the law changes, we publish a new text here with a new date and the old one drops. A large change is also mailed to current clients. Starts: 1 October 2026. Last check: 1 October 2026.
Sipopojexadvisory B.V., Ruyschstraat 14, 1091 BR Amsterdam — [email protected]. Company identifiers sit on the legal notice; building access notes sit on the accessibility statement.