Privacy Policy

1. Who we are

Authentic Social Studio (Van der Madeweg 11, 1114 AM Duivendrecht, the Netherlands — KVK 95812520, VAT NL867315465B01) is the data controller for personal data processed through this website. You can reach us at authenticsocialstudio@gmail.com.

2. What we collect

We collect personal data only when you submit one of the forms on this site:

• Studio rental booking: name, email, phone number, preferred date/time, room and extras selected, and any notes you add.
• Production booking inquiry: name, company name, email, phone number, preferred date, location, budget range, and project description.
• Contact form: name, email, and your message.

We do not use analytics or advertising cookies on this site at this time. If that changes, this policy will be updated first.

3. How we use it

We use this data solely to respond to your booking or inquiry, generate and send invoices (which are kept for statutory Dutch bookkeeping requirements — see Retention below), and communicate with you about your request. We do not sell or rent your data to third parties, and we do not use it for marketing without your separate consent.

4. Legal basis

We process booking and invoicing data on the basis of performing a contract (or taking steps at your request prior to entering one) under Article 6(1)(b) GDPR. General contact-form messages are processed under our legitimate interest in responding to inquiries (Article 6(1)(f) GDPR).

5. Who we share it with

Submitted data is sent, over email, to our own inbox. We rely on:

• Google (Gmail): to send and receive the emails generated by these forms.
• Google Maps:the embedded map on our Contact page is served directly by Google and is subject to Google's own privacy policy.

We do not otherwise share your data with third parties.

6. How long we keep it

Invoices and related financial records are kept for 7 years in line with Dutch tax law (Belastingdienst bookkeeping obligations). Booking, inquiry, and contact messages that don't result in an invoice are kept only as long as needed to handle your request, and are deleted or anonymized after that unless we're required to keep them longer by law.

7. Your rights

Under the GDPR, you have the right to:

• Request access to the personal data we hold about you
• Request correction of inaccurate data
• Request erasure of your data, where applicable
• Object to or request restriction of processing
• Request a portable copy of your data
• Lodge a complaint with the Dutch data protection authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl

To exercise any of these rights, contact us at authenticsocialstudio@gmail.com.

8. Security

We take reasonable technical and organizational measures to protect the data you share with us against unauthorized access, loss, or misuse.

9. Changes to this policy

We may update this policy as the site or our data practices change. The date at the top of this page reflects the most recent update.