Privacy policy
This English version is provided for convenience. The Dutch version is legally authoritative. Privacyverklaring
In brief
- We mainly process what you send us: forms, email, phone and booking details for quotes and sessions.
- Session files are kept for 12 months by default; no ad trackers on neustonorix.digital.
- Recordings are not used to train AI; we only publish material with your written consent.
- Privacy questions: [email protected] — we usually reply within 2 business days.
1. Controller
Neustonorix B.V. (“Neustonorix”), a private limited company (B.V.) at Overtoom 282, 1054 GZ Amsterdam, is the controller of personal data processed through neustonorix.digital and in direct contact with you.
Trade register 62244243, VAT NL840566347B01. Managing director: Femke van der Meulen. Contact: [email protected], 020 248 3164.
We have not appointed a data protection officer; for our size we consider that unnecessary. Privacy requests are handled at the same address.
2. Scope
This policy covers website visitors, quote requests and clients using services such as vocal recording, band recording, mixing, mastering, podcast and audiobook and music production.
If you bring guests, hosts or musicians whose data we process technically, you are usually the controller and we act as processor under our data processing agreement. See contact and FAQ for practical questions.
3. Data we process
Contact form: name, email, phone (optional), service, preferred date (optional) and message. We need an email address to send a quote or confirmation.
Contract and delivery: billing details, artist or project name, correspondence, payment references. Bookings require a 25% deposit as set out in our terms and conditions.
Audio and project files: recordings and stems may identify you; we use them only to deliver the agreed service, including up to 2 revision rounds where applicable.
Technical data: server logs at TransIP B.V. (IP address, time, URL, browser) for security; cookie choice stored locally — see cookie policy.
We do not deliberately collect special-category data. To reschedule within 5 days before the session you do not need to share medical information.
4. Purposes, legal bases and retention
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Contact and quotes | Form, email, phone | Steps prior to contract at your request (GDPR Art. 6(1)(b)) | Up to 3 years after last contact without an order |
| Service delivery | Planning, project, contact | Contract (Art. 6(1)(b)) | 5 years after the relationship ends |
| Session archive | Audio, project data | Contract (Art. 6(1)(b)) | 12 months after last session or delivery unless you request extension |
| Tax records | Invoices, payments | Legal obligation (Art. 6(1)(c)) | 7 years |
| Website security | Logs at TransIP B.V. | Legitimate interest (Art. 6(1)(f)) | Up to 12 months unless the host keeps them shorter |
| Cookie choice | Key nstn_consent_v1 | Consent or technical storage of preference | 182 days |
We do not sell data or send unsolicited marketing email. New purposes that differ are discussed with you or rely on separate consent.
5. Voice, publicity, age and AI
We do not use session excerpts, on-site photos or your name in marketing on neustonorix.digital without prior written consent.
Client audio is not used to train, test or improve machine-learning systems. We do not create synthetic voices or voice clones without explicit written consent from the person concerned.
Online booking is intended for people aged 16 and over. Under that age, sessions take place with a parent or guardian responsible.
6. Recipients and processors
Only staff who work on your project have access inside Neustonorix: recording, mix, mastering and scheduling.
- TransIP B.V. — hosting for neustonorix.digital and email (Vondellaan 47, 2332 AA Leiden, the Netherlands), generally within the EU/EEA;
- FormSubmit — forwards the contact form to [email protected];
- bank — payments;
- accountant — invoicing under professional duty of confidentiality;
- public authorities — when required by law.
Processors sign agreements meeting Article 28 GDPR. See the data processing agreement if you are controller for guests or talent.
7. Transfers outside the EEA
Website hosting and email through TransIP B.V. take place within the EU/EEA.
The contact form uses FormSubmit (United States). Form content may therefore be processed briefly outside the EEA. We rely on GDPR Article 49(1)(b): necessary for the contact step you initiate.
To avoid FormSubmit, email or call us directly at [email protected] or 020 248 3164; we handle the request the same way.
8. Security
We apply appropriate measures: HTTPS, limited account access, strong passwords, encrypted storage where supported, and physical studio access by appointment during Mon–Fri 09:00–21:00 · Sat 10:00–18:00 at Overtoom 282.
If a breach is likely to pose a risk to you, we notify the Dutch Data Protection Authority within 72 hours and inform you when the risk is high. No online transfer is risk-free; once we receive data we protect it under our procedures.
9. Your rights
You may request access, rectification, erasure, restriction, objection, portability and withdrawal of consent within legal limits.
Send requests to [email protected] or by post to Overtoom 282, 1054 GZ Amsterdam. We respond within one month; complex cases may be extended by two months with an explanation. We may verify identity.
Complaints can be filed with the Autoriteit Persoonsgegevens via autoriteitpersoonsgegevens.nl. Contact us first — most issues are resolved quickly.
10. Cookies and similar storage
We do not use analytics or marketing cookies. Only your choice is stored locally under nstn_consent_v1 for 182 days. Details: cookie policy and .
11. External links
Our site links to map services such as OpenStreetMap. Those providers apply their own privacy rules; we are not responsible for their processing.
12. Changes and contact
This policy is informational and does not limit your statutory rights. When services or law change, we publish an updated version on this page with date 15 October 2026; last review 15 October 2026.
Questions: contact, [email protected], 020 248 3164. Company details: legal notice.