Privacy policy
This English text is for convenience. The Dutch version is legally authoritative. Privacyverklaring
In brief
- We use what you send so we can reply, schedule and finish the recording you booked.
- No newsletter list, no ad network, no trading of contact details.
- Session disks stay for 24 months; then we wipe the working copies.
- Client recordings are not used as training material for AI systems.
- Access or correction: [email protected] or the contact form.
1. Who is responsible
Resourceworks B.V. (private limited company (B.V.)), registered at Columbusplein 26, 1056 TS Amsterdam, the Netherlands, is the controller for personal data that arrives through resourceworks.digital and through the studio. Chamber of Commerce number 91428665, VAT NL888778995B01. Director: Daan van der Berg.
We process data to answer a request (within 2 working days), to book one of our 3 rooms, to run the service you chose — for example Vocal and speech recording or Podcast recording — and to invoice at the Dutch VAT rate of 21%. The studio has operated since 2019 with a standing team of three. We have not named a data protection officer: our size and core work do not trigger that duty.
Reach us at [email protected], 020 - 707 4829, or by post at the address above. Hours: Monday to Friday 10:00–22:00, Saturday 10:00–18:00. Closed on Sunday. See also legal notice and who we are.
2. Who this policy covers
It covers site visitors, people who write or call, and clients who come in for their own session. Dutch law applies, together with the GDPR (Regulation (EU) 2016/679) and the Dutch GDPR Implementation Act. The Dutch page is the authoritative version; this English page is for information.
If a company books singers, guests or a band for other people, that company decides how those recordings are used afterwards. We then act as a processor. The written terms sit in the data processing agreement. For those performers, the client's own privacy notice comes first.
3. Data we receive
Through the contact form: name, email, phone if you add it, the service, a preferred date and your notes. Required fields are there so we can answer. The form is forwarded by FormSubmit, a United States service; see article 7.
On booking and during the job: invoice details, artist or band name, the schedule, email or phone threads, and transfer references. Listed rates, such as €95 per hour for Vocal and speech recording or €850 for a day of Band and session recording, include VAT. Card payments in the room go through the bank's terminal; we do not store card numbers.
Recordings: voice, instrumental performance and spoken notes are personal data when a person can be recognised. We use them only to deliver the job. If your own crew films, that material is yours to handle.
Technical data: TransIP B.V. keeps server logs (IP address, time, page, user-agent) to keep the site safe. Your tracker choice lives in the browser under rsrc_consent_v1 and holds no name or email.
We do not ask for special-category data. If a session has to move for health reasons, saying you cannot come is enough; we do not need a medical note.
4. Purposes, legal bases and how long we keep data
| Purpose | Data | Legal basis (GDPR) | How long |
|---|---|---|---|
| Answering a request and quoting | Form and correspondence | Steps before a contract, at your request (Art. 6(1)(b)) | Three years after the last exchange |
| Booking, running and following up the job | Identity, contacts, project, calendar | Performance of the contract (Art. 6(1)(b)) | Five years after the relationship ends (limitation, Dutch Civil Code Art. 3:307) |
| Working session files | Recordings, session disks, stems | Performance of the contract (Art. 6(1)(b)) | 24 months after the final booking, after which we erase the disks |
| Invoicing and accounts | Name, address, amounts, payments | Legal obligation (Art. 6(1)(c)) | Seven years (Dutch Civil Code Art. 2:10 and General Tax Act Art. 52) |
| A complaint or dispute | Correspondence and file | Legitimate interest in defending our position (Art. 6(1)(f)) | Length of the case and appeal windows |
| Keeping the website safe | Host logs | Legitimate interest and legal duty (Art. 6(1)(f) and (c)) | Twelve months at most |
| Remembering your tracker choice | Key rsrc_consent_v1 in the browser | Legal duty (Dutch Telecommunications Act, Art. 11.7a) | 182 days |
We do not sell or rent addresses. There is no mailing list. A new purpose that does not fit the original one starts only with consent or another valid basis. Where we rely on legitimate interest, we check necessity against your interests; you can ask for a short account of that check and object.
You can cancel at no charge up to 7 days ahead. The deposit is 40% of the agreed fee. Business invoices are due in 14 days. Those rules live in the terms and conditions; they explain why we keep booking and payment records.
5. Voice, image, age and automated systems
Voice and face sit inside the right to private life. We do not put clips, session photos or names on the site or on social channels without your prior written OK. How you publish the work is your call; we do not take an exploitation right in your performance beyond delivering the files.
We do not feed client recordings into language models, voice clones or other automated systems for training, testing or improvement. A voice clone is made only if the person concerned gives specific written permission.
Sessions for anyone under 16 are booked by a parent or guardian. Article 5 of the Dutch GDPR Implementation Act sets sixteen as the age at which someone may consent alone to an information-society service. Our form is for bookings by adults or legal representatives, not a service aimed at children.
For Voice-over and audiovisual we sync and export as commissioned; picture of other people that you bring remains your responsibility. Rights at the mastering stage are sketched in the guide on mastering and rights.
6. Who can see the data
Client files are open to the three team members, limited to their job: engineering, scheduling and accounts. The parties below may also see data, only for the purpose named:
- TransIP B.V. (Vondellaan 47, 2332 AA Leiden, the Netherlands), host of the site, email and storage, with data centres in the European Union — transip.nl;
- FormSubmit (formsubmit.co), which forwards the contact form into our inbox;
- our bookkeeper, bound to confidentiality, for invoice data;
- our bank, for transfers and card payments;
- a lawyer or court, if a dispute requires it;
- public authorities that ask within the law.
Anyone who processes for us does so under a contract that meets Article 28 GDPR. There is no appointed out-of-court body for this studio; the terms and conditions describe how a dispute runs.
7. Transfers outside the EEA
Hosting and our own storage sit in the Union, at TransIP B.V.. FormSubmit is run from the United States. If you use the form on the contact page, the contents pass through that service. We have not established that this provider is certified under the EU–US Data Privacy Framework. The transfer rests on Article 49(1)(b) GDPR: it is needed for the pre-contractual steps you start by sending the project.
To avoid that path, write straight to [email protected] or call 020 - 707 4829. We handle that request the same way, including the 2-day reply window. A map of the studio is an ordinary link to OpenStreetMap; that site has its own policy.
8. Security
We apply measures that fit the work: the site is HTTPS only, folder access is limited to the team with individual accounts, workstation and backup disks are encrypted where the software allows, the building is locked outside sessions, and working files go after the 24-month archive. The live room is 28 m², with 2 booths; physical access is limited to booked sessions and the team.
If a breach risks your rights, we notify the Dutch Data Protection Authority within 72 hours (Art. 33 GDPR) and we tell you if the risk is high (Art. 34). No internet path is perfectly safe; once data reaches us, our measures apply.
9. Your rights
Under the GDPR you can:
- ask what we hold and why we hold it (Art. 15);
- have a wrong or missing field corrected (Art. 16);
- ask us to delete records once they have no remaining purpose (Art. 17);
- ask us to freeze processing in the situations listed in Art. 18;
- receive a copy of what you supplied, in a structured file you can reuse (Art. 20);
- object when we rely on legitimate interest (Art. 21);
- pull back consent; earlier lawful use stays valid (Art. 7(3)).
Write to [email protected] or by post to Columbusplein 26, 1056 TS Amsterdam. We reply within one month, extendable by two months for a complex request; we will say so (Art. 12(3)). Exercising the rights is free. If we reasonably doubt your identity, we may ask for more information.
You may lodge a complaint with the Autoriteit Persoonsgegevens (Dutch Data Protection Authority), PO Box 93374, 2509 AJ The Hague, the Netherlands, autoriteitpersoonsgegevens.nl. Write to us first: most questions close directly. Booking questions also sit on the FAQ and the services overview.
10. Cookies and similar techniques
A cookie is a small file a site places on your device. Local storage, a pixel or a similar technique can serve the same role. resourceworks.digital does not set analytics, advertising or social-media cookies. We only store your tracker choice, under the key rsrc_consent_v1, for 182 days. The banner groups trackers as necessary, functional, analytics, marketing and display settings, with three equally prominent actions. Optional groups currently have nothing in them.
Detail and the control to change your choice sit in the cookie policy.
11. Links to other sites
The site points to third parties, including OpenStreetMap and our host's pages. Those services apply their own notices. We are not responsible for how they work. Our own guides, such as preparing a vocal session, do not load third-party tracking.
12. Changes and effective date
This policy describes our practice; it does not cut back rights you already have under the law. We may revise the text when services or rules change. The new version appears on this page with the effective date 1 October 2026 and replaces the previous one. If the change is material, we email existing clients. Last reviewed: 1 October 2026.
Contact: Resourceworks B.V., Columbusplein 26, 1056 TS Amsterdam — [email protected].