Privacy policy
This English text is for convenience only. The Dutch version is legally authoritative. Privacyverklaring
In short
- We mainly process what you send us: enquiries, bookings, sessions and invoicing.
- No ad trackers, no sale of data; recordings are not used to train AI.
- Session files are kept for 24 months, then deleted.
- Questions or requests: [email protected] — cookies: cookie policy.
1. Who we are
Soredialhub B.V. ("we", "us") is controller for personal data on soredialhub.click and in our rooms at Haarlemmerweg 71, Amsterdam. private limited company (B.V.), KvK 84637019, VAT NL812539473B01. Managing director: Daan van der Berg.
Data supports replies to you (target 2 business days), delivery of vocal recording, band recording, mixing, mastering and podcast recording, plus invoicing. We apply Regulation (EU) 2016/679 and Dutch implementing legislation.
No data protection officer is appointed for this scale. Reach us at [email protected] or 020 244 8193; registration data on legal notice.
2. Scope
This policy covers website visitors, people who email or call us, and clients for whom we perform work. Rates and VAT are on services; practical questions on FAQ.
When we record guests, presenters or musicians on behalf of a business client, that client is the controller for their data. We act as processor under our data processing agreement; the client’s policy applies primarily to those individuals.
3. Data we process
Contact form: name, email, phone (optional), service selected, preferred date (optional) and your message. Required fields are needed to handle your request.
Quotes, bookings and delivery: billing details, artist or band name, project description, email or phone correspondence, payment references. A 40% deposit may apply under our terms and conditions. Card payments in the studio go through our bank terminal; we do not store card numbers.
Recordings: voice and performance are personal data when you are identifiable. We use them only for the agreed deliverables. Video or photos during a session are your responsibility unless we agree otherwise in writing.
Technical: host TransIP B.V. keeps server logs (IP address, time, page, browser) for security. Your cookie choice is stored locally; see cookie policy.
We do not collect special-category data. To move a session for personal reasons, tell us you cannot make the slot; we will not ask for medical documents.
4. Purposes, legal bases and retention
| Purpose | Data | Legal basis (GDPR) | Retention |
|---|---|---|---|
| Reply and quote | Form, correspondence | Steps at your request before contract (Art. 6(1)(b)) | Up to 3 years after last contact |
| Studio contract | Identity, contact, schedule, project | Contract (Art. 6(1)(b)) | 24 months after last session for working files; then deletion |
| Invoicing and accounts | Identity, billing, payments | Legal obligation (Art. 6(1)(c)) | 7 years (tax retention) |
| Complaint or dispute | Correspondence, file | Legitimate interest in defence (Art. 6(1)(f)) | Duration of proceedings plus limitation |
| Website security | Server logs at host | Legitimate interest and legal duty (Art. 6(1)(f) and (c)) | Up to 12 months unless host is shorter |
| Cookie preference | Key srdl_consent_v1 in localStorage | Consent / telecom rules (Art. 6(1)(a)) | 182 days |
Your details are not traded to brokers or list vendors. We run no mailing-list campaigns. Any future use outside this table needs a compatible purpose or fresh consent.
For legitimate-interest processing you may object under Art. 21; we document the balancing test on request.
5. Voice, publicity, AI and age
Audio snippets, session stills and client names stay off soredialhub.click and our social channels unless you approve in writing beforehand.
Multitracks and masters are never fed into model training pipelines; synthetic voice doubles are out of scope without a separate signed release from the performer.
Sessions for anyone below 16 need a parent or guardian to book. The contact form targets adult project owners, not minors browsing alone.
6. Recipients
Only colleagues who need data for their task can access it. Recipients may include:
- TransIP B.V. (Vondellaan 47, 2332 AA Leiden, Nederland) for website hosting, mail and EEA storage;
- FormSubmit (formsubmit.co, United States) to relay contact-form messages to us;
- our bookkeeper, under confidentiality duties, for invoices;
- our bank for incoming transfers and in-studio card terminals;
- public bodies when disclosure is mandatory.
Each vendor that processes on our behalf has contract terms aligned with Article 28 GDPR.
7. Transfers outside the EEA
Session storage and the public site stay with TransIP B.V. in the EEA. Only the FormSubmit hop for the contact form may touch US infrastructure, which we treat as a transfer under Art. 49(1)(b) because you initiate a quote conversation. We are not aware of a Data Privacy Framework certification for that provider.
Prefer EU-only routing? Use [email protected] or 020 244 8193 instead of the form — workflow and deadlines stay the same.
8. Security
Measures include TLS on the site, role-based access, strong passwords, 2FA where services allow it, disk encryption on workstations, and premises secured outside booked hours. Working multitracks are removed after the archive window in our terms (24 months).
Should a breach likely harm your rights, we report to the Autoriteit Persoonsgegevens and contact you when the law says we must. Internet transfer always carries residual risk; after receipt we apply organisational and technical safeguards.
9. Your rights
Under the GDPR you may request access, correction, deletion, restricted processing, data export, object to legitimate-interest processing, or withdraw consent (Arts. 15–21).
Email [email protected] or write to our postal address. Standard response time is one month; intricate requests can take two extra months with notice (Art. 12(3)). Requests are free unless manifestly unfounded or excessive; we may verify identity.
Lodging a complaint with the AP (autoriteitpersoonsgegevens.nl) is always open; contact us first if you want a quick studio-side answer.
10. Cookies and similar tech
Analytics, ad and social trackers are absent. The banner writes srdl_consent_v1 to localStorage for 182 days to remember accept/reject/custom. See cookie policy or reopen .
11. Third-party links
The site links to OpenStreetMap for directions on contact. Those services have their own privacy rules; we are not responsible for their processing.
12. Status and changes
This policy is informational and does not limit your legal rights. We may update it when services or law change. The current version is on this page with effective date 15 October 2026. Material changes may be emailed to existing clients where appropriate.
Contact: Soredialhub B.V., Haarlemmerweg 71, 1014 BD Amsterdam — [email protected]. Contract: terms and conditions.