Privacy policy
AVEK Studio values your privacy and handles personal data with care. This privacy policy explains which data AVEK processes, why, for how long and what rights you have. AVEK processes personal data in accordance with the General Data Protection Regulation (GDPR).
1. Data controller
The data controller is AVEK Studio, a sole proprietorship of Arman Voogd, based in Leiden, the Netherlands, registered with the Dutch Chamber of Commerce under number 99867672. You can reach AVEK at contact@avek.studio.
2. Which personal data we process
Depending on your contact with AVEK, the following data may be processed:
- Name, e-mail address and phone number you provide yourself through the contact form or by e-mail.
- Company name, Chamber of Commerce number and VAT number for quotations and invoicing.
- Address and payment details for the financial administration.
- The content of your messages and our correspondence.
- Technical data such as an anonymised overview of website visits (privacy-friendly statistics).
3. Purposes and legal bases
AVEK only processes your data for clear purposes, with a valid legal basis under the GDPR:
- Getting in touch and answering your request. Basis: performance of the agreement or your consent.
- Preparing quotations and carrying out assignments. Basis: performance of the agreement.
- Invoicing and administration. Basis: legal obligation and performance of the agreement.
- Improving and securing the website. Basis: legitimate interest.
4. Cookies and statistics
AVEK keeps the website as privacy-friendly as possible. No tracking or advertising cookies are placed. For visit statistics, AVEK uses a privacy-friendly, anonymised measurement method that does not share personal data with third parties for advertising purposes. Functional storage needed to make the website work is only used where necessary.
5. Sharing with third parties and processors
AVEK does not sell your data. To provide its services, AVEK uses carefully selected processors, with whom a data processing agreement is concluded where required. These include:
- Hostinger: hosting and VPS infrastructure.
- Directus: content and backend management (self-hosted).
- Mollie: processing of iDEAL payments.
- Resend: sending transactional e-mail.
- Enable Banking: connection to the business bank account for payment processing.
- Backblaze B2: encrypted backups of data and files.
AVEK only shares data with third parties when this is necessary for the services or when a legal obligation requires it.
Some of these processors are located in or process data outside the European Economic Area (EEA), including in the United States (such as Resend for e-mail and Backblaze for backups). Where this is the case, AVEK ensures appropriate safeguards, such as the EU Standard Contractual Clauses or a valid adequacy decision of the European Commission, such as the EU-US Data Privacy Framework. You can request a copy of the safeguards used from AVEK.
6. Retention periods
AVEK does not keep personal data longer than necessary for the purposes for which it was collected. Data from the financial administration, such as invoices, is kept for seven years due to the statutory tax retention obligation. Contact and project data is deleted or anonymised once it is no longer needed.
7. Security
AVEK takes appropriate technical and organisational measures to protect your data against loss and unauthorised access, such as encrypted connections, secured system access and regular backups. In the unlikely event of a data breach, AVEK acts in accordance with the data breach notification obligation.
8. Your rights
Under the GDPR you have the following rights:
- The right to access the personal data AVEK processes about you.
- The right to rectification of inaccurate or incomplete data.
- The right to erasure of your data.
- The right to restriction of processing.
- The right to object to processing.
- The right to data portability, meaning receiving or transferring your data.
Would you like to exercise one of these rights? E-mail contact@avek.studio. AVEK responds within the statutory period and may ask for additional information to confirm your identity.
9. Filing a complaint
If you believe AVEK does not handle your data carefully, please get in touch first so we can resolve it together. You also always have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), the supervisory authority for privacy in the Netherlands.
10. Changes
AVEK may update this privacy policy. The current version is always available on this page, with the date of the last change at the top.
11. Contact
AVEK Studio, Leiden, the Netherlands. Chamber of Commerce 99867672, VAT NL005415754B11. Questions about this privacy policy? E-mail contact@avek.studio.