Privacy policy
This English text is for convenience. The Dutch version is legally authoritative. Privacyverklaring
In brief
- We mainly process what you send us: forms, email, phone and appointment data for quotes and sessions.
- No ad cookies, no sale of data; session files are kept up to 12 months after the last activity.
- We do not use your recordings to train AI; we publish nothing on our channels without your written consent.
- Questions or a request? Email [email protected] — we usually reply within 1 business day.
1. Controller
Nitentxara B.V. (“Nitentxara”), a private limited company (B.V.) registered at Overtoom 551, 1054 LL Amsterdam, is the controller of personal data processed through nitentxara.digital and in direct contact with you.
Contact: [email protected], 020 244 8916. Trade register (KvK) 75205469, VAT NL817108506B01. Managing director: Maarten van den Berg.
We have not appointed a data protection officer; for our size we consider that unnecessary. Privacy questions are handled at the same address.
2. Scope
This policy covers website visitors, people requesting a quote or session, and clients using services such as vocal and rap recording, live band recording, mixing, mastering or podcast and voice-over.
If you bring guests or presenters as a business, you are usually the controller for their data; we act as processor under our data processing agreement. Practical details are in the FAQ and on contact.
3. Data we process
Contact form: name, email, phone (optional), chosen service, preferred date (optional) and your message. Required fields are needed to reply; without email we cannot send a quote.
Booking and delivery: billing details, artist or band name, project description, correspondence, payment references. A 30% session deposit is processed with your booking confirmation as set out in our terms and conditions.
Recordings and session files: voice, instruments and other audio that identify you are personal data. We use them only to deliver the agreed service, run revisions (up to 2 rounds where applicable) and archive files securely.
Technical data: our host TransIP B.V. processes server logs (IP address, time, page requested, user agent) for security. Your cookie choice is stored locally; see cookie policy.
We do not ask for special-category data. You do not need to share medical details to reschedule within 7 days before the appointment.
4. Purposes, legal bases and retention
| Purpose | Typical data | GDPR basis | How long we keep it |
|---|---|---|---|
| Answering enquiries | Form fields, email threads | Art. 6(1)(b) — steps before a contract | Three years from your last message if no booking is made |
| Running sessions you booked | Names, slots, project notes | Art. 6(1)(b) — performing our agreement | Five years after we last worked together (Dutch limitation rules) |
| Keeping multitracks safe | WAV stems, session folders | Art. 6(1)(b) — delivery and support | 12 months from the final hand-off, then secure deletion unless you request longer storage |
| Tax and accounting files | Invoices, payment proof | Art. 6(1)(c) — statutory duty | Seven years for Dutch tax records |
| Protecting the website | IP and access logs on TransIP B.V. | Art. 6(1)(f) — security interest | Roughly twelve months, or less if the host rotates logs sooner |
| Remembering cookie settings | ntnt_consent_v1 value in localStorage | Consent / strictly necessary storage | 182 days, then the banner asks again |
We do not sell or rent data. We do not send newsletters unless you explicitly opt in later; the website does not offer that today.
5. Voice, publicity, age and AI
We do not post excerpts of your recordings, session photos or names on nitentxara.digital or social media without prior written consent.
Audio from paid sessions stays out of machine-learning datasets: we do not feed client material into model training, benchmarking or similar pipelines, and we do not synthesise a performer’s voice without their own signed approval.
Online booking is intended for people aged 16 and over. Younger visitors may enter the studio only with a parent or guardian’s permission and supervision.
6. Recipients
Within Nitentxara, only team members who deliver the work access your data. External parties may receive data when needed for the service:
- TransIP B.V. (Vondellaan 47, 2332 AA Leiden, Netherlands), hosting nitentxara.digital and email in EU/EEA data centres;
- FormSubmit (formsubmit.co, United States), forwarding the contact form to [email protected];
- bank, for payments and chargebacks;
- accountant, for invoicing under confidentiality;
- authorities, when the law requires it.
Processors sign agreements under Article 28 GDPR. See our data processing agreement when you are the controller.
7. Transfers outside the EEA
Website hosting and storage are in the EU/EEA through TransIP B.V..
The contact form uses FormSubmit in the United States. Name, email, phone and message may therefore be processed briefly outside the EEA. We rely on Article 49(1)(b) GDPR: the transfer is necessary for pre-contractual steps you start with the form.
To avoid that route, email or call us directly at [email protected] or 020 244 8916; we handle the request the same way.
8. Security
We apply appropriate measures: HTTPS on the site, access limited to the team, strong passwords and encrypted storage where tools support it, physical studio access by appointment during Mon–Fri 10–20, Sat 10–18.
If a breach is likely to pose a risk to you, we notify the Dutch Data Protection Authority within 72 hours and inform you directly when the risk is high. No method is perfectly secure; once we receive data we apply our safeguards.
9. Your rights
You have the right of access, rectification, erasure, restriction, data portability, objection to processing based on legitimate interest, and withdrawal of consent without affecting earlier lawful processing.
Send a request to [email protected] or by post to Overtoom 551, 1054 LL Amsterdam. We respond within one month; complex cases may be extended by two months with an explanation. We may verify your identity.
You may lodge a complaint with the Autoriteit Persoonsgegevens (AP), autoriteitpersoonsgegevens.nl. We prefer to help you directly first.
10. Cookies
We do not use analytics or marketing cookies. We only remember your choice in localStorage (ntnt_consent_v1, 182 days). Details and settings: cookie policy and .
11. External links
The site links to OpenStreetMap for directions (OpenStreetMap). Those services have their own privacy rules; we are not responsible for their processing.
12. Version
Effective: 15 October 2026. Last updated: 15 October 2026. Changes are published on this page. Material updates are communicated to active clients by email where appropriate.
Company details: legal notice. Service terms and prices (VAT 21%): services and terms and conditions.