Privacy policy
This English version is for information only. The Dutch version is the legally authoritative text. Privacyverklaring
In brief
- We process only what you send us and what we need to run your session and admin.
- No ad trackers, no sale of data, no AI training on your recordings.
- Working files are kept up to 24 months after the last session, then deleted.
- Questions or requests: [email protected] — we usually reply within 2 business days.
1. Controller identity
Nikausync B.V., trading as Nikausync, is a private limited company (B.V.) with registered office at Grote Bickersstraat 74, 1013 KS Amsterdam. We decide why and how personal data is used when you browse nikausync.click, request a quote, book studio time or receive invoices from us.
Our processing follows the GDPR and Dutch implementing legislation. We have no data protection officer appointment because our scale does not require one. Reach us at [email protected] or +31 20 244 89 17. Chamber of Commerce 93890356, VAT number NL874497395B01. Director: Maarten de Vries.
For legal certainty, rely on the Dutch privacyverklaring; this English page summarises the same practices.
2. Who this notice covers
Visitors, people who write to us and paying clients fall under this notice, whether you book vocals, a band session, mixing, mastering or podcast recording.
Corporate producers who bring their own guests remain controller for those participants; we process on their instructions under the data processing agreement. Licensing questions for podcast beds are outlined in our podcast music rights guide.
3. Categories of information
Enquiries through contact: identity and reachability (name, email, optional phone), service choice, optional preferred date and free-text project notes. Mandatory fields exist so we can answer; skipping them blocks a meaningful quote.
Commercial relationship: billing identity, act or project name, scheduling messages, bank references and proof of the 30% booking deposit. Chip-and-PIN in the room is handled by the acquirer — card PANs never enter our systems.
Audio captures: performances can identify natural persons; we treat them as personal data limited to production and delivery. Video you shoot yourself stays your compliance responsibility.
Infrastructure traces: TransIP B.V. may log IPs, timestamps, URLs and user-agent strings for abuse prevention. Cookie preferences live locally; see cookie policy.
We do not solicit health, biometric or criminal data. Reschedule for medical reasons by stating unavailability only.
4. Why we keep data and for how long
- Answering leads
- Form content and mail threads — legitimate interest and steps at your request before a contract — kept roughly two years after the last message.
- Running sessions
- Contact, calendar and project notes — contract performance — session working copies deleted after 24 months unless the quote says otherwise.
- Tax and finance
- Invoice payloads — statutory duty — seven years under Dutch retention rules.
- Defending claims
- Case files — legitimate interest — until limitations expire plus a short buffer.
- Site integrity
- Host logs — security interest — up to twelve months.
- Cookie banner memory
- Browser key nksn_consent_v1 — consent or strictly necessary preference storage — 182 days.
We never monetise mailing lists. Free cancellation windows are described in article 6 of the terms (more than 7 days ahead).
5. Audio, publicity, young artists and machine learning
Marketing use of your takes, likeness or name requires your written OK beforehand. We do not stream client audio on the open web for promotion.
Session material is off limits for model training, synthetic voice recreation or automated benchmarking unless you sign a separate licence.
Artists below 16 need a guardian to book, pay and attend. The web form targets adults booking studio time, not children registering for an app.
Warm-up advice before arrival: voice prep guide.
6. Disclosures to third parties
Staff access follows least privilege. External parties may include:
- TransIP B.V. (Vondellaan 47, 2332 AA Leiden, the Netherlands) hosting pages and mail in the EEA in normal operation;
- FormSubmit LLC routing form posts from the US to [email protected];
- our finance partner receiving invoice metadata under professional confidentiality;
- the acquiring bank for in-person card taps and SEPA transfers;
- regulators or courts when compelled.
Each processor signs GDPR Article 28 terms. Dual-role B2B jobs are governed by the data processing agreement.
7. International flows
Primary systems sit in the EEA. Submitting the contact form triggers a US hop through FormSubmit, including metadata their servers record. We document SCCs or other Chapter V tools and may rely on necessity for pre-contract communication (Article 49) when you initiate the message.
Prefer zero US hop? Phone +31 20 244 89 17 or email [email protected] directly — response quality is identical.
8. Integrity measures
Transport encryption, role-based accounts, disk encryption on edit suites, physical locks at Grote Bickersstraat 74 and scheduled purges of stale multitracks form our baseline. Suspected breaches with likely harm trigger AP notification and direct messages where GDPR Article 34 demands it.
Once bits reach us, we apply studio-side controls; transit over the public internet nonetheless carries residual risk.
9. Exercising GDPR rights
Request access, correction, deletion, restriction, portability or object to interest-based processing. Consent withdrawal does not retroactively unlawful prior handling.
Email [email protected] or post to Grote Bickersstraat 74, 1013 KS Amsterdam. Standard deadline: one month, extendable to three with notice. We may request proportionate ID proof. Unresolved concerns can go to the Autoriteit Persoonsgegevens via autoriteitpersoonsgegevens.nl — yet a quick note to us often fixes things faster.
10. Cookies
Marketing or analytics pixels are absent. Local storage holds banner decisions (nksn_consent_v1, 182 days). Manage them through or read cookie policy.
11. External links
Map links (see contact) send you to OpenStreetMap properties with independent policies; we do not control their tooling.
12. Updates
We revise this notice when pricing, tooling or law shifts. Publication date: 15 October 2026. Material edits may trigger client email where relationships already exist.
Postal contact: Nikausync B.V., Grote Bickersstraat 74, 1013 KS Amsterdam, [email protected]. Related documents: legal notice, terms and conditions.