Legal

Privacy Policy

Last updated: July 2026

1. Who is responsible for your data?

The party responsible for processing your personal data (verwerkingsverantwoordelijke) is:

Martijn Vincken Music
KVK: 90286995
BTW: NL004804245B06
Netherlands
martijnvinckenmusic@gmail.com

2. What personal data do we collect?

We collect the following data when you register, book a service, or contact us:

  • Full name and email address
  • Street address, postcode, city, and country
  • Phone number (optional)
  • BTW / VAT number (optional, for business clients)
  • Artist name and social media links (optional)
  • Payment information — processed by Mollie, we do not store card details
  • Audio files you upload (your pre-master mix) and finished masters we deliver to you
  • Cover art and track metadata you provide
  • Messages and feedback exchanged through the platform
  • Contact form submissions

3. Why do we collect this data and what is the legal basis?

We process your personal data for the following purposes:

Providing the mastering service

Execution of a contract (Art. 6(1)(b) AVG)

Generating invoices and processing payments

Legal obligation (Art. 6(1)(c) AVG) — Dutch tax law requires us to retain invoices for 7 years

Sending status updates and service emails (e.g. feedback received, master delivered)

Execution of a contract (Art. 6(1)(b) AVG)

Responding to contact form enquiries

Legitimate interest (Art. 6(1)(f) AVG)

Verifying your EU VAT number via VIES

Legal obligation (Art. 6(1)(c) AVG)

We do not use your data for marketing, profiling, or any purpose beyond delivering the service you booked.

4. Third parties and sub-processors

To deliver our service, we share your data with the following parties:

Supabase

Database and file storage (your files, profile, project data)

EU (AWS eu-west-1, Ireland)

Mollie

Payment processing. Mollie is a licensed payment institution regulated by De Nederlandsche Bank (DNB). They handle and store all payment details — we never see your card number.

Netherlands — mollie.com

Resend

Transactional email delivery (order confirmation, feedback, invoice)

EU (AWS eu-west-1, Ireland)

Vercel

Web hosting and infrastructure

EU region

We do not sell your data to third parties, and we do not share it with parties outside the above list.

5. How long do we keep your data?

  • Invoices and related financial data: retained indefinitely for tax and accounting purposes (Dutch law requires a minimum of 7 years)
  • Your account and project data: as long as your account is active, or until you request deletion
  • Mix files you upload (your pre-master WAV): retained for 90 days after project completion, then deleted
  • Finished masters we deliver to you: retained indefinitely so you can re-download at any time
  • Contact form messages: deleted after 12 months if no service was booked

6. Your rights under the AVG (GDPR)

As a data subject, you have the following rights:

  • Right of access (inzagerecht): You can request a copy of all personal data we hold about you.
  • Right to rectification (correctierecht): You can correct inaccurate data via your account page, or by contacting us.
  • Right to erasure (recht op vergetelheid): You can request deletion of your account and data, subject to legal retention obligations (e.g. invoices must be kept for 7 years).
  • Right to restriction of processing: You can request that we limit how we use your data in certain circumstances.
  • Right to data portability: You can request your data in a structured, machine-readable format.
  • Right to object: You can object to processing based on legitimate interest.

To exercise any of these rights, email us at martijnvinckenmusic@gmail.com. We will respond within 30 days.

If you believe we are not handling your data correctly, you have the right to lodge a complaint with the Dutch data protection authority: Autoriteit Persoonsgegevensautoriteitpersoonsgegevens.nl

7. Cookies

This website uses only functional cookies necessary for the service to work — specifically, a session cookie to keep you logged in. We do not use tracking cookies, advertising cookies, or analytics tools that collect personal data. No cookie banner is required for strictly necessary cookies under Dutch law.

8. Security

We take appropriate technical and organisational measures to protect your personal data. All data is transmitted over HTTPS. Files are stored in a private, access-controlled storage bucket. Access to the admin portal is restricted to the service operator. Payments are handled entirely by Mollie and never pass through our servers.

9. Changes to this policy

We may update this privacy policy from time to time. When we do, we will update the date at the top of this page. We encourage you to review this page periodically. Continued use of the service after changes constitutes acceptance of the updated policy.

Questions?

For any privacy-related questions or requests, contact us at martijnvinckenmusic@gmail.com. We aim to respond within 5 business days.

Privacy Policy — Martijn Vincken Music