Skip to content

Privacy policy

Effective date 14 October 2026

This English text is for convenience. The Dutch version is legally authoritative. Privacyverklaring

In short

  • We only process data you send us or that we need to deliver your session and run our admin.
  • No ad cookies, no sale of data, no AI training on your recordings.
  • Session files are kept for up to 12 months after the last session.
  • Questions or requests: [email protected] or contact.

1. Who we are

Micracoriva B.V. («we», «us» or «Micracoriva») is a private limited company (B.V.) registered at Goudsbloemstraat 73, 1015 JM Amsterdam. Trade register (KvK) 91864893, VAT NL858964314B01. Managing director: Maarten van der Berg.

We decide how personal data is used for micracoriva.digital and for studio work with you: enquiries, quotes, bookings, vocal sessions, mixing, mastering and invoices. Company details: legal notice.

No data protection officer is appointed for our scale. Privacy contact: [email protected] or 020 737 0284. We usually answer within 1 business day.

2. Scope

This text describes processing for site visitors, enquirers and paying clients across our services, including band sessions and podcast recording.

If a company hires us to record its guests — hosts, interviewees or musicians — that company remains controller for those people. Micracoriva then follows the data processing agreement; guest-facing privacy text should come from the hirer.

3. Data we process

Contact form: name, email, optional phone, chosen service, optional date and project notes. Required fields are the minimum to reply with a quote.

Projects and billing: invoice name and address, artist or band name, scheduling messages, bank references. In-studio card payments run on the bank terminal; card numbers never enter our systems.

Audio: performances and speech can identify you. We use them solely to deliver what you booked. Video you shoot yourself in the rooms remains your responsibility towards anyone on camera.

Site infrastructure: TransIP B.V. keeps short-lived server logs for abuse prevention. Cookie preferences sit in your browser; see cookie policy.

We do not collect health data or other special categories. To postpone a slot for medical reasons, a simple «unavailable» message is enough.

4. Why we use data and how long we keep it

Answering enquiries and drafting quotes
Form content and email threads; legal basis: steps before a contract and our legitimate interest in running the studio (GDPR Art. 6(1)(b) and (f)). Kept until two years after the last message unless a project is still open.
Performing your booking
Identity, contact, timetable, creative brief; basis: contract (Art. 6(1)(b)). Kept for the relationship and applicable limitation periods.
Session files on our drives
Multitracks, mixes and masters; basis: contract (Art. 6(1)(b)). Removed after 12 months from the last studio day unless you buy extended storage in writing.
Tax and accounting
Names, amounts, VAT lines; basis: legal duty (Art. 6(1)(c)). Seven years in line with Dutch record-keeping rules.
Complaints or court cases
Emails and evidence; basis: legitimate interest in defending claims (Art. 6(1)(f)). Until the matter is fully closed including any appeal time.
Protecting the website
Host logs; basis: security interest and legal duties (Art. 6(1)(f) and (c)). Trimmed as soon as investigation allows.
Remembering cookie choices
Key mcrc_consent_v1 in localStorage; basis: telecom rules and consent where needed. 182 days.

We never sell lists, run remarketing or bulk-mail promotions. A future use would need a fresh legal test or your opt-in.

5. Voice, image, young people and AI

Performances and likenesses stay private by default. We do not stream clips, post session photos or name clients online without written approval.

Client audio is not fed into machine-learning pipelines, benchmark corpora or synthetic voice tools unless every identifiable person signs a separate release.

Bookings for anyone under 16 need a parent or guardian as contracting party. The public site is built for adults planning studio time, not for children’s profiles.

6. Who may see the data

Three engineers share the 3 rooms opened in 2019; each sees only what their shift requires. External parties:

  • TransIP B.V., Vondellaan 47, 2332 AA Leiden, the Netherlands — EU/EEA hosting and mailboxes;
  • FormSubmit (formsubmit.co) — relays the HTML form to [email protected];
  • external accountant — invoice lines under professional secrecy;
  • bank — settlement of transfers and terminal payments;
  • public bodies — only under binding requests.

Written processor terms follow GDPR Article 28. Business hirers should read the data processing agreement.

7. Locations outside the EEA

Primary files stay in Amsterdam during production. The contact form may route through FormSubmit in the United States. We rely on contractual safeguards and the fact that submitting the form is your requested step towards a quote (GDPR Art. 49(1)(b)). Prefer email? Write [email protected] or call 020 737 0284 — we treat it identically.

8. Protection measures

TLS on every page, named accounts with strong passwords, encrypted laptops where supported, doors locked overnight, and wipe of project folders after the 12-month window. We capture at up to 96 kHz when agreed; delivery tips live in the guides.

Should a leak put you at risk, we notify the Autoriteit Persoonsgegevens and, when required, you directly. Online transfer always carries residual risk; once files land here, internal rules apply.

9. Rights you can invoke

GDPR grants access, correction, deletion, restriction, portability, objection to interest-based processing and withdrawal of consent (Articles 15–21 and 7(3)). Send a clear request to [email protected] or post to Goudsbloemstraat 73, 1015 JM Amsterdam. One month is our standard deadline; complex files may need two more with notice. Requests are free unless manifestly unfounded. We may verify identity lightly.

Unhappy with our answer? The Dutch DPA accepts complaints at autoriteitpersoonsgegevens.nl. Most issues clear faster if you start with contact.

10. Cookies

Analytics and ad tags are absent. The banner stores mcrc_consent_v1 for 182 days. Full list: cookie policy. Reopen settings anytime via .

11. Third-party sites

Outbound links (for example OpenStreetMap on contact) follow their own policies; we do not control those servers.

12. Updates

Information only — statutory rights stay untouched. Effective 14 October 2026; page refreshed 14 October 2026. Material edits may trigger an email to active clients. Commercial terms: terms and conditions; processor detail: data processing agreement; prices include 21% VAT on services.

Micracoriva B.V., Goudsbloemstraat 73, 1015 JM Amsterdam — [email protected].