Privacy policy
This English version is provided for information only. The Dutch version is the authoritative text. Privacyverklaring
In brief
- We keep what you send so we can reply, schedule and run the booked session.
- No newsletter, no tracking pixels, no selling of personal data to third parties.
- Session files stay 12 months; invoices stay seven years.
- We never feed voices into artificial-intelligence training, not even in-house.
- To use your rights, write to [email protected] or use the contact form.
1. Who is responsible
This notice explains how Oaklandledger B.V. processes personal data that arrive through the website oaklandledger.click, by e-mail or phone, and during sessions at Bilderdijkstraat 165, 1053 KV Amsterdam. Oaklandledger B.V. is a private limited company (B.V.) under Dutch law, with its registered office in Amsterdam, Chamber of Commerce 86221245, VAT NL832148039B01. The director is Sanne de Vries.
Oaklandledger B.V. is the controller of that data under the General Data Protection Regulation and the Dutch GDPR Implementation Act. We have not appointed a data protection officer: the scale and nature of this processing do not require one. Privacy questions go to [email protected] or 020 261 4890. Hours: Tuesday–Friday 10:00–20:00, Saturday 10:00–18:00. Closed Monday and Sunday. By appointment only.
We process data for four practical aims: answering a request, delivering the booked service, running the administration (quotes, invoices, payments), and keeping the website and the rooms technically safe. We do not sell or rent mailing lists.
2. Who this notice covers
It covers visitors to oaklandledger.click, people who write or call, and anyone who books a session — as a consumer or as a business. It sets out which data we use, on which legal basis, for how long, and which rights you have.
Sometimes we record people on a business client's instructions: a hired voice, a guest on a Podcast & voice-over, or players sent by a production company. In those cases that client decides the purpose of the recording. We then act as a processor. The data processing agreement applies, and that client's own notice is the one those people should read. Our own file on the job (contact person, invoice) stays under this policy.
3. The data we keep
Through the contact form or e-mail: name, e-mail address, phone if you add it, the service you want, a preferred date and a short project note. Required fields are there so we can reply; without a name and an address we cannot prepare a quote. The form is relayed by FormSubmit, a United States service — see the section on transfers.
When you book and during the work: billing details, artist or band name, the schedule, our correspondence, and payment references from a transfer. We do not store full payment-card numbers. Rates on the site, such as €95 per hour of Vocal recording or €790 for a day of Band recording, include 21 % VAT; the invoice repeats the amount and VAT number NL832148039B01.
Recordings: a voice, an instrument take or spoken word is personal data when a person can be recognised. We use it only to deliver Vocal recording, Band recording, Mixing, Mastering or Podcast & voice-over. Film or stills that you bring or arrange yourself stay your responsibility.
Technical data: TransIP B.V. keeps server logs (IP address, time, requested page, user-agent) to protect the site. Your tracker choice sits in the browser's local storage under okln_consent_v1; that value holds no name or e-mail address.
We do not ask for special-category data. If you need to move a session, saying you cannot come is enough; we do not ask for a medical certificate.
4. Purposes, legal bases and retention
| Purpose | Data | Legal basis (GDPR) | Retention |
|---|---|---|---|
| Replying and drafting a quote | Form, e-mail, phone | Steps before a contract, started by you (GDPR 6.1.b) | Three years after the last contact with no booking |
| Booking, running and following up the session | Identity, contact, project, diary | Carrying out the booking (GDPR 6.1.b) | Five years after we finish (limitation of contractual claims, Art. 3:307 Dutch Civil Code) |
| Keeping working sessions | Recordings, session files, stems | Performance of the contract (Art. 6(1)(b)) | 12 months after the last session, then we delete them |
| Invoicing and accounts | Name, address, amounts, VAT | Legal obligation (Art. 6(1)(c)) | Seven years (Art. 52 of the General State Taxes Act) |
| Handling a complaint or dispute | Correspondence and case files | Legitimate interest in defending our position (Art. 6(1)(f)) | Until the dispute and appeal periods end |
| Keeping the site safe | Server logs held by the host | Our legitimate interest (GDPR 6.1.f) | Twelve months at most, longer only if a concrete incident requires it |
| Remembering your choice on trackers | Key okln_consent_v1 in the browser | Legal obligation (Art. 11.7a of the Dutch Telecommunications Act) | 182 days |
A new purpose starts only if it is compatible with the original one, or after we ask again for consent. We do not send marketing mailings. Where we rely on legitimate interest you may ask for a short account of the balancing test and object to it.
The 30 % deposit and the 14-day business payment window sit in the terms and conditions; those rules do not change this notice, they only explain why invoice data are needed.
5. Voice, image, minors and automation
A recognisable voice or face is part of private life. We do not publish clips, session photos or names on oaklandledger.click or on social media without your prior written agreement. We mention a project as a reference only if you agree in writing.
We do not use client recordings to train, test or improve artificial-intelligence systems. We do not build a voice clone or a synthetic derivative without a separate, specific written authorisation from the person concerned.
The website is not a service aimed at children. Booking starts at 16, in line with Section 5 of the Dutch GDPR Implementation Act. If the performer is under eighteen, a legal representative books and pays. We do not collect extra data about a minor beyond what the session needs.
We take no automated decisions with legal effect and we build no marketing profiles. Scheduling is done by people in the rooms: Sanne de Vries, and the colleagues who record or produce.
6. Who can see the data
Access sits with the team members who need it for the booking, the session or the accounts. The following recipients may also see data, only for the purpose named:
- TransIP B.V., Vondellaan 47, 2332 AA Leiden, Nederland, host of the website — see the host's site — in data centres in the European Union;
- FormSubmit (formsubmit.co), which forwards the contact form to [email protected];
- an accountant or bookkeeping office, bound by confidentiality, for invoice data;
- our bank, for transfers;
- a lawyer or a court, if there is a dispute;
- authorities that ask within the law.
Anyone who processes personal data for us does so under a written arrangement that meets Article 28 GDPR. This file does not name a consumer mediator; privacy complaints go to us first, then to the Dutch Data Protection Authority (see your rights).
7. Transfers outside the European Economic Area
The website and our mailbox at TransIP B.V. sit in the European Union. FormSubmit is operated from the United States. When you send the form on the contact page, its contents pass through that service. To our knowledge this provider is not listed under the EU–US Data Privacy Framework. The legal ground is the GDPR derogation for a transfer needed to take steps at your request before a contract — you trigger those steps by sending the project.
If you prefer to avoid that transfer, write directly to [email protected] or call 020 261 4890. We handle that request in the same way. We do not have a separate processor contract with FormSubmit that incorporates the European Commission's standard contractual clauses; that is why we spell out the alternative channel here.
8. Security
We apply measures that fit a studio of this size: the site is served over HTTPS only, file access is limited to the people doing the job, workstations and backup media are encrypted, the building at Bilderdijkstraat 165 is locked outside sessions, and we delete sessions after the 12-month archive window. The live room is 36 m², the booth 7 m² and the control room 20 m²; physical access to those three rooms is reserved for whoever is working that slot.
If an incident threatens your rights, we inform the Dutch Data Protection Authority inside 72 hours (GDPR art. 33) and we write to you as well whenever the residual risk is serious (GDPR art. 34). Sending anything across the public network can never be perfectly sealed; after we receive the data, the measures above apply.
9. Your rights
Under the GDPR you can at least:
- ask what we hold and how we use it (article 15);
- have mistakes or gaps corrected (article 16);
- ask for deletion when the purpose has ended or another ground in article 17 applies;
- ask us to freeze processing in the situations listed in article 18;
- receive a copy of what you supplied, in a structured everyday file format (article 20);
- object when we lean on legitimate interest (article 21);
- take back consent at any moment; earlier lawful use stays valid (article 7.3).
Send the request to [email protected] or by post to Bilderdijkstraat 165, 1053 KV Amsterdam. We reply within one month. For a complex request we may add two months; we will tell you (Art. 12(3) GDPR). Exercising rights is free. If we reasonably doubt your identity, we may ask for more information.
You may lodge a complaint with the Autoriteit Persoonsgegevens (Dutch Data Protection Authority), Hoge Nieuwstraat 8, 2514 EL The Hague, the Netherlands, www.autoriteitpersoonsgegevens.nl. Please write to us first: most points are settled within 1 working day.
10. Cookies and similar techniques
A cookie is a small file a website places on your device. Other techniques, such as local storage in the browser, fall under the same Dutch Telecommunications Act rule. oaklandledger.click sets no analytics, advertising or social-media cookies. We only store your tracker choice under okln_consent_v1, for 182 days. The banner groups five categories — strictly necessary, functional, analytics, marketing and preferences — and three equal buttons: accept all, reject all and choose for yourself. The four optional categories are empty for now.
If we ever add a tracker that needs consent, we will say so first and ask again. The full list is in the cookie policy. You can reopen the banner with .
11. Links to other sites
The site points to OpenStreetMap for the location on Bilderdijkstraat 165 and to the sites of our host and of the Dutch Data Protection Authority. Those services apply their own notices. We are not responsible for their processing. How to get here: Tram 3 and 12 stop Bilderdijkstraat (2 minutes' walk). Bus 15 stop Bilderdijkstraat. From Amsterdam Centraal about 15 minutes on tram 3 towards Muiderpoortstation.
Practical booking questions, as opposed to privacy questions, belong on the FAQ or on the services and studio pages. Other legal framing sits in the legal notice and the terms and conditions.
12. Status, changes and contact
This text describes our practices; it does not limit the rights the law gives you. The Dutch version is legally authoritative. This English text is a translation for information. We may change the notice if our services or the rules change. The new version appears on this page, with the date it takes effect, and replaces the previous one. If the change is substantial we e-mail existing clients.
This version is dated 1 October 2026 and applies from 1 October 2026. Contact: Oaklandledger B.V., Bilderdijkstraat 165, 1053 KV Amsterdam — [email protected] — 020 261 4890.