Privacypolicy
Which data I process, why, how long I keep it and which rights you have.
1. Who is responsible for your data
Studio ELVN processes personal data and is the controller for it within the meaning of the General Data Protection Regulation (GDPR).
| Name | Studio ELVN |
|---|---|
| Chamber of Commerce | 94582416 |
| VAT | NL005092998B53 |
| info@studio-elvn.nl | |
| Website | studio-elvn.nl |
I have not appointed a data protection officer; that is not required for an organisation of this size. Questions about privacy can be sent to the email address above.
2. Which data I process
Contact form
If you fill in the contact form, I process the data you enter yourself:
- Name (required)
- Email address (required)
- Brand or company name
- Socials or website
- Your description of what you need help with (required)
- Preferred timing
- Budget indication
Please do not enter special categories of personal data in the description field, such as data about health, religion or political views. I do not need any of that.
Data the website processes automatically
The website runs on Vercel. Vercel records technical data that is needed to keep the site working and secure: your IP address, the time of your visit, the page requested and data about your browser and device. I do not use this data to identify or track you personally.
What I do not do
- I do not use analytics or visitor statistics.
- I do not place tracking or advertising cookies.
- I do not sell your data and do not share it for commercial purposes.
- I do not use automated decision-making or profiling.
3. Why I process it and on which legal basis
| Data | Purpose | Legal basis (GDPR) |
|---|---|---|
| Contact form | Answering your question and assessing whether and how we could work together | Performance of a contract or steps prior to it (art. 6(1)(b)) |
| Contact details of clients | Carrying out the collaboration, invoicing and staying in touch | Performance of a contract (art. 6(1)(b)) and a legal obligation for the administration (art. 6(1)(c)) |
| Technical log files | Keeping the website working, solving faults and preventing misuse | Legitimate interest: a secure and working website (art. 6(1)(f)) |
4. How long I keep data
| Data | Retention period |
|---|---|
| Enquiries that do not lead to a collaboration | 12 months |
| Data of clients I work with | As long as the collaboration runs and afterwards for as long as needed |
| Invoices and administration | 7 years, the legal retention obligation of the Dutch tax authority |
| Technical log files | According to the standard term of Vercel, usually a maximum of 30 days |
5. Who I share data with
I use a number of parties that process data on my behalf. Data processing agreements have been concluded with them, or their standard processing terms apply.
| Party | What for | Which data |
|---|---|---|
| Vercel Inc. | Hosting of the website | Technical log files, including your IP address |
| Formspree Inc. | Processing and forwarding the contact form | Everything you fill in on the form |
| Adobe Inc. | Loading the handwritten typeface Karumbi | Your IP address and browser data |
| Mijndomein | Receiving and storing email | The content of your message |
Besides that, I share data when I am legally obliged to, for example with the Dutch tax authority or at the demand of a competent authority.
6. Transfer outside the EU
Vercel, Formspree and Adobe are American companies. Because of that, your data may be processed outside the European Economic Area. This transfer takes place on the basis of the EU-US Data Privacy Framework or, where that does not apply, on the basis of the standard contractual clauses of the European Commission.
7. Cookies
This website places no cookies. Nothing is stored in your browser: no cookies, no local storage, no session storage. There is therefore no cookie notice and there is nothing for you to consent to.
The typefaces for headings and text sit on the site’s own server, so no data goes to third parties for those. Only the handwritten typeface Karumbi is loaded through Adobe; your IP address is passed on to Adobe for that. No cookies are placed in the process.
8. Security
The website is only reachable over a secure HTTPS connection, so the traffic between your browser and the site is encrypted. I limit access to data to what is necessary and use strong, unique passwords with two factor authentication wherever that is possible.
Do you think something is going wrong with the security of your data? Let me know at the email address at the top of this page.
9. Your rights
Under the GDPR you have the following rights:
- Access: ask which data I hold about you.
- Rectification: have incorrect data corrected.
- Erasure: have your data deleted, unless I am legally required to keep it.
- Restriction: have the processing paused temporarily.
- Objection: object to processing based on legitimate interest.
- Portability: receive your data in a common file format.
Send your request to the email address at the top of this page. I reply within four weeks. To prevent me from handing data to the wrong person, I may ask you to send your request from the email address known to me. If you and I do not work it out together, you can turn to the Dutch Data Protection Authority. I would rather hear it from you first, then we can solve it together.
10. Changes
If the website or the way I work changes, I will update this policy. The current version is always on this page.
Last updated on 19 August 2026.