Privacy policy.

Last updated: november 2025

This Privacy Policy explains how Studio Hakkers (hereinafter: “we”, “us”, “our”) collects, uses, discloses and protects your personal information when you visit our website or contact us. We are committed to handling your data in accordance with the GDPR as implemented in the Netherlands and the Dutch Implementing Act (UAVG).

1. Data Controller
Studio Hakkers
Boulevard Heuvelink 93
6828 KJ Arnhem, the Netherlands
E-mail: privacy@studiohakkers.com

2. Personal Data We Collect

A. Data you provide via the contact form

  • First and last name

  • E-mail address

  • Your message

  • How you found us (referral source)

B. Data collected automatically
When you visit our website, certain technical data may be collected via third-party hosting, website-builder and analytics infrastructure, such as:

  • IP address

  • Browser type and version

  • Device information

  • Pages visited and time spent

  • Referrer URL

We only use these data for website functionality, security, and with consent for non-essential analytics/cookies.

3. Purposes of Processing & Legal Bases

We process the personal data for the following purposes:

  • Responding to your enquiry: to contact you, answer your question or schedule an appointment.
    Legal basis: performance of contract or steps prior to entering into contract (Art. 6(1)(b) GDPR).

  • Project administration and communication: if your enquiry leads to a project, we will use your data for communicating about the project and providing our services.
    Legal basis: performance of contract (Art. 6(1)(b) GDPR).

  • Website functionality, security, analytics: to ensure the website operates correctly and securely; for optional analytics where you have given consent.
    Legal bases: legitimate interests (Art. 6(1)(f) GDPR) for essential functionality and security; consent (Art. 6(1)(a) GDPR) for analytics/cookies beyond strictly necessary.

  • Legal/compliance obligations: we may retain certain data to comply with tax, accounting or other legal obligations.
    Legal basis: compliance with legal obligation (Art. 6(1)(c) GDPR).

4. Recipients and sharing of data

We share or make accessible personal data only where necessary:

  • Technical service providers (hosting infrastructure, website builder infrastructure, email services)

  • Project-management/communications service providers (if relevant)

  • IT / security support providers

All service providers act under data processing agreements and must comply with GDPR requirements. We do not sell or rent your personal information for marketing purposes to third parties.

5. International Transfers of Data / Data Storage outside the EU/EEA

Because we use hosting and website-builder infrastructure, your personal data may be processed or stored in locations outside the European Union/European Economic Area (EU/EEA) (for example the United States or other non-adequate countries).

When data is transferred outside the EU/EEA, we ensure appropriate safeguards are in place in accordance with Chapter V of the GDPR (Articles 44–50). These safeguards may include:

  • Standard Contractual Clauses (SCCs) approved by the European Commission;

  • Adequacy decision by the European Commission (if applicable for the country);

  • Additional technical and organisational protections (e.g., encryption, restricted access).

These measures ensure that your rights and protections under EU data protection law continue to apply even when data is processed abroad.

6. Retention of Data

We keep your personal data only for as long as necessary for the purposes for which it was collected:

  • Contact-form data (if no project ensues): up to 12 months after enquiry.

  • Project-related data: retained for the duration of the project and thereafter as required for legal (e.g., tax) or business-administrative reasons (for example 7 years for bookkeeping).

  • Technical logs: retained only as required for website security and functionality, and then deleted or anonymised.

7. Your Rights

Under the GDPR you have the following rights with respect to your personal data:

  • Right of access – to request a copy of your personal data we hold.

  • Right to rectification – to correct inaccurate or incomplete data.

  • Right to erasure (“right to be forgotten”) – under certain conditions you may request deletion.

  • Right to restrict processing – you may request limitation of processing in certain circumstances.

  • Right to object – you may object to processing based on legitimate interests (including profiling).

  • Right to data portability – you may receive your personal data in a structured, commonly-used format where applicable.

  • Right to withdraw consent – where processing is based on your consent, you may withdraw it at any time (this will not affect the lawfulness of processing before withdrawal).

If you wish to exercise any of these rights, please contact us at the contact details above. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

8. Security Measures

We implement appropriate technical and organisational measures to protect your personal data, taking into account the state of the art, costs of implementation and the risks involved. Measures include: secure hosting environments, encrypted communications (HTTPS), access controls, backups, and periodic security assessments. However, no system can guarantee absolute security.

9. Cookies & Website Tracking

Our website uses cookies and similar technologies for:

  • Essential functionality (which do not require your consent)

  • Optional analytics/tracking (which require your prior consent)

You will be presented with a cookie banner when you first visit the site so you can make an informed choice. For more detail, please refer to our separate Cookie Policy [link if applicable].

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal/regulatory developments. The latest version will always be posted on this page. We encourage you to review the policy periodically.

11. Contact Information

If you have any questions or concerns about this Privacy Policy or about how we manage your personal data, please do not hesitate to contact us via the information shown at 1.