Privacy policy
This English version is for convenience. The Dutch text is legally authoritative. Privacyverklaring
In short
- We only process data you send us or data needed to run a session or invoice.
- No ad cookies, no selling data, no AI training on your recordings.
- Session files are kept for up to 24 months, then deleted.
- Questions or requests: [email protected] — we usually reply within about 2 business days.
1. Who is responsible?
Milepostvivo B.V. (Milepostvivo), a private limited company (B.V.), registered office at Helmersstraat 73, 1054 CV Amsterdam, is the controller for personal data processed via milepostvivo.digital and during our services.
Contact: [email protected], 020 244 8619. Trade register 77461366, VAT NL863072203B01. Managing director: Sanne de Vries. Further company details are on legal notice.
We have not appointed a data protection officer; that is not required for our size. For privacy questions, contact us directly.
2. Scope
This policy covers website visitors, people who enquire via contact and clients who work in our rooms: Vocal recording, Mixing, Mastering, Band recording and Podcast recording.
If you bring guests or band members, you are usually the controller for their data; we act as processor under our data processing agreement. You handle their rights; we provide technical measures in the studio.
3. Data we process
Contact form: name, email, phone (optional), service selected, preferred date (optional) and your message. We use mandatory fields only to answer your enquiry and build a quote; if they are empty we pause until you complete them.
Booking and delivery: billing details, artist or project name, email or phone threads, payment references. Card payments in the studio go through our bank; we do not store card numbers.
Recordings: voice, instruments and performance can be personal data when you are identifiable. We use them only to deliver the service. If you film in the studio, you remain responsible for footage.
Technical: our host TransIP B.V. processes server logs (IP address, time, page, browser) for security. Your cookie choice is stored locally; see cookie policy.
We do not collect sensitive categories such as health data. To move a session, tell us you cannot make the slot; we will not request a doctor’s note.
4. Purposes, legal bases and retention
| Purpose | Data | Legal basis (GDPR) | Retention |
|---|---|---|---|
| Reply and quote | Form, email | Legitimate interest / pre-contract steps (Art. 6(1)(b) and (f)) | Up to 3 years after last contact |
| Contract performance | Contact, project, schedule | Contract (Art. 6(1)(b)) | 5 years after end of relationship |
| Session files and recordings | Audio, project data | Contract (Art. 6(1)(b)) | Up to 24 months after last session, then deletion |
| Invoicing and tax | Identity, payments | Legal obligation (Art. 6(1)(c)) | 7 years (Dutch tax retention) |
| Complaint or dispute | Correspondence | Legitimate interest (Art. 6(1)(f)) | Duration of proceedings plus limitation periods |
| Website security | Server logs at TransIP B.V. | Legitimate interest (Art. 6(1)(f)) | As needed for incident review |
| Cookie preference | Key mlps_consent_v1 in localStorage | Legal obligation (Dutch Telecommunications Act) | 182 days |
We do not sell or rent data. We do not send newsletters unless you opt in separately.
5. Recordings, publicity and AI
Session audio stays off our public channels unless you approve it in writing. Client names do not appear in our marketing without a separate OK.
Your takes are not fed into machine-learning pipelines for voice models or similar tools, and synthetic doubles of a performer’s voice are out of scope unless everyone involved signs off in writing.
Reservations for anyone below 16 are made by a parent or legal guardian. The web form targets adult bookers; younger participants need an accompanying adult on site.
6. Recipients and processors
Only team members who need access for the job can see your data. External parties receive data only when necessary:
- TransIP B.V. — hosting for milepostvivo.digital and email, servers in the Netherlands;
- FormSubmit (formsubmit.co) — forwards the contact form to our mailbox;
- accountant — billing data, bound by professional secrecy;
- bank — payments;
- authorities — when the law requires it.
Each processor is bound by Article 28 GDPR terms. Business clients can read more in the data processing agreement.
7. Transfers outside the EEA
Website and mailbox hosting with TransIP B.V. remain inside the European Economic Area. The FormSubmit relay (formsubmit.co) processes form posts in the United States before they reach us; submitting the contact form triggers that route. We rely on Article 49(1)(b) GDPR because the transfer is needed for steps you request by sending a project brief.
Prefer not to use FormSubmit? Reach us at [email protected] or 020 244 8619 and we treat the message identically.
8. Security
Measures include TLS on milepostvivo.digital, role-based access for staff, strong credentials, disk encryption where practical, locked premises between bookings and scheduled purge of project folders after 24 months.
Should an incident likely harm your rights, we report to the Dutch DPA and contact you when the law says we must. Internet transport always carries some risk; after data reaches us we treat it under the safeguards described here.
9. Your rights
Under the GDPR you have rights including access, rectification, erasure, restriction, portability and objection to processing based on legitimate interest. You may withdraw consent without affecting earlier lawful processing.
Send requests to [email protected] or by post to Helmersstraat 73, 1054 CV Amsterdam. We respond within one month; complex cases may be extended by two months with explanation. We ask for identity proof only when in doubt.
You may complain to the Autoriteit Persoonsgegevens (AP), autoriteitpersoonsgegevens.nl. Contact us first when possible; many issues are resolved quickly.
The Dutch version of this policy is legally authoritative; this English text is for convenience.
10. Cookies and similar tech
We use no analytics, marketing or social cookies. Only your banner choice is stored under mlps_consent_v1 for 182 days in localStorage, not as an HTTP cookie. Change preferences via or our cookie policy.
11. Links and updates
Our site links to OpenStreetMap for directions; that service has its own privacy policy. Commercial terms are in terms and conditions.
This policy is informational and does not limit your legal rights. We publish changes on this page with date 14 October 2026 (effective 14 October 2026). Material changes may be emailed to active clients where appropriate.
Contact: Milepostvivo B.V., Helmersstraat 73, 1054 CV Amsterdam — [email protected].