Privacy and Cookie Policy
In brief
- Who: Voltair Studio (sole proprietorship) is responsible for the personal data we process for our own business operations. For websites and apps that we build or host for clients, the client is responsible and we act on the client’s instructions.
- What and why: contact details, communications and technical data, in order to carry out quotations and projects, to invoice, and to secure our website. Statistics and marketing with cookies only with your consent.
- Sharing: only with suppliers we need for our services (such as hosting and email), under appropriate agreements. We do not sell personal data.
- Retention: no longer than necessary. We keep invoices for 7 years (legal obligation), and data of contacts who do not become clients for a maximum of 12 months after the last contact.
- Your rights: access, rectification, erasure, restriction, portability and objection via contact@voltairstudio.com. You can also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Below you will find the full explanation.
1. Controller
| Item | Value |
|---|---|
| Entity | Bennie Siemensma, trading as Voltair Studio (sole proprietorship) |
| contact@voltairstudio.com | |
| Chamber of Commerce (KvK) | 42206237 |
| VAT ID | NL005583984B14 |
| Registered address | Stationsstraat 40, 6071 KD Swalmen |
| Privacy contact | contact@voltairstudio.com |
2. When is Voltair Studio the controller?
Voltair Studio is the controller for personal data that it processes for its own business purposes, such as contact with prospects/clients, administration, invoicing, website security and its own marketing where a lawful basis exists. For personal data that Voltair Studio processes solely on behalf of a client, Voltair Studio in principle acts as processor and the DPA with that client prevails.
3. Which personal data may we process?
| Category | Examples | Purpose |
|---|---|---|
| Contact and company details | Name, job title, email, telephone, company name, address, KvK/VAT | Contact, contract, invoicing |
| Technical data | IP address, browser, OS, device/app information, logs | Security, error analysis, functioning |
| Communications | Emails, contact forms, support tickets | Services and support |
| Website/app analytics | Data about usage, depending on the tooling chosen | Analysis and improvement, only in accordance with the applicable cookie/GDPR rules |
| Project data | Accounts, configuration, project contacts | Performance of the contract; client data as processor |
Sources: we receive personal data directly from you (for example by email, through the contact form or during a project), through our clients when they provide us with data for the performance of an assignment, through cookies and similar technologies where lawful, and from public sources (such as the Trade Register or a company website) where necessary for the purpose concerned.
4. Legal bases and purposes
- Performance of a contract: quotations, projects, support, invoicing and account management.
- Legal obligation: administration and tax obligations.
- Legitimate interest: after an appropriate balancing test. Our legitimate interests are securing our website and systems, preventing fraud and abuse, keeping proper business records, and establishing, exercising or defending legal claims.
- Consent: non-essential tracking, marketing cookies or other processing for which consent is legally required.
4a. Mandatory data, automated decision-making and DPO
- To enter into and perform an agreement we need certain contact and invoicing details. Without this data we cannot enter into or perform an agreement. For our tax administration we are legally required to record certain data.
- Voltair Studio does not make decisions based solely on automated processing, including profiling, that produce legal effects or similarly significantly affect you.
- Voltair Studio has not currently appointed a data protection officer (DPO). If Voltair Studio becomes obliged under the GDPR to appoint a DPO, it will publish the DPO’s contact details in this privacy statement. You can direct privacy questions to contact@voltairstudio.com.
5. Recipients and service providers
Depending on the service, Voltair Studio may use Vercel, Hostinger, Resend (sending email, such as messages from the contact form), Supabase, GitHub, Google/Firebase, Slack and other suppliers. Only suppliers that are actually used for the processing concerned are included in the current privacy information or subprocessor list. A current overview of the suppliers we actually use is available on request via contact@voltairstudio.com.
Contact form: when you send the contact form on our website, we use your name, email address, the topics you selected, your preferred timeline and your message to respond to your enquiry. The form is sent as an email to contact@voltairstudio.com through Resend, an email delivery service that processes the message on our behalf (sending region Ireland, EU). The website itself does not store the message in a database. We use your IP address only briefly to limit misuse of the form (at most five messages per ten minutes) and we do not store it ourselves for that purpose. We keep the message in line with the retention periods in section 7 (lead data).
Visitor statistics: this website uses Vercel Web Analytics (Vercel Inc., United States) to count visits and see which pages are viewed. For each page view Vercel receives the page address, the referring page, your approximate location (country and region), device type, browser, operating system and the time. Vercel Web Analytics uses no cookies and stores nothing on your device. Visitors are told apart only by a code derived from the request, which Vercel discards after 24 hours, and Vercel states that the data cannot be used to follow you across websites or to identify you. We only use aggregated statistics. Legal basis: our legitimate interest in understanding and improving our website. Vercel processes the data on our behalf; transfers outside the EEA are covered as described in section 6. You can object by emailing contact@voltairstudio.com or by using a browser or extension that blocks analytics.
6. International transfers
Where personal data is transferred outside the EEA, Voltair Studio only uses a valid transfer mechanism, such as an adequacy decision, the EU-U.S. Data Privacy Framework where the receiving organisation is actually certified for it, SCCs or another valid legal basis. Where required, additional measures are taken.
7. Retention periods
| Category | Indicative period | Remark |
|---|---|---|
| Invoices / tax administration | 7 years | Statutory record-keeping obligation; specific exceptions may apply |
| Lead data | max. 12 months after the last relevant contact | Shorter where no longer needed sooner |
| Contract/project file | as long as necessary for performance + thereafter as long as reasonably necessary for legal claims | No automatic “5 years” for all data |
| Backups | in accordance with the backup policy, generally max. 90 days after termination | Not to be used as normal active storage |
| Consent records | as long as needed to demonstrate consent and compliance | Anonymised where possible |
8. Security
Voltair Studio takes appropriate technical and organisational measures. The exact measures depend on the processing and, where relevant, are described in the Security Annex. Public statements about specific versions or provisions are only made to the extent that they actually apply at the time of use.
9. Rights of data subjects
- Access, rectification, erasure, restriction, data portability and objection, to the extent legally applicable.
- Consent can be withdrawn without affecting the lawfulness of earlier processing.
- Requests: contact@voltairstudio.com.
- Complaints can be lodged with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
10. Children and sensitive data
Voltair Studio does not knowingly collect special-category or sensitive personal data through its own website unless this is necessary for a specific service and an appropriate legal basis and security have been arranged.
11. Cookies and similar technologies
Voltair Studio only uses technically necessary cookies and similar technologies without prior consent where a valid legal ground exists. Tracking cookies and other non-essential technologies for which consent is required are only activated after a valid choice by the visitor.
12. Cookie categories
| Category | Purpose | Consent |
|---|---|---|
| Necessary / functional | Login, security, preferences and basic functionality | No consent where not legally required |
| Limited analytics | Statistical measurement without major privacy impact | Without consent only if all conditions are met; otherwise consent |
| Marketing / tracking | Profiles, advertising, cross-site tracking | Prior consent |
13. Cookie inventory
| Name / key | Provider | Purpose | Category | Retention |
|---|---|---|---|---|
| voltair-lang | Voltair Studio (own website, localStorage) | Remembers the chosen language (Dutch or English) | Necessary / functional | Until the visitor deletes it |
Cookies, local storage, tracking pixels, SDKs and fingerprinting may also fall under the applicable ePrivacy/GDPR regime. The specific cookie names, storage periods, providers, purposes and international transfers are periodically verified against the website/app actually used. This policy does not describe any technology that is not actually used. Non-essential cookies, tracking pixels, SDKs or similar technologies are only activated after the required consent has been obtained. Withdrawing consent must be as easy as giving it. Vercel Web Analytics (section 5) uses no cookies and stores nothing on your device, so it does not appear in this table.
14. Account deletion for apps
Where an app lets users create accounts, a clear deletion option is provided and, where required, also an external web form or URL. The actual route and any statutory retention exceptions are described in the app and in the privacy information.
15. Contact
Privacy questions and requests can be directed to contact@voltairstudio.com.
16. Version and changes
Version September 2026. Voltair Studio may amend this privacy statement when services, legislation or technical processing change. The current version is published in an appropriate place.
Questions about this text? Email contact@voltairstudio.com.