Privacy policy
This English version is for information only. The Dutch version is legally authoritative. Privacyverklaring
In brief
- We use what you send so we can reply, schedule and run the booked session.
- No newsletter list, no ad network, no sale or rental of personal data.
- Session audio is not fed into datasets that train artificial intelligence.
- You can exercise your rights via [email protected] or the contact form; a complaint can go to the Dutch DPA.
1. Who is responsible
Labsterra B.V. ("we"), a private limited company (B.V.) with issued capital of €100, at Czaar Peterstraat 213, 1018 PL Amsterdam, the Netherlands, is the controller for personal data that arrives through labs24terra.click and through our bookings: quote requests, sessions and invoices. Chamber of Commerce 73172301, VAT NL879554162B01. Day-to-day management: Lars van den Berg.
We use that data to understand the brief, to answer within 2 working days, to deliver Vocal recording, Mixing, Mastering, Band recording or Podcast recording, and to keep quotes, invoices and accounts. We follow Regulation (EU) 2016/679 (GDPR) and the Dutch GDPR Implementation Act, and we shield the files from snooping, leaks, silent edits or deletion by outsiders.
We have not designated a data protection officer: the size and nature of this processing do not require one. Privacy questions: [email protected] or 020 244 18 06. Opening hours: Tuesday–Friday 10:00–20:00, Saturday 11:00–18:00. Closed Monday and Sunday.
2. Who this text covers
This page applies to visitors of labs24terra.click, to people who email, call or use the form, and to clients of the studio in Amsterdam-Oost. It describes our practice and your rights. The Dutch version is authoritative; this English page is a translation for information.
When a business client asks us to record singers, guests or session players they bring, that client decides the purpose of those recordings. We then act as a processor under the data processing agreement. Those people should read the client's own notice. Our notice still covers data we collect ourselves in order to plan and invoice.
3. What we collect
Through the contact form: name, email, phone if you add it, the service you have in mind, a hoped-for date if you have one, and a short project note. Required fields are needed so we can answer; without them we do not prepare a quote. The form is relayed by FormSubmit, a United States service; see transfers outside the EEA.
On booking and during the job: billing details, artist or group name, what we need for the quote, email or phone exchanges, payment references on a transfer. A deposit of 30 percent belongs with the reservation; that record stays with the booking. We do not store card numbers.
Recordings: voice and performance are personal data when a person is identifiable. We process them to deliver the chosen service. If your team films the session, that footage is yours.
Technical data: TransIP B.V. keeps connection logs (IP address, time, page requested, browser) to secure the site. Your cookie choice sits in the browser's local storage under lbst_consent_v1; that value holds no name or email.
We do not ask for special-category data (health, political views, religion). If a session has to move because someone is ill, it is enough to say you cannot come; we do not ask for a medical certificate. We do not send newsletters and we do not take automated decisions or profile visitors.
4. Purposes, legal bases and retention
| Purpose | Data | GDPR basis | How long we keep it |
|---|---|---|---|
| Answer a question and prepare a quote | Form, email, phone | Steps before a contract, at your request (Art. 6(1)(b)) | Three years after the last contact |
| Book, deliver and close the job | Identity, contact, project, diary | Performing the contract (Art. 6(1)(b)) | Five years after the relationship ends (limitation, Dutch Civil Code) |
| Keep working session files | Takes, session folders | Performing the contract (Art. 6(1)(b)) | 24 months after we last tracked, then wipe |
| Invoicing and accounts | Identity, invoice, payments | Legal obligation (Art. 6(1)(c)) | Seven years (tax retention, Art. 52 AWR) |
| Handle a complaint or dispute | Correspondence, file notes | Legitimate interest in defending our position (Art. 6(1)(f)) | Length of the case and appeal periods |
| Keep the website safe | Host connection logs | Legitimate interest (Art. 6(1)(f)) | Twelve months at most |
| Remember your tracker choice | Key lbst_consent_v1 in the browser | Legal duty (Art. 11.7a Dutch Telecommunications Act) | 182 days |
We do not sell or rent personal data. We do not send marketing mail. A new purpose is used only if it is compatible with the original one, or we ask again.
Where we rely on legitimate interest, we check that the aim is real, that the processing is needed and that your interests do not outweigh it. You can ask for a summary of that test and object. Business invoices are due in 14 days; that paperwork falls under the tax retention above. Published rates, such as Vocal recording from €95 per hour including 21 percent VAT, sit on the services table and in the terms and conditions.
5. Voice, image, minors and AI
Voice and face are part of private life. We do not put a clip of your session, a studio photo of you or your name on the site or on social media without prior written permission. Pictures on labs24terra.click are generated atmosphere shots, not recordings of clients.
We do not use client recordings to train, test or improve artificial intelligence, and we do not build a voice clone without specific written permission from the person concerned.
A session for someone under 16 is booked by a parent or guardian, who supplies the needed details. Article 5 of the Dutch GDPR Implementation Act sets 16 as the Dutch threshold for a young person to agree on their own to an online information service. Our form is meant for adults or legal representatives; we do not offer a service aimed at children. How rights sit on a band date is sketched in rights in a band recording; that guide does not replace this notice.
6. Who can see the data
Access is limited to the studio team, within their tasks: Lars van den Berg (studio director and lead engineer), Sophie Meijer (recording and mix engineer), Noah El Amrani (mastering engineer) and Emma de Vries (production coordinator and scheduling). The following recipients may also see data, only for the purposes above:
- TransIP B.V. (Vondellaan 47, 2332 AA Leiden, the Netherlands), host of the site, mailbox and storage, in data centres in the European Union; host site: TransIP B.V.;
- FormSubmit (formsubmit.co), which forwards the contact form to our mailbox;
- our bookkeeper, bound by professional secrecy, for invoice data;
- our bank, for transfers;
- a lawyer or court, if there is a dispute;
- authorities that ask under the law.
Anyone who processes for us does so under an arrangement that meets Article 28 GDPR. We have not appointed a consumer mediator; disputes follow the path in the terms and conditions and the legal notice.
7. Transfers outside the European Economic Area
Our own files stay in the European Union, with TransIP B.V. in Leiden. FormSubmit is operated from the United States: submitting the form routes the message via that company. To our knowledge the provider is not listed under the EU-US Data Privacy Framework. The transfer rests on Article 49(1)(b) GDPR: it is needed for the pre-contractual steps you request by sending your project.
If you prefer to avoid that path, write to [email protected] or call 020 244 18 06. We handle the request in the same way. Files you send after booking (stems, references, scripts) can travel on an agreed channel, without the web form. See also how to exchange stems for a mix.
8. Security
We apply appropriate measures: the site is served over HTTPS only, client folders stay with named logins and long passphrases, a second factor is on wherever the tool offers it, disks on the desks are encrypted, the building is locked when nobody is booked, and session files are wiped after the 24-month archive window. The studio is at Czaar Peterstraat 213 in Amsterdam-Oost; physical access to the 42 m² live room, the 3 iso booths and the 18 m² control room is limited to planned visits, at most 8 people. Working archive: 48 TB, not unlimited cloud storage.
If a breach is likely to risk your rights, we notify the Dutch Data Protection Authority within 72 hours (Article 33 GDPR) and we contact you ourselves whenever the risk looks serious (Article 34). No internet path is fully secure; once data reach us, our measures apply.
9. Your rights
Under the GDPR you may:
- ask what we hold and how we use it (Art. 15);
- have mistakes or gaps put right (Art. 16);
- ask us to delete records that have no remaining purpose (Art. 17);
- ask us to freeze processing in the situations the Regulation names (Art. 18);
- receive a copy of what you supplied, in a tidy machine-readable package (Art. 20);
- object when we lean on our own legitimate interest (Art. 21);
- take back consent, which does not undo work already done (Art. 7(3));
- complain to the supervisory authority (Art. 77).
Send the request to [email protected] or to the studio post box. The legal reply window is one month; a tangled file may add two months, and we will tell you (Art. 12(3) GDPR). Exercising rights is free. If we reasonably doubt your identity, we may ask for extra details. Ordinary studio messages we try to answer within 2 working days; that is faster than the legal deadline, not an extra right.
You may lodge a complaint with the Autoriteit Persoonsgegevens, Bezuidenhoutseweg 30, 2594 AV The Hague, autoriteitpersoonsgegevens.nl. Write to us first: most questions close quickly. Planning and cancellation (free up to 5 days ahead) are covered in the FAQ.
10. Cookies and similar techniques
A cookie is a small file a site places on your device to remember a preference or measure use. Other techniques — browser storage, tracking pixels, invisible beacons — do the same job.
labs24terra.click does not set cookies or trackers for statistics, advertising or social media. We only store your cookie choice in the browser's local storage (lbst_consent_v1) for 182 days. The banner splits five categories — necessary, functional, analytics, marketing, preferences — and shows three equally prominent controls: allow everything, refuse everything, or pick category by category. The four optional categories are empty for now.
If we ever add a tracker that needs consent, we will say so and ask again. The full list is in the cookie policy. You can reopen the banner with .
11. Links to other sites
The site links to third parties, for example OpenStreetMap for the location on Czaar Peterstraat 213. Those sites apply their own rules; we are not responsible for their practice. Plain-language directions sit on contact: Tram 10 stops at Czaar Peterstraat; it is about a three-minute walk to number 213. From Oostplein metro (lines 51, 53 and 54) allow roughly ten minutes on foot along Czaar Peterstraat.
12. Status and changes
This notice describes our practice; it does not cut back the rights the law gives you. We may change it when services or rules change. The revised text appears here with a new start date and takes the place of the older one. If a change is substantial, we email existing clients. Effective date: 1 October 2026. Last update: 1 October 2026. The Dutch text prevails; this English page is a translation for information.
Contact: Labsterra B.V., Czaar Peterstraat 213, 1018 PL Amsterdam — [email protected] — 020 244 18 06. About the studio: about us. About access to the site and the building: accessibility statement.