Privacy policy
This English text is for convenience. The Dutch version is legally authoritative. Privacyverklaring
In short
- We only process data you send us or data needed to run your session and invoicing.
- No advertising cookies, no sale of data, no AI training on your recordings.
- Session files are kept for up to 12 months after delivery unless you ask for longer storage.
- Questions or requests: [email protected] or 020 737 0842 — we usually reply within one business day to first contact.
1. Who is responsible?
Morigliolink B.V. ("Morigliolink"), a private limited company (B.V.), registered at Overtoom 682, 1054 JT Amsterdam, is the controller for personal data processed on morigliolink.click and in our direct dealings with you: enquiries, bookings, recording, mixing, mastering and related administration.
We process data in line with the General Data Protection Regulation (GDPR) and the Dutch GDPR Implementation Act. A dedicated DPO is not mandatory for a studio of our size; reach the team on [email protected] or 020 737 0842 for privacy matters. Managing director: Lars van der Meer.
Our terms and conditions govern the commercial relationship; this policy covers data processing only. Company identifiers are listed under legal notice.
2. Scope
This policy applies to website visitors, people who contact us and clients who book a session or post-production at our Amsterdam studio. Third-party platforms we link to (for example maps) have their own policies.
When a business client asks us to record guests or artists, Morigliolink may act as a processor for those individuals’ data. Our data processing agreement then applies and the client determines the purpose; those individuals may still contact us about technical storage in the studio.
3. What data we collect
Through the contact form: name, email address, phone (optional), chosen service, preferred date (optional) and a free-text project description. Required fields are needed to respond to your enquiry.
When booking and delivering the service: billing details, artist or band name, scheduling, email and phone exchanges, payment references. Card payments at the studio are handled by our bank; we do not store card numbers.
Recordings and edits: voice, instruments and performance are personal data when you are identifiable. We use them only to deliver the agreed service. If you film inside the studio, you remain responsible for footage of other people.
Technical data: our host TransIP B.V. processes server logs (IP address, time, page requested, user agent) for security. Your cookie choice is stored locally in your browser; see cookie policy.
We do not ask for special-category data. You do not need to share medical information; if you need to cancel, say you are unavailable.
4. Purposes, legal bases and retention
| Purpose | Data | Legal basis (GDPR) | Retention |
|---|---|---|---|
| Replying to enquiries and quotes | Form, correspondence | Legitimate interest / pre-contract steps (Art. 6(1)(b) and (f)) | Up to 2 years after last contact unless an open file needs longer |
| Booking, delivery and follow-up | Identity, contact, project, schedule | Contract performance (Art. 6(1)(b)) | 5 years after the relationship ends (general limitation period) |
| Archive of session and project files | Recordings, session folder, stems | Contract performance (Art. 6(1)(b)) | 12 months after last delivery, then deletion unless agreed otherwise in writing |
| Invoicing and accounts | Name, invoice lines, bank references | Statutory duty (Art. 6(1)(c)) | Seven years under Dutch tax rules |
| Disputes or complaints | Correspondence, case files | Legitimate interest (Art. 6(1)(f)) | Duration of proceedings and any appeal periods |
| Securing the website | Host logs | Legitimate interest / security (Art. 6(1)(f)) | Up to 12 months unless the host keeps them shorter |
| Remembering cookie choice | Key mrgl_consent_v1 in localStorage | Consent / technical necessity (Dutch Telecommunications Act) | 182 days |
Your details are never traded to brokers or list vendors, and we do not run mailing lists. If we ever wanted a new use, we would either show it is compatible with why we collected the data or ask for fresh consent.
5. Voice, image, age and artificial intelligence
Your voice and performance fall under privacy and portrait rights. We do not publish excerpts of your recordings, session photos or your name on our site or social channels without prior written consent.
We never use client recordings to train, test or improve AI systems, and we do not create voice clones without the data subject’s explicit written permission.
Online booking via the form is intended for people aged 16 and over. Younger artists may work with us when a parent or legal guardian books and provides contact details.
6. Recipients and processors
Within Morigliolink, only team members who need your file for their role (recording, mix, mastering, planning) have access. External recipients, strictly for the purposes above:
- TransIP B.V. — hosting of morigliolink.click and related infrastructure in the Netherlands;
- FormSubmit (formsubmit.co) — forwarding contact form content to our mailbox;
- accountant — billing data, bound by professional secrecy;
- bank — payments;
- public authorities — when the law requires it.
Every party processing on our behalf is bound by an agreement under Art. 28 GDPR. Business clients: data processing agreement.
7. Transfers outside the EEA
Hosting and mail for the site are primarily within the European Economic Area. FormSubmit is operated from the United States: contact form content passes through that service before we receive it. We rely on appropriate safeguards such as standard contractual clauses, and where needed on your request for contact (pre-contractual steps, Art. 49(1)(b) GDPR).
To avoid that route, email or call us directly at [email protected] or 020 737 0842; we handle your request the same way.
8. Security
We apply appropriate measures: HTTPS on the site, restricted access with individual accounts and strong passwords, encrypted workstations where feasible, locked premises outside sessions, and deletion of archive files after the retention period. Sessions in Oud-West take place in controlled rooms; see about us for the location.
If a breach is likely to affect your rights, we notify the Dutch Data Protection Authority and inform you when the GDPR requires it. No online transmission is completely risk-free; once we receive data, we apply internal safeguards.
9. Your rights
You have the right of access, rectification, erasure, restriction, data portability and to object to processing based on legitimate interest. You may withdraw consent without affecting the lawfulness of earlier processing.
Send requests to [email protected] or by post to Overtoom 682, 1054 JT Amsterdam. We reply within one month; complex requests may be extended by two months with an explanation. We may verify your identity if in doubt.
You may lodge a complaint with the Autoriteit Persoonsgegevens (AP), autoriteitpersoonsgegevens.nl. We prefer to help you first via contact.
10. Cookies and similar technologies
The site uses no analytics, advertising or social media trackers. Only your cookie choice is stored locally under key mrgl_consent_v1 for 182 days. Details are in the cookie policy; change your choice via .
11. External links
The site may link to map or routing services (for example OpenStreetMap). Those services apply their own privacy rules; we are not responsible for their processing.
12. Changes
This policy is informational and does not limit your legal rights. We may update it when services or law change. The version on this page dated 14 October 2026 replaces earlier text. Material changes may be emailed to active clients where appropriate.
Contact: Morigliolink B.V., Overtoom 682, 1054 JT Amsterdam — [email protected]. Rates and VAT: services (VAT 21 %).