Privacy policy
This English version is for information only. The Dutch version is the authoritative text. Privacyverklaring
In short
- Okiatech B.V. is the controller for okiatech.click and for bookings at the studio in Amsterdam.
- We ask only what we need to reply, schedule the session and issue an invoice.
- Session files stay 9 months; then we wipe the working drives.
- The contact form travels through FormSubmit in the United States; you can email or call instead.
- Exercise your rights at [email protected]. You may also complain to the Dutch Data Protection Authority.
1. Who the controller is
The controller is Okiatech B.V., a private limited company (B.V.) at Eerste Helmersstraat 42, 1054 DG Amsterdam, Oud-West, the Netherlands. Chamber of Commerce 64390335, VAT NL832342774B01. Director: Maarten van der Berg. Telephone 020 737 0891, e-mail [email protected].
This policy covers the website okiatech.click and the processing that comes with quotes, reservations, recording sessions, mixing, mastering, podcast and audiobook work, and invoicing. We handle personal data under the General Data Protection Regulation (Regulation (EU) 2016/679, the GDPR) and the Dutch GDPR Implementation Act. The law of the Netherlands applies. The Dutch page is the authoritative version; this English page is a faithful translation for information.
We have not appointed a data protection officer. That appointment is not required for our size and core work. Privacy questions go to Maarten van der Berg or the team, via [email protected] or the contact form. We reply within 2 working days. Identity and registered office also appear in the legal notice.
2. Who this policy is for
It is written for people who browse the site, people who send a project, and clients who come in themselves — soloists, bands of up to 5 players, podcast hosts and narrators. If you book vocal recording, band recording, a mix, a master or podcast or audiobook time, we use your details to carry out that job.
When a publisher, label or production company books people who are not themselves the client — a hired voice, podcast guests — that company decides how the recording will be used. Okiatech B.V. then acts as a processor. Those terms sit in the data processing agreement. For those people, the client's own privacy notice comes first.
3. The data we collect
Through the contact form: name, e-mail address, phone (optional), the service you pick, a preferred date (optional) and a short project note. Required fields are there so we can answer. Without a name and an e-mail we do not prepare a quote.
When you book and during the job: billing details, artist or band name, the schedule, e-mail or phone exchanges, and bank-transfer references. We invoice and take transfers. We do not store card numbers.
Recordings: voice, speech and a musical performance are personal data when you can be recognised. We use them to deliver the service you ordered: raw takes, a mix with 2 revision rounds, or a master in the format you asked for. If your own crew films the session, that footage is yours to handle.
Technical data: TransIP B.V. keeps connection logs (IP address, time, page requested, user-agent) to keep the site secure. Your tracker choice lives in your browser's local storage under oktc_consent_v1 and holds no name or e-mail. See the cookie policy.
We do not ask for special-category data. If a session has to move for health reasons, telling us you are unavailable is enough. We do not ask for a medical certificate. We check age only when we need to respect the 16-year minimum.
4. Purposes, legal bases and retention
| Purpose | Data | Legal basis (GDPR) | How long we keep it |
|---|---|---|---|
| Answering an enquiry and preparing a quote | Form and messages | Steps toward a contract that you asked us to take (GDPR 6(1)(b)) | First reply within 2 working days; then up to 24 months after the last contact if no job follows |
| Booking, carrying out and following up the job | Identity, contact details, project, diary | Performing the studio contract (GDPR 6(1)(b)) | Five years after the job ends, in line with the limitation period for contractual claims (Art. 3:307 of the Dutch Civil Code) |
| Keeping session and working files | Recordings, stems, project files | Performing the studio contract (GDPR 6(1)(b)) | 9 months after the last session or delivery, then we wipe the working drives |
| Invoicing and accounts | Name, address, amounts, payments | Legal obligation (Art. 6(1)(c)) | Seven years, tax retention duty (Art. 52 of the Dutch General State Taxes Act) |
| Handling a complaint or dispute | Correspondence and file notes | Legitimate interest in defending our position (Art. 6(1)(f)) | Length of the proceedings and any appeal windows |
| Keeping the website secure | Connection logs at TransIP B.V. | Legitimate interest and, where the law requires logs, legal obligation (Art. 6(1)(f) and (c)) | No longer than needed for security, and never more than twelve months |
| Remembering your tracker choice | Key oktc_consent_v1 in the browser | Legal obligation (Art. 11.7a of the Dutch Telecommunications Act) | 182 days |
We do not sell data and we do not rent it. We send no newsletter and no marketing mail. We will not start a new purpose that does not fit the original one without consent or another valid basis.
Where we rely on legitimate interest, we check that the aim is real, that the processing is necessary and that your interests do not outweigh it. You can ask for a short account of that check and you can object (see article 9).
5. Voice, image, under-sixteens and automation
Your voice and your face are part of private life. We do not put a clip from your session on the site, a session portrait, or your name in a portfolio unless you agree in writing first. The mood photographs on okiatech.click are generated images; they do not show real clients.
We do not use clients' recordings to train, test or improve artificial-intelligence systems. We do not build a voice clone or a synthetic voice in your likeness unless you ask for that in writing, specifically, as part of a job.
The minimum age for a booking is 16. Article 5 of the Dutch GDPR Implementation Act sets sixteen as the solo-consent age for information-society services in the Netherlands. A session for someone under 16 is booked by a legal guardian. The form is not an online service aimed at children.
6. Who can see your data
The three people on the studio team can see data, each within their own task: planning, recording, mix, mastering or admin. Maarten van der Berg is accountable. The following recipients may also see data, only for the purposes above:
- TransIP B.V., Vondellaan 47, 2332 AA Leiden, the Netherlands — website hosting; www.transip.eu;
- FormSubmit (formsubmit.co) — forwarding the contact form to our mailbox;
- our accountant, bound by professional secrecy, for invoice data;
- our bank, for transfers;
- a lawyer or court, if a dispute requires it;
- public authorities that make a lawful request.
Anyone who processes personal data for us does so under a contract that meets Article 28 GDPR. For clients who remain the controller themselves, that contract is the data processing agreement.
7. Transfers outside the European Economic Area
The website runs at TransIP B.V. in the Netherlands. FormSubmit is operated from the United States. If you send the form, the contents of that message pass through servers outside the EEA. We have not seen a current EU-US Data Privacy Framework listing for this vendor. We rely on the specific-situation exception in GDPR Art. 49(1)(b): you initiate the exchange by sending a project, and the message has to travel for us to prepare a quote.
If you want to avoid that transfer, write to [email protected] or call 020 737 0891. We handle the request in the same way. The form asks for no more fields than we need to reply and to find a slot within Mon–Fri 09:00–21:00 · Sat 10:00–18:00.
8. Security and personal-data breaches
We take measures that fit a small studio: the site is served over HTTPS only, file access is limited to the team with individual accounts, workstation disks and backup media are encrypted, the building at Eerste Helmersstraat 42 is locked outside sessions, and working files come off the drives after 9 months. Passwords are unique; we switch on two-factor authentication where the service allows it.
If we find a personal-data breach that poses a risk, we notify the Dutch Data Protection Authority within 72 hours (Art. 33 GDPR). If the risk is high, we also tell you directly (Art. 34 GDPR). No internet connection is perfectly safe; once data reaches us, our measures apply.
9. Your rights
Under the GDPR you can:
- ask what we hold and how we use it (Art. 15);
- have wrong or missing details corrected (Art. 16);
- ask us to delete records we no longer require (Art. 17);
- ask us to freeze processing in the situations listed in Art. 18;
- receive a copy, in a structured digital format, of what you supplied (Art. 20);
- object where we rely on legitimate interest (Art. 21);
- take back consent at any moment; earlier lawful use stays lawful (Art. 7(3)).
Write to [email protected] or by post to Eerste Helmersstraat 42, 1054 DG Amsterdam. We reply within one month. For a complex request that period may grow by two months; we will tell you if it does (Art. 12(3) GDPR). Exercising your rights is free. If we reasonably doubt your identity, we may ask for extra information.
Some records must stay for the seven-year tax duty. Access to or erasure of an invoice line can then be limited. Session files still inside the 9-month window can be deleted earlier on request, unless we still need them for an open revision or a dispute.
You may lodge a complaint with the Autoriteit Persoonsgegevens, the supervisory authority in the Netherlands, at autoriteitpersoonsgegevens.nl. Please write to us first: most questions close faster that way.
10. Cookies and similar techniques
A cookie is a small file a site places on your device to remember a preference or measure use. Other techniques, such as local storage in the browser, fall under the same rules in Article 11.7a of the Dutch Telecommunications Act.
okiatech.click places no cookies for audience measurement, advertising or social networks. We only store your banner choice in local storage, under the key oktc_consent_v1, for 182 days. The banner groups trackers into five buckets (strictly required, extra features, measurement, ads, display settings) and gives accept, refuse and customise the same visual weight. The four optional categories are empty today.
If we later add a tracker that needs consent, we will ask again. Names and the table sit in the cookie policy. Reopen your choice with .
11. Links to other websites
The site points to third parties, for example the OpenStreetMap view on the contact page and the browser help pages in the cookie policy. Those services have their own privacy notices. Okiatech B.V. is not responsible for their processing. We do not embed a map, video or social widget that would set extra cookies.
12. Changes, language and contact
This policy describes what we do. It does not cut down the rights you already have under the law. We may change the text when our services or the rules change. The new version is published on this page, effective 1 October 2026 and last updated 1 October 2026, and replaces the previous one. If a change affects you in a noticeable way, we e-mail existing clients.
Rules on the deposit (35 %), free cancellation up to 5 days ahead and the 14-day payment term for business invoices live in the terms and conditions. Prices, including 21 % VAT, sit on each service page — for example €89 per vocal studio hour or €79 per podcast hour.
Contact: Okiatech B.V., Eerste Helmersstraat 42, 1054 DG Amsterdam — [email protected] — 020 737 0891. Hours: Monday to Friday 09:00–21:00, Saturday 10:00–18:00, by appointment only. How to get here: Tram 3 or 12 to Eerste Constantijn Huygensstraat, then about four minutes on foot. Tram 1 or 7 to Leidseplein, then roughly eight minutes via Overtoom. Bike rack in front of the building.