Privacy policy
This English version is for information only. The Dutch version is legally authoritative. Privacyverklaring
In brief
- We handle contact and booking details solely to answer you and run your session.
- No behavioural ads, no data resale, no AI training on your takes.
- Project copies stay on our systems for 24 months at most.
- Reach us at [email protected]; target response within 2 business days.
1. Controller identity
Morceauxnode B.V. («Morceauxnode», «we») decides how personal data is used when you use morceauxnode.click or work with our team. Our studio address is Overtoom 301, 1054 GL Amsterdam.
Registration: private limited company (B.V.), the Netherlands; trade register 63085050; VAT number NL865589860B01; director Niels van Dijk. Privacy queries: [email protected] or 020 789 0416.
No dedicated DPO is appointed for this studio; that is proportionate to our scale. Requests from you are logged and answered in line with GDPR timelines.
2. Who this notice covers
Visitors, enquirers and paying clients using vocal or band sessions, mix and mastering, or podcast dialogue work at Amsterdam. The notice explains processing and statutory rights under EU Regulation 2016/679 as applied in the Netherlands.
If a company hires us to capture third parties (musicians, hosts, guests), that company is controller for their data; we process under the data processing agreement. Background on performer rights: vocal session rights guide.
3. Categories of information
Enquiries: identity and contact fields from the form, optional phone and date, service selection, free-text project notes. Mandatory items are the minimum to prepare pricing.
Contracts and sessions: invoicing identity, act or ensemble name, calendars, message threads, bank references. Terminal card payments are handled by the acquirer; PAN data never reaches our files.
Audio captures: identifiable voice or performance is personal data. Use is limited to production agreed in the quote. Self-shot video on site remains your responsibility.
Infrastructure logs: TransIP B.V. may record IP, timestamp, URL and browser signature for abuse prevention. Consent metadata lives client-side; see cookie policy.
We do not solicit health or other special-category data. Web forms target adults 18+; minors attend only when a guardian books.
4. Why we keep data and for how long
| Activity | Typical records | Lawful ground | Maximum retention |
|---|---|---|---|
| Sales dialogue | Form payloads, email threads | Pre-contract steps you initiate (GDPR Art. 6(1)(b)) | 24 months from last message |
| Studio production | Contact, brief, timetable, deliverables | Performing the contract (Art. 6(1)(b)) | Five years after the business relationship ends |
| Working copies | Multitracks, mixes, masters | Contract (Art. 6(1)(b)) | 24 months from final session day, then secure erasure |
| Tax and finance | Invoices, payment proofs | Statutory bookkeeping (Art. 6(1)(c)) | Seven years under Dutch tax rules |
| Defending claims | Case files, correspondence | Legitimate interests (Art. 6(1)(f)) | Until limitations expire plus any appeal window |
| Site integrity | Host access logs | Security interest plus telecom duties (Art. 6(1)(f)/(c)) | Twelve months rolling |
| Consent memory | Browser key mrcx_consent_v1 | Dutch Telecommunications Act / consent where applicable | 182 calendar days |
Data is never monetised through lists or brokers. Marketing mail only with a separate opt-in. Further processing needs a fresh legal test or permission.
5. Recordings, likeness and machine learning
Performances and likeness enjoy protection under Dutch civil law and the GDPR. We do not share clips, behind-the-scenes images or client names online unless you sign off in writing first.
Session audio is off limits for model training, benchmarking or synthetic voice recreation unless an individual gives explicit written approval for that narrow purpose.
Commercial terms: terms and conditions; artist-focused notes: rights after vocals.
6. Disclosures to others
Internal access is role-based across our small engineering team. External parties may receive data only as needed:
- TransIP B.V., Vondellaan 47, 2332 AA Leiden, the Netherlands — site and mailbox hosting in the EEA;
- FormSubmit (United States) — relays contact-form submissions to [email protected];
- external accountant under professional confidentiality — invoice lines;
- payment institution — settlement of transfers;
- public bodies — lawful demands only.
Each processor signs Article 28 terms. Cross-border aspects are covered next.
7. International flows
Routine files stay in the European Economic Area. Submitting the contact form routes content through FormSubmit servers in the US, which is justified as a pre-contractual step you request (GDPR Art. 49(1)(b)). Their public policies are at formsubmit.co.
Prefer to skip that hop? Write or phone 020 789 0416 using [email protected] — we process offline enquiries identically.
8. Protection measures
TLS everywhere on morceauxnode.click, individual credentials, locked rooms when sessions are not running, scheduled wipe of project archives after 24 months, encrypted disks where supported on edit stations.
Should an incident likely harm your rights, we file with the Autoriteit Persoonsgegevens and tell you directly if risk is high. Transmission over the internet always carries residual risk; storage afterward follows the controls above.
9. Rights you can exercise
Under the GDPR you may request:
- a copy and explanation (Art. 15);
- correction of mistakes (Art. 16);
- deletion when retention no longer applies (Art. 17);
- paused processing in listed situations (Art. 18);
- export of supplied data in a machine-readable format (Art. 20);
- objection to interest-based processing (Art. 21);
- withdrawal of consent with forward-looking effect (Art. 7(3)).
Email [email protected] or post to Overtoom 301, 1054 GL Amsterdam. Standard deadline: one month, extendable to three with notice. No fee unless requests are manifestly unfounded or excessive. We may verify identity.
Studio logistics: FAQ and contact page.
10. Trackers on the website
No Matomo, Meta pixel or similar. Optional category toggles persist as mrcx_consent_v1 in localStorage for 182 days. Accept and reject buttons carry equal visual weight.
Full tracker list: cookie policy. Reopen the panel with .
11. Regulator
Unhappy after talking to us? Contact Autoriteit Persoonsgegevens, PO Box 93374, 2509 AJ The Hague, autoriteitpersoonsgegevens.nl.
12. Version history
Effective 14 October 2026; page refreshed 14 October 2026. We publish updates here and may email active clients when changes materially affect processing.
Morceauxnode B.V., Overtoom 301, 1054 GL Amsterdam — [email protected]. Related: legal notice, service list.