Controller and how to reach us
The controller responsible for the processing of personal data described in this policy is Kyxrelynwrzap, with its registered business address at Rokin 64A, 1012 KW Amsterdam, Netherlands. You can email contact@kyxrelynwrzap.world or call +31 20 624 4331 for any matter related to privacy or to exercise your rights. If you use the contact form, you may also receive an automated acknowledgement so you know the message was accepted by our system.
Categories of data we may process
When you load pages on this site, our hosting environment may process technical data such as IP address, date and time, requested URL, browser type, and operating system, for security, debugging, and aggregate statistics. If you use the contact form, we process the name, email address, and the text of your message, along with a timestamp. If you give consent in the cookie banner, we also record your cookie preferences and, where applicable, anonymous or pseudonymous identifiers used by analytics or marketing tools you allowed.
We do not design this public website to collect special categories of data. Please do not send us sensitive information about health, beliefs, or similar topics through the general form unless we have set up a separate secure channel and contract for that purpose.
We do not build profiles that produce legal or similarly significant effects about you by purely automated means on the basis of this site alone. If that ever changes, we will update this text and, where required, ask for a separate, explicit consent.
Purposes and legal bases (GDPR Article 6)
We use contact details you send to answer your question, prepare an offer, or take steps before a possible contract, which may be performance of a contract or pre-contractual measures at your request. Where we are not yet in a contract, replying to a professional enquiry can also be based on legitimate interests in running a small studio, balanced against your rights. Operating the site and keeping it secure rely on legitimate interests and, where the law requires it, compliance with a legal obligation. Non-essential cookies and similar tools are only activated on the basis of consent, which you can withdraw as explained in the cookie policy.
Retention
We keep contact messages and the related email thread for up to twenty-four months after the last substantive reply, unless a longer period is required for a legal claim, tax, or accounting. Raw server log entries, where kept, are typically deleted or aggregated within ninety days, except when we need a longer hold for a security investigation with a defined end date. Cookie and consent records follow the period stated in the cookie policy.
Recipients and processors
We use infrastructure and communication providers to host the site and deliver email. They act as processors on our written instructions, under a contract that meets Article 28 GDPR where applicable. We do not sell your personal data to third parties in the common sense of “selling lists.”
Transfers outside the EEA
If a tool or server is located outside the European Economic Area, we ensure an appropriate safeguard such as the European Commission’s standard contractual clauses, or we rely on an adequacy decision, unless a specific derogation in Article 49 GDPR applies. You may request more detail about those safeguards by writing to the contact address above.
Security measures
We apply technical and organisational measures that fit the kind of data we process: transport encryption (HTTPS) for the site, access controls and unique accounts for our staff, and least-privilege access to hosting. No online transmission is without risk, but we review our setup as our services evolve.
Your rights and complaints
Subject to the conditions in the law, you may have the right to access your data, to rectify it, to erase it, to restrict processing, to object in certain cases, to data portability for data you provided under contract or consent, and to withdraw consent for consent-based processing. You may lodge a complaint with a supervisory authority. In the Netherlands, the primary authority is the Autoriteit Persoonsgegevens. We prefer to resolve issues with you first when you get in touch with us directly.
If something in this policy is unclear, send one question at a time and we will answer in the same order we receive them during office hours.
Go to the contact form