Legal
Privacy policy
Last updated: 6 October 2026
This policy explains what personal data WedgeView Studios collects when you visit our website, send us a booking request or contact us, and what we do with it. We use your data to answer your questions, handle your booking and keep our website working and secure, and we only use analytics and marketing cookies if you allow them.
Who we are
WedgeView Studios is a recording studio in a renovated cow stable on a farm in Woerdense Verlaat, in the municipality of De Ronde Venen, the Netherlands. WedgeView Studios is a trade name of Roestey B.V., a Dutch private limited company (besloten vennootschap).
Roestey B.V., trading as WedgeView Studios, is the controller of the personal data described in this policy. This means we decide why and how your data is used. In this policy, "we" and "us" mean Roestey B.V., trading as WedgeView Studios.
- Address: Amstelkade 33, 3652 ME Woerdense Verlaat, the Netherlands
- KvK number: 98389386 (Dutch Chamber of Commerce)
- VAT number: NL868471823B01
- Email: roeland@wedgeviewstudios.com
- Phone: +31 (6) 297 38 576
We have not appointed a data protection officer, because the law does not require us to. For any question about your personal data, email us at roeland@wedgeviewstudios.com.
This policy covers our website www.wedgeviewstudios.com (including the web addresses that forward to it), the booking requests and messages you send us, contact by email and phone, and our pages on social media.
What data we collect
We collect the data you give us, and some technical data that your browser sends when you use our website.
When you send a booking request
Our booking form asks for:
- the studio you are interested in, your preferred start date and whether your dates are flexible;
- the session length (with details if you choose "Other") and your engineer choice (bring your own, a studio engineer, or not sure yet);
- whether you would like to stay in the rooms upstairs and whether you would like the shuttle from the station;
- your name or band name and your email address (required);
- your phone number (optional);
- anything you tell us about your project (optional).
When you send the form, our website provider Webflow also records the page you sent it from and the date and time. A spam check by Cloudflare Turnstile runs on the form (see Who we share your data with).
When you use our contact form
- your name and email address (required);
- the topic you choose;
- your message (required).
When you email, call or message us
We receive your email address or phone number and whatever you tell us. If you contact us through social media, we also see your profile name.
If your booking goes ahead
We use the details we need to prepare and run your session, your stay in the rooms upstairs and the shuttle, such as dates, times, the number of people and where we pick you up. For the invoice we record your name and address (and the company name and VAT number if you book for a business), the services and amounts, and your payment.
Recordings and project files made during your session can contain your voice or performance. We use them only to provide our service to you, and we do not share or publish them without your permission. Whether we keep copies after your session is agreed with you (see our Terms of service). We ask your permission before we publish photos or videos from your session in which you can be recognised.
If you book for a band or group, you may give us details of other people, such as the names of band members. Please tell them about this policy.
When you visit our website
Like every website, ours receives technical data from your browser: your IP address, browser and device type, operating system, language settings, the page you visit, the website you came from and the date and time. Our hosting provider uses this data to show the pages and to protect the website. Some pages load fonts, scripts or a map from other providers, which also receive your IP address and browser data.
We store your cookie choice in a cookie on your device. Only if you allow it, we also collect data about your visit with Google Analytics, the Meta Pixel, Google Ads and the ChatGPT Ads pixel (see Analytics and marketing).
We do not ask for sensitive data, such as information about your health. Please do not send it to us.
Why we use your data and on what basis
We only use your data for the purposes below. For each purpose, the General Data Protection Regulation (GDPR) requires a legal basis.
Handling your booking request
- Data: the booking form details, and emails and calls about your request.
- Why: to check availability, answer your questions and confirm your booking by email.
- Legal basis: taking steps at your request before entering into a contract (article 6(1)(b) GDPR).
Running your booking and invoicing
- Data: contact details, booking details, invoice and payment details.
- Why: to provide your session, your stay in the rooms upstairs and the shuttle, to send you the invoice and to check your payment. Our Terms of service explain the booking terms.
- Legal basis: performing our contract with you (article 6(1)(b) GDPR).
Keeping our accounts
- Data: invoices, payment records and other bookkeeping records.
- Why: Dutch tax law requires us to keep invoices and bookkeeping records for 7 years.
- Legal basis: legal obligation (article 6(1)(c) GDPR).
Answering your messages
- Data: name, email address, phone number, topic and message.
- Why: to answer questions you send us through the contact form, by email, by phone or through social media.
- Legal basis: our legitimate interest in answering questions about our studio (article 6(1)(f) GDPR). If your message is about a booking: taking steps before, or performing, a contract (article 6(1)(b) GDPR).
Keeping the website and forms secure
- Data: IP address, browser data, the security cookie _cfuvid and the signals Cloudflare Turnstile uses.
- Why: to protect the website against attacks and to keep spam and bots out of our forms.
- Legal basis: our legitimate interest in a secure website and spam-free forms (article 6(1)(f) GDPR). This is strictly necessary, so it does not need your consent.
Showing the website correctly
- Data: IP address, browser data and the address of our website.
- Why: to load the fonts, scripts and map that our pages use.
- Legal basis: our legitimate interest in a website that looks and works as designed (article 6(1)(f) GDPR).
Remembering your cookie choice
- Data: the contents of the ws_consent cookie (see our Cookie policy).
- Why: to respect your choice and to be able to show that we asked for your consent.
- Legal basis: legal obligation to be able to demonstrate consent (article 6(1)(c) GDPR together with article 7(1) GDPR).
Website statistics with Google Analytics
- Data: see Analytics and marketing.
- Why: to understand how visitors use our website, so we can improve it.
- Legal basis: your consent (article 6(1)(a) GDPR and article 11.7a of the Dutch Telecommunications Act).
Measuring our ads with the Meta Pixel
- Data: see Analytics and marketing.
- Why: to measure and improve our ads on Facebook and Instagram, by seeing how many visits, booking requests and contact messages come from them. We use the Pixel only for this measurement.
- Legal basis: your consent (article 6(1)(a) GDPR and article 11.7a of the Dutch Telecommunications Act).
Measuring our ads with Google Ads
- Data: see Analytics and marketing.
- Why: to measure our ads on Google, by seeing whether people who clicked one of our ads send a booking request or a contact message. We use Google Ads on our website only for this measurement.
- Legal basis: your consent (article 6(1)(a) GDPR and article 11.7a of the Dutch Telecommunications Act).
Measuring our ads in ChatGPT
- Data: see Analytics and marketing.
- Why: to measure our ads in ChatGPT, by seeing whether people who clicked one of our ads in ChatGPT send a booking request or a contact message. We use the ChatGPT Ads pixel only for this measurement.
- Legal basis: your consent (article 6(1)(a) GDPR and article 11.7a of the Dutch Telecommunications Act).
Our social media pages
- Data: see Our social media pages.
- Why: to present our studio, to reply to messages and comments, and to understand how people use our pages.
- Legal basis: our legitimate interest in presenting our studio and talking with people who are interested in it (article 6(1)(f) GDPR).
Legal claims
- Data: booking details and correspondence.
- Why: to establish, exercise or defend legal claims, for example if there is a dispute about a booking or an invoice.
- Legal basis: our legitimate interest in protecting our rights (article 6(1)(f) GDPR).
What you have to give us
We need your name and email address to answer a booking request, and your name, email address and message to answer a contact form message. Everything else is optional. Without these details we cannot reply to you. Analytics and marketing cookies are optional too: if you refuse them, you can still use the whole website.
We do not sell your personal data, and we do not use it for any purpose other than those described here.
Analytics and marketing (only with your consent)
When you first visit our website, a banner asks whether you allow analytics and marketing cookies. Until you choose, and if you choose "Reject all", we do not load Google Analytics, the Meta Pixel, Google Ads or the ChatGPT Ads pixel at all. If you accept, data about your visit is shared with 3 third parties: Google, Meta and OpenAI. You can change your choice at any time via Cookie settings at the bottom of every page.
Google Analytics
If you allow Analytics, we use Google Analytics 4 to see which pages are visited and how people find our website. Google Analytics is provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) and Google LLC (USA).
- What Google receives: the pages you view, the website or search engine you came from, how you use our pages (for example scrolling and clicks on links to other websites), your browser and device type, your screen size, an approximate location (country and city) based on your IP address, and a random ID stored in a cookie.
- Form events: when you send a booking request or a contact message, we tell Google Analytics that this happened, with a few details that do not identify you: which form, the studio, the session length, the engineer choice, whether you asked for the rooms upstairs or the shuttle, or the topic of your message. We never send your name, email address, phone number or message.
- Our settings: Google acts as our processor under the Google Ads Data Processing Terms. We have switched off Google signals and Google's advertising features, we do not use User-ID, and we do not share Analytics data with Google for its own purposes. Google says it does not log or store the IP addresses of visitors from the EU.
- How long: the Analytics cookies last 90 days after your last visit. Google keeps the data linked to the random ID for at most 14 months; after that only totals remain.
More information: How Google uses information from sites or apps that use our services.
Meta Pixel
If you allow Marketing, we use the Meta Pixel of Meta Platforms Ireland Limited (Block J, Serpentine Avenue, Dublin 4, Ireland). We use it to measure and improve our ads on Facebook and Instagram: it shows us how many visits, booking requests and contact messages come from our ads. We use the Pixel only for this measurement. We do not use it to target ads at people who visited our website, and we do not build advertising audiences from it. Meta also uses the data for its own purposes, for example to deliver and improve ads, as an independent controller.
- What Meta receives: the pages you view, your IP address, browser and device data, the _fbp and _fbc cookies, and the cookies Meta has set itself if you use Facebook or Instagram. Meta can link this data to your Meta account.
- Form events: when you send a booking request or a contact message, we tell Meta that a "Lead" or a "Contact" happened, with the same details as above. We never send your name, email address, phone number or message to Meta.
- Our settings: we have switched off Meta's automatic collection of button clicks and page details and its automatic advanced matching, so the Pixel does not read what you type into our forms.
- How long: the _fbp and _fbc cookies last 90 days. Meta may keep the data it receives through the Pixel for up to 2 years.
Joint controllers with Meta
For collecting data with the Meta Pixel on our website and sending it to Meta, we and Meta Platforms Ireland Limited are joint controllers (article 26 GDPR). We have agreed who does what in the Meta Controller Addendum. In short: we are responsible for giving you the information in this policy and for asking your consent. Meta is responsible for letting you exercise your rights (articles 15 to 20 GDPR) for the data Meta stores after it has received it.
Meta's identity and contact details, and those of its data protection officer, are in Meta's Privacy Policy. That policy also explains how Meta processes the data afterwards as an independent controller, on what legal basis, and how you can exercise your rights with Meta. You can also contact us, and we will pass your request on to Meta.
Google Ads
If you allow Marketing, we also use the Google Ads tag of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). We use it only to measure our ads on Google: it shows us whether people who clicked one of our ads on Google then send a booking request or a contact message. We do not use it to target ads at people who visited our website, and we do not build advertising audiences from it. For this conversion measurement, Google acts as an independent controller under the Google Ads Controller-Controller Data Protection Terms, and Google may also use the data to improve its own services. Google LLC (USA) may also receive the data (see Transfers outside the European Economic Area).
- What Google receives: the page you are on, your IP address, browser and device data, the _gcl_au and _gcl_aw cookies and, if you arrived through one of our ads on Google, the ad click ID. Google may also read or set cookies on its own domains, and can link this data to your Google account if you are signed in.
- Conversions: when you send a booking request or a contact message, we tell Google Ads that a conversion happened. This event carries no other details: we never send your name, email address, phone number, message or any other form contents to Google Ads.
- Our settings: ad personalisation is switched off and we do not use enhanced conversions, so no email address or phone number is sent to Google, not even in hashed form. The Google Ads tag is separate from Google Analytics: our Google Analytics is not linked to Google Ads, and Google signals stay switched off.
- How long: the _gcl_au and _gcl_aw cookies last 90 days, and we delete them if you withdraw your consent. How long Google keeps the data it receives is explained in Google's privacy policy.
ChatGPT Ads (OpenAI)
If you allow Marketing, we also use the ChatGPT Ads pixel of OpenAI. For visitors in the European Economic Area, the data is received by OpenAI Ireland Limited (1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland). We use the pixel only to measure our ads in ChatGPT: it shows us whether people who clicked one of our ads in ChatGPT then send a booking request or a contact message. We do not use it to target ads at people who visited our website, and we do not build advertising audiences from it. Under OpenAI's Ad Tools Data Processing Addendum, OpenAI acts as an independent controller for this data, and OpenAI's terms allow it to also use the data to develop and improve its own products and services. OpenAI OpCo, LLC (USA) and other OpenAI companies may also receive the data (see Transfers outside the European Economic Area).
- What OpenAI receives: the address of our website, the time, the __oppref and __obref cookies and, if you arrived through one of our ads in ChatGPT, the ad click reference from the link (oppref). Like any website request, the pixel also gives OpenAI your IP address and browser data. If you clicked one of our ads in ChatGPT, OpenAI can link your booking request or contact message to that click, and so to your ChatGPT account.
- Conversions: when you send a booking request or a contact message, we tell OpenAI that a lead happened (the event lead_created). We send no page views and no other details: we never send your name, email address, phone number, message or any other form contents to OpenAI.
- Our settings: we send every event with OpenAI's opt-out setting, which tells OpenAI not to use it to personalise ads for individual users. OpenAI says it does not currently use data from the pixel for this. We do not use OpenAI's automatic advanced matching and do not send customer information, so no email address or phone number is sent to OpenAI, not even in hashed form.
- How long: the __oppref cookie lasts 30 days from the last time you arrive through one of our ads in ChatGPT, and the __obref cookie, a random reference for your browser, lasts 12 months. If you withdraw your consent, we tell OpenAI and delete both cookies. How long OpenAI keeps the data it receives is explained in OpenAI's privacy policy.
Transfers outside the European Economic Area
Several of the providers named in this policy are based in the USA or use servers there: Webflow, Cloudflare, Amazon Web Services, Google, Meta, Adobe and Fastly. Webflow stores our form submissions in the USA. These companies are certified under the EU-US Data Privacy Framework. The European Commission has decided that this framework gives an adequate level of protection (decision of 10 July 2023, article 45 GDPR). Where a provider works for us as a processor, its data processing terms also include the European Commission's Standard Contractual Clauses (article 46 GDPR) as an extra safeguard. If another provider that works for us, such as our email provider or our invoicing and bookkeeping software, processes your data outside the European Economic Area, we only use it if one of these safeguards applies. You can ask us for a copy of these safeguards. We follow legal developments around the framework and will take other measures if needed.
OpenAI also processes personal data on servers in the USA. If you allow Marketing, OpenAI Ireland Limited receives the data from the ChatGPT Ads pixel and may pass it on to OpenAI OpCo, LLC or other OpenAI companies in the USA. OpenAI has committed to use a valid transfer mechanism for this. Its privacy policy says that for countries without an adequacy decision it relies on the European Commission's Standard Contractual Clauses (article 46 GDPR).
The OpenStreetMap Foundation is based in the United Kingdom. The European Commission has decided that the United Kingdom gives an adequate level of protection. unpkg.com does not publish a privacy policy or say where its servers are, so your IP address may be processed outside the European Economic Area when the map library loads. Meta, LinkedIn, Google (for Google Ads) and OpenAI explain their own transfers in their privacy policies.
How long we keep your data
- Requests without booking: booking requests and messages (through our forms, by email, by phone or through social media) that do not lead to a booking are kept for 12 months after our last contact about them. Then we delete them.
- Bookings: details and correspondence about a booking that goes ahead are kept for 2 years after the session. Then we delete them, except the invoices and bookkeeping records below. If a complaint or dispute about the booking is still open at that time, we keep what we need until it is resolved.
- Session files: whether we keep copies of your recordings and project files after your session, and for how long, is agreed with you. You can ask us at any time to delete our copies.
- Invoices and bookkeeping: invoices and bookkeeping records are kept for 7 years, as required by Dutch tax law.
- Cookie choice: the ws_consent cookie lasts 12 months. After that we ask you again.
- Google Analytics: the cookies last 90 days after your last visit. The data linked to the random ID is kept for at most 14 months.
- Meta Pixel: the cookies last 90 days. Meta may keep the data it receives for up to 2 years.
- Google Ads: the _gcl_au and _gcl_aw cookies last 90 days. Google keeps the data it receives under its own privacy policy.
- ChatGPT Ads pixel: the __oppref cookie lasts 30 days and the __obref cookie 12 months. OpenAI keeps the data it receives under its own privacy policy.
- Technical logs: our hosting and security providers keep server and security logs for a limited time under their own policies.
How we protect your data
We take appropriate technical and organisational measures to protect your data against loss and unauthorised access. For example:
- our website only works over an encrypted connection (HTTPS), so what you send through our forms is encrypted on its way;
- our forms are protected against spam and abuse by Cloudflare Turnstile;
- only the people who run WedgeView Studios have access to our mailbox, form submissions and booking records;
- providers that process personal data on our behalf (processors) have agreed to data processing terms with us.
If a data breach happens that is likely to put your rights at risk, we report it to the Autoriteit Persoonsgegevens and, where the law requires it, to you.
Your rights
Under the GDPR you have these rights:
- Access: you can ask which personal data we have about you and get a copy.
- Correction: you can ask us to correct data that is wrong or incomplete.
- Deletion: you can ask us to delete your data, unless we must keep it, for example invoices.
- Restriction: you can ask us to limit how we use your data for a while.
- Objection: you can object to our use of your data based on our legitimate interest. We then stop, unless we have compelling reasons to continue.
- Data portability: you can ask for a copy, in a common digital format, of the data you gave us for a contract or with your consent, or ask us to send it to someone else.
- Withdrawing consent: you can withdraw your consent for analytics or marketing cookies at any time via Cookie settings at the bottom of every page, or on our Cookie policy page. This is as easy as giving consent. Withdrawing does not affect our use of your data before you withdrew.
To use your rights, email roeland@wedgeviewstudios.com or call +31 (6) 297 38 576. We reply within one month. If a request is complex, we may need up to two more months, and we will tell you if so. Using your rights is free. We may ask for extra information to check that the request really comes from you.
For data collected with the Meta Pixel and for our Facebook Page statistics, you can also go directly to Meta (see Analytics and marketing and Our social media pages).
For the data Google receives through Google Ads, you can also go directly to Google (see Google's privacy policy).
For the data OpenAI receives through the ChatGPT Ads pixel, you can also go directly to OpenAI (see OpenAI's privacy policy).
Complaints
If you are unhappy with how we handle your data, please tell us first so we can try to put it right. You also have the right to complain to the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens (AP):
- Website: autoriteitpersoonsgegevens.nl, with a complaint form
- Post: Autoriteit Persoonsgegevens, PO Box 93374, 2509 AJ The Hague, the Netherlands
- Phone: +31 (0)88 1805 250 (Monday to Thursday, 10:00 to 12:00)
- Visiting address: Hoge Nieuwstraat 8, 2514 EL The Hague (by appointment only)
If you live in another EU country, you can also complain to the data protection authority there.
Automated decisions
We do not make decisions about you that are based only on automated processing (including profiling) and that have legal or similarly significant effects for you. If you allow Marketing, Meta may use the data it receives through the Meta Pixel for its own advertising profiles. Meta's Privacy Policy explains this.
Children
Our website is meant for musicians, bands and other people who want to book our studio. We do not knowingly collect personal data from children under 16 without the consent of a parent or guardian. If you are under 16, please ask a parent or guardian to contact us for you and to decide about analytics and marketing cookies. If you think we have received data from a child without this consent, contact us and we will delete it.
Changes to this policy
We may update this policy, for example when we start using a new service or when the law changes. The date at the top of this page shows when we last changed it. This version applies from 6 October 2026. If a change affects what you have consented to, we will ask for your consent again.
Contact
For questions about this policy or about your data, contact us:
- Roestey B.V., trading as WedgeView Studios
- Amstelkade 33, 3652 ME Woerdense Verlaat, the Netherlands
- Email: roeland@wedgeviewstudios.com
- Phone: +31 (6) 297 38 576
You can also use our contact form.
Our social media pages
We have pages on Instagram, Facebook and LinkedIn. Our website only links to these pages. It does not load social media buttons, feeds or plugins, so these platforms receive no data from our website when you view it. The Meta Pixel is the only exception, and only if you allow Marketing.
When you visit or follow our pages, or like, comment or send us a message, the platform processes your data under its own privacy policy. We see your public profile, your comments and your messages, and we use them to reply to you.
Facebook and Instagram are run by Meta Platforms Ireland Limited. For the statistics Meta gives us about visits to our Facebook Page (Page Insights), we and Meta are joint controllers (EU Court of Justice, case C-210/16, Wirtschaftsakademie). Under Meta's Page Insights Controller Addendum, Meta takes responsibility for informing you and for handling your rights for this processing. We only see aggregated statistics, and we use them to understand how people use our page (our legitimate interest, article 6(1)(f) GDPR). Meta may give us similar statistics for our Instagram account. More information: Information about Page Insights and Meta's Privacy Policy.
LinkedIn is run by LinkedIn Ireland Unlimited Company, and LinkedIn's privacy policy applies. For the statistics LinkedIn gives us about visitors to our company page (Page Insights), we and LinkedIn Ireland Unlimited Company are joint controllers. Under LinkedIn's Page Insights Joint Controller Addendum, LinkedIn takes responsibility for informing you and for handling your rights for this data. We only see aggregated statistics, and we use them to understand how people use our page (our legitimate interest, article 6(1)(f) GDPR). If you send us a request about this data, we pass it on to LinkedIn.