Privacy policy

Concept Lab is operated by [INVULLEN: bedrijfsnaam], registered with the Dutch Chamber of Commerce under KVK number [INVULLEN: KVK-nummer] and located at [INVULLEN: adres]. We are the controller for the personal data described on this page. You can reach us at [INVULLEN: e-mailadres].

When you request beta access we store the data you enter in the form: your name, e-mail address, artist or producer name, genre, a link to your music and your message. We also record the time of the request and the type of browser you used, so we can handle the request and spot abuse.

Our hosting provider keeps server logs, which contain your IP address and the pages you visited, for a limited period.

We use this data to handle your beta request, to decide whether we can invite you and to contact you about it. The legal basis is the performance of a contract, or taking steps at your request before entering into one, under Article 6(1)(b) GDPR, and our legitimate interest in running and protecting the beta under Article 6(1)(f) GDPR.

We do not build profiles and we do not use your data for advertising.

We keep beta request data for [INVULLEN: bewaartermijn, bijvoorbeeld tot een jaar na de beta]. After that period we delete it, unless the law requires us to keep it longer. Server logs are deleted by the hosting provider on its own schedule.

Your data is processed by Vercel, which hosts this website on its EU edge network, and by Supabase, which stores the request database in project region [INVULLEN: regio bevestigen]. We also use [INVULLEN: overige verwerkers, zoals e-mail]. These providers act as processors on our instructions.

Data may be processed outside the EU by these providers under standard contractual clauses [INVULLEN: bevestigen]. We do not sell your data and we do not share it with anyone else.

Under the GDPR you have the right to access your data, to have it corrected or deleted, to restrict or object to its processing, and to receive it in a portable format. Where processing is based on consent, you can withdraw that consent at any time.

To use these rights, mail us at [INVULLEN: e-mailadres]. You can also file a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens.

This website only uses cookies that are strictly necessary to serve the pages. There are no tracking cookies and no analytics cookies, which is why you did not see a cookie banner.

The website is served over HTTPS. Access to the database is limited to the owner, and the public request form can only insert new rows, never read existing ones. No method of storage is completely secure, so we cannot guarantee absolute protection.

We may update this policy when the service or the law changes. The current version is always on this page, with its date at the top.

Questions about this policy or about your data: [INVULLEN: e-mailadres].