Policy

VĒLLIN STUDIOS respects your privacy and is committed to protecting your personal data. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, how long we retain it, with whom we share it, whether it may be transferred outside the European Economic Area, and what rights you have under applicable privacy legislation, including the General Data Protection Regulation (GDPR) and the Dutch General Data Protection Regulation Implementation Act (Uitvoeringswet AVG).

 

This Privacy Policy applies to personal data processed through the VĒLLIN STUDIOS website, booking services, memberships, communications and related services.

 

1. Controller identification

 

The controller responsible for processing your personal data is:

 

VĒLLIN STUDIOS

Reijer Keijserstraat 1A

Den Burg, Texel

The Netherlands

 

Email: VELLINSTUDIOS@HOTMAIL.COM

Phone: +31 51653191

 

VĒLLIN STUDIOS determines the purposes and means of processing your personal data. For questions about this Privacy Policy or the processing of your personal data, contact us using the details above.

 

VĒLLIN STUDIOS is responsible for the processing activities described in this Privacy Policy. Specific third-party providers may act as independent controllers for certain processing activities, such as payment processing or social-media services. Their own privacy policies may also apply.

 

2. Data protection officer

 

VĒLLIN STUDIOS is not required to appoint a statutory Data Protection Officer under Article 37 GDPR based on the nature, scale and circumstances of its current processing activities. VĒLLIN STUDIOS does not currently have a designated Data Protection Officer.

 

For all privacy-related questions or requests, contact:

 

VELLINSTUDIOS@HOTMAIL.COM

 

If our processing activities change and the appointment of a Data Protection Officer becomes legally required, this Privacy Policy will be updated and the relevant contact details will be published here.

 

3. Personal data we collect

 

Depending on how you interact with VĒLLIN STUDIOS, we may collect:

 

• Full name

• Email address

• Telephone number

• Appointment details

• Booking, cancellation and no-show information

• Information you voluntarily provide when contacting us

• Information relating to subscriptions or memberships

• Payment and transaction information necessary to process or administer a payment

• Marketing preferences and consent records

• Photographs or video recordings where you have provided permission or another lawful basis applies

• Technical information associated with your use of our website, such as IP address, browser type, device information, operating system, referral information and website usage data

• Cookie and similar-technology information, subject to applicable consent requirements

 

We do not intentionally collect special categories of personal data, such as health information, biometric data, religious beliefs or information about criminal convictions. Please do not provide such information unless it is strictly necessary and we have requested it.

 

We only collect personal data that is adequate, relevant and limited to what is necessary for the purposes described in this Privacy Policy.

 

4. How we collect personal data

 

We may collect personal data:

 

• Directly from you when you make a booking, contact us, subscribe to a membership or provide information in person

• Through our website and booking forms

• Through Wix or other service providers used to operate our website and booking services

• Through payment providers when you make or administer a payment

• Automatically through cookies and similar technologies, where permitted by law

• From third parties where this is lawful and necessary, such as service providers supporting our booking or payment administration

 

5. Purposes and legal bases for processing

 

We process personal data only where a lawful basis under the GDPR applies. Depending on the circumstances, we may rely on the following legal bases:

 

Performance of a contract

 

We process personal data where necessary to provide requested services, arrange and manage appointments, administer memberships, process bookings, handle cancellations and provide related customer support.

 

Legal obligation

 

We process personal data where necessary to comply with legal obligations, including accounting, tax, financial administration, consumer-protection requirements and responding to lawful requests from public authorities.

 

Legitimate interests

 

We may process personal data where necessary for our legitimate interests, including business administration, customer-service administration, fraud prevention, information security, website security, service improvement, enforcing our terms and defending or establishing legal claims.

 

Before relying on legitimate interests, we consider whether our interests are overridden by your fundamental rights and freedoms.

 

Consent

 

We process personal data based on consent where consent is legally required, including for certain optional cookies, analytics, marketing communications and promotional photography or video.

 

You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

 

6. Booking information

 

When you book an appointment through our website or another booking channel, we may process the information you provide to:

 

• Create and manage your appointment

• Send booking confirmations and reminders

• Contact you about changes to your appointment

• Manage cancellations, rescheduling and no-shows

• Administer memberships or subscriptions

• Maintain customer and appointment records

• Provide customer support

• Establish, exercise or defend legal claims where necessary

 

Information necessary to provide the requested service may be required to complete a booking. If you do not provide required information, we may be unable to accept or manage your appointment.

 

7. Payments

 

Where payments are made through our website or through a third-party payment provider, payment information may be processed by the relevant payment provider.

 

VĒLLIN STUDIOS does not intend to store complete payment-card details where those details are processed directly by a third-party payment provider. We may receive limited payment information, such as transaction status, payment date, amount, payment method, invoice details or a transaction reference.

 

Payment providers may act as independent controllers for some processing activities and may process your information under their own privacy policies. We recommend reviewing the privacy information of the payment provider used for your transaction.

 

8. Third-party service providers and recipients

 

We may share personal data with trusted service providers where necessary to operate our business and provide our services. These providers may include:

 

• Website hosting and website-management providers

• Booking and calendar providers

• Payment and accounting providers

• Email, messaging and communication providers

• Customer-support and administration providers

• Analytics and cookie-management providers

• IT, security and maintenance providers

• Professional advisers, insurers and legal advisers where necessary

• Public authorities, courts or law-enforcement bodies where required or permitted by law

 

Where a provider processes personal data on our behalf, we seek to ensure that an appropriate data-processing agreement is in place and that the provider processes personal data only on documented instructions, unless it is acting as an independent controller.

 

Our website is powered by Wix. Wix and other providers may process personal data in accordance with their own privacy policies and contractual arrangements. The specific providers used may change as our website and services develop.

 

We do not sell your personal data.

 

9. International transfers

 

Some service providers may process personal data outside the European Economic Area (EEA), including in countries that may not provide a level of data protection equivalent to that in the Netherlands or the EEA.

 

Where personal data is transferred outside the EEA, we will do so only where permitted by the GDPR and using an appropriate safeguard, such as:

 

• An adequacy decision adopted by the European Commission

• Standard Contractual Clauses approved by the European Commission

• Binding corporate rules

• Another lawful transfer mechanism recognised under the GDPR

 

Where required, we will take supplementary measures to protect personal data during international transfers.

 

You may contact us using the details in Section 1 to request further information about the safeguards applicable to a particular international transfer, subject to lawful limitations.

 

10. Cookies and similar technologies

 

Our website may use cookies and similar technologies.

 

Necessary cookies

 

Necessary cookies support core website functions, security, booking functionality, session management and accessibility. These cookies may be used without consent where they are strictly necessary to provide a service you have requested or to operate the website.

 

Optional cookies

 

Optional cookies may be used for analytics, personalisation, advertising or marketing. Where consent is required, these cookies will be placed only after you have given consent.

 

You can accept or reject optional cookies through our cookie settings. You can withdraw or change your consent at any time through the available cookie settings or by contacting us.

 

Our cookie information should identify the cookies used, their purposes, providers and retention periods. Because the cookies used may change, please consult the cookie banner or cookie settings on the website for the current details.

 

Disabling certain cookies may affect the functionality of the website or booking services.

 

11. Marketing communications

 

If you choose to receive marketing communications from VĒLLIN STUDIOS, we may use your contact details to send information about services, memberships, events, products or other VĒLLIN STUDIOS updates.

 

Where marketing is based on consent, you may withdraw your consent at any time. You may also unsubscribe using the link in a marketing message or contact us directly.

 

Where permitted by applicable law, we may send service-related communications or information about similar services to existing customers where this is based on a lawful interest and an appropriate opt-out option is provided.

 

We will not use your personal data for direct marketing where you have objected or opted out.

 

12. Photography and social media

 

VĒLLIN STUDIOS may create photographs or video content for promotional purposes, including publication on our website and social-media channels.

 

We will not use identifiable photographs or videos of you for promotional purposes where consent or another lawful basis is required unless that basis has been obtained.

 

You may withdraw consent for future use at any time by contacting us. Withdrawal does not affect the lawfulness of use before withdrawal. Withdrawal may not require us to remove content that has already been lawfully printed, distributed or reposted by third parties, although we will take reasonable steps to stop future use under our control.

 

Social-media platforms may process personal data as independent controllers under their own privacy policies.

 

13. Retention periods

 

We retain personal data only for as long as necessary for the purposes for which it was collected, unless a longer period is required or permitted by law.

 

Our intended retention periods are:

 

• Booking and appointment information: generally up to 24 months after the appointment or the last customer interaction, unless needed longer for an ongoing relationship, dispute, complaint or legal claim.

• Customer contact and service records: generally up to 24 months after the last interaction, unless needed longer for an ongoing relationship, dispute, complaint or legal claim.

• Membership and subscription records: for the duration of the membership and generally up to 24 months after it ends, unless a longer period is required for administration or legal claims.

• Payment, invoice and accounting records: generally 7 years from the end of the relevant financial year, or longer where required by applicable tax or accounting law.

• Marketing consent and opt-out records: for as long as necessary to demonstrate compliance and manage your preferences, generally up to 5 years after withdrawal or the last relevant interaction.

• Customer-service communications: generally up to 24 months after the matter is closed, unless needed longer for a dispute, complaint or legal claim.

• Cookie and consent records: for the period necessary to demonstrate consent and manage cookie preferences, according to the retention settings of the relevant consent-management provider.

• Photographs and video used for promotional purposes: until consent is withdrawn, the content is no longer used, or the applicable purpose ends, unless a longer period is necessary to establish, exercise or defend legal claims.

• Technical and security logs: generally for a limited period necessary for security, troubleshooting and fraud prevention, normally no longer than 12 months unless a longer period is necessary to investigate an incident or comply with law.

 

After the applicable retention period, we will delete, anonymise or securely archive personal data where appropriate. Retention periods may be extended where necessary to establish, exercise or defend legal claims, comply with legal obligations, resolve complaints or respond to requests from public authorities.

 

14. Automated decision-making and profiling

 

We do not use personal data for automated decision-making, including profiling, that produces legal effects or similarly significant effects on you.

 

If this changes, we will provide the information required by the GDPR before carrying out such processing.

 

15. How we protect your data

 

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, disclosure or destruction.

 

These measures may include access controls, account security, secure configuration, confidentiality obligations, backups, provider due diligence and procedures for handling security incidents.

 

Access to personal data is limited to people and service providers who need it for legitimate business purposes.

 

No method of transmitting or storing information online can be guaranteed to be completely secure. If a personal-data breach occurs that is subject to notification under the GDPR, we will handle it in accordance with applicable legal requirements.

 

16. Your privacy rights

 

Subject to the conditions and exceptions provided by law, you may have the right to:

 

• Request access to your personal data

• Request correction of inaccurate or incomplete personal data

• Request deletion of your personal data

• Request restriction of processing

• Object to processing based on legitimate interests

• Object to direct marketing at any time

• Request data portability where applicable

• Withdraw consent where processing is based on consent

• Request human intervention where applicable in relation to automated decision-making

 

You may exercise your rights by contacting:

 

VELLINSTUDIOS@HOTMAIL.COM

 

Please describe your request clearly. We may ask for additional information to verify your identity before responding. This is intended to protect your personal data and prevent unauthorised disclosure.

 

We will normally respond to a valid request within one month. This period may be extended by up to two additional months where necessary because of the complexity or number of requests. If we extend the response period, we will inform you within the first month.

 

We generally do not charge a fee for exercising your rights. However, where a request is manifestly unfounded or excessive, particularly because of its repetitive nature, we may charge a reasonable administrative fee or refuse to act, as permitted by law.

 

17. Complaints and supervisory authority

 

If you have a complaint about how VĒLLIN STUDIOS processes your personal data, please contact us first:

 

VELLINSTUDIOS@HOTMAIL.COM

 

We will review and respond to your complaint as soon as reasonably possible.

 

You also have the right to lodge a complaint with the Dutch supervisory authority:

 

Autoriteit Persoonsgegevens

Postbus 93374

2509 AJ Den Haag

The Netherlands

Website: https://autoriteitpersoonsgegevens.nl/

 

You may also contact the supervisory authority in the EEA country where you live, work or believe that an infringement has occurred.

 

18. Changes to this Privacy Policy

 

We may update this Privacy Policy from time to time, for example when our services, website, service providers or legal requirements change.

 

The latest version will be published on our website with the applicable update date. Where required by law, we will notify you of material changes or request renewed consent.

 

19. Contact

 

If you have questions about this Privacy Policy or how VĒLLIN STUDIOS handles your personal data, please contact us:

 

VĒLLIN STUDIOS

Reijer Keijserstraat 1A

Den Burg, Texel

The Netherlands

 

Email: VELLINSTUDIOS@HOTMAIL.COM

Phone: +31 51653191

 

Last updated: 18 September 2026