Last updated: July 2026. This policy is written in English; the binding version is this document. If you have questions, write to info@studiodarkuv.com.
Who is responsible for your data
Studio DARKUV is a sole trader (eenmanszaak) operated by Daria Kuvshinova, registered with the Dutch Chamber of Commerce (Kamer van Koophandel).
- Business name: Studio DARKUV
- KVK number: 73163007
- Address: Hoofddorp, the Netherlands
- Email: info@studiodarkuv.com
Studio DARKUV is the data controller (verwerkingsverantwoordelijke) for all personal data collected through this website and the webshop at studiodarkuv.com/shop.
What data I collect
Data you give me directly
- Contact and enquiry forms — your name and email address, and the content of your message
- Drop notification sign-up — your name and email address
- Shop orders — your name, delivery address, email address, and order details. Payment is processed by MyPOS; I do not store your payment card details
- Custom commission enquiries — your name, email, and any personal details you choose to share about the piece you want made (for example, the nature of a memorial piece)
Data collected automatically
- Analytics — this website uses Umami analytics, which is cookieless and collects no personal data. No consent is required.
- Server logs — your IP address and browser type may be recorded in server logs by my hosting provider (Strato). These logs are kept for a maximum of 30 days and are used only for security and technical purposes.
Why I collect it and the legal basis
Under the GDPR, every use of personal data must have a legal basis. Here is mine for each purpose:
- To fulfil your order (name, address, email, order details) — legal basis: performance of a contract (Article 6(1)(b) GDPR)
- To respond to your enquiry (name, email, message) — legal basis: legitimate interest (Article 6(1)(f) GDPR), specifically my legitimate interest in responding to people who contact me
- To notify you of a drop (name, email) — legal basis: consent (Article 6(1)(a) GDPR). You can unsubscribe at any time by replying to any notification email
- Analytics — legal basis: legitimate interest
- Legal obligations (invoicing, tax records) — legal basis: legal obligation (Article 6(1)(c) GDPR)
How long I keep your data
- Order data — kept for 7 years in accordance with Dutch tax law (Belastingdienst retention requirements)
- Contact and enquiry messages — kept for as long as needed to complete our correspondence, then deleted
- Drop notification list — kept until you unsubscribe
- Analytics data — not retained as personal data because of using cookieless analytics
Who else sees your data
I do not sell, rent, or share your personal data with third parties for marketing purposes. The following service providers process data on my behalf as data processors (verwerkers):
- Hosting provider: Strato — stores the website and its data on servers Berlin and Karlsruhe, Germany.
- Payment processor: MyPOS — processes payment transactions. Their own privacy policy applies to payment data
- Email service: Gmail, Strato mail
- Shipping carriers: PostNL, FedEx and/or DHL — receive your name and delivery address to deliver your order. Their own privacy policies apply
- Analytics: Umami (EU-hosted, no personal data)
Where any of the above processors are based outside the European Economic Area, I ensure appropriate safeguards are in place (Standard Contractual Clauses or equivalent).
Your rights
Under the GDPR and the Dutch Uitvoeringswet AVG, you have the following rights regarding your personal data:
- Right of access (inzagerecht) — you can ask me what data I hold about you
- Right to rectification (rectificatierecht) — you can ask me to correct inaccurate data
- Right to erasure (recht op vergetelheid) — you can ask me to delete your data, subject to legal retention obligations
- Right to restriction of processing — you can ask me to limit how I use your data in certain circumstances
- Right to data portability — you can ask me to provide your data in a machine-readable format
- Right to object — you can object to processing based on legitimate interest
- Right to withdraw consent — where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing
To exercise any of these rights, email me at info@studiodarkuv.com. I will respond within one month.
If you believe I have not handled your data correctly, you have the right to lodge a complaint with the Dutch data protection authority: Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl.
Cookies
This website does not use cookies or any other tracking technology that requires consent. No cookie banner is shown because none is necessary.
The webshop at /shop uses WooCommerce, which sets functional cookies necessary for the shopping cart to work. These cookies are strictly necessary for the service and do not require consent under Dutch law.
Changes to this policy
I may update this privacy policy from time to time. The date at the top of this page shows when it was last revised. For significant changes I will post a notice on the website.