Privacy.

This website sets no cookies. Because nothing is stored on your device and no consent is required, there is no cookie banner either.

We use no analytics software, tracking pixels, advertising tags, social media plugins, embedded video players, fonts, maps or scripts from third-party servers. Every file needed to display this website comes from its own domain. Your visit is therefore not disclosed to third parties.

One exception is yours to choose. Our case studies can show a client’s live website inside a frame, and the frame stays empty until you click it. From that click, the page inside the frame loads from the client’s own server and their privacy policy applies to it.

Like every web server, ours records technical data when a page is requested: the IP address, date and time, the page requested, the HTTP status code, the amount of data transferred, and the referrer and browser information your browser sends.

This data is necessary to deliver the website and to keep it secure and stable. The legal basis is Art. 6 (1)(f) GDPR, our legitimate interest in the secure and reliable operation of the website. Log files are deleted after seven days and are not combined with other data.

This website runs on our own servers, which we manage ourselves. The hardware is located in a data centre in Germany.

For the security and availability of the website we use a network and security service provider. Traffic to this website passes through that provider, which means that handling your visit may involve processing outside the EU/EEA. That processing is covered by the European Commission’s Standard Contractual Clauses within the meaning of Art. 46 (2)(c) GDPR. Where the provider concerned is certified under the EU-U.S. Data Privacy Framework, the transfer additionally relies on the European Commission’s adequacy decision of 10 July 2023 (Art. 45 GDPR).

Data processing agreements under Art. 28 GDPR are in place with the parties that process data on our behalf.

If you write to us, we process your email address, your name and the content of your message in order to reply. The legal basis is Art. 6 (1)(b) GDPR where your message concerns a contract or pre-contractual steps, and otherwise Art. 6 (1)(f) GDPR, our legitimate interest in answering enquiries.

We retain this correspondence for as long as is necessary to handle your request and to comply with statutory retention periods. Client and invoicing records are kept for seven years, as Dutch tax law requires.

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to object to processing based on legitimate interest (Art. 21).

To exercise these rights, send an email to [email protected]. We answer within one month. We may ask you to confirm who you are, so that we do not hand your data to someone else.

You may lodge a complaint with a supervisory authority, in particular in the member state where you live or work. For us this is the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), Postbus 93374, 2509 AJ The Hague, the Netherlands.

If you live in another EU country, you can complain to your own authority instead — in the Czech Republic that is the Úřad pro ochranu osobních údajů (uoou.cz).

We use encrypted connections, access control and up-to-date systems, and we keep the number of people who can reach personal data small. No system is perfectly secure, so if something goes wrong that puts your data at risk, we will tell you and the supervisory authority where the law requires it.

This privacy statement applies to AlthiDigital Studio and its websites.

We update this statement when the website or the applicable law changes, and the date at the top changes with it. Material changes will be flagged on the page rather than made quietly.