Privacy Policy

TG Spaces is committed to protecting your personal data. This policy explains what we collect, why we collect it, and your rights under the General Data Protection Regulation (GDPR) and the Dutch Implementation Act (Uitvoeringswet AVG). 1. Who We Are (Data Controller) The data controller responsible for your personal data is: TG Spaces B.V. (trading as TG Spaces) Zeeburgerpad 22, Amsterdam-East, The Netherlands KvK (Chamber of Commerce): 85771732 Email: office@tg-spaces.com 2. What Data We Collect We collect the following categories of personal data: Booking data — name, email address, phone number, chosen studio, date and time of booking, and any notes you provide. Account data — if you create an account, we store your email address and any profile information you provide. Communication data — emails and messages you send us. Technical data — IP address, browser type, and pages visited, collected via cookies and server logs. We do not collect sensitive special-category data (e.g. health information) unless you voluntarily provide it in a booking note. 3. Why We Collect It (Legal Basis) We process your data on the following legal bases under GDPR Article 6: Performance of a contract (Art. 6(1)(b)) — to process and manage your studio booking. Legitimate interests (Art. 6(1)(f)) — to operate and improve our service, prevent fraud, and ensure security. Consent (Art. 6(1)(a)) — for optional analytics cookies and marketing communications, where you have opted in. Legal obligation (Art. 6(1)(c)) — to comply with Dutch tax and accounting requirements. 4. How Long We Keep Your Data We retain personal data only as long as necessary: Booking records — 7 years (Dutch tax law requirement). Account data — until you delete your account, plus 30 days. Marketing communications — until you unsubscribe. Server logs — 90 days, then anonymised. 5. Who We Share Your Data With We do not sell your data. We share it only with trusted third-party processors: Supabase — authentication and database hosting (EU region). Vercel — hosting and content delivery. Any processing outside the EEA is covered by Standard Contractual Clauses (see below). Resend — transactional email delivery. All processors are bound by data processing agreements (DPAs) in accordance with GDPR Chapter V. 6. Your Rights Under GDPR, you have the following rights: Right of access — request a copy of your data. Right to rectification — correct inaccurate data. Right to erasure — request deletion ("right to be forgotten"). Right to restriction — ask us to pause processing. Right to portability — receive your data in a machine-readable format. Right to object — object to processing based on legitimate interests. Right to withdraw consent — at any time, for consent-based processing. To exercise any right, email us at office@tg-spaces.com. We will respond within 30 days. 7. Cookies We use cookies in accordance with the Dutch Telecommunications Act (Telecommunicatiewet). Essential cookies are placed without consent. Analytics and preference cookies are only placed after your explicit opt-in via our cookie banner. You can withdraw consent at any time by clicking "Cookie settings" in the footer, or by clearing your browser cookies. 8. Security We implement appropriate technical and organisational measures to protect your data, including TLS encryption in transit, access controls, and regular security reviews. No transmission over the internet is 100% secure, however, and we cannot guarantee absolute security. 9. Complaints If you believe we have processed your data unlawfully, you have the right to lodge a complaint with the Dutch supervisory authority: Autoriteit Persoonsgegevens (AP) Bezuidenhoutseweg 30, 2594 AV Den Haag autoriteitpersoonsgegevens.nl We would, however, appreciate the chance to address your concerns first — please contact us at office@tg-spaces.com. 10. Changes to This Policy We may update this policy from time to time. Material changes will be communicated via a notice on our website. The "last updated" date at the top of this page always reflects the most recent version.