Privacy Policy

TG Spaces is committed to protecting your personal data. This policy explains what wecollect, why we collect it, and your rights under the General Data Protection Regulation(GDPR) and the Dutch Implementation Act (Uitvoeringswet AVG).1. Who We Are (Data Controller)The data controller responsible for your personal data is:TG Spaces B.V. (trading as TG Spaces)Zeeburgerpad 22, Amsterdam-East, The NetherlandsKvK (Chamber of Commerce): 85771732Email: office@tg-spaces.com2. What Data We CollectWe collect the following categories of personal data:- Booking data — name, email address, phone number, chosen studio, date and time of booking, and any notes you provide.- Account data — if you create an account, we store your email address and any profile information you provide.- Mailing list data — if you sign up to one of our mailing lists, your email address and any details you enter in the sign-up form.- Communication data — emails and messages you send us.- Technical data — IP address, browser type, and pages visited, collected via cookies and server logs.We do not collect sensitive special-category data (e.g. health information) unless youvoluntarily provide it in a booking note.3. Why We Collect It (Legal Basis)We process your data on the following legal bases under GDPR Article 6:- Performance of a contract (Art. 6(1)(b)) — to process and manage your studio booking.- Legitimate interests (Art. 6(1)(f)) — to operate and improve our service, prevent fraud, and ensure security.- Consent (Art. 6(1)(a)) — for optional analytics cookies, optional marketing cookies, and marketing emails, where you have opted in. These are separate choices and you can give or withdraw each one independently.- Legal obligation (Art. 6(1)(c)) — to comply with Dutch tax and accounting requirements.4. How Long We Keep Your DataWe retain personal data only as long as necessary:- Booking records — 7 years (Dutch tax law requirement).- Account data — until you delete your account, plus 30 days.- Mailing list data — until you unsubscribe or ask us to delete it. Unsubscribing stops the emails; if you ask us to erase your data we remove it from our own records and from Klaviyo.- Server logs — 90 days, then anonymised.5. Who We Share Your Data WithWe do not sell your data. We share it only with trusted third-party processors:- Supabase — authentication and database hosting (EU region).- Vercel — hosting and content delivery. Any processing outside the EEA is covered by Standard Contractual Clauses (see below).- Resend — transactional email delivery.- Klaviyo — email marketing and the operation of our mailing list sign-up forms (United States; see below).All processors are bound by data processing agreements (DPAs) in accordance with GDPRChapter V.Email marketing — KlaviyoWhen you sign up to one of our mailing lists through a form on this site, your emailaddress and any details you provide are processed by Klaviyo, Inc., our email marketingprovider, acting as our data processor. Klaviyo stores and processes this data on serversthat may be located outside the European Economic Area, including in the United States.These transfers are made under the EU–US Data Privacy Framework and, where that does notapply, the European Commission's Standard Contractual Clauses.Klaviyo places cookies in your browser to operate the sign-up form. These are only loadedafter you accept marketing cookies. You can accept or refuse marketing cookiesindependently of analytics cookies, and change that choice at any time via "Cookiesettings" in the footer.We use Klaviyo to send you the updates you asked for. You can unsubscribe from any emailusing the link in its footer, or by contacting us. See Klaviyo's privacy policy atklaviyo.com/legal/privacy-notice.6. Your RightsUnder GDPR, you have the following rights:- Right of access — request a copy of your data.- Right to rectification — correct inaccurate data.- Right to erasure — request deletion ("right to be forgotten").- Right to restriction — ask us to pause processing.- Right to portability — receive your data in a machine-readable format.- Right to object — object to processing based on legitimate interests.- Right to withdraw consent — at any time, for consent-based processing.To exercise any right, email us at office@tg-spaces.com. We will respond within 30 days.Where a request concerns data we hold with a processor, such as your mailing listsubscription in Klaviyo, we pass it on to them as well.7. CookiesWe use cookies in accordance with the Dutch Telecommunications Act (Telecommunicatiewet).We group them into three categories:- Essential cookies are placed without consent. They are needed for signing in, the booking flow, and remembering your cookie choice.- Analytics cookies are optional. They help us understand which pages are visited so we can improve the site.- Marketing cookies are optional and separate. They are used by the mailing list sign-up forms on our pages, which are operated by Klaviyo.Accepting one optional category does not switch the other on — you can allow analytics andrefuse marketing, or the other way round. Some of the providers behind our optionalcookies are based outside the EU and process data under EU-approved transfer safeguards.You can withdraw or change your consent at any time by clicking "Cookie settings" in thefooter, or by clearing your browser cookies. Our cookie policy lists every cookie andprovider we use.8. SecurityWe implement appropriate technical and organisational measures to protect your data,including TLS encryption in transit, access controls, and regular security reviews. Notransmission over the internet is 100% secure, however, and we cannot guarantee absolutesecurity.9. ComplaintsIf you believe we have processed your data unlawfully, you have the right to lodge acomplaint with the Dutch supervisory authority:Autoriteit Persoonsgegevens (AP)Bezuidenhoutseweg 30, 2594 AV Den Haagautoriteitpersoonsgegevens.nlWe would, however, appreciate the chance to address your concerns first — please contactus at office@tg-spaces.com.10. Changes to This PolicyWe may update this policy from time to time. Material changes will be communicated via anotice on our website. The "last updated" date at the top of this page always reflects themost recent version.