StudioFG handles your data with care. We only process what we need to answer your questions, run our workshops and assignments, and keep the website safe and working well. We do not sell data and do not use it for advertising.
This privacy policy explains which data we process, why, how long we keep it, who we share it with and what rights you have. It applies to the website studiofg.nl and to our services.
Who is responsible
StudioFG, van Galenstraat 41, 2518 EN The Hague, the Netherlands, Chamber of Commerce no. 63906333, is responsible for processing your personal data. Questions about privacy can be sent to info@studiofg.nl.
Which data we process and why
Contact form and e-mail
When you fill in the contact form or e-mail us, we process your name, e-mail address and message, and anything else you choose to include (such as your company name or phone number). We only use this to answer your question. The form sends your message to us by e-mail; it is not stored on the website. Legal basis: our legitimate interest in answering questions, or preparing a contract when you ask for a quote.
Against spam, the form uses ALTCHA: while you fill it in, your browser quietly solves a small calculation, which our own server checks. No cookies are set for this and no data goes to third parties. To limit abuse, we count how many messages are sent per IP address in an hour; this uses a code that cannot be traced back to your IP address and expires after an hour.
Workshops, training and assignments
For a quote, a workshop or an assignment we process your name, company name, contact details, the arrangements we make and the details needed for the invoice (such as address and VAT number). For workshop participants we process their name and e-mail address, to organise the workshop and send materials. Legal basis: performance of the contract, and for invoices our legal obligation to keep records.
Visiting the website
Like every web server, our server records for each visit which IP address requests which page, when, and with which browser. We only use this for security and to fix problems. Legal basis: our legitimate interest in a secure website.
For security, IP addresses that attack the website or the server (for example by trying to log in thousands of times or probing for weak spots) are automatically blocked for a while. For this we also use CrowdSec, a shared security network: the IP address of an attacker and the type of attack are shared with CrowdSec (France), and we receive their list of known attackers. Ordinary visitors notice nothing of this.
Statistics (only with consent)
Only if you consent in the cookie notice do we use Google Analytics 4 to see which pages are viewed, so we can improve the site. Google does not store full IP addresses, and we have switched off data sharing with Google for other purposes. Google may process data in the United States; for this, Google participates in the EU-US Data Privacy Framework. Legal basis: your consent. You can withdraw it at any time in the cookie settings. More about this in our cookie policy.
Google reviews
If you write a review about us on Google, it is public and linked to your Google account. Google’s terms and privacy policy apply to it.
Who we share data with
We only share data with parties we need for our services, who only use it on our behalf:
- Hetzner Online GmbH (Germany): the servers that run our website and our e-mail, in data centres in the EU.
- Brevo (France): sends the website’s e-mails, such as messages from the contact form.
- Our accounting software and, where needed, our accountant: for invoices and records.
We may also be legally required to provide data, for example to the Dutch Tax Administration. Apart from Google Analytics (only with consent), no data goes to countries outside the European Economic Area.
How long we keep data
- Messages and e-mails: as long as needed to handle your question and any follow-up, and no longer than 2 years after the last contact, unless it leads to an assignment.
- Quotes, assignments and invoices: 7 years, as required by Dutch tax law.
- Server log files: 14 days (website) to 4 weeks (e-mail and security).
- Blocked IP addresses of attackers: as long as the block lasts, at most 4 weeks.
- Statistics in Google Analytics: at most 14 months.
Security
We protect your data with appropriate measures: the website always uses an encrypted connection (https), software is updated automatically, access for administration is additionally secured, and the database is backed up regularly.
Your rights
You have the right to access your data, have it corrected or have it deleted. You can also ask us to restrict processing, object to processing, and have your data transferred. If you have given consent, for example for statistics, you can withdraw it at any time. Send your request to info@studiofg.nl; we respond within one month. To prevent abuse, we may ask you to identify yourself. We do not make decisions about you based solely on automated processing.
If you are not happy with how we handle your data, please let us know. You also have the right to lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.
Changes
We update this privacy policy when our services or the law change. This page always shows the current version.
Version of 22 October 2026.
Contact
StudioFG
van Galenstraat 41
2518 EN The Hague, the Netherlands
Phone: +31 6 1532 9623
E-mail: info@studiofg.nl
Chamber of Commerce: 63906333