Privacy

This page explains what personal data this website collects, why, and what you can ask of it. In short: very little, only to answer you, and never sold or used for advertising.

Who is responsible

This website is run by Frederik Tack, trading as studioattack, in Belgium. He is the controller of your personal data under the General Data Protection Regulation (GDPR). For anything about your data, email frederik@at-tack.be.

What is collected, and why

When you send a message. The contact form asks for your email address and your message. They are used only to reply to you and, if we end up working together, to arrange that work. The legal basis is taking steps at your request before a possible agreement, and our legitimate interest in answering enquiries (GDPR article 6(1)(b) and (f)). The same applies when you email or phone directly.

When you visit. The site is hosted on Cloudflare. Like any web server, Cloudflare briefly processes technical data such as your IP address and browser type to deliver pages and protect the site against abuse. Visits are counted with Cloudflare Web Analytics, which uses no cookies, does not fingerprint you and does not track you across sites. It reports totals such as page views, the referring site and the country.

Nothing else is collected. There is no newsletter, no advertising and no tracking pixels, and your data is never sold.

Who else handles your data

• Web3Forms receives what you type into the contact form and forwards it to Frederik by email.
• Cloudflare, Inc. hosts the site and provides the visit statistics.
• Spotify AB provides the music player on the homepage. It is loaded from Spotify, so Spotify receives your IP address and may set its own cookies, especially when you press play or are signed in to Spotify. See Spotify's privacy policy.
• Instagram and Spotify links take you to those services. Their own privacy policies apply once you are there.

Some of these providers are based in or use servers outside the European Economic Area. Where that happens, the transfer is covered by the safeguards the GDPR requires, such as the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.

Cookies

This site itself sets no cookies. The only cookies come from the embedded Spotify player, as described above. If you would rather avoid them, use the links to Spotify instead of the player.

How long it is kept

Messages and the emails that follow are kept for as long as needed to handle your enquiry and any work that comes from it, and afterwards only as long as Belgian accounting or tax rules require. Cloudflare's technical logs are kept for a short period only.

Your rights

You can ask to see the personal data held about you, to correct or delete it, to limit or object to its use, and to receive it in a portable format. Email frederik@at-tack.be and you will get an answer within one month.

If you think your data has been mishandled, you can complain to the Belgian Data Protection Authority at dataprotectionauthority.be.

Changes

If this policy changes, the new version will be published here with a new date.