In brief
- We only process data you send us or that we need to run your session and billing.
- No ad cookies, no data sales, no AI training on your recordings.
- Session files are kept up to 24 months after wrap unless you agree otherwise.
- Questions or requests: [email protected] — we aim to reply within 2 business days.
1. Who is responsible?
Misfiredexa B.V. ("Misfiredexa"), registered at Eerste Helmersstraat 78, 1054 DL Amsterdam, is the controller for personal data collected on misfiredexa.click and in direct contact about quotes, bookings, recording, mixing, mastering and voice-over.
Managing director: Maarten van Dijk. Trade register 84964854, VAT NL830830893B01. Privacy contact: [email protected] or 020 261 8473. Company details: legal notice.
We have not appointed a data protection officer; it is not required for our size. Privacy requests are handled by the same team that runs the studio.
2. Scope
This policy covers visitors to misfiredexa.click, people who use contact, and clients who book services such as vocal recording, live band recording, mixing, mastering or voice-over.
If you bring guests or talent as a company, you are usually the controller for their data; we act as processor under our data processing agreement. Their rights are governed by your policy.
Audio recordings can be personal data when someone is identifiable from voice or performance; see the session section below.
3. Data we process
Contact form: name, email, phone (optional), service choice, preferred date (optional) and project description. Required fields are needed to reply; without email we cannot send a quote.
Booking and delivery: billing details, artist or band name, scheduling, email and phone messages, payment references. A 30% deposit may apply under our terms.
Sessions: audio (and any video you bring) of performers. We use files only to deliver the booked service, run revisions (up to 2 rounds where applicable) and hand over exports.
Technical: host Hostnet B.V. may keep server logs (IP, time, page, browser) for security. Your cookie choice is stored locally; see cookie policy.
We do not ask for special-category data. To reschedule, tell us you are unavailable; no medical documents are required.
4. Purposes, legal bases and retention
| Purpose | Data | Legal basis (GDPR) | Retention |
|---|---|---|---|
| Reply and quote | Form, email | Legitimate interest / pre-contract steps (Art. 6(1)(f) or (b)) | Up to 2 years after last contact unless you become a client |
| Contract and service | Contact, schedule, project | Contract (Art. 6(1)(b)) | Relationship period + 24 months archive for session files |
| Invoicing | Identity, payment | Legal obligation (Art. 6(1)(c)) | 7 years (tax law) |
| Website security | Host logs | Legitimate interest (Art. 6(1)(f)) | Limited, per host policy |
| Cookie choice | Key msfr_consent_v1 | Consent / ePrivacy rules (Art. 6(1)(a)) | 182 days |
| Dispute | Correspondence | Legitimate interest (Art. 6(1)(f)) | Until closed plus limitation periods |
We do not sell or rent data. We do not send marketing newsletters.
5. Voice, image, minors and AI
Voice and image can identify a person. We do not publish session excerpts, client photos or names on misfiredexa.click without written permission.
We do not use client recordings to train, test or improve artificial intelligence, and we do not create voice clones without explicit written consent from the data subject.
Online booking is intended for people aged 16 and over. Younger participants join sessions under a parent or guardian who makes the booking.
6. Recipients and processors
Only team members who need access for your project or administration can view your data.
- Hostnet B.V. — website and email hosting in the Netherlands;
- FormSubmit (formsubmit.co, United States) — forwards the contact form to our inbox;
- Accountant — invoicing data, bound by professional secrecy;
- Bank — payments;
- Authorities — when the law requires.
Each processor has a contract meeting Article 28 GDPR. Business clients see also data processing agreement.
7. Transfers outside the EEA
Website hosting is with Hostnet B.V. in the Netherlands. The contact form uses FormSubmit in the United States: message content may be processed there briefly before it reaches [email protected].
We rely on Article 49(1)(b) GDPR: the transfer is necessary for pre-contractual steps you request via the form. To avoid it, email [email protected] or call 020 261 8473 instead.
We monitor adequacy decisions and safeguards and update measures when the law requires.
8. Security
Measures include HTTPS on misfiredexa.click, restricted system access, strong passwords, encrypted workstations where practical, physical access control at Eerste Helmersstraat 78 outside sessions, and deletion of session files after the 24-month archive window unless you purchase or request extension.
If a breach poses a risk to your rights, we notify the Dutch supervisory authority within 72 hours where required and inform you when the risk is high. No transmission is fully secure; once received, we protect data according to studio practice.
9. Your rights
Under the GDPR you have rights including access, rectification, erasure, restriction, portability, objection to processing based on legitimate interest, and withdrawal of consent without affecting prior lawful processing.
Send requests to [email protected] or by post to Eerste Helmersstraat 78, 1054 DL Amsterdam. We respond within one month, extendable by two months for complex cases with notice. We may verify identity when in doubt. The service is free unless requests are manifestly unfounded or excessive.
You may complain to the Dutch Data Protection Authority via autoriteitpersoonsgegevens.nl. We prefer to resolve issues directly through contact.
10. Cookies and similar tech
We do not use analytics or marketing cookies. Only your banner choice in localStorage (msfr_consent_v1, 182 days) is stored. Details: cookie policy; change settings via .
11. Third-party links
misfiredexa.click links to services such as OpenStreetMap. They apply their own privacy rules; we are not responsible for their processing.
12. Changes
This policy is informational and does not limit your statutory rights. We may update it when services or law change. The version on this page applies from 14 October 2026; the date above shows 14 October 2026.
Contact: Misfiredexa B.V., Eerste Helmersstraat 78, 1054 DL Amsterdam — [email protected]. Rates and studio facts: services and FAQ.