Privacy policy

This page explains what personal data Starnek B.V. ("we", "us") processes when you visit starnek.nl or starnek.com, why we process it, and the rights you have under the EU General Data Protection Regulation (GDPR).

1. Controller

Starnek B.V., KvK 42013135, Willem Fenengastraat 16 E, 1096 BN Amsterdam, The Netherlands. Contact: info@starnekstudio.nl.

2. What we collect and why

Contact and free-mockup forms

When you submit a form we process the name, email, company, project type, budget range and message you provide, plus the IP address used to submit the form. Lawful basis: Article 6(1)(b) GDPR (steps prior to entering a contract) and 6(1)(f) (legitimate interest in fraud prevention via rate-limiting and Turnstile).

Analytics

With your consent we use Plausible (privacy-friendly, no cookies) and/or Google Analytics 4 (consent-gated) to count anonymous page views and measure conversion. You can withdraw consent any time via the cookie banner.

Marketing pixels

With your separate consent we may load Meta Pixel and LinkedIn Insight Tag to measure ad campaigns. Disabled by default until you accept "marketing" in the cookie banner.

3. Processors we share data with

• Resend — transactional email delivery (Article 28 processor).
• Cloudflare — Turnstile anti-spam.
• Plausible — analytics (EU-hosted when self-hosted).
• Google — GA4 analytics (when consent given).
• Meta, LinkedIn — marketing pixels (when consent given).
• Contabo — VPS hosting (EU data centre).
• Sentry — error tracking, with PII scrubbing on.

4. Retention

Form submissions: up to 24 months in our CRM. Analytics: aggregated, retention per the respective provider's defaults (typically 14–26 months for GA4, indefinite-aggregate for Plausible).

5. Your rights

• Access, rectify or erase your data.
• Restrict or object to processing.
• Data portability.
• Withdraw consent at any time.
• Lodge a complaint with the Dutch Data Protection Authority Autoriteit Persoonsgegevens.

Email info@starnekstudio.nl to exercise any of these.

6. International transfers

Some processors (e.g. Google, Meta, LinkedIn) may transfer data to the United States. We rely on the EU-U.S. Data Privacy Framework or Standard Contractual Clauses where applicable.

7. Changes

Material changes to this policy are flagged in the cookie banner and dated at the top of this page.