Data processing agreement
In brief
- Applies when you are controller and we process personal data on your instructions.
- Typical for publishers, labels or agencies booking voices or bands through us.
- We process only as instructed and under our privacy policy as controller for our own clients.
- Sign via quote, order or separate PDF on request at [email protected].
1. Parties and definitions
This data processing agreement (the Agreement) is between:
- Client / controller: the business customer placing an order with Mislikervyraxi;
- Processor: Mislikervyraxi B.V., Overtoom 141, 1054 HG Amsterdam, KvK 82429618, VAT NL831888283B01.
GDPR terms (Regulation (EU) 2016/679) and the Dutch UAVG have the same meaning. Personal data may include voice, name, contact details and session files when we deliver vocals and voice, band recording, audiobook recording, mixing or mastering on your behalf.
2. Application and precedence
The Agreement applies when we process personal data on the Client’s instructions, not for our own client relationship (that falls under our privacy policy as controller).
If this Agreement conflicts with the terms and conditions on data processing, this Agreement prevails. Commercial terms (rates such as €79, deposit 35%, cancellation 5 days) stay in the terms.
3. Subject, duration and nature
The Processor processes personal data only to perform agreed studio services: scheduling, recording, post-production, file delivery and limited archiving for 18 months after the last session, unless written otherwise or legally longer.
Processing takes place in Amsterdam (studio) and with partners such as TransIP B.V.. Duration: project term plus archive period, then return or deletion under section 11.
4. Categories of data subjects and data
Typical data subjects: narrators, vocalists, band members, guests and the Client’s contacts. Typical data: name, email, phone, voice recordings, performance, schedule, invoice references.
We do not process special categories on the Client’s request. The Client ensures a legal basis and informs data subjects, for example via its own privacy notice or contracts (see audiobook rights basics).
5. Instructions and confidentiality
The Processor follows only documented, lawful instructions from the Client. Oral instructions during sessions are confirmed in writing when they differ from standard workflow.
Mislikervyraxi staff (recording leads, engineers) are bound by confidentiality. Access is need-to-know. Instruction questions: [email protected] or 020 789 3462, available Mon–Fri 09:30–18:30, Sat 10:00–16:00.
6. Security
The Processor implements appropriate technical and organisational measures under Article 32 GDPR, including HTTPS on mislikervyraxi.click, access control, encryption where feasible, physical studio locking and incident procedures.
The Client should deliver stems and materials via agreed secure channels; see deliver mix stems for formats. The Client keeps its own copies of critical masters.
7. Sub-processors
The Client gives general authorisation for sub-processors needed for the service, notably TransIP B.V. (hosting) and FormSubmit (form relay, US). We inform about changes; the Client may object within 14 days with reasons.
Each sub-processor signs Article 28 terms. A current list is available on request via [email protected].
8. Data subject rights and the AP
The Processor assists the Client, as reasonably possible, with data subject requests (access, erasure, etc.) and with notifications to the Autoriteit Persoonsgegevens (AP). Requests sent directly to us are forwarded to the Client unless the law requires us to respond.
9. Personal data breaches
The Processor notifies the Client without undue delay after becoming aware of a breach, with available details for any AP or data subject notification. We cooperate on investigation and mitigation.
10. Audits and information
The Client may once per calendar year, on business days and by appointment, request reasonable information or an audit by an independent third party under confidentiality. Costs are borne by the Client unless the audit shows serious shortcomings on our side.
11. Return and deletion
After the order ends we deliver agreed files and delete remaining copies within 18 months, except what we must keep by law (accounts 7 years). The Client may request earlier deletion in writing; we confirm when completed.
12. Transfers outside the EEA
We primarily process within the EEA. Transfer via FormSubmit to the United States may occur when using the web form; project email uses EU hosting via TransIP B.V.. Where transfer is needed we apply appropriate safeguards (standard contractual clauses or other Chapter V GDPR tools).
13. Liability and closing
Liability for GDPR breaches follows the terms and conditions and Dutch law, without limiting mandatory GDPR rules.
The Agreement takes effect on written acceptance (quote, order confirmation or signed appendix). Questions: contact, [email protected]. Last text version: 14 October 2026.