Privacy Policy for Drake Design Studio

1. Introduction & Data Controller

Welcome to Drake Design Studio, a trade name of Drake Multimedia, a registered company in Amsterdam, Netherlands with KvK number 71813977. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website https://drakedesign.studio.

Drake Multimedia is the data controller responsible for your personal data under the General Data Protection Regulation (GDPR).

Registered Address: [Insert full street address], Amsterdam, Netherlands
KvK Number: 71813977
Privacy Contact: privacy@drakedesign.studio

2. Information We Collect

We collect information that you provide directly to us and information automatically collected when you use our website.

2.1 Personal Data You Provide

When you use our contact form or communicate with us, we may collect:

• Full name
• Email address
• Phone number (if provided)
• Company name (if applicable)
• Message content and project details
• Any other information you choose to provide

2.2 Automatically Collected Data

• IP address
• Browser type and version
• Device information
• Pages visited and time spent on pages
• Referring website
• Date and time of visit

3. Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Consent (Article 6(1)(a)): When you submit a contact form or subscribe to communications, you provide explicit consent for us to process your data.
• Legitimate Interests (Article 6(1)(f)): To respond to your inquiries, improve our services, and maintain website security.
• Contractual Necessity (Article 6(1)(b)): When processing is necessary to fulfill a contract or provide services you've requested.
• Legal Obligation (Article 6(1)(c)): When required by law (e.g., tax records, accounting).

4. How We Use Your Data

Drake Design Studio uses your personal data for the following purposes:

• To respond to your inquiries and provide customer support
• To provide design services and fulfill project requirements
• To send you updates about your projects and services
• To improve our website and user experience
• To send marketing communications (only with your consent)
• To analyze website usage and performance
• To comply with legal obligations and prevent fraud
• To maintain website security and protect against threats

5. Cookies & Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website and provide you with better services.

5.1 Types of Cookies We Use

• Necessary Cookies: Required for basic website functionality, including session management, security, and cookie consent preferences.
• Functional Cookies: Enable enhanced functionality such as live chat support and user experience features.
• Analytics Cookies: Help us understand how visitors interact with our website (currently not in use).
• Marketing Cookies: Used for advertising and targeting purposes (currently not in use).

5.2 Cookie Management

You have full control over your cookie preferences. You can:

• Manage your cookie preferences through our Cookie Declaration page
• Control cookies through your browser settings
• Delete existing cookies at any time

Note: Disabling necessary cookies may affect website functionality. For detailed information about all cookies we use, please visit our Cookie Declaration.

6. Data Sharing & Third Parties

We do not sell your personal data. We may share your information with trusted third-party service providers who assist us in operating our business:

• Hosting Provider: Junovy Hosting (EU-based servers for data storage)
• Email Service Provider: For sending and receiving communications
• Analytics Services: To understand website usage and improve our services

All third-party providers are carefully selected and required to comply with GDPR and maintain appropriate security measures.

7. International Data Transfers

Your personal data is primarily stored and processed within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place, including:

• EU Standard Contractual Clauses
• Adequacy decisions by the European Commission
• Data processing agreements with GDPR-compliant providers

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy:

• Contact Form Submissions: Retained for 2 years after last contact, unless a business relationship is established
• Client Project Data: Retained for the duration of the project plus 7 years for legal and accounting purposes
• Email Correspondence: Retained for 3 years after last communication
• Analytics Data: Anonymized after 14 months

9. Your Rights Under GDPR

As a data subject in the EU/EEA, you have the following rights:

• Right of Access (Article 15): Request a copy of the personal data we hold about you.
• Right to Rectification (Article 16): Request correction of inaccurate or incomplete data.
• Right to Erasure (Article 17): Request deletion of your personal data ("right to be forgotten").
• Right to Restrict Processing (Article 18): Request that we limit how we use your data.
• Right to Data Portability (Article 20): Request your data in a structured, machine-readable format.
• Right to Object (Article 21): Object to processing based on legitimate interests or for direct marketing.
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.
• Right to Lodge a Complaint: File a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

To exercise any of these rights, please contact us at privacy@drakedesign.studio. We will respond to your request within 30 days.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for data transmission
• Secure server infrastructure with regular security updates
• Access controls and authentication mechanisms
• Regular security assessments and monitoring
• Employee training on data protection practices

While we strive to protect your data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

11. Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the Dutch Data Protection Authority within 72 hours and inform affected individuals without undue delay, as required by GDPR Article 33 and 34.

12. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately, and we will delete the information.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting the updated policy on this page and updating the "Last Updated" date. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us: