Skip to content

Data processing agreement

Last updated : 14 October 2026

This English version is for information only. The Dutch version is the authoritative text. Verwerkersovereenkomst

In brief

  • Applies when you are controller and we process data in the studio.
  • We process only on your instructions and per our privacy policy.
  • Sub-processors include Antagonist B.V.; FormSubmit transfer applies only to web forms.
  • After the project we delete or return data within 24 months unless agreed otherwise.

1. Parties and definitions

This data processing agreement (the Agreement) applies between you as controller (Client) and Molgulaxeno B.V., a private limited company (B.V.) at Haarlemmerweg 239, 1051 CG Amsterdam, trade register 90831275, VAT NL803702589B01 (Processor), when Processor processes personal data on Client’s instructions while delivering services such as podcast recording, vocals and speech recording, mixing or mastering.

GDPR terms have the same meaning. The main contract is our terms and conditions plus any quote or session confirmation. For personal data processing, this Agreement prevails over conflicting general terms.

2. Subject matter and term

Processor processes personal data solely to deliver agreed studio services: recording, editing, file delivery and related scheduling. Processing runs from first processing until return or deletion after the project, with default retention of working files for 24 months unless documented otherwise.

3. Nature and purpose of processing

Typical processing includes capturing voice or conversation, storage on secured systems, alignment with project names, audio export for Client, and limited communication with contacts named by Client. Processor does not run its own marketing on this data.

Client instructs Processor via booking, briefings and written channels ([email protected]). Processor may refuse instructions that breach GDPR or this Agreement.

4. Categories of data and data subjects

Personal data may include voice, name, role, contact details of guests or hosts, and session metadata. Special categories are not requested; Client ensures data subjects receive appropriate information.

Data subjects: performers, podcast participants, voice-over talent and Client’s contacts brought into the studio by Client.

5. Processor obligations

Processor shall:

  • process only on documented instructions from Client, except where EU or member state law requires otherwise;
  • ensure confidentiality of staff with access;
  • implement appropriate technical and organisational measures under Article 32 GDPR;
  • not use recordings for AI training or publicity without written consent from Client and the data subject;
  • assist Client with data subject requests within reasonable time and cost allocation as in terms and conditions;
  • notify Client of personal data breaches without undue delay so Client can meet notification duties.

6. Sub-processors

Client gives general written authorisation for sub-processors needed for hosting and delivery. Current sub-processor for website and storage infrastructure: Antagonist B.V. (Capellalaan 60, 2132 JK Hoofddorp, Nederland). Contact forms on molgulaxeno.digital use FormSubmit (US); that route does not apply to studio recordings unless Client uses the web form.

Processor contracts with sub-processors imposing at least the same obligations as this Agreement and informs Client of changes with a reasonable objection period.

7. Transfers

Primary storage of session files is in the EEA via Antagonist B.V.. Transfers outside the EEA occur only when Client instructs (for example upload to Client’s US cloud) or when a sub-processor in a third country is involved; Processor then supports appropriate safeguards such as SCCs where required.

8. Security and audit

Measures include access control, encryption where appropriate, physical lock-up outside sessions, and deletion after 24 months. On request Processor provides summaries of relevant measures; on-site audit may be arranged at cost and by appointment, without disrupting other clients.

9. Return and deletion

After completion Processor delivers files by the agreed method. On request Processor deletes remaining copies within 24 months, except rotating backups that expire within the same period, or data required by law (for example invoicing data where Client is Processor’s customer).

10. Liability and governing law

Liability between the parties follows the terms and conditions, except where mandatory data protection law says otherwise. This Agreement is governed by Dutch law. Disputes go to the competent court in Amsterdam district, unless mandatory consumer law provides otherwise.

Questions about this Agreement: contact with Fleur Dekker or [email protected]. Background: privacy policy and legal notice. Effective: 14 October 2026; last updated: 14 October 2026.