Skip to content
Mon–Fri 9:30–18:30, Sat 12–17Elandsgracht 84 · Amsterdam

Data processing agreement

Last updated : 14 October 2026

This English text is for convenience only. The Dutch version is legally authoritative. Verwerkersovereenkomst

In brief

  • Applies when you are the controller and we process personal data on your instructions.
  • Processing is limited to what the agreed studio service requires.
  • Working files are kept for 18 months by default unless agreed otherwise.
  • Request a signed copy via contact or [email protected].

1. Parties and definitions

This data processing agreement ("Agreement") is between:

  • Controller: the business client engaging Monogamyvault for recording, mixing, mastering or podcast work;
  • Processor: Monogamyvault B.V., Elandsgracht 84, 1016 TX Amsterdam, KvK 92797452, represented by Lars Meijer.

GDPR terms have the same meaning as in Article 4 GDPR. The Agreement supplements our terms and conditions where the Controller is responsible for personal data.

2. Subject matter and duration

The Processor processes personal data only to deliver the service described in the quote or order confirmation, for example vocal recording, mixing, mastering or podcast recording.

Duration runs from the start of the engagement until deletion or return of data afterwards, with a default 18-month retention for working files unless agreed in writing. Cancellation rules follow our terms and conditions (including 4 days free cancellation where applicable).

3. Nature and purpose of processing

Processing includes: recording, editing, mixing, mastering, exporting and temporarily storing audio (and video supplied by the Controller); scheduling sessions; communicating with contacts named by the Controller; and invoicing the Controller.

The Processor does not use data for its own marketing, does not sell data, and does not train artificial intelligence models on recordings, consistent with our privacy policy.

4. Categories of data and data subjects

Data subjects: artists, presenters, podcast guests, voice-over talent and other participants the Controller brings to the studio.

Data: audio and optional video tracks, names and contact details for scheduling, the Controller's billing details, and technical metadata (tempo, takes, file names).

The Processor does not process special-category data unless the Controller explicitly instructs this and documents an appropriate legal basis and instruction.

5. Processor obligations

  1. Process only on documented instructions from the Controller, including transfers to third parties the Controller designates;
  2. Confidentiality: staff on a need-to-know basis only;
  3. Appropriate technical and organisational measures (HTTPS, access control, encrypted media where suitable);
  4. Assist with data-subject requests via the Controller within a reasonable time;
  5. Notify the Controller of personal data breaches without undue delay so the Controller can meet reporting duties;
  6. Delete or return data after completion, except invoice retention required by law (7 years).

The Processor maintains processing records where required.

6. Sub-processors

The Controller gives general written authorisation for sub-processors that may process personal data:

  • TransIP B.V. — hosting, email and storage;
  • FormSubmit — forwarding web forms to our mailbox (possible US transfer);
  • accountant — billing data.

The Processor informs the Controller of intended changes to sub-processors; the Controller may object within a reasonable time. Replacements are bound by Article 28 GDPR contracts.

7. Transfers outside the EEA

We primarily process and store in the EEA. When the Controller asks us to share files with parties outside the EEA, we do so only on the Controller's instruction, who remains responsible for appropriate safeguards (standard contractual clauses, adequacy decision or explicit consent).

FormSubmit may briefly process form fields in the US; see transfers in our privacy policy.

8. Audits and information

The Controller may request reasonable compliance information once per calendar year, by appointment during business hours. Our legal notice and KvK details are public. More intrusive audits only when required by law or after a serious incident, and at the Controller's cost unless the Processor is at fault.

9. Liability and precedence

Liability between the parties follows the terms and conditions and Dutch law. If this Agreement conflicts with the general terms on personal data processing, this Agreement prevails.

Fees for processing are the agreed studio rates (for example from €105 for vocal per hour including 21% VAT); see services.

10. Contact and signature

For a signed PDF or organisation-specific amendments: [email protected] or contact, Mon–Fri 9:30–18:30, Sat 12–17. Quote KvK 92797452 and VAT ID NL842249497B01 on your purchase order.

Template published 14 October 2026; effective 14 October 2026. Related: privacy policy, cookie policy, accessibility statement.