Privacy policy
Last updated
This policy explains what personal data Aethra Studios collects through this website, why, and what rights you have. We collect as little as we can, and we never sell your data.
Who we are
The controller responsible for your personal data is Aethra Studios (B.V.), registered with the Dutch Chamber of Commerce (KvK) under number [Placeholder: KvK number], Schoutendreef 360, 2542 LW The Hague, The Netherlands.
For anything about privacy, email privacy@aethrastudios.com.
What we collect and why
We only process personal data when you give it to us, or when it's technically needed to deliver this website.
| Purpose | Data | Legal basis | How long we keep it |
|---|---|---|---|
| Newsletter | Email address, signup date | Your consent (art. 6(1)(a) GDPR) | Until you unsubscribe |
| Answering messages sent through the contact form or by email | Name, email address, topic, your message | Our legitimate interest in replying (art. 6(1)(f) GDPR) | Up to 2 years after the conversation ends |
| Job applications | CV, portfolio, contact details, anything else you send | Steps taken at your request before a contract (art. 6(1)(b) GDPR) | 4 weeks after the application process ends, or 1 year with your consent |
| Running and securing the website | IP address, browser type, requested page, time of request | Our legitimate interest in a secure, working site (art. 6(1)(f) GDPR) | As set by our hosting provider, normally no more than 30 days |
We don't use analytics, advertising trackers or profiling on this website.
Embedded content from other services
Some pages can show content from other services, such as a Steam store widget or a YouTube trailer. These only load after you click to show them. Once loaded, that service receives your IP address and may set its own cookies, under its own privacy policy.
- Valve Corporation (Steam): store.steampowered.com/privacy_agreement
- Google (YouTube): policies.google.com/privacy
Links to our social channels (Discord, YouTube, X, Bluesky) take you to those platforms. Their privacy policies apply there.
Who we share data with
We share personal data only with service providers that help us run this website and talk to you. They act as processors on our instructions, under a data processing agreement.
- Website hosting: [hosting provider]
- Newsletter delivery: [newsletter provider]
- Contact form delivery: [form provider]
- Email: [email provider]
We don't sell personal data or share it for advertising. We only share it with authorities when the law requires us to.
Transfers outside the EU
Some providers may process data outside the European Economic Area. When that happens, we make sure there's an adequate safeguard in place, such as an EU adequacy decision (including the EU-US Data Privacy Framework) or the European Commission's Standard Contractual Clauses.
Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you
- have incorrect data corrected
- have your data deleted
- restrict or object to how we process it
- receive your data in a portable format
- withdraw consent at any time, without affecting processing that happened before
To use any of these rights, email privacy@aethrastudios.com. We reply within one month. We may ask you to confirm your identity first.
If you think we're handling your data wrongly, you can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl. We'd appreciate the chance to fix it first.
Security
The site is served only over HTTPS. Access to the inboxes and tools that hold your data is limited to the people who need it, and protected with strong passwords and two-factor authentication.
Children
This website isn't aimed at children under 16. We don't knowingly collect their data. If you believe a child has sent us personal data, contact us and we'll delete it.
Changes to this policy
We'll update this page when our practices change. The date at the top shows when it last changed.