Privacy policy
Last updated: 1 March 2026. This policy explains how Puttzi Putsc Studio processes personal data in accordance with the EU General Data Protection Regulation (GDPR).
1. Data controller
The data controller responsible for your personal data is:
Puttzi Putsc Studio
Keizersgracht 284, 1016 EW Amsterdam, Netherlands
Registration: 823 456 901
Email: [email protected]
Phone: +31 20 244 8910
For privacy-related enquiries, contact us at the email above with the subject line "Privacy request".
2. What data we collect
We may collect and process the following categories of personal data:
- Identity and contact data: name, email address, phone number, postal address
- Enquiry content: messages you send via our contact form, photos of your property, dimensions and brief descriptions
- Contract and billing data: invoice details, payment records, project correspondence
- Technical data: IP address, browser type, device information collected via cookies (see our Cookie policy)
- Survey records: site notes and photographs taken during property visits with your consent
3. Legal basis for processing
We process personal data on the following legal bases under Article 6 GDPR:
- Contract (Art. 6(1)(b)): Processing necessary to provide design services you request and to manage our agreement with you.
- Legitimate interests (Art. 6(1)(f)): Responding to enquiries, improving our services, maintaining business records, and protecting legal claims, where your interests do not override ours.
- Consent (Art. 6(1)(a)): Where required for non-essential cookies or optional marketing communications. You may withdraw consent at any time.
- Legal obligation (Art. 6(1)(c)): Retaining accounting records as required by Dutch legislation.
4. How we use your data
- Respond to contact form submissions and quote requests
- Schedule and conduct site surveys
- Prepare workspace design deliverables
- Issue invoices and process payments
- Communicate about project revisions and delivery
- Comply with tax and accounting obligations
- Maintain website security and analyse aggregated traffic patterns
5. Data retention
- Enquiry records without a contract: up to 24 months from last contact
- Active project files: duration of the project plus 5 years for warranty and liability purposes
- Accounting records: as required by Dutch law, typically 5–10 years
- Cookie analytics: up to 14 months (see Cookie policy)
- Marketing consent records: until consent is withdrawn plus 12 months for audit purposes
When retention periods expire, data is securely deleted or anonymised.
6. Sharing and processors
We do not sell personal data. Data may be shared with cloud hosting and email providers, accounting software providers, contractors you appoint when you authorise us to share plans, and public authorities when required by law. All processors act under written agreements with appropriate security measures.
7. International transfers
Our primary systems are located within the European Economic Area (EEA). If any processor transfers data outside the EEA, we ensure appropriate safeguards such as EU Standard Contractual Clauses or an adequacy decision by the European Commission.
8. Security
We implement encrypted connections (TLS), access controls on project files, password-protected devices for staff, and regular review of data access. No method of transmission over the internet is completely secure.
9. Your rights
Under GDPR you have the right to access, rectify, erase, restrict, port, and object to processing of your personal data, and to withdraw consent where processing is consent-based. Email [email protected] to exercise these rights. We respond within one month.
10. Automated decision-making
We do not use automated decision-making or profiling that produces legal or similarly significant effects on data subjects.
11. Children's data
Our services are directed at adults commissioning property work. We do not knowingly collect data from children under 16.
12. Complaints
You may lodge a complaint with:
Autoriteit Persoonsgegevens
Postbus 93374, 2509 AJ Den Haag, Netherlands
Website: autoriteitpersoonsgegevens.nl
We ask that you contact us first so we can try to resolve your concern directly.
13. Changes to this policy
We may update this policy to reflect legal or operational changes. The "Last updated" date at the top will be revised accordingly.