Controller & scope
IK Studios, established in the Netherlands, is the controller for the personal data described in our Privacy Policy. We process personal data in line with the GDPR and Dutch implementing law.
Lawful bases
| Activity | Lawful basis |
|---|---|
| Operating your account and providing a purchased product | Article 6(1)(b) — contract |
| Securing our services and preventing abuse | Article 6(1)(f) — legitimate interests |
| Responding to your enquiries | Article 6(1)(f) — legitimate interests |
| Keeping invoices and tax records | Article 6(1)(c) — legal obligation |
| Optional communications and non-essential features | Article 6(1)(a) — consent |
Your rights
Wherever the GDPR applies, you have the right to:
- Access — ask whether we process your data and get a copy.
- Rectification — correct inaccurate or incomplete data.
- Erasure — ask us to delete data we no longer need a basis to keep.
- Restriction — ask us to pause processing while a concern is resolved.
- Portability — receive data you gave us in a portable format.
- Objection — object to processing based on legitimate interests.
- Withdraw consent — at any time, without affecting prior processing.
- Complain — to a supervisory authority, in the Netherlands the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).
How to exercise them
Email support@ikstudios.nl from the address associated with your account, telling us which right you want to use. We will respond without undue delay and within one month, extendable for complex requests as the GDPR allows. We may need to verify your identity to protect your data.
You can also manage some choices yourself on the Privacy Preferences page and request erasure via the Data Deletion Policy.
International transfers
We prefer EU/EEA hosting. Where data is processed outside the EEA, we rely on an adequacy decision or Standard Contractual Clauses with appropriate technical and organisational measures. The providers involved are listed in the Subprocessor List.
Automated decisions & AI
We do not make decisions producing legal or similarly significant effects about you based solely on automated processing. AI features in Vault One are assistive and keep a human in control, as described in our AI Usage Policy.
Data protection contact
Given our size and the nature of our processing, we are not required to appoint a statutory Data Protection Officer, and we have not done so. Data protection matters are handled directly by the IK Studios team at support@ikstudios.nl. We will tell you if this changes.