BIG LAB PRIVACY POLICY
LAST UPDATED: 01-07-2026
1. Who we are
Big Lab is a creative AI and hybrid production studio based in Amsterdam, The Netherlands. Big Lab is operated as a sole proprietorship (eenmanszaak) by Alina de Groot, registered with the Dutch Chamber of Commerce (Kamer van Koophandel).
For the purposes of the General Data Protection Regulation (GDPR) and applicable Dutch data protection law, Big Lab is the data controller responsible for your personal data.
Contact: iinfo@biglab.nl | Sarphatikade 1A, 1017 WV Amsterdam, The Netherlands
2. What data we collect
We may collect and process the following categories of personal data:
Contact and identity data:
Name, job title, company name
Email address and phone number
Business address
Project and communication data:
Correspondence by email, phone, or other channels
Project briefs, feedback, and approval records
Payment and invoice information
Website usage data:
IP address and browser type
Pages visited and time spent on our website
Device type and operating system
Cookie and tracking data (see Section 6)
3. Why we collect your data and our legal basis
We process personal data only where we have a lawful basis to do so under the GDPR. The table below sets out our purposes and legal bases:
Performance of a contract (Article 6(1)(b) GDPR):
To prepare and issue quotations
To manage and deliver agreed projects
To process payments and issue invoices
To communicate with you about your project
Legitimate interests (Article 6(1)(f) GDPR):
To maintain records of project approvals and correspondence
To protect Big Lab's legal rights in the event of a dispute
To improve our services and website
To send relevant updates to existing clients about similar services (you may opt out at any time)
Legal obligation (Article 6(1)(c) GDPR):
To comply with Dutch tax and accounting obligations
To respond to lawful requests from authorities
Consent (Article 6(1)(a) GDPR):
To send marketing communications to prospective clients (where required)
To place non-essential cookies on your device
4. How long we keep your data
We retain personal data only for as long as necessary for the purposes for which it was collected, or as required by law.
Client contact and project data: 7 years following project completion, in accordance with Dutch accounting and tax obligations (Belastingdienst).
Invoice and payment records: 7 years as required by Dutch law.
Email correspondence: retained for the duration of the client relationship and for up to 5 years thereafter for legal protection purposes.
Website usage data: up to 13 months, depending on cookie type.
Marketing contact data: until you withdraw consent or opt out.
5. Who we share your data with
We do not sell your personal data. We may share your data with the following categories of recipients where necessary:
Accountants and bookkeeping services (for tax and financial compliance)
Payment processors (for invoicing and payment handling)
Cloud storage and project management platforms used in production
Legal advisors or collection agencies (in the event of a payment dispute)
Authorities, where required by law
All third-party processors are required to handle your data in accordance with applicable data protection law. Where data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place.
6. Cookies
Our website uses cookies and similar tracking technologies. Cookies are small text files placed on your device when you visit our website.
We use the following types of cookies:
Essential cookies: necessary for the website to function. These cannot be disabled.
Analytical cookies: help us understand how visitors use our website (e.g. Google Analytics). These are only placed with your consent.
Marketing cookies: used to display relevant content or track campaign effectiveness. These are only placed with your consent.
You can manage your cookie preferences via the cookie banner on our website, or by adjusting your browser settings at any time. Withdrawing consent does not affect the lawfulness of prior processing.
7. Your rights under GDPR
As a data subject, you have the following rights under the GDPR:
Right of access: you may request a copy of the personal data we hold about you.
Right to rectification: you may ask us to correct inaccurate or incomplete data.
Right to erasure: you may ask us to delete your personal data, subject to legal retention obligations.
Right to restriction: you may ask us to limit how we process your data in certain circumstances.
Right to data portability: you may request your data in a structured, commonly used format.
Right to object: you may object to processing based on legitimate interests, including direct marketing.
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting prior processing.
To exercise any of these rights, please contact us at info@biglab.nl. We will respond within one month of receiving your request.
You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.
8. Data security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include secure cloud storage, access controls, and encrypted communications where applicable.
No method of transmission over the internet is completely secure. In the unlikely event of a data breach that poses a risk to your rights, we will notify the relevant authorities and affected individuals in accordance with our legal obligations.
9. Children's privacy
Our services are directed at business clients and professionals. We do not knowingly collect personal data from individuals under the age of 16. If we become aware that we have collected data from a minor, we will delete it promptly.
10. Links to third-party websites
Our website may contain links to external websites. We are not responsible for the privacy practices of those sites and recommend reviewing their privacy policies before providing any personal data.
11. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated version will be published on our website with a revised 'last updated' date. Where changes are material, we will notify you by email or a prominent notice on our website.
12. Contact
For any questions, requests, or concerns regarding this Privacy Policy or our data practices, please contact us:
Big Lab
Sarphatikade 1A, 1017 WV Amsterdam, The Netherlands
info@biglab.nl
www.biglab.nl