Data controller
Futurefy Studio (Vennootschap Onder Firma, KVK 42154461), based in Rotterdam, the Netherlands, is the controller for personal data collected through www.futurefy.eu. You can reach us at [email protected].
What we collect and why
Most of the personal data we process is data you give us directly:
- Contact form: your name, email address, and the message you write. We use this to reply to your enquiry and, where relevant, prepare a proposal.
- Meeting scheduling (Cal.com): your name, email address and the details of the meeting you book. We use this to coordinate and remind you of the call.
We also keep professional contact details — name, job title, employer, work email address, phone number and LinkedIn profile — for people at companies we approach about our services. These come from public professional sources, such as the person's own LinkedIn profile or their company's website, and we process them on the basis of our legitimate interest (Article 6(1)(f) GDPR) in making contact in a purely professional context. Every message identifies Futurefy Studio and offers a plain way to ask us not to write again; if you do, we stop immediately.
We use Cloudflare Web Analytics, a cookie-free measurement of page views, visits, traffic sources, approximate visit duration and device type. It does not identify individuals and is not used for advertising. Loading fonts from Google Fonts causes your browser to connect directly to Google's servers, which receives your IP address; this is a minimal, necessary step to display the site correctly. The Cal.com booking widget only loads when you voluntarily click the button to book a call; at that point Cal.com may set its own cookies, necessary to display the calendar. Because that loading depends on your explicit action, we do not need to ask for prior cookie consent.
Legal basis
We process this data because it is necessary to take steps at your request before entering into a contract (Article 6(1)(b) GDPR), or because we have a legitimate interest in responding to enquiries, managing our calendar and understanding in aggregate how the site is used (Article 6(1)(f) GDPR), which does not override your rights.
Who receives your data
We do not sell or share your data with third parties for commercial purposes. To run this site and respond to you, we share the minimum necessary data with these processors:
- Web3Forms — processes and forwards contact form submissions.
- Cal.com, Inc. — manages meeting scheduling.
- Google Ireland Limited (Google Fonts) — delivers the site's fonts.
- Cloudflare, Inc. — hosts the website, provides its content delivery network (CDN), and processes aggregated Web Analytics metrics.
When we deliver AI agents or other projects to a client, the processing of that project's data is governed by the data processing agreement (DPA) signed with that client, not by this policy, which covers only data collected through www.futurefy.eu.
International transfers
Some of the providers above process data outside the European Economic Area, mainly in the United States. Where that happens, the transfer relies on the European Commission's Standard Contractual Clauses, the EU–US Data Privacy Framework where applicable, or equivalent safeguards offered by the provider.
How long we keep your data
Contact form messages and meeting bookings are kept for as long as the business conversation continues, and for a maximum of 12 months from the last contact if no project is signed. Professional contact details of people we have approached are kept for 12 months from the last meaningful contact, or deleted sooner if you ask us to. If you become a client, your contact and billing data is kept for the duration of the contractual relationship and afterwards for the statutory retention period for tax records in the Netherlands (7 years).
Your rights
You can ask us at any time to access, correct or delete your data, to restrict or object to its processing, and to receive the data you gave us in a portable format. Write to [email protected] and we will respond within the one-month legal deadline.
Complaints
If you believe we have not handled your data properly, you can lodge a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), or with the data protection authority in your own country of residence.
Security
We apply reasonable technical and organisational measures (restricted access, encrypted connections, providers with contractual data-protection commitments) to protect your data against unauthorised access, loss or alteration.
Changes to this policy
We may update this policy to reflect legal or service changes. The date of the last update appears at the bottom of this page.
Last updated: 15 September 2026.