Privacy and cookies
Your data at DTB HOUSE.
Last updated: 7 September 2026.
Who is responsible?
DTB HOUSE is a trading name of DTB LAB. DTB LAB is the controller responsible for the personal data described below.
- DTB LAB
- DTB HOUSE
- Registered address
- Klifrakplantsoen 17
3544 RE Utrecht, Netherlands - Dutch business registration number
- 99157470
- VAT ID
- NL005375074B53
- hello@dtb-house.com
What data do we use and why?
When you contact us, we process your name, email address and message. Business name, room and package are optional. We need this information to answer your enquiry, discuss a quote or perform our agreement. Without contact details we cannot reply. Please do not send medical or other sensitive information.
For quotes and assignments, our legal basis is taking steps at your request or performing a contract (GDPR Article 6(1)(b)). For other enquiries and website security, it is our legitimate interest in being contactable and preventing abuse (Article 6(1)(f)). Mandatory administration is based on a legal obligation (Article 6(1)(c)). Sending a message does not subscribe you to a newsletter.
Providers and transfers
Vercel hosts the website and processes technical visit data such as IP addresses and request information. Spaceship’s Spacemail handles our email. Incoming messages are forwarded to our Gmail inbox. These providers receive the data needed to deliver their services. We do not sell your data.
These services may process data outside the European Economic Area, including in the United States. Appropriate safeguards are required, such as an applicable adequacy decision or EU Standard Contractual Clauses. Contact us for information about transfers of your data; our providers’ information is also linked below.
How long do we retain data?
We retain enquiries and quotes that do not lead to an assignment for up to 12 months after the last substantive contact. For assignments, we retain relevant correspondence during the work and while needed to settle agreements or legal claims. Core tax records are kept for the statutory period, generally 7 years. This retention policy also covers copies in our email inboxes.
For form security, the server temporarily keeps derived IP keys and delivery states, active for up to 15 minutes. Form tokens expire after one hour. Hosting logs follow Vercel’s retention periods; you can request details from us.
Facebook and Instagram
If you submit an enquiry through a lead form in a Facebook or Instagram advertisement, we use the details you provide to respond to that enquiry. This is not consent to a newsletter. Meta also processes data under its own privacy policy. No Meta Pixel is active on this website.
Your rights
You can request access, correction, deletion or restriction of your data. You can object to processing based on legitimate interests. You can transfer your data where the GDPR provides that right. Where processing relies on consent, you can withdraw it. We do not make decisions with legal or similarly significant effects solely through automated processing.
Send your request to hello@dtb-house.com. We normally respond within one month. For a complex request, this can be extended by two months; we will inform you within the first month. We may ask for additional information to verify your identity proportionately. You may also lodge a complaint with the Dutch Data Protection Authority.