We’re hiring a senior product designer for the Rotterdam studio.See the role

Skip to content
Corvel

Privacy policy

Last updated 1 November 2026.

Sample text for the theme’s demo. This page is written for Corvel, an invented studio, and is not legal advice. Replace it with the text for your own studio, and have that reviewed by someone qualified for your country before you publish.

This policy explains which personal data Corvel B.V. (“Corvel”, “we”) collects when you visit this website, write to us, sign up for our studio notes, apply for a job or work with us on a project, why we do so, how long we keep it and what rights you have. If something in it is unclear, ask us.

Who is responsible

Corvel B.V., Touwslagerskade 22, 3016 AT Rotterdam, the Netherlands (Chamber of Commerce 00000000) is the controller for the personal data described in this policy. Our Lisbon studio is a branch of the same company. You can reach us about privacy at privacy@corvel.example. We have not appointed a data protection officer; our studio director handles every request.

What we collect, and why

  • When you write to us through the contact form or by email: your name, email address, organisation, budget range and message. We use them to reply and, if a project follows, to prepare a proposal. Legal basis: our legitimate interest in answering questions, or taking steps towards a contract at your request.
  • When you sign up for studio notes: your email address. We use it to send the monthly email you asked for, and every issue has a link to unsubscribe. We do not track opens or clicks. Legal basis: your consent, which you can withdraw at any time.
  • When you apply for a job: your name, contact details, CV, portfolio and anything else you send. We use them only to consider your application. Legal basis: taking steps towards an employment contract at your request.
  • When we work together: the names, roles and contact details of the people we work with at your organisation, and the notes, files and feedback exchanged during the project. Legal basis: the performance of our contract with your organisation.
  • When you visit this website: our hosting provider processes your IP address and the pages you request, so the site can be delivered and kept secure. Legal basis: our legitimate interest in running a secure website.

We do not sell personal data, use it for advertising or make decisions about you based solely on automated processing.

Research with your customers or staff

Some projects include interviews, test sessions or site observations with the people who will use what we design. For those, your organisation is usually the controller and we act as its processor, under a data processing agreement. We ask every participant for consent before a session, record only what the research needs, and delete recordings when the project ends unless you ask us to hand them over.

Cookies and similar technologies

This website does not use cookies for analytics, advertising or tracking, and it loads no third-party trackers, fonts or embeds. If you close an announcement at the top of a page, your browser remembers that choice in its local storage, so it stays closed. It is never sent to us, and you can clear it in your browser’s settings. Because that is strictly necessary for something you asked for, it does not need your consent. If we ever add anything else, we will ask first.

Who we share data with

We share personal data only with service providers that help us run the studio, and only as far as each one needs it. They act as our processors under a written agreement and may not use the data for their own purposes. They are:

  • our hosting provider, for this website;
  • an email provider and a form processing service, which receive the messages and sign-ups sent through our forms;
  • a file sharing and project management service, for working files and project notes;
  • printers, fabricators and other suppliers, who receive delivery contacts for a project when production needs them;
  • our bookkeeping software and accountant, for invoices and the financial records the law requires.

We may also disclose data when the law requires it, for example to a tax authority or at the order of a court.

Where your data is stored

We store personal data in the European Union. If a provider transfers data outside the European Economic Area, we make sure an adequacy decision or the European Commission’s standard contractual clauses protect it.

How long we keep it

  • Messages to us: up to two years after our last contact, unless they become part of a project.
  • Studio notes: until you unsubscribe; we then keep only your address on a suppression list, so that we do not write to you again.
  • Job applications: four weeks after the role is filled, or one year if you agree that we may keep your application for future roles.
  • Project correspondence and files: up to seven years after the project ends, so we can support the work we delivered.
  • Invoices and payment records: seven years, as Dutch tax law requires.

Your rights

Under the General Data Protection Regulation you can ask us for access to your personal data, to correct or delete it, to restrict its use, or to receive it in a portable format. You can object to processing based on our legitimate interest, and you can withdraw consent at any time without affecting what we did before. Write to privacy@corvel.example; we answer within one month and may ask you to confirm your identity first.

If you think we handle your data wrongly, please tell us. You also have the right to lodge a complaint with a data protection authority, in particular in the EU country where you live or work. Our lead authority is the Dutch Data Protection Authority (Autoriteit Persoonsgegevens); in Portugal it is the Comissão Nacional de Proteção de Dados.

Security

We use encrypted connections for this website and our tools, limit access to project files to the people working on them, and review that access when a project ends. If a breach puts your data at risk, we tell you and the authority as the law requires.

Changes to this policy

When we change this policy, we update the date at the top of this page. If a change matters for how we use your data, we tell the people it concerns before it takes effect.

Contact

Corvel B.V., Touwslagerskade 22, 3016 AT Rotterdam, the Netherlands. Email: privacy@corvel.example.