Snow Studio's values your privacy. This statement explains which personal data we process when you use Snow Studio's Dispatch (the "Service"), for what purpose, and what rights you have. We process personal data in accordance with the General Data Protection Regulation (GDPR).
1. Data controller
The controller for the processing of your personal data is:
- Company
- Snow Studio's
- Chamber of Commerce (KVK)
- 42112414
- VAT number
- NL005502699B05
- IBAN
- NL27 INGB 0119 3205 92
- meldkamer@snowstudios.nl
2. What data we process
- Account data: name, email address and an encrypted password.
- Profile and community data: your role(s), callsign and the communities you belong to.
- Usage data: data you create within a community, such as invitations and join requests.
- Roblox integration data (when you use the Roblox integration): your Roblox user ID and username. We link these to your account so you can sync your status from the game to the dispatch centre.
- Technical data: IP address, browser type and log data, needed for security and for the Service to function properly.
- Payment data (for a paid Subscription): invoice and transaction data. Full payment details are processed by our payment provider; we do not store full card details ourselves.
3. Purposes and legal bases
- Providing and securing the Service and managing your Account (performance of the contract).
- Handling payments and invoicing for Subscriptions (performance of the contract / legal obligation).
- Sending functional emails, such as confirmation and invitation emails (performance of the contract).
- Improving and securing the Service and preventing abuse (legitimate interest).
- Complying with legal obligations, such as statutory retention for tax purposes (legal obligation).
4. Retention periods
We do not keep personal data longer than necessary. We retain account data for as long as you have an Account and delete it within a reasonable period after termination. Invoice and payment data are retained for as long as the statutory (tax) retention period of 7 years requires.
5. Sharing with third parties (processors)
We do not sell your data. To provide the Service we use carefully selected providers that act as processors, including:
- Supabase — database, authentication and storage;
- Vercel — hosting of the application;
- Resend — sending transactional email;
- a payment provider — for processing Subscription payments.
We have data processing agreements in place with these parties. We may also share data where we are legally required to do so.
6. Transfers outside the EEA
We aim to process data within the European Economic Area (EEA). Where a processor processes data outside the EEA, we ensure appropriate safeguards, such as the European Commission's Standard Contractual Clauses.
7. Security
We take appropriate technical and organisational measures to protect your data, including password encryption, secure connections (HTTPS) and strict separation of data per community at the database level.
8. Cookies
We use only functional and strictly necessary cookies required to sign in and to make the Service work (for example your session, your theme preference and your language choice). No consent is required for these necessary cookies. We do not use tracking or advertising cookies.
9. Your rights
You have the right to:
- access, correct or erase your data;
- restrict or object to the processing;
- receive your data in a commonly used format (data portability);
- withdraw consent you have given.
You can submit a request at meldkamer@snowstudios.nl. If you disagree with how we handle your data, you may lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or with the supervisory authority in your own country.
10. Changes
We may update this privacy statement. The current version is always available on the main domain. We will inform you of material changes.