Privacy statement

Last updated: 2 November 2026

Leather Vision is a rock band from Alkmaar, the Netherlands. On leathervision.nl and in the Leather Vision app we handle as little personal data as possible. This statement explains which data we use, why, how long we keep it and what your rights are.

Leather Vision is responsible for processing your data. You can contact us about privacy at the email address under “Contact” at the bottom of this page.

1. Booking requests

When you send a request via the booking form, we receive your name, email address, the date you chose and the time slot. We use this only to handle your request and to contact you about it. You will receive a confirmation by email.

Legal basis: taking steps at your request before a possible agreement (Article 6(1)(b) GDPR).
Retention: up to 2 years after our last contact. If your request leads to a booking, we keep the details related to payment for as long as tax law requires (7 years).
You are not required to provide this data, but without it we cannot handle your request.

2. Push notifications in the app

If you turn on notifications in the app, your phone or browser gives us a technical address to which we can send messages, together with encryption keys. We also store your chosen language and the date of sign-up. We do not store your name, email address or phone number.

Purpose: notifying you about new shows, photos and videos.
Legal basis: your consent (Article 6(1)(a) GDPR). You can withdraw it at any time with the button “Turn off notifications” in the app or in your phone settings.
Retention: until you turn notifications off, or until the address is no longer valid; it is then deleted automatically.
Notifications are delivered through the push services of Google (Android and Chrome), Apple (iPhone) or Mozilla (Firefox), depending on your device. The content of a notification is encrypted; these services cannot read it. They may process the technical address outside the European Union; Google and Apple participate in the EU-US Data Privacy Framework.

3. Security and technical data

To protect the website against misuse and spam, the server briefly uses your IP address in encrypted (hashed) form, for example to limit the number of requests per minute or the number of booking requests per hour. This data is only used for that check and is not linked to other data.

Our hosting provider also keeps technical data, such as IP addresses, in log files for a maximum of 7 days to keep its service secure and working.

Legal basis: our legitimate interest in a secure website (Article 6(1)(f) GDPR).

4. Cookies and local storage

We do not use tracking cookies, advertising cookies or analytics tools, and we do not place cookies from other parties. The website and app only store a few technical items on your device that are needed for them to work:

a note that you have seen the instructions for installing the app, so that menu item is hidden for 60 days;
pages and images you have viewed, so the app opens quickly and also works offline;
a counter for the red badge on the app icon.

These are functional and contain no personal data, so no permission is required for them. You can remove them by deleting the website data in your browser or by removing the app.

5. Photos and videos

We publish photos and videos of our performances. Audience members may be visible on them. If you are recognisable in a photo or video and would like it removed, let us know and we will remove it as soon as possible.

Legal basis: our legitimate interest in showing our performances (Article 6(1)(f) GDPR).

6. Who receives your data

We never sell your data and do not use it for advertising. Your data is only processed by:

STRATO (Germany): hosting of the website and our email. Data is stored in data centres in the EU.
Google, Apple and Mozilla: only for delivering push notifications, as described above.

We use no automated decision-making or profiling.

7. Security

The website only works over a secure connection (HTTPS). The booking form and the app are protected against misuse, notifications are sent encrypted, and the files with sign-ups cannot be accessed via the internet. Only the band has access to the booking emails.

8. Your rights

You have the right to access, correct or delete your personal data, to restrict or object to its processing, and to receive your data (data portability). If processing is based on consent, you can withdraw it at any time. Send your request to the email address under “Contact” below; we will respond within one month.

Are you younger than 16? Then ask your parent or guardian for permission before turning on notifications or sending a request.

Do you have a complaint about how we handle your data? Please let us know. You also have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) via autoriteitpersoonsgegevens.nl.