Privacy statement

Backsound B.V., Snelliusweg 65, 6827 DG Arnhem, the Netherlands, registered with the Dutch Chamber of Commerce under number 99370328, VAT number NL868958141B01.

Questions about your data? Email info@backsound.nl or call +31 88 425 9888. We reply within four weeks.

Only what you fill in on a form yourself. That is:

To contact you about your pre-order, demo or question, and to send you the confirmation email. Nothing more. We do not use your form data for advertising, we do not sell it and we do not add you to a newsletter without asking.

The legal basis is the performance of a contract or, where there is no contract yet, the steps you ask us to take (Article 6(1)(b) GDPR).

Your input goes to our own server and is stored in our own database. Our office receives a notification by email and you receive a confirmation at the address you gave.

We do not use a marketing agency, CRM integration or advertising network for these forms.

Our servers are hosted by Leaseweb and on our own servers, both in the Netherlands; only we manage them.

On the My account page you log in with your email address and password or, where offered, with Google or Apple. If you choose Google or Apple, that service gives us your email address and, if you share it, your name. Your account data, such as your company, your locations, your plan, your staff and the music settings you manage there, is stored on our own server.

To keep you logged in, your browser keeps a login key and a random device number in local storage (see ‘What the site keeps in your browser’). The legal basis is the performance of the contract (Article 6(1)(b) GDPR).

We make invoices in our own invoicing system. If you pay an invoice online or give a direct debit mandate (SEPA), that runs via the payment service Mollie (Amsterdam), which processes your payment details for it. We keep invoices for 7 years, because the law requires it.

On the page with your locations, a map shows where a location is. The map images come straight from OpenStreetMap; your browser connects to their servers (in the United Kingdom) for them, without cookies. If you set a location's place with your device, your browser asks your permission first; we store that position as the location's place (for the Request App) and for nothing else. To find a location's place from its address, our server sends only that address (street, house number, postcode, city, country) to the address service Geoapify (Geoapify GmbH); no names or contact details go with it.

When you type in the Company name field, we send those letters to our own server, which uses them to query the official Trade Register of the Dutch Chamber of Commerce. We do not keep those searches, except in the normal server logs. Only the company you actually click is sent with the form.

The website's fonts come from our own server; nothing about you goes to Google for them. The chat window on the site runs on our own server (fungo.backsound.nl) and only loads once you start using the page. What you type there is used to help you. Questions in the chat and on WhatsApp are answered first by an AI assistant; for that the text of the conversation goes to OpenAI (United States), which processes it as our processor. Where needed, a member of staff takes over. If you choose WhatsApp in that window, the conversation continues on WhatsApp (Meta) and that service's terms apply as well. The chat window sets no cookies. There are no social media buttons.

Our Google reviews are fetched by our own server, not by your browser, so nothing about you goes to Google for them.

On your first visit a window asks whether you agree. Accept and Decline are the same size; under Settings you choose per category. We keep your choice for 12 months in your own browser, then we ask again. You change or withdraw your consent via Cookie settings at the bottom of every page. If you withdraw a consent, we delete the measurement cookies on this device and reload the page.

Without consent Google Analytics sets no cookies and Google only receives a limited signal without a cookie and without an identifier (including time, page and browser type; Google's Consent Mode), so that the number of visits can be estimated. If you arrive via a Google ad, Google's click number (gclid) may be carried in the addresses of the following pages. The legal basis for that is our legitimate interest in knowing how the site is used (Article 6(1)(f) GDPR). Without consent Microsoft Clarity and our own session recordings do not start at all.

The legal basis for measurement is your consent (Article 6(1)(a) GDPR and Article 11.7a of the Dutch Telecommunications Act).

With your consent we use Google Analytics to see how many people visit the site, which pages they read, how they arrive and where they leave. That is how we improve the site; we see no names or addresses in it.

Besides page views it also measures whether you scroll, click an outbound link, open a file or use the search field on this site. What you type in that search field, an artist or a song, therefore goes to Google. Google processes this as our processor; Google Analytics does not store IP addresses, and the data is deleted after at most 14 months.

With your consent we also use Microsoft Clarity. It records how visitors move through the pages: where they click, how far they scroll and where they leave. From that we see which parts of the site are unclear. What you type in an input field or the chat, such as your name, email address or password, is masked by Clarity and not recorded. Microsoft processes the data as our processor and keeps recordings for 30 days. Our own server notes which recording a visit belongs to, so that we can watch a visit from our daily overview.

With your consent we also record visits ourselves, with the free software rrweb, and keep those recordings on our own server. Such a recording shows what happened on the screen: which pages you viewed, where you clicked and how far you scrolled. What you type in an input field is replaced by asterisks and so not recorded; the chat window and the company search are not recorded, and your account page and the password reset page are never recorded.

To keep the pages of one visit together, your browser remembers a random number in session storage during the visit; it disappears when you close the window. Nothing goes to another party. To find a recording with the right visit in our daily visitor overview, the recording's number also ends up in our server logs. Only Backsound staff can watch a recording, and it is deleted after 90 days.

Only with your consent to statistics:

This stays on your device and is only used to make the site work. You clear it by deleting the site data in your browser.

Google, Microsoft, OpenAI and Meta (WhatsApp), and Apple if you log in with Apple, are US companies. Transfers to the United States take place on the basis of the EU-US Data Privacy Framework, to which these companies have signed up, or the European Commission's standard contractual clauses.

Like any web server, ours records which pages are requested, with IP address, time and browser type. This is needed to investigate faults and abuse. These logs are not linked to the data from a form. We do keep the IP address and browser type with a request sent through a form, to spot abuse.

For each visit we look up which network the IP address belongs to. Usually that only gives the name of an internet provider; for a company with its own fixed internet address, the name of that company. That shows us which organisations are interested in us. Our own server looks this up in the public IP register of RIPE; no advertising or tracking company is involved. If a visit comes from the internet address from which an existing customer's Backsound player connects that day, we see that it is that customer; that comparison happens on our own servers.

The legal basis is our legitimate interest in keeping the site secure and seeing which organisations are interested (Article 6(1)(f) GDPR); you can object to it via info@backsound.nl. We keep the server logs for 90 days.

We keep a pre-order until the launch and, if you become a customer, for as long as the customer relationship lasts. A demo or contact request that does not lead to a customer relationship is deleted at the latest two years after the last contact. Server logs and session recordings we keep for 90 days, your choice in the cookie window for 12 months. Google Analytics keeps measurement data for at most 14 months, Microsoft Clarity recordings for 30 days. If you ask for deletion earlier, we do it earlier; see below.

You may always ask us for:

Email info@backsound.nl; we prefer to solve it ourselves. If we cannot resolve it together, you can file a complaint with the Dutch Data Protection Authority, autoriteitpersoonsgegevens.nl.

The website and all forms use an encrypted connection (https). The data is stored on servers we manage ourselves, and only staff who handle your request can access it.

If something changes on the website or in what we process, we update this statement and change the date at the top. For major changes we inform the people it affects.