Privacy

Controller

Somnex, a general partnership (vof) registered with the Dutch Chamber of Commerce (KvK) under number 95646205, is the controller of the personal data described in this policy. Our VAT number is NL867220430B01. Our registered address is De Nieuwe Erven 3, Unit 13885, 5431 NV Cuijk, North Brabant, the Netherlands. You can reach us at +31 6 39226595 or [email protected].

Newsletter and notify list

When you sign up with your email address on somnex.io, we add it to the list named somnex. When you sign up on kristabourgeois.com, we add it to the list named krista. We store your address, the list name, the page you signed up from and the time you consented in a Supabase database. We also keep whether you have confirmed your address or unsubscribed, and when. We use this to tell you when somnex.io goes live and to send news about Somnex and the artists it represents. We do this with your consent, which you can withdraw at any time using the unsubscribe link in every newsletter or launch email we send. Until you have received one, or for any other request, write to [email protected].

Giving us your email address is voluntary; without it we cannot send you the newsletter or the launch notice. We also use your sign-up in our statistics, on a separate basis described under Cookies and analytics.

Cloudflare Turnstile runs when you start using a sign-up form, on both websites. It sends Cloudflare your IP address and signals about your browser and device, and our server also passes your IP address to Cloudflare when it checks the result. We never send your email address. Cloudflare also uses these signals, as its own controller, to improve Turnstile. A sign-up that Turnstile cannot verify is not accepted. The legal basis is our legitimate interest in keeping the form from being abused.

Contact and bookings

When you email or call us, we use your name, contact details and message to answer you and to prepare, perform and invoice bookings. The legal basis is the contract and the steps leading up to it, and our legitimate interest in running the business.

If we send you a payment link, Mollie B.V. processes your payment data as an independent controller under its own privacy statement. We receive the payment status and a reference for our bookkeeping.

Hosting and technical data

Both websites run on Fly.io in Amsterdam, behind Cloudflare, which is our DNS provider, reverse proxy and content delivery network. To serve each request, both process and log your IP address and request details such as the user agent, the URL and the time. The legal basis is our legitimate interest in keeping the sites secure and available.

Cookies and analytics

Both websites use PostHog, hosted on its EU cloud, for our own statistics. It records how you use the sites, such as the pages you view, what you click and any errors. It may also record session replays, which show what was on the page and how it was used, to help us understand usability and diagnose issues.

A first-party cookie and your browser's storage are used to recognise you when you return, and we may recognise you across somnex.io and kristabourgeois.com when you follow a link between them. This never extends to websites Somnex does not operate, and the data is not shared with anyone for their own purposes.

If you sign up for the newsletter or notify list, PostHog also holds your email address and sign-up details, and we may link them to your analytics and session replays.

The legal basis for these analytics, including the link to your email address, is our legitimate interest in understanding how the sites are used and in fixing errors. You can object at any time by emailing [email protected]. If you turn on Do Not Track in your browser, no analytics or session replays are recorded from that browser.

The video pages of kristabourgeois.com use YouTube. Still images load from Google's servers as soon as a page opens, so Google receives your IP address and browser user agent before you click anything. Pressing PLAY loads the standard YouTube player, which sets and reads YouTube's cookies under Google's privacy policy. The legal basis is our legitimate interest in showing the artist's videos.

Processors and recipients

Our providers are Fly.io (hosting), Cloudflare (DNS, reverse proxy, content delivery and the Turnstile check on the sign-up form), Supabase (newsletter and notify list database), PostHog (analytics, EU cloud), Mollie (payments) and Google Workspace (email). kristabourgeois.com also uses Sanity (content and images), Mux (video streaming) and Google's YouTube (video stills and player).

Each provider receives connection data such as your IP address and user agent to deliver its part of the service. We share personal data only with these providers or where the law requires it.

Some providers, including Cloudflare, Sanity, Mux and Google, have group entities outside the European Economic Area. Those transfers rely on standard contractual clauses or an EU adequacy decision, as set out in each provider's data processing agreement.

Retention

Newsletter and notify list entries are kept until you ask us to remove them. Booking correspondence and invoices are kept for seven years under Dutch tax law. Analytics events are kept for up to seven years. Session replays are kept for 30 days. Server logs are kept for the period our hosting and edge providers apply. If you email [email protected] asking us to remove your data, we remove it everywhere we hold it, including at our analytics provider, except records the law requires us to keep.

Your rights

You can request access, rectification, erasure, restriction or portability of your personal data, object to its processing or withdraw consent by emailing [email protected]. You may also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.